last executing test programs: 18.801530798s ago: executing program 0 (id=333): r0 = syz_open_dev$swradio(&(0x7f0000000100), 0x1, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x40804c00, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x34}, 0x0, 0x0, &(0x7f00000002c0)=""/94, &(0x7f0000000340)}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) fadvise64(r3, 0x80000000, 0xf8d, 0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x4, &(0x7f00000003c0)={0x0, 0x2, 0x3, 0xffffffffffff0000}) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, &(0x7f0000000540)=0x1) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000004080)={0xb, @win={{}, 0x0, 0x3, 0x0, 0x0, 0x0}}) 17.779969775s ago: executing program 0 (id=336): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x6a) 16.200856409s ago: executing program 0 (id=337): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 15.162099975s ago: executing program 3 (id=338): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400008, 0x8002, &(0x7f0000006680)) r0 = socket(0x1d, 0x2, 0x7) r1 = creat(0x0, 0x61) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x80a, 0x0) munmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r3, 0x0}) write$dsp(r1, &(0x7f0000000240)="649b1b858e9c48480a50527408692c3c911ebfc7f43e89d51b7d9221eb486506f0c01a76e87ffd3808e411b26d87e3ece28091abb526cc2dfd1da020fe9a3001b40dca97e6ede26df37db7cf217b7fa68263fd4068276a260eafd5a75a15cae2e2127b49e4a1b77b6cd909ab", 0x6c) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000080)={r8, 0x2, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0], [0x800000, 0x0, 0xffffffff], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) socket$l2tp6(0xa, 0x2, 0x73) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r11, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={r8, 0xae, 0x3ff, 0x34325241, 0x3, [r9, r10], [0x2b8, 0x0, 0x40000002, 0x80000], [0x0, 0x9, 0x1], [0x6]}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x6, r0}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb59b0a99a873600000c00"/38], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r12, 0x40082104, 0x0) r13 = socket(0x40000000015, 0x5, 0x0) connect$inet(r13, 0x0, 0x0) 15.160988705s ago: executing program 0 (id=339): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r7, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX=r8, @ANYRESHEX=r6, @ANYBLOB="1e1456b97f43020078423fad8569494e28e58bd88d6b502cfe943956d9f8efde4f8659ce67cc37b7e1d988638175e2db1b654dccc1a203850b09873b0184822257d4c12aaf0b5efe2105301b585b58256d90fffa59ece5882178fb533b8ed99c4c2c6d1ba6d7f5dac0cad0eaeee76479fb488f67037b1b2a880c53fe952d632ba034c8d2758f1bd92565024144b0862cb3639c534e323806be01dd7a6252a5999b81aa1f34d13acf872bbbfc5bb3bd8b2cfe4db9838e94", @ANYRESOCT=r8], 0x81, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") stat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x10, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r9 = fsopen(&(0x7f0000000080)='virtiofs\x00', 0x0) dup2(r9, r9) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000540)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) 15.023981615s ago: executing program 1 (id=340): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 14.571257443s ago: executing program 4 (id=341): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1155, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0) nanosleep(0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 11.904838004s ago: executing program 0 (id=342): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}]}, 0xde, 0x46d, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQKNbQmQohWD3g0JN6N/4XxpBejXjTxqndDQgwXUC9rZmemLMtu2aXbLnQ/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7a4GR/OHGtYtTf1+7OJVEpfLWX0m13PVrF6fKouX/bcszlUqR39Sg3kvvRkzOzc2cK/Jji2c+GFs4f+GF2TOTp2ZOzZydOHbs8KG9g0cnjnQkziyu67s/nt+z6/g7l9+YOnH5vZ+S/sjjjro4OmUk37sNPd3pyrpse026umOX7fvlZrrRmUA39UVEdrgGqv1/KPpiy/K2oXjts642DlhTlUqlssKr8lIF2MCS6HYLgO4o3+iz699yWaehxz3h6sv5BVAW941iybf0R5on9g3UXd920khEnFj656tsiTW6DwEAUOu7bPzzfKPxXxoP54nB7M//izmU4Yh4ICJ2RMSDEbEzIh6KqJZ9JCIebbP++hmS28c/6ZW7Dq4F2fjvpWJu69bxX1oWGe4rctur8Q8kJ2fnZg4W++RADGw6OZvMjK9Qx/ev/vZFs221479syeovx4JFO670192gm55cnFxNzLWufhqxu79R/EmU0zhJROyKiN13Wcfss/1Nt905/hU0f9qWVb6OeCY//ktRF38paTo/Of7i0YkjY5tjbubgWHlW3O7nXy+92az+VcXfAdnx39rw/F+OfzjZHLFw/sLp6nztQvt1XPrj86bXNG2e/8e3F+f/YPJ2dcVgseGjycXFc+MRg8nrt6+fuPlsZb4sn8V/YH/j/r8jbu6JxyJiT0TsjYjHs4vCou1PRMSTEbF/hfh/fOWp99uPf33mSrP4p+90/KP2+Lef6Dv9w7d3jn9zRDQ7/oerqQPFmlZe/1pt4Gr2HQAAANwv0upn4JN0dDmdpqOj+Wf4d8bWdG5+YfG5k/Mfnp3OPys/HANpeadrqOZ+6Hhxb7jMT9TlDxX3jb/s21LNj07Nz013O3jocdua9P/Mn33dbh2w5jowjwbcp/R/6F36P/SmRP+Hnqb/Q+9q1P8/aVp69Js1bQywrrz/Q+9qof8v5Q/NRwXA/cn7P/Qu/R96UtPvxqer+sr/uif+LX7P8F5pz8ZPRHpPNGPjJ/pb/jGLNhKVobz/Z2s2NSzT7VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//w3J5b0=") open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000dc0), 0x1, 0x4fe, &(0x7f0000000080)="$eJzs3c9vG1kdAPCvnV9uNrvJLnsABGxYFgqq6iTubrTaA1tOCKGVEHsEqQ2JG0Wx4yh2ShN6SP8HJCpxgiN/AOeeuHNBcONSDkgFIlBTiYPRjCetm9iNaVo7sj8faTTz3tjzfa/uvFd/7foFMLLmI+IgIiYj4mZEzGb1uWyL660tedzjw7urR4d3V3PRbH7+z1x6PqmLtuck3siuWYiIH38/4me503Hre/ubK5VKeScrLzSq2wv1vf2rG9WV9fJ6eatUWl5aXvz42kelV9bX96qT2dFXH/7x4Du/SJo1k9W09+PlfNqxttX1iadxEuMR8cPzBbswxrL+TA66IbyUfES8ExHvp/f/bIylryYAMMyazdlozraXAYBhl09zYLl8McsFzEQ+Xyy2cnjvxnS+Uqs3rtyq7W6ttXJlczGRv7VRKS9mucK5mMgl5aX0+Fm5dKJ8LSLejohfTl1Ky8XVWmVtkP/wAYAR9saJ+f8/U635HwAYcoVBNwAA6DvzPwCMHvM/AIwe8z8AjB7zPwCMHvM/AIwe8z8AjJQfffZZsjWPst+/Xru9t7tZu311rVzfLFZ3V4urtZ3t4nqttp7+Zk/1rOtVarXtpQ9j987cd7frjYX63v6Nam13q3Ej/V3vG+WJvvQKAHiRt9978JdcRBx8cindom0tB3M1DLf8oBsADMxYx9r5vrcD6D+rfcHoOsd7fOkBGBIdluh9TiEiLp2sbDabzdfXJOA1u/ylDvn/g9Y5EzwMt7b8v28Bw4jpnP8HRoH8P4yuZjPX65r/0esDAYCLTY4f6PL5/zvZ/nfZhwM/XTv5iPu9XP3UNwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgKByv/1vM1gKfiXy+WIx4MyLmYiJ3a6NSXoyItyLiz1MTU0l5acBtBgDOK//3XLb+1+XZD2ZOnp3MPZlK9xHx819//qs7K43Gzp+S+n89rW/cz+pLg2g/AHCW43k63be9kX98eHf1eOtnex59LyIKrfhHh5Nx9DT+eIyn+0JMRMT0v3NZuSXXlrs4j4N7EfHFTv3PxUyaA2mtfHoyfhL7zb7Gzz8XP5+ea+2TP4svvIK2wKh5kIw/1zvdf/mYT/ed7/9COkKdXzb+JZdaPUrHwGfxj8e/sS7j33yvMT78ww9aR6fXYX50L+LL4xHHsY/axp/j+Lku8T/oMf5fv/K197uda/4m4nJ0jt8ea6FR3V6o7+1f3aiurJfXy1ul0vLS8uLH1z4qLaQ56oXus8E/PrnyVrdzSf+nu8QvnNH/b/bY/9/+9+ZPvv6C+N/+Rqf4+Xj3BfGTOfFbPcZfmf59odu5JP5al/6f9fpf6TH+w7/tn1o2HAAYnPre/uZKpVLeceDg4h8kf2UvQDM6Hnzar1iT8X89q9l8qVjdRoxXkXUDLoL0Xr9eKe9ExJNBNwYAAAAAAAAAAAAAAOioH/9jadB9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYHj9LwAA//8s3tL0") bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 11.283266681s ago: executing program 1 (id=343): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYRESDEC]) io_setup(0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x80, 0x0, 0x7ffc0002}]}) readlinkat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', &(0x7f0000001600)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ftruncate(r0, 0x81ff) 11.172097771s ago: executing program 3 (id=344): openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6cb}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) epoll_create1(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r6, 0x4b52, 0x0) mkdir(0x0, 0x0) 11.063689141s ago: executing program 0 (id=345): syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000480)={@val={0x0, 0x884c}, @val={0x5, 0x80, 0x7800, 0xc4, 0x40, 0xc}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private0}}, 0x42) unshare(0x400) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0x0, 0x0, {0x34}, &(0x7f0000000200)=""/173, 0xad, 0x0, &(0x7f0000000340)}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) fadvise64(r3, 0x80000000, 0xf8d, 0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x4, &(0x7f00000003c0)={0x0, 0x2, 0x3, 0xffffffffffff0000}) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, &(0x7f0000000540)=0x1) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000004080)={0xb, @win={{}, 0x0, 0x3, 0x0, 0x0, 0x0}}) 9.542027495s ago: executing program 32 (id=345): syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000480)={@val={0x0, 0x884c}, @val={0x5, 0x80, 0x7800, 0xc4, 0x40, 0xc}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private0}}, 0x42) unshare(0x400) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c000000190a01020000000000000000000000000900020073797a300000031709797a30000000002c000580080001030000600008000240000000020800024000000007080001400000005e0800014000f1ffff07000a"], 0x6c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [], {0x14, 0x11, 0x1, 0x4, 0x0, {0x3}}}, 0x28}}, 0x0) recvmmsg(r2, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000000000080"], 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r4}, 0x18) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r2, 0x8) socket$inet6(0xa, 0x6, 0x0) 9.520145945s ago: executing program 2 (id=349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) 9.519771545s ago: executing program 4 (id=350): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)={0x2939a4cb3fa6444b, 0x0, 0x6, {0x6, 0xe81ef1d73062b24e, "b1a748d9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 9.094285284s ago: executing program 2 (id=351): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x12d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000c40)={0x40, 0x0, 0x3}, 0x10) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0xfd}}}, {{0xa, 0x800, 0xed, @rand_addr=' \x01\x00', 0x6}}}, 0x104) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2008, 0xe573}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000e, 0x8031, 0xffffffffffffffff, 0x57c91000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f00000002c0)={0x28, 0x2, 0x0, {0x1, 0x8001, 0x3}}, 0x28) socketpair(0x2c, 0x4, 0x9, &(0x7f0000000040)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 7.893616529s ago: executing program 3 (id=352): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) 7.556255318s ago: executing program 3 (id=353): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004000000be3a000000000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000"], 0x48) 7.452310928s ago: executing program 4 (id=354): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400008, 0x8002, &(0x7f0000006680)) r0 = socket(0x1d, 0x2, 0x7) r1 = creat(0x0, 0x61) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x80a, 0x0) munmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r3, 0x0}) write$dsp(r1, &(0x7f0000000240)="649b1b858e9c48480a50527408692c3c911ebfc7f43e89d51b7d9221eb486506f0c01a76e87ffd3808e411b26d87e3ece28091abb526cc2dfd1da020fe9a3001b40dca97e6ede26df37db7cf217b7fa68263fd4068276a260eafd5a75a15cae2e2127b49e4a1b77b6cd909ab", 0x6c) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000080)={r8, 0x2, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0], [0x800000, 0x0, 0xffffffff], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) socket$l2tp6(0xa, 0x2, 0x73) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r11, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={r8, 0xae, 0x3ff, 0x34325241, 0x3, [r9, r10], [0x2b8, 0x0, 0x40000002, 0x80000], [0x0, 0x9, 0x1], [0x6]}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x6, r0}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb59b0a99a873600000c00"/38], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r12, 0x40082104, 0x0) r13 = socket(0x40000000015, 0x5, 0x0) connect$inet(r13, 0x0, 0x0) 7.018538856s ago: executing program 4 (id=355): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x48}}, 0x4000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 6.844819656s ago: executing program 1 (id=356): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, {[@timestamp={0x44, 0x14, 0x1, 0x0, 0x0, [0x401, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x31}}, {@rand_addr, 0x3}, {@broadcast, 0x52b3}]}, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x10c000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.960361882s ago: executing program 4 (id=357): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e8169523010902240001000064000904340102d469e70009058acf"], 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x9, 0x6, 0xfffffffffffffffe, 0x9, 0x7, 0xb, 0x8000007e, 0xfffffffffffffffc, 0x9657, 0x0, 0x7fffffff, 0x0, 0x1000000000000008, 0xb, 0x0, 0xcc0, 0x0, 0x0, 0x80007, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x3, 0x2000000000000}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r1, &(0x7f0000002680)={0x2020}, 0x2020) syz_usb_connect(0x1, 0x1f7, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x7, 0x63, 0x3e, 0x20, 0x22b8, 0x2e0a, 0x30f6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e5, 0x1, 0xd, 0xb, 0x120, 0x5f, [{{0x9, 0x4, 0x1, 0x21, 0x6, 0xff, 0xff, 0xff, 0x3, [], [{{0x9, 0x5, 0xf, 0x0, 0x20, 0xb, 0x7, 0x0, [@generic={0x9e, 0x3, "2b83460946923e79523532618a3113041ee9afc8e942dafcc0f015ada50709712209a1fda499e50f0a21197a2c8ba09123df49e8b82e43da34e95d1296fa600df92a7cc348f3bb1c6a92ed8edef4b7bf70a19399e9240286d4020d7c9ac266bc978334e780e028dc4a6d8bcd0e44fdeb79a99539a0a0e4a8832543206b47958f54ee1726e4cef74bae497412ac6dfc5bd415ca9f0be55564a81cac1b"}]}}, {{0x9, 0x5, 0xd, 0x38d22e19076ab355, 0x40, 0x3, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x3}, @generic={0xea, 0x8, "18ec19b2ed6cd236c3fd4dea3887d16e1a5ab3223531dd891f8aad876de32f8377c9abd9916c065c8ce4e731ebe469ba11e443c0b96a7c7cb0077ac94247561ee9fdcffbcde4c0d4965758c1b9496068874b386eaf234ab1988c43bc5b152880884edc076d60e0069b5d34ff391bfbb88ebd9cbb2eeb066a429c9f21e66ce7aa6c0ed0e3eb3eb84bbc2404f84766b45978a0067f07fae1542ca06fc1523bde0e28923576ef98a88316872c9a9ff95a08adf870cbd5134c81c187679d3af069df984095131dfd72ea72ce57ded062bdee2355c03734d2602e2906d601391c624c3b9a56716522ee66"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x4, 0x9b, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x2}]}}, {{0x9, 0x5, 0x1, 0x8, 0x10, 0x10, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x400}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x7, 0x1, 0x2a}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x7, 0x4, 0x1}}]}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x80, 0x0, 0x4, 0x8, 0xbf}, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x843}}, {0x77, &(0x7f00000003c0)=@string={0x77, 0x3, "12a668c0b823900c1c92846419de99d633015e4c3d8dc06139cfe71b8e281f84ca94a97c6424f5d70770cec4df351ec9c7ae49eeb609e96e2557bbeb95e9dd61858317c236f63ee9d43c30003912d3136fe207e4099770bb44b3f228157e1486a24d134e32892a9459cfe9ff5409cea2ee11ffb20a"}}, {0x2, &(0x7f0000000540)=@string={0x2}}]}) syz_usb_control_io(r0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0500180130000000050019010c00000008002600b4"], 0x4c}}, 0x0) 5.889051622s ago: executing program 2 (id=358): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ftruncate(0xffffffffffffffff, 0x20cf01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) rmdir(&(0x7f0000000040)='./control\x00') 5.36286892s ago: executing program 1 (id=359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 4.817119418s ago: executing program 2 (id=360): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setns(0xffffffffffffffff, 0x24020000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1.725314827s ago: executing program 3 (id=361): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES64, @ANYBLOB="0000000000000076e18a323eb76380e23b00"/30, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'pimreg1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[], 0x50}, 0x1, 0xba01, 0x0, 0x1c044}, 0x8040) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 226.767211ms ago: executing program 4 (id=362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) 148.398081ms ago: executing program 2 (id=363): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {@in=@multicast1, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x1, 0xffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a40), &(0x7f0000000a80)=0xc) creat(&(0x7f0000000040)='./file0\x00', 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) 13.687661ms ago: executing program 3 (id=364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 0s ago: executing program 1 (id=365): move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000000000e4ff0000000000000400000000020000000000000402000000020000000000000e0300000000000000000061"], 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x5}, 0x8) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8010550e, &(0x7f0000000200)=ANY=[]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newtfilter={0x2c, 0x2c, 0xd29, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {}, {0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c00010062"], 0x3c}}, 0x0) r5 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000700), 0x8000, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000740)=r5, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0x800, 0xfffb, {0x4, 0x1}, {0x3a, 0x2}, @cond=[{0x7, 0x5, 0x1fe, 0xfe2d, 0xb, 0x3d8}, {0x0, 0x400, 0xfffb, 0x5, 0x0, 0x529}]}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r6, 0x0, 0x0) kernel console output (not intermixed with test programs): e_slave_1) entered forwarding state [ 59.692372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.701334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.711980][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.719121][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.728971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.739210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.748004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.756911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.765771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.774068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.802177][ T4247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.815642][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.825978][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.835250][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.842366][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.868603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.881229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.890280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.900674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.909565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.918639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.928360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.943638][ T4247] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.961625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.970765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.009290][ T4248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.016528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.025341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.034418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.043281][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.050473][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.074497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.083281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.093122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.102033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.111523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.121351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.130102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.138880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.147774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.156444][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.163559][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.175826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.194609][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.213563][ T4245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.240529][ T4246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.261271][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.275413][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.284567][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.294952][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.305696][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.315307][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.323969][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.340621][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.349646][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.362518][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.371396][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.380365][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.389980][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.404639][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.419482][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.445469][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.468274][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.483966][ T4245] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.495971][ T4248] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.513332][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.548571][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.559008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.569579][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.576746][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.585163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.594196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.603170][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.610304][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.618510][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.629011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.637894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.646751][ T4261] Bluetooth: hci2: command 0x041b tx timeout [ 60.646789][ T4258] Bluetooth: hci0: command 0x041b tx timeout [ 60.654534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.668265][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.675345][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.684141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.693157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.709502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.720965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.729167][ T4258] Bluetooth: hci1: command 0x041b tx timeout [ 60.736817][ T4255] Bluetooth: hci4: command 0x041b tx timeout [ 60.736974][ T4258] Bluetooth: hci3: command 0x041b tx timeout [ 60.751005][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.758163][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.768456][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.778253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.794147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.813232][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.852777][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.862000][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.874521][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.884862][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.901068][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.912004][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.921086][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.930922][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.939830][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.950776][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.962271][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.971204][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.981700][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.030270][ T4248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.057364][ T4248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.082931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.097462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.115722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.124477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.134422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.145392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.160158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.168259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.175707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.185511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.198977][ T4246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.211745][ T4251] device veth0_vlan entered promiscuous mode [ 61.230349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.239113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.259049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.278000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.297090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.342712][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.354267][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.369834][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.383927][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.402151][ T4251] device veth1_vlan entered promiscuous mode [ 61.425705][ T4247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.442795][ T4246] device veth0_vlan entered promiscuous mode [ 61.483654][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.509456][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.524584][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.539621][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.550167][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.562872][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.578362][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.587078][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.595555][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.604188][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.618787][ T4251] device veth0_macvtap entered promiscuous mode [ 61.642583][ T4245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.653194][ T4251] device veth1_macvtap entered promiscuous mode [ 61.664271][ T4246] device veth1_vlan entered promiscuous mode [ 61.702555][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.722922][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.734767][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.743391][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.752059][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.760178][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.768409][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.775838][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.784608][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.795708][ T4248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.811511][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.831164][ T4251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.843098][ T4251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.853823][ T4251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.862981][ T4251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.883454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.898991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.930479][ T4246] device veth0_macvtap entered promiscuous mode [ 61.949324][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.958375][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.968328][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.977096][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.985674][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.025876][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.036094][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.045069][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.054232][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.065390][ T4245] device veth0_vlan entered promiscuous mode [ 62.084342][ T4248] device veth0_vlan entered promiscuous mode [ 62.104490][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.113241][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.123116][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.132244][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.141245][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.150034][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.159204][ T4246] device veth1_macvtap entered promiscuous mode [ 62.170989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.180281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.205547][ T4248] device veth1_vlan entered promiscuous mode [ 62.219109][ T4245] device veth1_vlan entered promiscuous mode [ 62.280984][ T4246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.293353][ T4246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.306502][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.328087][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.332584][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.343895][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.351012][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.359933][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.368354][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.377648][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.386571][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.395493][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.403658][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.412818][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.421370][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.429976][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.474043][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.482846][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.494254][ T4247] device veth0_vlan entered promiscuous mode [ 62.505936][ T4248] device veth0_macvtap entered promiscuous mode [ 62.520367][ T4246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.532200][ T4246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.536324][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.553001][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.555697][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.564650][ T4246] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.577484][ T4246] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.586647][ T4246] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.595376][ T4246] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.608926][ T4247] device veth1_vlan entered promiscuous mode [ 62.620934][ T4245] device veth0_macvtap entered promiscuous mode [ 62.629813][ T4248] device veth1_macvtap entered promiscuous mode [ 62.638429][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.647936][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.655968][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.665347][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.674379][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.684025][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.692977][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.701603][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.710517][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.726455][ T4258] Bluetooth: hci2: command 0x040f tx timeout [ 62.732738][ T4255] Bluetooth: hci0: command 0x040f tx timeout [ 62.765717][ T4245] device veth1_macvtap entered promiscuous mode [ 62.775797][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.793294][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.804204][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.814958][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.815793][ T4255] Bluetooth: hci4: command 0x040f tx timeout [ 62.826264][ T4258] Bluetooth: hci3: command 0x040f tx timeout [ 62.831076][ T4255] Bluetooth: hci1: command 0x040f tx timeout [ 62.844944][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.856484][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.867062][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.877306][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.888998][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.900569][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.921773][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.931280][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.941899][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.952440][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.967721][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.987773][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.027658][ T4248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.043022][ T4248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.064066][ T4248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.075919][ T4248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.093506][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.105847][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.123933][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.135890][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.152519][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.164068][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.178042][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.188228][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.197450][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.205963][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.215897][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.225675][ T4247] device veth0_macvtap entered promiscuous mode [ 63.258117][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.292753][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.303381][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.314365][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.324592][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.348353][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.392778][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.427105][ T4247] device veth1_macvtap entered promiscuous mode [ 63.447225][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.455397][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.484967][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.497989][ T4245] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.512921][ T4245] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.522687][ T4245] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.542459][ T4245] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.601248][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.627021][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.638972][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.649778][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.662024][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.672757][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.682997][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.722703][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.790979][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.814851][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.828985][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.873194][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.891404][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.901828][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.912488][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.922843][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.934042][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.944016][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.955762][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.967739][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.975819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.990312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.049089][ T4247] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.074185][ T4247] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.083577][ T4247] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.093419][ T4247] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.109329][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.121059][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.140992][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.159760][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.194130][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.203664][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.222446][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.231038][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.262572][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.328841][ T4331] loop2: detected capacity change from 0 to 512 [ 64.357269][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.358072][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.365204][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.391541][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.409703][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.418446][ T4331] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 64.432419][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.432598][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.440676][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.460710][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.461184][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.482577][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.491464][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.552208][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.582088][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.595223][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.606024][ T4331] EXT4-fs (loop2): 1 orphan inode deleted [ 64.614339][ T4331] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 64.650968][ T4331] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.807912][ T4258] Bluetooth: hci2: command 0x0419 tx timeout [ 64.814072][ T4258] Bluetooth: hci0: command 0x0419 tx timeout [ 64.889235][ T4261] Bluetooth: hci1: command 0x0419 tx timeout [ 64.889254][ T4258] Bluetooth: hci4: command 0x0419 tx timeout [ 64.889285][ T4258] Bluetooth: hci3: command 0x0419 tx timeout [ 64.955367][ T4345] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.161100][ T4350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 65.177298][ T27] audit: type=1800 audit(1738618216.392:2): pid=4331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 65.432232][ T4355] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9'. [ 65.477472][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 65.497339][ T9] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 65.534604][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6818: comm kworker/u4:0: Failed to release dquot type 1 [ 65.910721][ T4360] loop2: detected capacity change from 0 to 2048 [ 66.725347][ T4360] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 66.952802][ T11] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.016355][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 67.055011][ T4375] loop4: detected capacity change from 0 to 512 [ 67.076215][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 67.076215][ T11] [ 67.077948][ T4375] ======================================================= [ 67.077948][ T4375] WARNING: The mand mount option has been deprecated and [ 67.077948][ T4375] and is ignored by this kernel. Remove the mand [ 67.077948][ T4375] option from the mount to silence this warning. [ 67.077948][ T4375] ======================================================= [ 67.086386][ T11] EXT4-fs (loop2): Total free blocks count 0 [ 67.190605][ T11] EXT4-fs (loop2): Free/Dirty block details [ 67.200746][ T11] EXT4-fs (loop2): free_blocks=2415919104 [ 67.230605][ T11] EXT4-fs (loop2): dirty_blocks=16 [ 67.235780][ T11] EXT4-fs (loop2): Block reservation details [ 67.276381][ T11] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 67.295252][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 67.308320][ T4375] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 67.366847][ T4375] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 67.376872][ T4375] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.15: Failed to acquire dquot type 0 [ 67.406018][ T4375] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 67.472296][ T4375] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 67.546272][ T4375] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.15: Failed to acquire dquot type 0 [ 67.593067][ T4375] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 67.636393][ T4375] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 67.657714][ T4375] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.15: Failed to acquire dquot type 0 [ 67.772695][ T4375] EXT4-fs (loop4): 1 orphan inode deleted [ 67.801948][ T4375] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 67.831500][ T4375] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.851669][ T27] audit: type=1326 audit(1738618219.062:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4388 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05778cda9 code=0x7ffc0000 [ 67.928111][ T27] audit: type=1326 audit(1738618219.062:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4388 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05778cda9 code=0x7ffc0000 [ 67.946403][ T4375] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.15: Failed to acquire dquot type 0 [ 67.984528][ T4375] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.15: Failed to acquire dquot type 0 [ 68.034022][ T4375] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.15: Failed to acquire dquot type 0 [ 68.165327][ T4247] EXT4-fs (loop4): unmounting filesystem. [ 68.320788][ T4392] loop4: detected capacity change from 0 to 512 [ 68.376012][ T4392] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.420109][ T4392] EXT4-fs (loop4): 1 orphan inode deleted [ 68.492596][ T4392] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.812106][ T4247] EXT4-fs (loop4): unmounting filesystem. [ 70.306398][ T4256] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.606400][ T4256] usb 4-1: Using ep0 maxpacket: 8 [ 70.615194][ T4256] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 70.627186][ T4256] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 70.637556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.637944][ T4256] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.652231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.656412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 70.666160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 70.714452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 70.732878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 70.741284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 70.749675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 70.758087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 70.766487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 71.234617][ T4256] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.265954][ T4256] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 71.277138][ T4256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.372538][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.379151][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.603269][ T4256] usb 4-1: usb_control_msg returned -32 [ 71.618881][ T4256] usbtmc 4-1:16.0: can't read capabilities [ 71.648507][ T4256] usb 4-1: USB disconnect, device number 2 [ 71.738341][ T4441] tipc: Started in network mode [ 71.743707][ T4441] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 71.758353][ T4441] tipc: Enabled bearer , priority 10 [ 72.758104][ T4256] tipc: Node number set to 4269801491 [ 73.850818][ T4454] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 73.862220][ T4454] netlink: 'syz.3.37': attribute type 10 has an invalid length. [ 73.871618][ T4454] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.880408][ T4454] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.798362][ T4454] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.805738][ T4454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.813830][ T4454] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.820988][ T4454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.920351][ T4454] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 74.985818][ T4460] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.993165][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.000155][ T4467] loop1: detected capacity change from 0 to 512 [ 75.031418][ T11] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 75.077225][ T4467] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.146436][ T4467] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 75.155423][ T4467] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.340166][ T4245] EXT4-fs (loop1): unmounting filesystem. [ 75.559303][ T4477] process 'syz.0.41' launched './file0' with NULL argv: empty string added [ 76.494065][ T126] cfg80211: failed to load regulatory.db [ 76.666250][ T4292] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.866264][ T4292] usb 2-1: Using ep0 maxpacket: 8 [ 76.879917][ T4292] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 76.901921][ T4292] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.915212][ T4292] usb 2-1: config 0 has no interface number 0 [ 76.929066][ T4292] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 76.945228][ T4292] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 76.965380][ T4292] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.017281][ T4292] usb 2-1: config 0 interface 52 has no altsetting 0 [ 77.052728][ T4292] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 77.072136][ T4292] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 77.102569][ T4292] usb 2-1: Product: syz [ 77.122833][ T4292] usb 2-1: Manufacturer: syz [ 77.138063][ T4292] usb 2-1: SerialNumber: syz [ 77.175087][ T4292] usb 2-1: config 0 descriptor?? [ 77.792062][ T4493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.801030][ T4493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.849571][ T4292] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 77.970132][ T4292] synaptics_usb: probe of 2-1:0.52 failed with error -5 [ 78.032837][ T4493] netlink: 48 bytes leftover after parsing attributes in process `syz.1.43'. [ 78.589670][ T4261] block nbd0: Receive control failed (result -32) [ 78.597315][ T4261] block nbd0: Receive control failed (result -32) [ 78.626614][ T4496] block nbd0: shutting down sockets [ 78.816376][ T4292] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.932738][ T4258] block nbd3: Receive control failed (result -32) [ 78.939617][ T4255] block nbd3: Receive control failed (result -32) [ 79.006320][ T4292] usb 5-1: Using ep0 maxpacket: 8 [ 79.014393][ T4292] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 79.046718][ T4504] block nbd3: shutting down sockets [ 79.061076][ T4292] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 79.074763][ T4292] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.090570][ T4292] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.104758][ T4292] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 79.832333][ T4328] usb 2-1: USB disconnect, device number 2 [ 79.861413][ T4292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.068405][ T4523] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 80.204468][ T4526] netlink: 'syz.1.53': attribute type 10 has an invalid length. [ 80.808045][ T4292] usb 5-1: usb_control_msg returned -32 [ 80.813629][ T4292] usbtmc 5-1:16.0: can't read capabilities [ 80.841095][ T4292] usb 5-1: USB disconnect, device number 2 [ 80.867966][ T4526] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.875397][ T4526] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.964439][ T4526] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.971649][ T4526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.979097][ T4526] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.986265][ T4526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.048129][ T4526] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 81.087775][ T4535] loop0: detected capacity change from 0 to 4096 [ 81.104922][ T4498] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 81.155291][ T4535] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 81.251840][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 81.251855][ T27] audit: type=1800 audit(1738618232.462:26): pid=4535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.56" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 82.303400][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 85.676266][ T3894] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.945604][ T3894] usb 2-1: Using ep0 maxpacket: 8 [ 85.955003][ T3894] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 85.964197][ T3894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.974609][ T3894] usb 2-1: config 0 has no interface number 0 [ 85.980944][ T3894] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 85.992316][ T3894] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 86.002927][ T3894] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.024834][ T3894] usb 2-1: config 0 interface 52 has no altsetting 0 [ 86.052558][ T3894] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 86.091665][ T3894] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 86.100213][ T4292] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 86.120861][ T3894] usb 2-1: Product: syz [ 86.129831][ T3894] usb 2-1: Manufacturer: syz [ 86.139313][ T3894] usb 2-1: SerialNumber: syz [ 86.152944][ T3894] usb 2-1: config 0 descriptor?? [ 86.173094][ T4586] fuse: Unknown parameter 'group_i00000000000000000000' [ 86.287769][ T4292] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 86.349547][ T4292] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 86.471173][ T4292] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.514700][ T4292] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 86.756808][ T4588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.765367][ T4588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.978900][ T4588] netlink: 48 bytes leftover after parsing attributes in process `syz.1.64'. [ 87.449563][ T3894] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 87.461837][ T3894] synaptics_usb: probe of 2-1:0.52 failed with error -5 [ 87.470260][ T4292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.489291][ T4292] usb 5-1: Product: syz [ 87.493595][ T4292] usb 5-1: Manufacturer: syz [ 87.498759][ T4292] usb 5-1: SerialNumber: syz [ 87.508781][ T4292] usb 5-1: config 0 descriptor?? [ 87.711744][ T4591] loop0: detected capacity change from 0 to 512 [ 87.777034][ T4591] EXT4-fs: Mount option(s) incompatible with ext2 [ 87.843584][ T4594] device wg1 entered promiscuous mode [ 88.639677][ T22] usb 2-1: USB disconnect, device number 3 [ 89.217551][ T4608] bridge0: port 3(gretap1) entered blocking state [ 89.224389][ T4608] bridge0: port 3(gretap1) entered disabled state [ 89.237437][ T4608] device gretap1 entered promiscuous mode [ 89.246168][ T4608] bridge0: port 3(gretap1) entered blocking state [ 89.252676][ T4608] bridge0: port 3(gretap1) entered forwarding state [ 89.922252][ T4608] loop1: detected capacity change from 0 to 40427 [ 89.936256][ T4294] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.948525][ T4608] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 89.956700][ T4608] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 89.969792][ T4608] F2FS-fs (loop1): invalid crc value [ 89.978774][ T4608] F2FS-fs (loop1): invalid crc_offset: 12 [ 89.984590][ T4608] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 90.007410][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ce:5f:53:37:e8:86, vlan:0) [ 90.153011][ T4605] loop1: detected capacity change from 0 to 16 [ 90.159917][ T4605] erofs: Unknown parameter '€' [ 90.207383][ T22] usb 5-1: USB disconnect, device number 3 [ 90.216895][ T4294] usb 4-1: Using ep0 maxpacket: 16 [ 90.244650][ T4294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.315703][ T4294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.363841][ T4294] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 90.373099][ T4294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.529440][ T4294] usb 4-1: config 0 descriptor?? [ 90.546578][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ce:5f:53:37:e8:86, vlan:0) [ 90.956978][ T4294] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 90.976827][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ce:5f:53:37:e8:86, vlan:0) [ 91.259040][ T4294] usb 4-1: USB disconnect, device number 3 [ 92.006938][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ce:5f:53:37:e8:86, vlan:0) [ 92.019204][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ce:5f:53:37:e8:86, vlan:0) [ 92.037543][ T4629] mmap: syz.2.78 (4629) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.353346][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ce:5f:53:37:e8:86, vlan:0) [ 92.424343][ T4633] loop3: detected capacity change from 0 to 16 [ 92.440769][ T4633] erofs: (device loop3): mounted with root inode @ nid 36. [ 92.452499][ T4633] syz.3.79: attempt to access beyond end of device [ 92.452499][ T4633] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 92.467170][ T4633] syz.3.79: attempt to access beyond end of device [ 92.467170][ T4633] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 92.678090][ T4636] syz.0.81[4636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.678190][ T4636] syz.0.81[4636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.036329][ T4292] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.135778][ T4655] loop1: detected capacity change from 0 to 256 [ 95.186246][ T4292] usb 1-1: Using ep0 maxpacket: 8 [ 95.192753][ T4292] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 95.256207][ T4292] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.272756][ T4658] fuse: Unknown parameter 'group_i00000000000000000000' [ 95.294145][ T4292] usb 1-1: config 0 has no interface number 0 [ 95.311483][ T4292] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 95.383005][ T4292] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 95.444420][ T4292] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.511618][ T4292] usb 1-1: config 0 interface 52 has no altsetting 0 [ 95.560979][ T4292] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 95.640179][ T4292] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 95.699000][ T4292] usb 1-1: Product: syz [ 95.728763][ T4292] usb 1-1: Manufacturer: syz [ 95.761565][ T4292] usb 1-1: SerialNumber: syz [ 95.807974][ T4292] usb 1-1: config 0 descriptor?? [ 96.089215][ T4292] usb 1-1: Can not set alternate setting to 1, error: -71 [ 96.102988][ T4292] synaptics_usb: probe of 1-1:0.52 failed with error -71 [ 96.165679][ T4292] usb 1-1: USB disconnect, device number 2 [ 96.416700][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ce:5f:53:37:e8:86, vlan:0) [ 97.926868][ T4329] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 98.127847][ T4329] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 98.140945][ T4329] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 98.152071][ T4329] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.185588][ T4329] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 98.199711][ T4329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.209575][ T4329] usb 5-1: Product: syz [ 98.213764][ T4329] usb 5-1: Manufacturer: syz [ 98.221205][ T4329] usb 5-1: SerialNumber: syz [ 98.247508][ T4329] usb 5-1: config 0 descriptor?? [ 98.447414][ T4292] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.537342][ T4292] usb 2-1: Using ep0 maxpacket: 16 [ 99.544298][ T4292] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 99.571365][ T4292] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.587893][ T4292] usb 2-1: config 0 has no interface number 0 [ 99.608859][ T4292] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 99.632975][ T4292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.654891][ T4292] usb 2-1: Product: syz [ 99.674294][ T4292] usb 2-1: Manufacturer: syz [ 99.693847][ T4292] usb 2-1: SerialNumber: syz [ 99.729880][ T4292] usb 2-1: config 0 descriptor?? [ 99.810091][ T4292] usb 2-1: Found UVC 0.00 device syz (046d:08d3) [ 99.816926][ T4292] usb 2-1: No valid video chain found. [ 100.769181][ T22] usb 5-1: USB disconnect, device number 4 [ 100.812337][ T4256] usb 2-1: USB disconnect, device number 4 [ 100.913113][ T4670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.050267][ T4670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.636147][ C0] sched: RT throttling activated [ 103.026454][ T4292] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.908608][ T4725] loop4: detected capacity change from 0 to 16 [ 103.934835][ T4725] erofs: (device loop4): mounted with root inode @ nid 36. [ 103.942333][ T4292] usb 2-1: Using ep0 maxpacket: 8 [ 103.960946][ T4292] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 103.984375][ T4292] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.005157][ T4292] usb 2-1: config 0 has no interface number 0 [ 104.025006][ T4292] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 104.141981][ T4670] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.174773][ T4670] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.193530][ T4292] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 104.204038][ T4292] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.217004][ T4292] usb 2-1: config 0 interface 52 has no altsetting 0 [ 104.228526][ T4670] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.241765][ T4670] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.256290][ T4292] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 104.265371][ T4292] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 104.276928][ T4292] usb 2-1: Product: syz [ 104.281134][ T4292] usb 2-1: Manufacturer: syz [ 104.285741][ T4292] usb 2-1: SerialNumber: syz [ 104.293518][ T4292] usb 2-1: config 0 descriptor?? [ 104.458985][ T4736] fuse: Unknown parameter 'group_id00000000000000000000' [ 104.496408][ T4733] device bridge0 entered promiscuous mode [ 104.506206][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.104'. [ 104.642264][ T4735] device bridge_slave_1 left promiscuous mode [ 104.669763][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.691755][ T4735] device bridge_slave_0 left promiscuous mode [ 104.698289][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.982329][ T4740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.990993][ T4740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.012626][ T4292] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 105.125734][ T4292] synaptics_usb: probe of 2-1:0.52 failed with error -5 [ 105.207738][ T4740] netlink: 48 bytes leftover after parsing attributes in process `syz.1.99'. [ 105.286811][ C1] bridge0: received packet on gretap1 with own address as source address (addr:ce:5f:53:37:e8:86, vlan:0) [ 105.390156][ T4735] device bridge0 left promiscuous mode [ 106.519643][ T4255] block nbd0: Receive control failed (result -32) [ 106.526499][ T4258] block nbd0: Receive control failed (result -32) [ 106.536539][ T4744] block nbd0: shutting down sockets [ 106.706764][ T4696] usb 2-1: USB disconnect, device number 5 [ 107.248547][ T4255] block nbd4: Receive control failed (result -32) [ 107.276532][ T4756] block nbd4: shutting down sockets [ 107.296325][ T4764] netlink: 144 bytes leftover after parsing attributes in process `syz.3.112'. [ 109.338594][ T27] audit: type=1326 audit(1738618260.552:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be0d8cda9 code=0x7ffc0000 [ 109.409196][ T27] audit: type=1326 audit(1738618260.582:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be0d8cda9 code=0x7ffc0000 [ 109.459753][ T27] audit: type=1326 audit(1738618260.582:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f1be0d8cda9 code=0x7ffc0000 [ 109.493349][ T27] audit: type=1326 audit(1738618260.582:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be0d8cda9 code=0x7ffc0000 [ 109.536256][ T27] audit: type=1326 audit(1738618260.582:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be0d8cda9 code=0x7ffc0000 [ 110.436319][ T4700] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.663219][ T14] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.685668][ T27] audit: type=1326 audit(1738618260.582:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1be0d8cda9 code=0x7ffc0000 [ 110.708546][ T27] audit: type=1326 audit(1738618260.732:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be0d8cda9 code=0x7ffc0000 [ 110.730792][ T27] audit: type=1326 audit(1738618260.732:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be0d8cda9 code=0x7ffc0000 [ 110.756775][ T27] audit: type=1326 audit(1738618261.232:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1be0d8cda9 code=0x7ffc0000 [ 110.828546][ T27] audit: type=1326 audit(1738618261.232:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4778 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be0d8cda9 code=0x7ffc0000 [ 110.860451][ T14] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 110.861464][ T4700] usb 4-1: Using ep0 maxpacket: 8 [ 110.883399][ T14] usb 5-1: config 1 has no interface number 1 [ 110.898512][ T14] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 110.913439][ T4700] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 110.932889][ T4700] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.951733][ T14] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 254, changing to 7 [ 110.973675][ T4700] usb 4-1: config 0 has no interface number 0 [ 110.983640][ T14] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.001431][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.015300][ T14] usb 5-1: Product: syz [ 111.021924][ T14] usb 5-1: Manufacturer: syz [ 111.022286][ T4700] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 111.047707][ T14] usb 5-1: SerialNumber: syz [ 111.068375][ T4700] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 111.145329][ T4700] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.235615][ T4700] usb 4-1: config 0 interface 52 has no altsetting 0 [ 111.257545][ T4803] bridge0: port 3(gretap1) entered disabled state [ 111.264405][ T4803] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.271742][ T4803] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.286362][ T4700] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 111.296733][ T4700] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 111.326620][ T4700] usb 4-1: Product: syz [ 111.330975][ T4700] usb 4-1: Manufacturer: syz [ 111.335862][ T4700] usb 4-1: SerialNumber: syz [ 111.373241][ T4700] usb 4-1: config 0 descriptor?? [ 111.375758][ T14] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc [ 111.535172][ T4498] bond0: (slave bridge0): link status definitely down, disabling slave [ 111.713603][ T4255] block nbd0: Receive control failed (result -32) [ 111.713677][ T4258] block nbd0: Receive control failed (result -32) [ 111.715394][ T4798] block nbd0: shutting down sockets [ 111.988302][ T4815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.997102][ T4815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.005965][ T4700] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 112.035918][ T14] usb 5-1: USB disconnect, device number 5 [ 112.045966][ T4700] synaptics_usb: probe of 4-1:0.52 failed with error -5 [ 112.452547][ T4822] fuse: Unknown parameter 'group_id00000000000000000000' [ 112.609259][ T4825] netlink: 144 bytes leftover after parsing attributes in process `syz.2.128'. [ 113.465496][ T14] usb 4-1: USB disconnect, device number 4 [ 116.737066][ T27] kauditd_printk_skb: 172 callbacks suppressed [ 116.737080][ T27] audit: type=1326 audit(1738618267.952:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05778cda9 code=0x7ffc0000 [ 116.916306][ T27] audit: type=1326 audit(1738618267.952:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05778cda9 code=0x7ffc0000 [ 116.976411][ T27] audit: type=1326 audit(1738618267.952:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7ff05778cda9 code=0x7ffc0000 [ 117.096450][ T27] audit: type=1326 audit(1738618267.952:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05778cda9 code=0x7ffc0000 [ 117.204477][ T27] audit: type=1326 audit(1738618267.952:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05778cda9 code=0x7ffc0000 [ 117.303240][ T27] audit: type=1326 audit(1738618267.952:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff05778cda9 code=0x7ffc0000 [ 117.325742][ T27] audit: type=1326 audit(1738618268.012:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05778cda9 code=0x7ffc0000 [ 117.444174][ T27] audit: type=1326 audit(1738618268.012:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05778cda9 code=0x7ffc0000 [ 117.557563][ T27] audit: type=1326 audit(1738618268.072:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff05778cda9 code=0x7ffc0000 [ 117.649942][ T27] audit: type=1326 audit(1738618268.072:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05778cda9 code=0x7ffc0000 [ 117.900395][ T4255] block nbd3: Receive control failed (result -32) [ 117.900395][ T4258] block nbd3: Receive control failed (result -32) [ 117.922077][ T4844] block nbd3: shutting down sockets [ 118.545553][ T4865] netlink: 144 bytes leftover after parsing attributes in process `syz.4.139'. [ 119.115839][ T4851] loop1: detected capacity change from 0 to 40427 [ 119.138820][ T4851] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 119.207052][ T4851] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.275128][ T4851] F2FS-fs (loop1): Found nat_bits in checkpoint [ 119.371291][ T4878] fuse: Unknown parameter 'group_id00000000000000000000' [ 119.469070][ T4851] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 119.493667][ T4851] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 121.476266][ T3894] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.666289][ T3894] usb 3-1: Using ep0 maxpacket: 8 [ 121.672920][ T3894] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 121.701589][ T3894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.746318][ T3894] usb 3-1: config 0 has no interface number 0 [ 121.773655][ T3894] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 121.803451][ T3894] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 121.858099][ T3894] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.871964][ T3894] usb 3-1: config 0 interface 52 has no altsetting 0 [ 121.894842][ T3894] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 122.808285][ T3894] usb 3-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 122.817355][ T3894] usb 3-1: Product: syz [ 122.821559][ T3894] usb 3-1: Manufacturer: syz [ 122.826530][ T3894] usb 3-1: SerialNumber: syz [ 122.832389][ T3894] usb 3-1: config 0 descriptor?? [ 123.557175][ T4901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.565711][ T4901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.937128][ T4902] netlink: 32 bytes leftover after parsing attributes in process `syz.2.144'. [ 123.949963][ T3894] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 123.959454][ T3894] synaptics_usb: probe of 3-1:0.52 failed with error -5 [ 124.540605][ T4904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 124.634924][ T4917] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.642230][ T4917] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.705018][ T46] bond0: (slave bridge0): link status definitely down, disabling slave [ 124.893270][ T4922] netlink: 144 bytes leftover after parsing attributes in process `syz.1.151'. [ 125.266025][ T3894] usb 3-1: USB disconnect, device number 2 [ 125.648570][ T4929] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 126.642750][ T4935] loop2: detected capacity change from 0 to 256 [ 126.774246][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 126.774262][ T27] audit: type=1804 audit(1738618277.982:240): pid=4935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.155" name="/newroot/37/file1/file0" dev="loop2" ino=1048596 res=1 errno=0 [ 128.561016][ T4928] loop1: detected capacity change from 0 to 40427 [ 128.606036][ T4928] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 128.616076][ T4928] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 129.390915][ T4928] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 129.664805][ T4958] fuse: Bad value for 'user_id' [ 129.706359][ T4294] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.896507][ T4294] usb 1-1: Using ep0 maxpacket: 32 [ 129.904183][ T4294] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 129.953044][ T4294] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 130.021977][ T4294] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 130.141865][ T4294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.165825][ T4294] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 130.179614][ T4294] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 130.981925][ T4294] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 130.991057][ T4294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.060982][ T4294] usb 1-1: config 0 descriptor?? [ 131.297874][ T4971] netlink: 144 bytes leftover after parsing attributes in process `syz.1.163'. [ 131.597969][ T4294] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 131.642632][ T4294] usb 1-1: USB disconnect, device number 3 [ 131.670372][ T4294] usblp0: removed [ 131.676454][ T126] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 131.876225][ T126] usb 4-1: Using ep0 maxpacket: 8 [ 131.883124][ T126] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 131.906179][ T126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.926995][ T126] usb 4-1: config 0 has no interface number 0 [ 131.933354][ T126] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 131.956593][ T126] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 131.990825][ T126] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.058253][ T126] usb 4-1: config 0 interface 52 has no altsetting 0 [ 132.080913][ T126] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 132.100476][ T126] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 132.120729][ T126] usb 4-1: Product: syz [ 132.124944][ T126] usb 4-1: Manufacturer: syz [ 132.174991][ T4975] Zero length message leads to an empty skb [ 132.193788][ T4975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.164'. [ 132.478998][ T27] audit: type=1326 audit(1738618283.672:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 133.065760][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.072176][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.597711][ T126] usb 4-1: SerialNumber: syz [ 133.612535][ T126] usb 4-1: config 0 descriptor?? [ 133.629440][ T27] audit: type=1326 audit(1738618283.682:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 133.682190][ T27] audit: type=1326 audit(1738618283.682:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 133.767893][ T126] usb 4-1: can't set config #0, error -71 [ 133.779658][ T27] audit: type=1326 audit(1738618283.682:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 133.797048][ T126] usb 4-1: USB disconnect, device number 5 [ 133.903118][ T27] audit: type=1326 audit(1738618283.682:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 133.970144][ T4982] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 133.999102][ T27] audit: type=1326 audit(1738618283.682:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 134.003788][ T4982] netlink: 'syz.0.166': attribute type 10 has an invalid length. [ 134.096278][ T27] audit: type=1326 audit(1738618283.692:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 134.141592][ T27] audit: type=1326 audit(1738618283.692:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.1.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 134.179084][ T4982] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 136.856160][ T5021] netlink: 144 bytes leftover after parsing attributes in process `syz.2.174'. [ 138.682794][ T5039] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 138.694194][ T5039] netlink: 'syz.1.180': attribute type 10 has an invalid length. [ 138.755193][ T5042] netlink: 'syz.3.181': attribute type 1 has an invalid length. [ 138.763174][ T4294] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.843640][ T5031] fuse: Bad value for 'user_id' [ 139.726360][ T4294] usb 3-1: Using ep0 maxpacket: 32 [ 139.736728][ T4294] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 139.769166][ T4294] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 139.785507][ T4294] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 139.834121][ T4294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.854672][ T4294] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 139.896605][ T4294] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 139.930998][ T4294] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 139.955459][ T4294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.033437][ T4294] usb 3-1: config 0 descriptor?? [ 141.268651][ T4294] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 141.293596][ T4294] usb 3-1: USB disconnect, device number 3 [ 141.304122][ T4294] usblp0: removed [ 141.452082][ T5059] loop3: detected capacity change from 0 to 4096 [ 141.559028][ T5059] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 141.584631][ T5067] loop0: detected capacity change from 0 to 512 [ 141.607741][ T5067] EXT4-fs: inline encryption not supported [ 141.613648][ T5067] EXT4-fs: Ignoring removed nobh option [ 141.617943][ T27] audit: type=1326 audit(1738618292.822:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959238cda9 code=0x7ffc0000 [ 141.691581][ T27] audit: type=1326 audit(1738618292.892:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f959238cda9 code=0x7ffc0000 [ 141.720676][ T5067] EXT4-fs (loop0): orphan cleanup on readonly fs [ 141.724221][ T27] audit: type=1326 audit(1738618292.912:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959238cda9 code=0x7ffc0000 [ 141.754489][ T27] audit: type=1326 audit(1738618292.912:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959238cda9 code=0x7ffc0000 [ 141.777195][ T27] audit: type=1326 audit(1738618292.952:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f959238cda9 code=0x7ffc0000 [ 141.789320][ T5067] EXT4-fs (loop0): 1 orphan inode deleted [ 141.799451][ T27] audit: type=1326 audit(1738618292.952:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959238cda9 code=0x7ffc0000 [ 141.799488][ T27] audit: type=1326 audit(1738618292.952:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959238cda9 code=0x7ffc0000 [ 141.799513][ T27] audit: type=1326 audit(1738618292.962:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f959238cda9 code=0x7ffc0000 [ 141.881028][ T5067] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 141.893300][ T27] audit: type=1326 audit(1738618293.092:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f959238cda9 code=0x7ffc0000 [ 141.908174][ T5067] EXT4-fs (loop0): unmounting filesystem. [ 141.920766][ T27] audit: type=1326 audit(1738618293.092:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5057 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f959238cda9 code=0x7ffc0000 [ 141.995242][ T4246] EXT4-fs (loop3): unmounting filesystem. [ 142.496638][ T4700] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.728726][ T5063] loop4: detected capacity change from 0 to 40427 [ 142.736292][ T4700] usb 4-1: Using ep0 maxpacket: 8 [ 142.754730][ T4700] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 142.788926][ T5063] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 142.798761][ T4700] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.808944][ T4700] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.819064][ T4700] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.829244][ T4700] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.842078][ T5063] F2FS-fs (loop4): invalid crc value [ 142.857409][ T5063] F2FS-fs (loop4): Found nat_bits in checkpoint [ 142.923592][ T5063] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 143.024804][ T4700] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.084334][ T5063] syz.4.185: attempt to access beyond end of device [ 143.084334][ T5063] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 143.806439][ T4700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.857359][ T4247] syz-executor: attempt to access beyond end of device [ 143.857359][ T4247] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.003927][ T5086] loop0: detected capacity change from 0 to 512 [ 144.058863][ T4700] usb 4-1: usb_control_msg returned -32 [ 144.064537][ T4700] usbtmc 4-1:16.0: can't read capabilities [ 144.098790][ T5086] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 144.122838][ T5086] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.428464][ T5092] loop4: detected capacity change from 0 to 512 [ 145.311912][ T5097] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 146.057209][ T5092] EXT4-fs (loop4): invalid first ino: 0 [ 147.572721][ T4696] usb 4-1: USB disconnect, device number 6 [ 147.847763][ T5106] netlink: 'syz.3.196': attribute type 1 has an invalid length. [ 147.933884][ T5109] fuse: Bad value for 'user_id' [ 148.270463][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 148.270477][ T27] audit: type=1326 audit(1738618299.482:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 148.360928][ T27] audit: type=1326 audit(1738618299.522:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 148.434135][ T27] audit: type=1326 audit(1738618299.522:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 148.540119][ T27] audit: type=1326 audit(1738618299.522:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 148.546205][ T4294] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 148.568165][ T27] audit: type=1326 audit(1738618299.522:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 148.593026][ T27] audit: type=1326 audit(1738618299.522:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 148.615198][ T27] audit: type=1326 audit(1738618299.622:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 148.648260][ T27] audit: type=1326 audit(1738618299.622:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 148.701190][ T27] audit: type=1326 audit(1738618299.702:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 148.756255][ T27] audit: type=1326 audit(1738618299.702:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 148.797323][ T5122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.201'. [ 148.836844][ T4294] usb 4-1: Using ep0 maxpacket: 8 [ 148.848876][ T4294] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 148.868818][ T4294] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.893079][ T4294] usb 4-1: config 0 has no interface number 0 [ 148.906291][ T4294] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 148.930138][ T4294] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 148.956231][ T4294] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.998741][ T4294] usb 4-1: config 0 interface 52 has no altsetting 0 [ 149.027944][ T4294] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 149.051991][ T4294] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 149.070037][ T4294] usb 4-1: Product: syz [ 149.078535][ T4294] usb 4-1: Manufacturer: syz [ 149.088503][ T4294] usb 4-1: SerialNumber: syz [ 149.110091][ T4294] usb 4-1: config 0 descriptor?? [ 149.503042][ T4700] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 149.763959][ T5130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.772607][ T5130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.846316][ T4700] usb 2-1: Using ep0 maxpacket: 8 [ 149.860428][ T4700] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 149.932628][ T4700] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.988754][ T5130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.199'. [ 150.104829][ T4700] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.262052][ T4700] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.341471][ T4294] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 150.350233][ T4294] synaptics_usb: probe of 4-1:0.52 failed with error -5 [ 150.387823][ T4700] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.431744][ T4700] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.451521][ T4700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.687639][ T4700] usb 2-1: usb_control_msg returned -32 [ 150.694581][ T4700] usbtmc 2-1:16.0: can't read capabilities [ 151.275089][ T5142] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 151.413531][ T4700] usb 4-1: USB disconnect, device number 7 [ 152.155663][ T5155] loop2: detected capacity change from 0 to 128 [ 152.249233][ T5155] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 153.036271][ T5155] FAT-fs (loop2): Filesystem has been set read-only [ 153.042930][ T5155] syz.2.211: attempt to access beyond end of device [ 153.042930][ T5155] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 153.071637][ T5155] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 153.091068][ T5155] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 153.122454][ T5160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.212'. [ 153.150469][ T5155] syz.2.211: attempt to access beyond end of device [ 153.150469][ T5155] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 153.265369][ T126] usb 2-1: USB disconnect, device number 6 [ 153.286633][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 153.286647][ T27] audit: type=1800 audit(1738618304.472:295): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.211" name="file2" dev="loop2" ino=1048597 res=0 errno=0 [ 153.376100][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 153.733736][ T5173] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 153.765550][ T5173] Cannot find add_set index 0 as target [ 154.715960][ T5183] fuse: Bad value for 'fd' [ 154.774525][ T5184] loop4: detected capacity change from 0 to 512 [ 155.036383][ T5184] EXT4-fs (loop4): too many log groups per flexible block group [ 155.044381][ T5184] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 155.059618][ T5184] EXT4-fs (loop4): mount failed [ 155.104232][ T5190] loop3: detected capacity change from 0 to 4096 [ 155.210615][ T5190] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 155.505171][ T27] audit: type=1800 audit(1738618306.702:296): pid=5190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.219" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 156.507127][ T5215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.225'. [ 156.980943][ T5222] loop0: detected capacity change from 0 to 512 [ 157.209359][ T5222] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 157.219653][ T5222] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.533827][ T4246] EXT4-fs (loop3): unmounting filesystem. [ 158.853332][ T951] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 158.908029][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 159.332826][ T5236] tipc: Enabling of bearer rejected, already enabled [ 159.396285][ T951] usb 5-1: Using ep0 maxpacket: 8 [ 159.410761][ T951] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 159.605778][ T951] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.928541][ T951] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.984457][ T951] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.015260][ T951] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.078326][ T951] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.155230][ T951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.252767][ T951] usb 5-1: can't set config #16, error -71 [ 160.285888][ T951] usb 5-1: USB disconnect, device number 6 [ 160.349177][ T5233] loop1: detected capacity change from 0 to 40427 [ 160.372125][ T5249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.237'. [ 160.390126][ T5233] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 160.410499][ T5233] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 160.433205][ T5247] fuse: Bad value for 'fd' [ 160.537156][ T5233] F2FS-fs (loop1): Found nat_bits in checkpoint [ 160.735335][ T5233] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 160.801810][ T5233] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 160.873123][ T5260] ªªªªªª: renamed from vlan0 [ 161.474644][ T5239] loop0: detected capacity change from 0 to 40427 [ 161.487869][ T5239] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 161.500961][ T5239] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 161.628666][ T5239] F2FS-fs (loop0): Found nat_bits in checkpoint [ 161.867431][ T5239] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 161.909632][ T5239] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 162.127325][ T5274] overlayfs: conflicting lowerdir path [ 162.366276][ T4294] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 162.601279][ T4294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.667117][ T4294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.687141][ T4294] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 162.702298][ T4294] usb 2-1: New USB device strings: Mfr=129, Product=0, SerialNumber=0 [ 163.455444][ T4294] usb 2-1: Manufacturer: syz [ 163.485946][ T4294] usb 2-1: config 0 descriptor?? [ 163.540374][ T5286] loop0: detected capacity change from 0 to 512 [ 163.566910][ T5286] EXT4-fs: quotafile must be on filesystem root [ 163.922177][ T4294] steelseries_srws1 0003:1038:1410.0002: not enough fields in HID_OUTPUT_REPORT 0 [ 164.150590][ T4294] usb 2-1: USB disconnect, device number 7 [ 164.156633][ T3894] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 164.376413][ T3894] usb 5-1: Using ep0 maxpacket: 8 [ 164.388382][ T3894] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 164.427481][ T3894] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.446224][ T3894] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.472713][ T3894] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.499912][ T5286] loop0: detected capacity change from 0 to 40427 [ 164.507765][ T3894] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.535568][ T3894] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 164.545412][ T3894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.584233][ T5286] F2FS-fs (loop0): invalid crc value [ 164.631337][ T5286] F2FS-fs (loop0): Found nat_bits in checkpoint [ 164.693117][ T5295] tipc: Enabling of bearer rejected, already enabled [ 164.886585][ T5286] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 165.394180][ T5286] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 165.401892][ T3894] usb 5-1: usb_control_msg returned -32 [ 165.408627][ T3894] usbtmc 5-1:16.0: can't read capabilities [ 167.105970][ T5307] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 167.174406][ T4258] block nbd1: Receive control failed (result -32) [ 167.174406][ T4255] block nbd1: Receive control failed (result -32) [ 167.201527][ T5301] block nbd1: shutting down sockets [ 168.693162][ T4700] usb 5-1: USB disconnect, device number 7 [ 168.814668][ T5323] loop0: detected capacity change from 0 to 16 [ 168.847745][ T5325] netlink: 36 bytes leftover after parsing attributes in process `syz.1.255'. [ 168.877872][ T5323] erofs: (device loop0): mounted with root inode @ nid 36. [ 169.000163][ T5327] loop4: detected capacity change from 0 to 512 [ 169.088599][ T5327] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.142694][ T5327] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 169.184142][ T5327] EXT4-fs (loop4): 1 truncate cleaned up [ 169.195727][ T5327] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 169.311792][ T3894] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 169.449911][ T5335] tipc: Started in network mode [ 169.454960][ T5335] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 169.464245][ T5335] tipc: Enabling of bearer rejected, failed to enable media [ 169.483257][ T5319] loop3: detected capacity change from 0 to 40427 [ 169.651503][ T5319] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 169.795599][ T5319] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 170.076354][ T3894] usb 2-1: Using ep0 maxpacket: 16 [ 170.085147][ T5319] F2FS-fs (loop3): Found nat_bits in checkpoint [ 170.098018][ T3894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.136384][ T3894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.156468][ T3894] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 170.165558][ T3894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.202312][ T3894] usb 2-1: config 0 descriptor?? [ 170.213381][ T4247] EXT4-fs (loop4): unmounting filesystem. [ 170.218311][ T5319] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 170.236566][ T5319] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 170.663094][ T3894] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0003/input/input11 [ 171.835021][ T3894] appleir 0003:05AC:8241.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 171.868430][ T3894] usb 2-1: USB disconnect, device number 8 [ 172.086291][ T4700] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 172.276310][ T4700] usb 1-1: Using ep0 maxpacket: 8 [ 172.283251][ T4700] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 172.311651][ T4700] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.361389][ T4700] usb 1-1: config 0 has no interface number 0 [ 172.382430][ T4700] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 172.428351][ T4700] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 172.466653][ T4700] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.494455][ T4700] usb 1-1: config 0 interface 52 has no altsetting 0 [ 172.505692][ T4700] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 172.520247][ T4700] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 172.529403][ T4700] usb 1-1: Product: syz [ 172.531871][ T5363] syz.1.266[5363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.533834][ T4700] usb 1-1: Manufacturer: syz [ 172.534773][ T5363] syz.1.266[5363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.670810][ T4700] usb 1-1: SerialNumber: syz [ 172.687829][ T5362] block nbd3: server does not support multiple connections per device. [ 172.758321][ T5361] block nbd3: shutting down sockets [ 172.778972][ T4700] usb 1-1: config 0 descriptor?? [ 172.788096][ T5367] fuse: Bad value for 'fd' [ 173.437020][ T5373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.445629][ T5373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.656511][ T4700] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 173.788308][ T5373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.264'. [ 174.207280][ T4700] synaptics_usb: probe of 1-1:0.52 failed with error -5 [ 174.652657][ T5386] tipc: Started in network mode [ 174.657818][ T5386] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 174.669811][ T5386] tipc: Enabled bearer , priority 10 [ 175.334093][ T4290] usb 1-1: USB disconnect, device number 4 [ 175.396319][ T3894] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 175.488864][ T5388] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 175.606275][ T3894] usb 2-1: Using ep0 maxpacket: 16 [ 175.614698][ T3894] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.635441][ T3894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.711543][ T3894] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.731298][ T3894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.742593][ T3894] usb 2-1: Product: syz [ 175.750445][ T3894] usb 2-1: Manufacturer: syz [ 175.755157][ T3894] usb 2-1: SerialNumber: syz [ 175.940298][ T4700] tipc: Node number set to 4269801491 [ 175.989947][ T3894] usb 2-1: 0:2 : does not exist [ 176.011758][ T3894] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 176.074531][ T5399] tipc: Enabling of bearer rejected, already enabled [ 176.745595][ T3894] usb 2-1: USB disconnect, device number 9 [ 177.005383][ T4237] udevd[4237]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.195507][ T5411] bridge0: port 3(gretap1) entered blocking state [ 177.202187][ T5411] bridge0: port 3(gretap1) entered disabled state [ 177.209864][ T5411] device gretap1 entered promiscuous mode [ 177.502493][ T5411] loop3: detected capacity change from 0 to 40427 [ 177.526292][ T5411] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 177.534137][ T5411] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 177.546014][ T5411] F2FS-fs (loop3): invalid crc value [ 177.551989][ T5411] F2FS-fs (loop3): invalid crc_offset: 12 [ 177.558613][ T5411] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 178.044610][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 178.680901][ T4258] block nbd2: Receive control failed (result -32) [ 178.691451][ T5420] block nbd2: shutting down sockets [ 178.869070][ T4237] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.019286][ T5407] loop3: detected capacity change from 0 to 16 [ 179.026471][ T5407] erofs: Unknown parameter '€' [ 179.063984][ T5426] overlayfs: conflicting lowerdir path [ 179.070366][ T4237] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.296447][ T4293] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 179.512176][ T5437] netlink: 'syz.4.286': attribute type 1 has an invalid length. [ 179.520231][ T4293] usb 2-1: Using ep0 maxpacket: 8 [ 179.536999][ T4293] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 179.558295][ T4293] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.571149][ T4293] usb 2-1: config 0 has no interface number 0 [ 179.576274][ T3894] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 179.582166][ T4293] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 179.599265][ T5439] fuse: Bad value for 'fd' [ 179.615964][ T4293] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 179.654560][ T4293] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.687982][ T4293] usb 2-1: config 0 interface 52 has no altsetting 0 [ 179.701287][ T4293] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 179.711236][ T4293] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 179.720150][ T4293] usb 2-1: Product: syz [ 179.724698][ T4293] usb 2-1: Manufacturer: syz [ 179.730908][ T4293] usb 2-1: SerialNumber: syz [ 179.755111][ T4293] usb 2-1: config 0 descriptor?? [ 179.801088][ T3894] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 179.823540][ T3894] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 179.851684][ T3894] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.887827][ T3894] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 179.916038][ T3894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.937420][ T3894] usb 3-1: Product: syz [ 179.946429][ T3894] usb 3-1: Manufacturer: syz [ 179.964108][ T3894] usb 3-1: SerialNumber: syz [ 180.188145][ T5444] tipc: Started in network mode [ 180.193154][ T5444] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 180.204021][ T5444] tipc: Enabled bearer , priority 10 [ 180.212529][ T3894] usb 3-1: config 0 descriptor?? [ 180.849654][ T5446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.858322][ T5446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.075169][ T5446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.284'. [ 181.196481][ T3894] tipc: Node number set to 4269801491 [ 181.517046][ T4293] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 181.592993][ T5430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.601660][ T5430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.612197][ T4293] synaptics_usb: probe of 2-1:0.52 failed with error -5 [ 181.834883][ T5450] bridge0: port 1(gretap1) entered blocking state [ 181.841487][ T5450] bridge0: port 1(gretap1) entered disabled state [ 181.850084][ T5450] device gretap1 entered promiscuous mode [ 182.166571][ T4290] usb 3-1: USB disconnect, device number 4 [ 182.579152][ T4290] usb 2-1: USB disconnect, device number 10 [ 182.846740][ T27] audit: type=1326 audit(1738618334.062:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 182.928124][ T27] audit: type=1326 audit(1738618334.062:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 183.038611][ T27] audit: type=1326 audit(1738618334.062:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 183.088761][ T4255] block nbd2: Receive control failed (result -32) [ 183.088780][ T4258] block nbd2: Receive control failed (result -32) [ 183.114786][ T27] audit: type=1326 audit(1738618334.062:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 183.139577][ T27] audit: type=1326 audit(1738618334.062:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 183.590721][ T27] audit: type=1326 audit(1738618334.082:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 183.646915][ T27] audit: type=1326 audit(1738618334.082:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 183.770217][ T5451] block nbd2: shutting down sockets [ 183.795866][ T27] audit: type=1326 audit(1738618334.082:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 183.846357][ T27] audit: type=1326 audit(1738618334.082:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 183.869270][ T27] audit: type=1326 audit(1738618334.082:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5461 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 184.863810][ T5481] netlink: 'syz.2.298': attribute type 1 has an invalid length. [ 185.089027][ T5486] loop2: detected capacity change from 0 to 512 [ 185.142900][ T5486] EXT4-fs error (device loop2): ext4_acquire_dquot:6795: comm syz.2.300: Failed to acquire dquot type 0 [ 185.159519][ T5486] EXT4-fs error (device loop2): ext4_acquire_dquot:6795: comm syz.2.300: Failed to acquire dquot type 0 [ 185.182247][ T5486] EXT4-fs error (device loop2): ext4_acquire_dquot:6795: comm syz.2.300: Failed to acquire dquot type 0 [ 185.186221][ T4290] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 185.204762][ T5486] EXT4-fs (loop2): 1 orphan inode deleted [ 185.212081][ T5486] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 185.224948][ T5486] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.330527][ T5486] EXT4-fs error (device loop2): ext4_acquire_dquot:6795: comm syz.2.300: Failed to acquire dquot type 0 [ 185.384082][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 185.396249][ T4290] usb 5-1: Using ep0 maxpacket: 8 [ 185.404768][ T4258] block nbd3: Receive control failed (result -32) [ 185.404792][ T4255] block nbd3: Receive control failed (result -32) [ 185.412044][ T5477] block nbd3: shutting down sockets [ 185.428407][ T4290] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 185.441596][ T4290] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.453825][ T4290] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.465167][ T4290] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.475455][ T4290] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.488911][ T4290] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 185.500811][ T4290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.819630][ T4290] usb 5-1: usb_control_msg returned -32 [ 185.825259][ T4290] usbtmc 5-1:16.0: can't read capabilities [ 185.979217][ T4292] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 186.036626][ T5497] fuse: Bad value for 'fd' [ 186.354559][ T4292] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 186.366954][ T4292] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 186.377947][ T4292] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.412881][ T4292] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 186.435504][ T4292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.444537][ T5504] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 186.487916][ T4292] usb 4-1: Product: syz [ 186.496512][ T4292] usb 4-1: Manufacturer: syz [ 186.501219][ T4292] usb 4-1: SerialNumber: syz [ 186.513750][ T5507] overlayfs: conflicting lowerdir path [ 186.515584][ T4292] usb 4-1: config 0 descriptor?? [ 186.838392][ T5493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.847141][ T5493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.364238][ T4292] usb 4-1: USB disconnect, device number 8 [ 187.697175][ T5518] fuse: Unknown parameter 'grou00000000000000000000' [ 189.289915][ T4292] usb 5-1: USB disconnect, device number 8 [ 189.353294][ T4258] block nbd2: Receive control failed (result -32) [ 189.353294][ T4255] block nbd2: Receive control failed (result -32) [ 189.809144][ T5534] loop0: detected capacity change from 0 to 16 [ 190.476336][ T5534] erofs: (device loop0): mounted with root inode @ nid 36. [ 190.489037][ T5526] block nbd2: shutting down sockets [ 190.511668][ T5531] syz.0.312: attempt to access beyond end of device [ 190.511668][ T5531] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 190.541490][ T5531] syz.0.312: attempt to access beyond end of device [ 190.541490][ T5531] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 190.601561][ T5536] loop1: detected capacity change from 0 to 16 [ 190.619904][ T5536] erofs: (device loop1): mounted with root inode @ nid 36. [ 190.718078][ T5536] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 190.736268][ T5536] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 191.243268][ T5548] tipc: Started in network mode [ 191.248370][ T5548] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 191.259288][ T5548] tipc: Enabled bearer , priority 10 [ 191.526414][ T4255] block nbd4: Receive control failed (result -32) [ 191.546678][ T4258] block nbd4: Receive control failed (result -32) [ 191.565640][ T5538] block nbd4: shutting down sockets [ 192.185598][ T5552] loop1: detected capacity change from 0 to 4096 [ 192.237670][ T5552] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 192.297609][ T27] kauditd_printk_skb: 36 callbacks suppressed [ 192.297620][ T27] audit: type=1800 audit(1738618343.512:335): pid=5552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.317" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 192.376247][ T4696] tipc: Node number set to 4269801491 [ 192.552659][ T5556] fuse: Invalid rootmode [ 193.200133][ T4245] EXT4-fs (loop1): unmounting filesystem. [ 193.313893][ T5561] fuse: Unknown parameter 'grou00000000000000000000' [ 194.255570][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.262287][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.646297][ T4696] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 195.160412][ T4696] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 195.198950][ T4696] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 195.216289][ T4294] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 195.268465][ T4696] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.317285][ T4696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 195.442736][ T4696] usb 4-1: SerialNumber: syz [ 195.460658][ T5572] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 195.506292][ T4294] usb 5-1: Using ep0 maxpacket: 8 [ 195.513527][ T4294] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 195.527325][ T4294] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.315867][ T4294] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.325729][ T4294] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.336044][ T4294] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.349574][ T4294] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 196.358738][ T4294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.392568][ T5567] loop3: detected capacity change from 0 to 1024 [ 196.426322][ T5567] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 196.463266][ T5567] JBD2: no valid journal superblock found [ 196.477730][ T27] audit: type=1326 audit(1738618347.692:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5581 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05778cda9 code=0x7ffc0000 [ 196.501925][ T5567] EXT4-fs (loop3): error loading journal [ 196.521188][ T27] audit: type=1326 audit(1738618347.732:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5581 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05778cda9 code=0x7ffc0000 [ 196.544037][ T27] audit: type=1326 audit(1738618347.732:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5581 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7ff05778cda9 code=0x7ffc0000 [ 196.576771][ T4294] usb 5-1: usb_control_msg returned -32 [ 196.612504][ T4294] usbtmc 5-1:16.0: can't read capabilities [ 196.620003][ T27] audit: type=1326 audit(1738618347.732:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5581 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05778cda9 code=0x7ffc0000 [ 196.665936][ T4696] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 196.727756][ T27] audit: type=1326 audit(1738618347.732:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5581 comm="syz.2.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff05778cda9 code=0x7ffc0000 [ 196.814757][ T4696] usb 4-1: USB disconnect, device number 9 [ 197.245622][ T5591] bridge0: port 3(gretap1) entered blocking state [ 197.252452][ T5591] bridge0: port 3(gretap1) entered disabled state [ 197.265103][ T5591] device gretap1 entered promiscuous mode [ 197.272657][ T5591] bridge0: port 3(gretap1) entered blocking state [ 197.279212][ T5591] bridge0: port 3(gretap1) entered forwarding state [ 197.846771][ T4292] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 197.962084][ T5591] loop0: detected capacity change from 0 to 40427 [ 197.971966][ T5591] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 197.980048][ T5591] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 197.988538][ T5589] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 197.990027][ T5591] F2FS-fs (loop0): invalid crc value [ 198.002512][ T5591] F2FS-fs (loop0): invalid crc_offset: 12 [ 198.008473][ T5591] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 198.089159][ T4292] usb 3-1: Using ep0 maxpacket: 8 [ 198.096755][ T4292] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 198.108619][ T5588] overlayfs: failed to resolve './file0': -2 [ 198.154244][ T4292] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.187627][ T4292] usb 3-1: config 0 has no interface number 0 [ 198.244064][ T4292] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 198.263300][ T4292] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 198.287563][ T4292] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.304816][ T4292] usb 3-1: config 0 interface 52 has no altsetting 0 [ 198.454334][ T4292] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 198.466282][ T4292] usb 3-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 198.474789][ T4292] usb 3-1: Product: syz [ 198.483197][ T4292] usb 3-1: Manufacturer: syz [ 198.488340][ T4292] usb 3-1: SerialNumber: syz [ 198.519493][ T4292] usb 3-1: config 0 descriptor?? [ 198.553035][ T5598] fuse: Unknown parameter 'grou00000000000000000000' [ 198.804493][ T5601] loop0: detected capacity change from 0 to 4096 [ 198.913865][ T5601] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 199.167733][ T5605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.176420][ T5605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.256227][ T27] audit: type=1800 audit(1738618350.452:341): pid=5601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.331" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 199.544187][ T5606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.327'. [ 199.563238][ T4292] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 199.572310][ T4292] synaptics_usb: probe of 3-1:0.52 failed with error -5 [ 200.020824][ T4292] usb 5-1: USB disconnect, device number 9 [ 200.661844][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 201.086641][ T3894] usb 3-1: USB disconnect, device number 5 [ 201.412217][ T5618] fuse: Invalid rootmode [ 201.576419][ T4700] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 201.866234][ T4700] usb 2-1: Using ep0 maxpacket: 16 [ 202.270168][ T4700] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.280734][ T4700] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.406391][ T5621] block nbd2: Device being setup by another task [ 202.429936][ T4700] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.446658][ T4700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.298233][ T4700] usb 2-1: Product: syz [ 203.318251][ T4700] usb 2-1: Manufacturer: syz [ 203.336324][ T4700] usb 2-1: SerialNumber: syz [ 203.444219][ T4258] block nbd2: Receive control failed (result -32) [ 203.471814][ T5621] block nbd2: shutting down sockets [ 203.793288][ T4700] usb 2-1: 0:2 : does not exist [ 203.839285][ T4700] usb 2-1: USB disconnect, device number 11 [ 204.098573][ T4237] udevd[4237]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.478439][ T5633] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 204.533813][ T5633] netlink: 'syz.3.338': attribute type 10 has an invalid length. [ 204.559198][ T5637] loop0: detected capacity change from 0 to 256 [ 206.662327][ T5637] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 207.800052][ T5646] tipc: Enabling of bearer rejected, already enabled [ 208.391898][ T27] audit: type=1326 audit(1738618359.602:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5648 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 208.554354][ T27] audit: type=1326 audit(1738618359.602:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5648 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 209.716699][ T27] audit: type=1326 audit(1738618359.602:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5648 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 209.750541][ T27] audit: type=1326 audit(1738618359.602:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5648 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 209.774729][ T27] audit: type=1326 audit(1738618359.602:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5648 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 209.824236][ T27] audit: type=1326 audit(1738618359.602:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5648 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 209.862778][ T27] audit: type=1326 audit(1738618359.702:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5648 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 210.127544][ T27] audit: type=1326 audit(1738618359.702:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5648 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 210.266460][ T4292] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 210.321196][ T27] audit: type=1326 audit(1738618359.752:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5648 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 210.458609][ T4292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.515602][ T4292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.684106][ T4292] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 210.694950][ T4292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.700567][ T27] audit: type=1326 audit(1738618359.752:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5648 comm="syz.1.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03e98cda9 code=0x7ffc0000 [ 210.718193][ T4292] usb 5-1: config 0 descriptor?? [ 210.849969][ T5673] fuse: Invalid rootmode [ 210.857668][ T4407] tipc: Left network mode [ 211.154663][ T4292] hid-steam 0003:28DE:1142.0004: item fetching failed at offset 3/5 [ 211.196955][ T4292] hid-steam 0003:28DE:1142.0004: steam_probe:parse of hid interface failed [ 211.309168][ T4292] hid-steam: probe of 0003:28DE:1142.0004 failed with error -22 [ 211.400381][ T4292] usb 5-1: USB disconnect, device number 10 [ 211.613145][ T4255] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.623451][ T4255] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.632091][ T4255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.640098][ T4255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.648186][ T4255] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.655487][ T4255] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.671334][ T4258] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.682637][ T4258] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.691851][ T4258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.716539][ T4258] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.727366][ T4258] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.741839][ T4258] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.051635][ T5690] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 212.081630][ T4407] bridge0: port 3(gretap1) entered disabled state [ 212.228001][ T4407] device gretap1 left promiscuous mode [ 212.254859][ T4407] bridge0: port 3(gretap1) entered disabled state [ 212.274509][ T5690] netlink: 'syz.4.354': attribute type 10 has an invalid length. [ 213.388756][ T5704] tipc: Enabling of bearer rejected, already enabled [ 214.006422][ T951] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 214.256398][ T951] usb 5-1: Using ep0 maxpacket: 8 [ 214.269981][ T951] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 214.344039][ T951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.430405][ T951] usb 5-1: config 0 has no interface number 0 [ 214.467757][ T951] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 214.620769][ T951] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 214.631284][ T951] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.644994][ T951] usb 5-1: config 0 interface 52 has no altsetting 0 [ 214.655369][ T951] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 214.664668][ T951] usb 5-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 214.673209][ T951] usb 5-1: Product: syz [ 214.676431][ T5679] chnl_net:caif_netlink_parms(): no params data found [ 214.694538][ T951] usb 5-1: Manufacturer: syz [ 214.712514][ T951] usb 5-1: SerialNumber: syz [ 214.724485][ T951] usb 5-1: config 0 descriptor?? [ 214.802791][ T4407] device hsr_slave_0 left promiscuous mode [ 214.819411][ T4407] device hsr_slave_1 left promiscuous mode [ 214.845944][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.864963][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.891184][ T4407] device bridge_slave_1 left promiscuous mode [ 214.903314][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.913382][ T4407] device bridge_slave_0 left promiscuous mode [ 214.947117][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.896660][ T5738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.905252][ T5738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.679028][ T951] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 216.896290][ T5739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.357'. [ 217.154201][ T4407] bond1 (unregistering): Released all slaves [ 217.327018][ T951] synaptics_usb: probe of 5-1:0.52 failed with error -5 [ 217.999800][ T4407] team0 (unregistering): Port device team_slave_1 removed [ 218.062100][ T4407] team0 (unregistering): Port device team_slave_0 removed [ 218.156025][ T4407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.232067][ T4407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.978449][ T4407] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 218.997750][ T4407] bond0 (unregistering): Released all slaves [ 219.115934][ T5737] netlink: 'syz.2.360': attribute type 4 has an invalid length. [ 219.226661][ T951] usb 5-1: USB disconnect, device number 11 [ 219.506411][ T5760] [ 219.508790][ T5760] ====================================================== [ 219.515811][ T5760] WARNING: possible circular locking dependency detected [ 219.522833][ T5760] 6.1.128-syzkaller #0 Not tainted [ 219.527947][ T5760] ------------------------------------------------------ [ 219.534971][ T5760] syz.4.362/5760 is trying to acquire lock: [ 219.540868][ T5760] ffff8880b8e28118 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x1b2/0x8c0 [ 219.549535][ T5760] [ 219.549535][ T5760] but task is already holding lock: [ 219.556902][ T5760] ffff8880b8e28358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 219.565797][ T5760] [ 219.565797][ T5760] which lock already depends on the new lock. [ 219.565797][ T5760] [ 219.576217][ T5760] [ 219.576217][ T5760] the existing dependency chain (in reverse order) is: [ 219.585234][ T5760] [ 219.585234][ T5760] -> #1 (&base->lock){-.-.}-{2:2}: [ 219.592552][ T5760] lock_acquire+0x1f8/0x5a0 [ 219.597594][ T5760] _raw_spin_lock_irqsave+0xd1/0x120 [ 219.603413][ T5760] lock_timer_base+0x120/0x260 [ 219.608698][ T5760] __mod_timer+0x1cb/0xee0 [ 219.613635][ T5760] queue_delayed_work_on+0x156/0x250 [ 219.619440][ T5760] kvfree_call_rcu+0x520/0x8c0 [ 219.624729][ T5760] rtnl_register_internal+0x489/0x580 [ 219.630628][ T5760] rtnl_register+0x32/0x70 [ 219.635568][ T5760] ip_rt_init+0x335/0x3c7 [ 219.640420][ T5760] ip_init+0xa/0x14 [ 219.644752][ T5760] inet_init+0x2ae/0x3c0 [ 219.649518][ T5760] do_one_initcall+0x265/0x8f0 [ 219.654814][ T5760] do_initcall_level+0x157/0x207 [ 219.660272][ T5760] do_initcalls+0x49/0x86 [ 219.665128][ T5760] kernel_init_freeable+0x45c/0x60f [ 219.670851][ T5760] kernel_init+0x19/0x290 [ 219.675707][ T5760] ret_from_fork+0x1f/0x30 [ 219.680654][ T5760] [ 219.680654][ T5760] -> #0 (krc.lock){..-.}-{2:2}: [ 219.687695][ T5760] validate_chain+0x1661/0x5950 [ 219.693069][ T5760] __lock_acquire+0x125b/0x1f80 [ 219.698446][ T5760] lock_acquire+0x1f8/0x5a0 [ 219.703476][ T5760] _raw_spin_lock+0x2a/0x40 [ 219.708506][ T5760] kvfree_call_rcu+0x1b2/0x8c0 [ 219.713790][ T5760] trie_delete_elem+0x53a/0x690 [ 219.719171][ T5760] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 219.725165][ T5760] bpf_trace_run3+0x231/0x440 [ 219.730362][ T5760] __traceiter_timer_start+0x79/0xd0 [ 219.736174][ T5760] enqueue_timer+0x440/0x600 [ 219.741292][ T5760] __mod_timer+0x92b/0xee0 [ 219.746227][ T5760] sk_reset_timer+0x1f/0xb0 [ 219.751260][ T5760] tipc_sk_finish_conn+0x162/0x810 [ 219.756903][ T5760] tipc_socketpair+0x253/0x4a0 [ 219.762191][ T5760] __sys_socketpair+0x402/0x700 [ 219.767566][ T5760] __x64_sys_socketpair+0x97/0xb0 [ 219.773115][ T5760] do_syscall_64+0x3b/0xb0 [ 219.778048][ T5760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.784470][ T5760] [ 219.784470][ T5760] other info that might help us debug this: [ 219.784470][ T5760] [ 219.794690][ T5760] Possible unsafe locking scenario: [ 219.794690][ T5760] [ 219.802130][ T5760] CPU0 CPU1 [ 219.807491][ T5760] ---- ---- [ 219.812847][ T5760] lock(&base->lock); [ 219.816921][ T5760] lock(krc.lock); [ 219.823248][ T5760] lock(&base->lock); [ 219.829840][ T5760] lock(krc.lock); [ 219.833653][ T5760] [ 219.833653][ T5760] *** DEADLOCK *** [ 219.833653][ T5760] [ 219.841788][ T5760] 2 locks held by syz.4.362/5760: [ 219.846805][ T5760] #0: ffff8880b8e28358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 219.856127][ T5760] #1: ffffffff8d32b0c0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0x146/0x440 [ 219.865540][ T5760] [ 219.865540][ T5760] stack backtrace: [ 219.871436][ T5760] CPU: 0 PID: 5760 Comm: syz.4.362 Not tainted 6.1.128-syzkaller #0 [ 219.879413][ T5760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 219.889473][ T5760] Call Trace: [ 219.892768][ T5760] [ 219.895698][ T5760] dump_stack_lvl+0x1e3/0x2cb [ 219.900381][ T5760] ? nf_tcp_handle_invalid+0x642/0x642 [ 219.905929][ T5760] ? print_circular_bug+0x12b/0x1a0 [ 219.911128][ T5760] check_noncircular+0x2fa/0x3b0 [ 219.916067][ T5760] ? add_chain_block+0x850/0x850 [ 219.921090][ T5760] ? lockdep_lock+0x11f/0x2a0 [ 219.925772][ T5760] ? __lock_acquire+0x125b/0x1f80 [ 219.930802][ T5760] ? _find_first_zero_bit+0xd0/0x100 [ 219.936094][ T5760] validate_chain+0x1661/0x5950 [ 219.940950][ T5760] ? __stack_depot_save+0x3f5/0x470 [ 219.946150][ T5760] ? reacquire_held_locks+0x660/0x660 [ 219.951524][ T5760] ? do_raw_spin_unlock+0x137/0x8a0 [ 219.956724][ T5760] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 219.962629][ T5760] ? _raw_spin_unlock+0x40/0x40 [ 219.967483][ T5760] ? stack_trace_save+0x113/0x1c0 [ 219.972516][ T5760] ? stack_trace_snprint+0xe0/0xe0 [ 219.977727][ T5760] ? mark_lock+0x9a/0x340 [ 219.982070][ T5760] __lock_acquire+0x125b/0x1f80 [ 219.986949][ T5760] lock_acquire+0x1f8/0x5a0 [ 219.991480][ T5760] ? kvfree_call_rcu+0x1b2/0x8c0 [ 219.996430][ T5760] ? read_lock_is_recursive+0x10/0x10 [ 220.001827][ T5760] ? __phys_addr+0xb6/0x170 [ 220.006348][ T5760] _raw_spin_lock+0x2a/0x40 [ 220.010860][ T5760] ? kvfree_call_rcu+0x1b2/0x8c0 [ 220.015800][ T5760] kvfree_call_rcu+0x1b2/0x8c0 [ 220.020572][ T5760] ? rcu_leak_callback+0x10/0x10 [ 220.025512][ T5760] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 220.031410][ T5760] ? _raw_spin_unlock+0x40/0x40 [ 220.036270][ T5760] ? longest_prefix_match+0x318/0x640 [ 220.041660][ T5760] trie_delete_elem+0x53a/0x690 [ 220.046524][ T5760] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 220.051982][ T5760] bpf_trace_run3+0x231/0x440 [ 220.056660][ T5760] ? bpf_trace_run3+0x146/0x440 [ 220.061511][ T5760] ? do_raw_spin_unlock+0x137/0x8a0 [ 220.066710][ T5760] ? bpf_trace_run2+0x410/0x410 [ 220.071565][ T5760] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 220.077462][ T5760] ? _raw_spin_unlock+0x40/0x40 [ 220.082322][ T5760] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 220.087786][ T5760] ? __bpf_trace_timer_class+0x20/0x20 [ 220.093258][ T5760] __traceiter_timer_start+0x79/0xd0 [ 220.098553][ T5760] enqueue_timer+0x440/0x600 [ 220.103155][ T5760] __mod_timer+0x92b/0xee0 [ 220.107576][ T5760] ? mod_timer_pending+0x20/0x20 [ 220.112514][ T5760] ? net_generic+0x1f/0x230 [ 220.117109][ T5760] ? __lock_acquire+0x1f80/0x1f80 [ 220.122156][ T5760] ? aa_get_current_label+0x111/0x1d0 [ 220.127557][ T5760] sk_reset_timer+0x1f/0xb0 [ 220.132074][ T5760] tipc_sk_finish_conn+0x162/0x810 [ 220.137202][ T5760] tipc_socketpair+0x253/0x4a0 [ 220.141976][ T5760] ? bpf_lsm_socket_socketpair+0x5/0x10 [ 220.147531][ T5760] __sys_socketpair+0x402/0x700 [ 220.152396][ T5760] ? __ia32_sys_socket+0x80/0x80 [ 220.157338][ T5760] ? print_irqtrace_events+0x210/0x210 [ 220.162804][ T5760] ? syscall_enter_from_user_mode+0x2e/0x230 [ 220.168788][ T5760] __x64_sys_socketpair+0x97/0xb0 [ 220.173817][ T5760] do_syscall_64+0x3b/0xb0 [ 220.178235][ T5760] ? clear_bhb_loop+0x45/0xa0 [ 220.182919][ T5760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.188819][ T5760] RIP: 0033:0x7f1dc498cda9 [ 220.193237][ T5760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.212872][ T5760] RSP: 002b:00007f1dc5755038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 220.221310][ T5760] RAX: ffffffffffffffda RBX: 00007f1dc4ba5fa0 RCX: 00007f1dc498cda9 [ 220.229288][ T5760] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 220.237261][ T5760] RBP: 00007f1dc4a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 220.245242][ T5760] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 220.253220][ T5760] R13: 0000000000000000 R14: 00007f1dc4ba5fa0 R15: 00007fff2d819718 [ 220.261205][ T5760] [ 220.458691][ T5679] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.474006][ T5679] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.516637][ T5679] device bridge_slave_0 entered promiscuous mode [ 221.307183][ T4407] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.380310][ T4407] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.430238][ T4407] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.480488][ T4407] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.584782][ T4407] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.629569][ T4407] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.694442][ T4407] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.740106][ T4407] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.842094][ T4407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.879951][ T4407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.931878][ T4407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.002832][ T4407] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.062655][ T4407] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.103431][ T4407] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.160065][ T4407] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.199809][ T4407] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.304701][ T4407] tipc: Disabling bearer [ 222.311226][ T4407] tipc: Left network mode [ 222.316941][ T4407] tipc: Disabling bearer [ 222.322445][ T4407] tipc: Left network mode [ 222.327935][ T4407] tipc: Disabling bearer [ 222.333285][ T4407] tipc: Left network mode [ 222.338659][ T4407] tipc: Disabling bearer [ 222.344013][ T4407] tipc: Left network mode [ 222.879413][ T4407] device gretap1 left promiscuous mode [ 222.884970][ T4407] bridge0: port 1(gretap1) entered disabled state [ 222.900342][ T4407] device gretap1 left promiscuous mode [ 222.905993][ T4407] bridge0: port 3(gretap1) entered disabled state [ 222.917667][ T4407] device gretap1 left promiscuous mode [ 222.923752][ T4407] bridge0: port 3(gretap1) entered disabled state [ 223.615604][ T4407] device hsr_slave_0 left promiscuous mode [ 223.622520][ T4407] device hsr_slave_1 left promiscuous mode [ 223.629515][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.637165][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.644854][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.655344][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.665548][ T4407] device hsr_slave_0 left promiscuous mode [ 223.675737][ T4407] device hsr_slave_1 left promiscuous mode [ 223.683634][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.693149][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.702285][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.709990][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.717837][ T4407] device bridge_slave_1 left promiscuous mode [ 223.723990][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.731748][ T4407] device bridge_slave_0 left promiscuous mode [ 223.738014][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.747405][ T4407] device hsr_slave_0 left promiscuous mode [ 223.753489][ T4407] device hsr_slave_1 left promiscuous mode [ 223.759796][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.767401][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.774868][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.782439][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.790421][ T4407] device bridge_slave_1 left promiscuous mode [ 223.796820][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.804409][ T4407] device bridge_slave_0 left promiscuous mode [ 223.810634][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.820122][ T4407] device hsr_slave_0 left promiscuous mode [ 223.826273][ T4407] device hsr_slave_1 left promiscuous mode [ 223.832443][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.840005][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.847606][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.854992][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.862614][ T4407] device bridge_slave_1 left promiscuous mode [ 223.868795][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.876805][ T4407] device bridge_slave_0 left promiscuous mode [ 223.882949][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.891193][ T4407] device bridge_slave_0 left promiscuous mode [ 223.897490][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.908281][ T4407] device veth1_macvtap left promiscuous mode [ 223.914273][ T4407] device veth0_macvtap left promiscuous mode [ 223.920364][ T4407] device veth1_vlan left promiscuous mode [ 223.926814][ T4407] device veth1_macvtap left promiscuous mode [ 223.932798][ T4407] device veth0_macvtap left promiscuous mode [ 223.939016][ T4407] device veth1_vlan left promiscuous mode [ 223.944796][ T4407] device veth0_vlan left promiscuous mode [ 223.951156][ T4407] device veth1_macvtap left promiscuous mode [ 223.957437][ T4407] device veth0_macvtap left promiscuous mode [ 223.963464][ T4407] device veth1_vlan left promiscuous mode [ 223.969447][ T4407] device veth0_vlan left promiscuous mode [ 223.975707][ T4407] device veth1_macvtap left promiscuous mode [ 223.981751][ T4407] device veth0_macvtap left promiscuous mode [ 223.987882][ T4407] device veth1_vlan left promiscuous mode [ 223.993611][ T4407] device veth0_vlan left promiscuous mode [ 224.128901][ T4407] bond1 (unregistering): Released all slaves [ 224.291830][ T4407] team0 (unregistering): Port device team_slave_1 removed [ 224.312872][ T4407] team0 (unregistering): Port device team_slave_0 removed [ 224.333258][ T4407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.356347][ T4407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.394386][ T4407] bond0 (unregistering): Released all slaves [ 224.518274][ T4407] team0 (unregistering): Port device team_slave_1 removed [ 224.540848][ T4407] team0 (unregistering): Port device team_slave_0 removed [ 224.561366][ T4407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.584299][ T4407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.622942][ T4407] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 224.631536][ T4407] bond0 (unregistering): Released all slaves [ 224.681876][ T4407] bond2 (unregistering): Released all slaves [ 224.690864][ T4407] bond1 (unregistering): Released all slaves [ 224.760708][ T4407] team0 (unregistering): Port device team_slave_1 removed [ 224.783579][ T4407] team0 (unregistering): Port device team_slave_0 removed [ 224.803414][ T4407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.826031][ T4407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.865460][ T4407] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 224.873940][ T4407] bond0 (unregistering): Released all slaves [ 224.940860][ T4407] bond1 (unregistering): Released all slaves [ 225.012484][ T4407] team0 (unregistering): Port device team_slave_1 removed [ 225.035786][ T4407] team0 (unregistering): Port device team_slave_0 removed [ 225.057168][ T4407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.082275][ T4407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.120922][ T4407] bond0 (unregistering): Released all slaves [ 225.183222][ T4407] bond0 (unregistering): Released all slaves