last executing test programs: 4m6.556280089s ago: executing program 1 (id=3187): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_disconnect(r0) 4m4.322698484s ago: executing program 1 (id=3191): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 4m2.754715862s ago: executing program 1 (id=3194): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000b80), &(0x7f0000000bc0)=0x24) getpgrp(r1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000021c0)={{{@in6=@local, @in=@initdev}}, {{@in6=@private1}, 0x0, @in=@remote}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002300)={0x2020}, 0x2020) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 4m1.292111193s ago: executing program 1 (id=3196): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r6) prlimit64(0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "f1a1173fb9462d3509e67197f90be6e423ceb0ab4912f9f6a31854ec7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) open$dir(&(0x7f0000000080)='./file2\x00', 0x402080, 0x4) 3m59.339192873s ago: executing program 1 (id=3201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0xd) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88808, &(0x7f0000000580)={[{@errors_continue}, {}, {@dax_inode}, {@init_itable}], [{@dont_hash}, {@context={'context', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_gt}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0x1, 0x25b, &(0x7f00000006c0)="$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") sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ftruncate(r0, 0x9) socket(0x8, 0x4, 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r5, @ANYBLOB="2400030000000000000035557a9febffffffffffffff0000e60029eb799b3a0def32543fad0000bb5be4bd6db2"], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m56.573065672s ago: executing program 1 (id=3206): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000000400"/20, @ANYRES32, @ANYBLOB="00000000000000000000002fa42100f0464926df3f2781d7998672c9438875d95041f10a62c653513ce789e3bf0f518c321b088b7fccce3b788361000000000053c90000000000000900000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000001640)=ANY=[], 0x2, 0x216, &(0x7f0000001900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x80, &(0x7f0000000080)) socket$nl_audit(0x10, 0x3, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) io_setup(0xff, &(0x7f00000000c0)=0x0) io_submit(r4, 0x0, &(0x7f0000000640)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x141a82, 0x0) sendfile(r5, r5, 0x0, 0x4) io_destroy(r4) 3m38.521815275s ago: executing program 4 (id=3243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRESOCT=r3], &(0x7f0000000200)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r5, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, &(0x7f0000000040)='./file1\x00', 0x2) 3m36.575401993s ago: executing program 4 (id=3247): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@acl}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x23b8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 3m32.752030084s ago: executing program 4 (id=3254): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x4c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x2, 0x9, 0x1, 0xfffffffffffffffe, 0x10}, @map_fd={0x18, 0x7, 0x1, 0x0, r6}, @alu={0x4, 0x0, 0x9, 0xb, 0x3, 0x40, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}}}, 0xe) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x158, 0xc8, 0x8, 0x0, 0x5803, 0x268, 0x2e8, 0x2e8, 0x268, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) userfaultfd(0x801) 3m28.654146418s ago: executing program 4 (id=3261): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x12, r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) fcntl$lock(r1, 0x7, &(0x7f0000000180)) 3m26.911966913s ago: executing program 4 (id=3265): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@acl}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x23b8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 3m26.0977264s ago: executing program 4 (id=3267): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x11f25000) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000280)=@ethtool_sfeatures={0x24}}) 2m53.444027781s ago: executing program 3 (id=3322): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_sock_diag(0x10, 0x3, 0x4) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x10000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x8}, 0x1c, 0x0}}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x903, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m51.316371698s ago: executing program 3 (id=3326): io_setup(0x1000, &(0x7f0000000280)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(r1, &(0x7f0000000300)='./bus/file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xd, 0xb, 0xe5, 0x3ec, 0x100, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x90) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x150f, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000001b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x48, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x65}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xe}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xfa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x81) lstat(&(0x7f0000001b40)='./file0\x00', &(0x7f00000002c0)) io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x40, 0xffffffffffffffff, &(0x7f0000000100)="8485d4cc82a3b7b6b0cbfa031d2a9487327ad921037a4bbeae1299a25e3dc1679239fc7b5a61c77bb519f379382bacb12b43a27247d2ce1968618580412b092d10a5287ef989d626922b63254aff9472042be81a10c52f036120558c3e49088ac3fc86886e25113523990fbf4e8552fe1b172a0f0429056be4d426a5d10b5fcbbd0e234f0f9c848fa23bc95a3fe1462559ffcf091cfe74fafe0db8f059ee142335716381f4b27e259033d15e6483973c0de26ed0fae5b409c3", 0xb9, 0x6136a64e, 0x0, 0x2, r1}, &(0x7f00000001c0)) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x4000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0xfffffc98}]) 2m48.668253225s ago: executing program 3 (id=3327): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2m48.422720007s ago: executing program 3 (id=3329): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffb5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) syz_emit_ethernet(0xe, &(0x7f0000000340)={@local, @broadcast, @void, {@generic={0x883e}}}, 0x0) 2m48.216193767s ago: executing program 3 (id=3330): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb932"], 0xfdef) 1m40.159874619s ago: executing program 3 (id=3341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x17, 0x0, {0xf00}}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8001080}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="71c5fbc6eb2434cdf57aa919516b0b0ec09739912b18a0aa4a49746e17bcac51a553fdee8d2bf0ef03ee9e7022cfe8309395ba1ae54476aa71165984da92d511974bcb1aced8d44cbce9ad2d24f5fc8696ed97c0cd8fbeccb689f07d7553e0daefb98cfc2848c365b62cc3dae23f7cf34e9aaa022a7196a009d718ba51c04661eb075034b2f75f45010a96dd21308f8505e9dc41ea70705921ca2e13a5c7519c7d02d1f28fc165df7b6f0f39534ef5faf97c98899da0f910a5ce01ef264b2f446c5cda204826ad6d76be75b99d06697f4089976684d2d6ce7d38fa848c98ce2bbbc64f5ceede65c0c8e0f3bc3c62c4", @ANYRES16=r4, @ANYBLOB="08002dbd7000fddbdf25040000005000028008000100010000001c000380080001000002000008000200080000000800010001000000240003800800010001000100080001000900000008000100fcffffff0800010004000000040004004000078008000100ff0000000800010084010000080002009b5a00000800020007000000080002000900000008000100df0000000c00030003000000000000001c000980080002000800000008000100c101000008000100b6000000"], 0xc0}, 0x1, 0x0, 0x0, 0x84}, 0x400c054) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001200)={0x0, 0x100000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000c2fc0)={0x0, [], 0x5, "0a4929ed2f1886"}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000dfe90f55bd063caec365bef4d9af716ae7bc09518a00613729f48c1146fe84d132f57ffe158a7fe4bf8e2415263c3bc4c98b2c01dc513f96d6de84"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x2) readv(r9, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 18.397660154s ago: executing program 2 (id=3516): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x541b, 0x0) 16.554440557s ago: executing program 5 (id=3519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xd) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88808, &(0x7f0000000580)={[{@errors_continue}, {}, {@dax_inode}, {@init_itable}], [{@dont_hash}, {@context={'context', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_gt}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0x1, 0x25b, &(0x7f00000006c0)="$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") r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x8, 0x4, 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r4, @ANYBLOB="2400030000000000000035557a9febffffffffffffff0000e60029eb799b3a0def32543fad0000bb5be4bd6db2"], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 16.472703023s ago: executing program 2 (id=3520): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000200000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x1013a, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 14.615916295s ago: executing program 0 (id=3522): socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xb) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) 13.82238584s ago: executing program 2 (id=3523): creat(&(0x7f0000000140)='./file0\x00', 0x40) 13.771595504s ago: executing program 5 (id=3524): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00030c"], 0x0, 0x0}, 0x0) 13.556587058s ago: executing program 2 (id=3525): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x4, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x810, &(0x7f0000001180), 0x1, 0x523, &(0x7f0000000240)="$eJzs3e9rJGcdAPDvTLLX3F1qtipyFmyLrdwVvd1LY9so0lYQ9U1Bre9jTDYhZJMN2U29hKIp/gGCiAr63jeCf4BQCv4DIhT0vagoIld9qTeyOxNNsrvJkmyy183nA5N5np2Z5/s8Q3Z2fjw8E8CV9UxEvBYRExHxfETMFJ+nxbTQzuzn673/4K2l9pRElr3xjySS4rODstr5yYi4mW8SUxHxja9EfDvpjtvc3VtfrNdr20W+2trYqjZ39+6ubSyu1lZrm3Nzsy/Nvzz/4vy9rJCvuH+2dpYj4pUv/eXHP/jFl1955zPf+ePC3+58t12tL3wsr3dELJ2t5JPlZZc6++JAex9tX0SwEWm3pzQx6loAADCI9jn+hyPik53z/5mY6JzNAQAAAOMke3U6/p1EZAAAAMDYSiNiOpK0UvQFmI40rVTyPrwfjRtpvdFsfXqlsbO53F4WUY5SurJWr90r+gqXo5S087NFH9uD/AvH8nMR8URE/GjmeidfWWrUl0d98wMAAACuiJtPH73+/9dM2kkDAAAAY6bcNwMAAACMC5f8AAAAMP5c/wMAAMBY+9rrr7en7OA93stv7u6sN968u1xrrlc2dpYqS43trcpqo7HaGbNv47Ty6o3G1mdjc+d+tVVrtqrN3b2FjcbOZmth7cgrsAEAAIBL9MTT7/4hiYj9z1/vTFGMAwhwxJ9HXQFgmCZGXQFgZCZHXQFgZEqnruEIAeMuOWV5d+ed/F5h/PZi6gMAAAzf7Y93P/+/Viw7/d4A8EGmrw8AXD2e7sHVVTprD8Bbw64JMCofymeP9Vved/COPs//f34ond9jyLIzVw4AABiK6c6UpJXiPH060rRSiXi881qAUrKyVq/dK64Pfj9Teqydn+1smZzaZxgAAAAAAAAAAAAAAAAAAAAAAAAAyGVZEhkAAAAw1iLSvyad0fwjbs88N3307sCxt3797I2f3F9stbZnI659NX+r17WIaP20+PyFzCsBAAAA4BGQX6cX89lR1wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAcfP+g7eWDqbLjPv3L0ZEuVf8yZjqzKeiFBE3/pnE5KHtkoiYGEL8/bcj4lav+Ek8zLKsXNSiV/zrFxy/3Nk1veOnEXFzCPHhKnu3ffx5rdf3L41nOvPe37/JYjqv/se/9H/Hv4k+x5/Hj+X7efK9X1X7xn874snJ3sefg/hJHv9IiHbm2QHb+K1v7u31XHCoyF7xD8eqtja2qs3dvbtrG4urtdXa5tzc7EvzL8+/OH+vurJWrxV/e4b54Sd+/fCk9t/oE798tP1d+/+5gVqfxX/eu//gI3mm1Cv+nWd7//7e6hM/LX77PlWk28tvH6T38/RhT/3yd0+d1P7lPu2fOqX9dwZqf3zu+a9//089l3TtDQDgMjR399YX6/Xa9gmJqQHWueTEq49GNYaYiEejGqNKZN/L/x/PV845N+9KZOfZfDKGUI1rXd/TiThrgUnEfrusAf8hAQCAMfP/k/6TniABAAAAAAAAAAAAAAAAAAAAF2mAwcPe+U10DTk2FREDjz12POb+aJoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCi/wYAAP//9G7RaA==") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r4, 0x0, 0xf800) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xc00000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 11.725054863s ago: executing program 2 (id=3526): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000ecff0000000000000000000000009d59e68a000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="dc9515b7d932f447845bbe795d0a031aadd2f1b500388679a6cb69f0c7cba00e4d3d30b8ce8de0da95aae6b416b852dabdc325a40c4f083a9cef80f71e1609eb060091c5409523358e318e3c73c6fda0cc88aade5bdf61aba730ea3d62335b4c6eecaba9dbabc7b00c04568b6598b71ce028e7880bfb653a173696ad9336d4bd364c2f3bbd17fabb59df4c70"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@link_local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x240) 11.587933065s ago: executing program 0 (id=3527): recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 11.435982897s ago: executing program 0 (id=3528): r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="060000000500000000cfcc288f3a0539f0f54b746e0000100000000060e188cbcc59488f5291b6bb27acb7ba19ed9614bee63ef7db206759c9f16078de3df1f7ed6b1053f139d6625f3991a8ea8c34ad719a2f97c8a8ef1dc85b6a566edd8e7f4feb8a7799c00de1b49a7e5d0a035fe43eac56562dfd93fa8d24475594cab822a449c05d2325db2e1e419ccf1579e26beb9ccb371d5dfcea52b7b9e8ee7571b672b8d5a3cdde4d9607e6e431441b1407b82d7d5bb1b0e32fe3327759", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x1d, r7}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}}, {@in6=@loopback, 0x0, 0x32}, @in=@local, {}, {0x0, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 10.04847753s ago: executing program 5 (id=3529): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c00)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 7.086651777s ago: executing program 5 (id=3530): syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000f78500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000d1088500000085000000b7000000000000009500000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = dup(r6) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000300)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x3, [], [0x72cb]}}) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x8048000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.971303977s ago: executing program 0 (id=3531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff44, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) tgkill(r5, r5, 0x12) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r6, 0x0, 0x0, 0x7fff) creat(0x0, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r7, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002dc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000002f00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002e40)={0x1c, r9, 0x1, 0x2, 0xfffffffd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 1.877238576s ago: executing program 2 (id=3532): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000001200), 0x12) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) 1.463275077s ago: executing program 5 (id=3533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xd) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88808, &(0x7f0000000580)={[{@errors_continue}, {}, {@dax_inode}, {@init_itable}], [{@dont_hash}, {@context={'context', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_gt}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0x1, 0x25b, &(0x7f00000006c0)="$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") r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x8, 0x4, 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r4, @ANYBLOB="2400030000000000000035557a9febffffffffffffff0000e60029eb799b3a0def32543fad0000bb5be4bd6db2"], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 268.724916ms ago: executing program 0 (id=3534): creat(&(0x7f0000000140)='./file0\x00', 0x40) 267.388714ms ago: executing program 5 (id=3535): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0x4, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x810, &(0x7f0000001180), 0x1, 0x523, &(0x7f0000000240)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r4, 0x0, 0xf800) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xc00000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 0s ago: executing program 0 (id=3536): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, 0x0, &(0x7f00000000c0)=""/109}, 0x20) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000004c0)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x10) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r7, 0x2) kernel console output (not intermixed with test programs): .276455][T26446] loop5: detected capacity change from 0 to 1024 [ 3203.286606][T26444] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 3203.293480][T26443] FAT-fs (loop3): Directory bread(block 66) failed [ 3203.297573][T26444] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 3203.318898][T26444] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 3203.335164][ T29] audit: type=1326 audit(1726387012.728:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26403 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba5d7def9 code=0x7ffc0000 [ 3203.344566][T26446] EXT4-fs: Ignoring removed orlov option [ 3203.367460][T26444] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 3203.378696][T26444] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 3203.389812][T26444] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 3203.404166][T26443] FAT-fs (loop3): Directory bread(block 67) failed [ 3203.440415][ T29] audit: type=1326 audit(1726387012.728:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26403 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba5d7def9 code=0x7ffc0000 [ 3203.466021][T26443] FAT-fs (loop3): Directory bread(block 68) failed [ 3203.472861][T26443] FAT-fs (loop3): Directory bread(block 69) failed [ 3203.570817][T26446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3203.596514][T26443] FAT-fs (loop3): Directory bread(block 70) failed [ 3203.829756][T26443] FAT-fs (loop3): Directory bread(block 71) failed [ 3204.101372][ T29] audit: type=1326 audit(1726387012.728:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26403 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2ba5d7def9 code=0x7ffc0000 [ 3204.237909][T26443] FAT-fs (loop3): Directory bread(block 72) failed [ 3204.426362][T26443] FAT-fs (loop3): Directory bread(block 73) failed [ 3204.513714][ T29] audit: type=1326 audit(1726387012.728:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26403 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba5d7def9 code=0x7ffc0000 [ 3204.682868][T25792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3204.710693][ T29] audit: type=1326 audit(1726387012.728:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26403 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba5d7def9 code=0x7ffc0000 [ 3204.889197][ T29] audit: type=1326 audit(1726387012.758:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26403 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ba5d7def9 code=0x7ffc0000 [ 3204.936652][T26458] loop0: detected capacity change from 0 to 128 [ 3205.761784][ T29] audit: type=1326 audit(1726387012.758:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26403 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba5d7def9 code=0x7ffc0000 [ 3205.838615][ T29] audit: type=1326 audit(1726387012.758:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26403 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba5d7def9 code=0x7ffc0000 [ 3205.916304][ T29] audit: type=1326 audit(1726387012.758:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26403 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ba5d7def9 code=0x7ffc0000 [ 3206.062571][ T29] audit: type=1326 audit(1726387012.788:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26403 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba5d7def9 code=0x7ffc0000 [ 3206.066199][T26467] loop5: detected capacity change from 0 to 128 [ 3206.159735][ T5298] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 3206.207013][T26467] EXT4-fs (loop5): Test dummy encryption mode enabled [ 3206.322824][T26467] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 3206.427870][T26467] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3206.436767][ T5298] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3206.514405][ T5298] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3206.580385][ T5298] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 3206.632033][T26473] ptrace attach of "./syz-executor exec"[25788] was attempted by "./syz-executor exec"[26473] [ 3206.653344][ T5298] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3206.690770][ T5298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3206.716918][T26462] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3206.765879][ T5298] hub 5-1:1.0: bad descriptor, ignoring hub [ 3206.839399][ T5298] hub 5-1:1.0: probe with driver hub failed with error -5 [ 3206.874353][T26476] loop3: detected capacity change from 0 to 512 [ 3206.918372][ T5298] cdc_wdm 5-1:1.0: skipping garbage [ 3206.998031][ T5298] cdc_wdm 5-1:1.0: skipping garbage [ 3207.013995][T26476] EXT4-fs (loop3): Test dummy encryption mode enabled [ 3207.587766][ T5298] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 3207.604892][ T5298] cdc_wdm 5-1:1.0: Unknown control protocol [ 3207.647065][T24721] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 3207.690123][T25792] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 3207.695565][T26475] loop0: detected capacity change from 0 to 2048 [ 3207.779546][ T5298] usb 5-1: USB disconnect, device number 80 [ 3207.790884][T26476] EXT4-fs (loop3): 1 truncate cleaned up [ 3207.845683][T26476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3207.853923][T26475] EXT4-fs: Ignoring removed mblk_io_submit option [ 3207.882692][T26475] ext4: Unknown parameter 'pcr' [ 3209.091415][T25944] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3209.255391][T25804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3209.459513][T26493] loop4: detected capacity change from 0 to 2048 [ 3209.682564][T26493] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 3209.857453][T26493] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3209.982871][T26499] xt_addrtype: ipv6 does not support BROADCAST matching [ 3210.025620][T24966] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 3210.062023][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 3210.072329][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 3212.120050][T26514] syz.3.3229[26514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3212.121008][T26514] syz.3.3229[26514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3212.651880][T26513] loop0: detected capacity change from 0 to 1024 [ 3212.844444][T26513] EXT4-fs: Ignoring removed orlov option [ 3213.847504][T26513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3214.585129][T26536] loop5: detected capacity change from 0 to 256 [ 3214.595226][T25788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3214.746048][T26536] FAT-fs (loop5): Directory bread(block 64) failed [ 3214.793493][T26536] FAT-fs (loop5): Directory bread(block 65) failed [ 3214.800238][T26536] FAT-fs (loop5): Directory bread(block 66) failed [ 3214.853312][T26536] FAT-fs (loop5): Directory bread(block 67) failed [ 3214.874037][T26536] FAT-fs (loop5): Directory bread(block 68) failed [ 3214.943417][T26536] FAT-fs (loop5): Directory bread(block 69) failed [ 3214.974464][T26536] FAT-fs (loop5): Directory bread(block 70) failed [ 3215.013341][T26536] FAT-fs (loop5): Directory bread(block 71) failed [ 3215.020381][T26536] FAT-fs (loop5): Directory bread(block 72) failed [ 3215.029122][T10900] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3215.042545][T10900] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3215.053399][T26536] FAT-fs (loop5): Directory bread(block 73) failed [ 3215.063695][T10900] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3215.088024][T10900] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3215.098967][T10900] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3215.106982][T10900] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3215.266232][T24966] Bluetooth: hci0: sending frame failed (-49) [ 3215.285494][T10900] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 3215.728298][T12328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3215.938752][T26555] loop3: detected capacity change from 0 to 512 [ 3216.149889][T26555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3216.179295][T26555] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3216.315305][T26564] serio: Serial port ptm1 [ 3217.240056][T24966] Bluetooth: hci4: command tx timeout [ 3217.697690][T26561] xt_addrtype: ipv6 does not support BROADCAST matching [ 3217.712257][T24966] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 3217.787381][T26574] loop2: detected capacity change from 0 to 128 [ 3217.859081][T26574] EXT4-fs (loop2): Test dummy encryption mode enabled [ 3218.021751][T26574] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 3218.065454][T26574] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3218.079590][T25944] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3218.285593][T12328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3218.682197][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 3218.682222][ T29] audit: type=1326 audit(1726387028.068:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26573 comm="syz.2.3241" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a1c17def9 code=0x0 [ 3219.092004][T12328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3220.131727][T24966] Bluetooth: hci4: command tx timeout [ 3220.589324][T12328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3221.652938][T26605] loop4: detected capacity change from 0 to 1024 [ 3221.667957][T26610] loop3: detected capacity change from 0 to 512 [ 3221.711452][T26607] loop5: detected capacity change from 0 to 2048 [ 3221.883435][T26610] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 3221.899358][T26537] chnl_net:caif_netlink_parms(): no params data found [ 3221.977540][T26607] EXT4-fs error (device loop5): __ext4_fill_super:5435: inode #2: comm syz.5.3252: casefold flag without casefold feature [ 3222.014392][T26605] EXT4-fs: Ignoring removed orlov option [ 3222.073363][T26607] EXT4-fs (loop5): get root inode failed [ 3222.079072][T26607] EXT4-fs (loop5): mount failed [ 3222.202955][T24966] Bluetooth: hci4: command tx timeout [ 3222.823593][T12328] bridge_slave_1: left allmulticast mode [ 3222.861359][T12328] bridge_slave_1: left promiscuous mode [ 3222.923484][T12328] bridge0: port 2(bridge_slave_1) entered disabled state [ 3223.016513][T26605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3223.115649][T12328] bridge_slave_0: left allmulticast mode [ 3223.155163][T12328] bridge_slave_0: left promiscuous mode [ 3223.161200][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 3223.326925][T26621] loop0: detected capacity change from 0 to 512 [ 3223.924799][T26621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3224.062644][T26621] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3224.201366][T25796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3224.244377][T24966] Bluetooth: hci4: command tx timeout [ 3225.131899][ T29] audit: type=1326 audit(1726387034.518:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3225.345944][ T29] audit: type=1326 audit(1726387034.568:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3225.436061][T25804] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 3225.515450][T25788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3225.569677][ T29] audit: type=1326 audit(1726387034.598:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3225.766091][ T29] audit: type=1326 audit(1726387034.598:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3225.939583][ T29] audit: type=1326 audit(1726387034.608:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3226.116946][ T29] audit: type=1326 audit(1726387034.618:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3226.243362][ T29] audit: type=1326 audit(1726387034.618:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3226.365952][T26648] xt_addrtype: ipv6 does not support BROADCAST matching [ 3226.484540][T24966] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 3226.725723][ T29] audit: type=1326 audit(1726387034.618:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3228.258295][ T29] audit: type=1326 audit(1726387034.618:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3228.413484][ T29] audit: type=1326 audit(1726387034.618:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26630 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3228.948202][T26667] loop5: detected capacity change from 0 to 128 [ 3229.523253][T12327] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 3229.793426][T12327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3229.814994][T12327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3229.843564][T12327] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3229.853008][T12327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3229.867906][T12327] usb 3-1: config 0 descriptor?? [ 3230.155911][T26672] loop4: detected capacity change from 0 to 1024 [ 3230.215305][T26672] EXT4-fs: Ignoring removed orlov option [ 3230.289068][T12327] hid (null): bogus close delimiter [ 3230.398763][T26672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3230.434911][T26675] loop3: detected capacity change from 0 to 1024 [ 3230.500436][T26675] ext4: Bad value for 'sb' [ 3230.809086][T12327] usb 3-1: string descriptor 0 read error: -71 [ 3230.823838][T12327] uclogic 0003:256C:006D.009E: failed retrieving string descriptor #200: -71 [ 3230.826200][T25796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3230.832804][T12327] uclogic 0003:256C:006D.009E: failed retrieving pen parameters: -71 [ 3230.863150][T12327] uclogic 0003:256C:006D.009E: failed probing pen v2 parameters: -71 [ 3230.872286][T12327] uclogic 0003:256C:006D.009E: failed probing parameters: -71 [ 3230.883004][T12327] uclogic 0003:256C:006D.009E: probe with driver uclogic failed with error -71 [ 3230.935430][T12327] usb 3-1: USB disconnect, device number 28 [ 3231.039290][T26680] loop3: detected capacity change from 0 to 256 [ 3231.095698][T26680] vfat: Bad value for 'time_offset' [ 3231.322678][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 3231.322701][ T29] audit: type=1800 audit(1726387040.708:376): pid=26683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3263" name="bus" dev="loop5" ino=1049396 res=0 errno=0 [ 3231.588286][T26687] loop2: detected capacity change from 0 to 512 [ 3231.765064][T26687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3231.852083][T26687] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 3232.077887][T25804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3232.279719][T12328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3232.355984][T12328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3232.386058][T12328] bond0 (unregistering): Released all slaves [ 3235.789329][T26537] bridge0: port 1(bridge_slave_0) entered blocking state [ 3235.856274][T26537] bridge0: port 1(bridge_slave_0) entered disabled state [ 3235.899854][T26537] bridge_slave_0: entered allmulticast mode [ 3235.925148][T26537] bridge_slave_0: entered promiscuous mode [ 3236.029245][T26537] bridge0: port 2(bridge_slave_1) entered blocking state [ 3236.084720][T26537] bridge0: port 2(bridge_slave_1) entered disabled state [ 3238.763279][T26725] loop5: detected capacity change from 0 to 512 [ 3238.779599][T26537] bridge_slave_1: entered allmulticast mode [ 3238.835081][T26537] bridge_slave_1: entered promiscuous mode [ 3239.027285][T26725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 3239.040156][T26725] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3239.339612][T12328] hsr_slave_0: left promiscuous mode [ 3239.385006][T25792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 3239.472690][T12328] hsr_slave_1: left promiscuous mode [ 3239.500070][T12328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3239.537611][T12328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3239.554905][T12328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3239.635843][T12328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3241.000419][T12328] veth1_macvtap: left promiscuous mode [ 3241.073351][T12328] veth0_macvtap: left promiscuous mode [ 3241.109740][T12328] veth1_vlan: left promiscuous mode [ 3241.139998][T12328] veth0_vlan: left promiscuous mode [ 3241.349973][T26766] loop2: detected capacity change from 0 to 16 [ 3241.416138][T26766] erofs: (device loop2): mounted with root inode @ nid 36. [ 3241.448636][T10900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3241.467397][T10900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3241.477141][T10900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3241.491641][T10900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3241.500131][T10900] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3241.515633][T10900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3243.042468][T10900] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3243.062331][T10900] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3243.121679][T10900] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3243.130531][T10900] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3243.144351][T10900] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 3243.153499][T10900] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3243.628163][T24966] Bluetooth: hci0: command tx timeout [ 3245.216758][T24966] Bluetooth: hci7: command tx timeout [ 3245.487088][T12328] team0 (unregistering): Port device team_slave_1 removed [ 3245.662844][T12328] team0 (unregistering): Port device team_slave_0 removed [ 3245.699812][T24966] Bluetooth: hci0: command tx timeout [ 3247.303391][T24966] Bluetooth: hci7: command tx timeout [ 3247.472221][T26537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3247.765881][T24966] Bluetooth: hci0: command tx timeout [ 3247.936338][T26537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3249.075064][T26537] team0: Port device team_slave_0 added [ 3249.373421][T24966] Bluetooth: hci7: command tx timeout [ 3249.584130][T26537] team0: Port device team_slave_1 added [ 3249.843447][T24966] Bluetooth: hci0: command tx timeout [ 3250.456307][T26537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3250.465077][T26537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3250.506133][T26537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3250.627082][T26537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3250.649698][T26537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3250.813533][T26537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3251.444380][T20817] Bluetooth: hci7: command tx timeout [ 3251.481950][T26537] hsr_slave_0: entered promiscuous mode [ 3251.499875][T26537] hsr_slave_1: entered promiscuous mode [ 3251.521755][T26537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3251.530574][T26537] Cannot create hsr debugfs directory [ 3251.671347][T26776] chnl_net:caif_netlink_parms(): no params data found [ 3251.709819][T26767] chnl_net:caif_netlink_parms(): no params data found [ 3251.757082][T26823] loop2: detected capacity change from 0 to 512 [ 3251.818725][T26823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3251.843637][T26823] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3252.058165][T25804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3252.975925][ T54] Bluetooth: hci6: command 0x0406 tx timeout [ 3253.012060][T20817] Bluetooth: hci1: command 0x0406 tx timeout [ 3253.431277][T12328] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3253.474072][T26845] loop3: detected capacity change from 0 to 16 [ 3253.511533][T26845] erofs: (device loop3): mounted with root inode @ nid 36. [ 3254.229217][T12328] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3254.710029][T12328] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3255.602168][T26776] bridge0: port 1(bridge_slave_0) entered blocking state [ 3255.655478][T26776] bridge0: port 1(bridge_slave_0) entered disabled state [ 3255.663504][T26776] bridge_slave_0: entered allmulticast mode [ 3255.671563][T26776] bridge_slave_0: entered promiscuous mode [ 3255.702948][T26776] bridge0: port 2(bridge_slave_1) entered blocking state [ 3255.713762][T26776] bridge0: port 2(bridge_slave_1) entered disabled state [ 3255.729602][T26776] bridge_slave_1: entered allmulticast mode [ 3255.761862][T26776] bridge_slave_1: entered promiscuous mode [ 3256.852605][T12328] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3257.186394][T26767] bridge0: port 1(bridge_slave_0) entered blocking state [ 3257.203412][T26767] bridge0: port 1(bridge_slave_0) entered disabled state [ 3257.221229][T26767] bridge_slave_0: entered allmulticast mode [ 3257.242570][T26767] bridge_slave_0: entered promiscuous mode [ 3257.541253][T26776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3257.573844][T26767] bridge0: port 2(bridge_slave_1) entered blocking state [ 3257.583595][T26767] bridge0: port 2(bridge_slave_1) entered disabled state [ 3257.598781][T26767] bridge_slave_1: entered allmulticast mode [ 3257.616391][T26767] bridge_slave_1: entered promiscuous mode [ 3258.084124][T26776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3259.342364][T26767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3259.510254][ T29] audit: type=1107 audit(1726387068.898:377): pid=26896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 3259.605360][T26901] loop5: detected capacity change from 0 to 16 [ 3259.624530][T26901] erofs: (device loop5): mounted with root inode @ nid 36. [ 3259.891893][T26776] team0: Port device team_slave_0 added [ 3259.909572][T26767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3260.175392][T26776] team0: Port device team_slave_1 added [ 3261.622597][T26915] loop2: detected capacity change from 0 to 512 [ 3261.663512][T26915] EXT4-fs (loop2): Test dummy encryption mode enabled [ 3261.664792][T26776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3261.696880][T26776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3261.724286][T26915] EXT4-fs error (device loop2): __ext4_iget:4985: inode #11: block 1: comm syz.2.3317: invalid block [ 3261.736709][T26915] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3317: couldn't read orphan inode 11 (err -117) [ 3261.752845][T26915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3261.788547][T26776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3261.932810][T26767] team0: Port device team_slave_0 added [ 3261.976910][T26767] team0: Port device team_slave_1 added [ 3262.080405][T26776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3262.531069][T26776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3262.660209][T26776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3262.960310][T25804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3263.161731][T12328] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3263.242816][T26928] loop2: detected capacity change from 0 to 512 [ 3263.289373][T26928] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 3263.411651][T26767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3263.489067][T26767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3263.812600][T26767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3264.244741][T26933] overlayfs: failed to resolve './file1': -2 [ 3264.526078][T26938] syz.5.3323[26938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3264.526459][T26938] syz.5.3323[26938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3264.951635][ T29] audit: type=1326 audit(1726387074.338:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.5.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3265.103288][ T29] audit: type=1326 audit(1726387074.338:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.5.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3265.138871][T12328] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3265.277483][T26767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3265.278212][T26945] loop2: detected capacity change from 0 to 16 [ 3265.285101][T26767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3265.285148][T26767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3265.346779][T26945] erofs: (device loop2): mounted with root inode @ nid 36. [ 3265.441733][T26776] hsr_slave_0: entered promiscuous mode [ 3265.483495][T11787] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 3265.511467][T26776] hsr_slave_1: entered promiscuous mode [ 3265.531841][T26776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3265.555288][T26776] Cannot create hsr debugfs directory [ 3265.856933][T11787] usb 6-1: Using ep0 maxpacket: 32 [ 3265.869359][T11787] usb 6-1: config index 0 descriptor too short (expected 18212, got 36) [ 3265.880544][T12328] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3265.891514][T11787] usb 6-1: config 13 has too many interfaces: 93, using maximum allowed: 32 [ 3267.420238][T11787] usb 6-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 3267.430952][T11787] usb 6-1: config 13 has 0 interfaces, different from the descriptor's value: 93 [ 3267.445308][T26950] loop3: detected capacity change from 0 to 256 [ 3267.656524][T26767] hsr_slave_0: entered promiscuous mode [ 3267.697562][T26767] hsr_slave_1: entered promiscuous mode [ 3267.730109][T26767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3267.773524][T26767] Cannot create hsr debugfs directory [ 3267.856977][T11787] usb 6-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 3267.866500][T11787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3268.089937][T11787] usb 6-1: string descriptor 0 read error: -71 [ 3268.120510][T11787] usb 6-1: USB disconnect, device number 65 [ 3268.249781][T12328] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3268.520205][T26537] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3268.642983][T26537] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3268.820334][T26537] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3268.852248][T26537] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3269.730576][T26971] loop2: detected capacity change from 0 to 512 [ 3269.749416][T26971] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 3270.406169][T26978] loop2: detected capacity change from 0 to 16 [ 3270.437050][T26978] erofs: (device loop2): mounted with root inode @ nid 36. [ 3270.818123][T26983] loop5: detected capacity change from 0 to 128 [ 3271.369961][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 3271.376898][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 3273.271538][T24966] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3273.285293][T24966] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3273.295430][T24966] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3273.339512][T24966] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3273.363724][T24966] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3273.382257][T24966] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3275.551168][T24966] Bluetooth: hci3: command tx timeout [ 3277.603306][T24966] Bluetooth: hci3: command tx timeout [ 3279.074097][T12328] bridge_slave_1: left allmulticast mode [ 3279.079868][T12328] bridge_slave_1: left promiscuous mode [ 3279.099655][T12328] bridge0: port 2(bridge_slave_1) entered disabled state [ 3279.164340][T12328] bridge_slave_0: left allmulticast mode [ 3279.170090][T12328] bridge_slave_0: left promiscuous mode [ 3279.200163][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 3279.255482][T12328] bridge_slave_1: left allmulticast mode [ 3279.261323][T12328] bridge_slave_1: left promiscuous mode [ 3279.318508][T10900] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3279.323634][T12328] bridge0: port 2(bridge_slave_1) entered disabled state [ 3279.344765][T10900] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3279.359865][T10900] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3279.384500][T12328] bridge_slave_0: left allmulticast mode [ 3279.413389][T12328] bridge_slave_0: left promiscuous mode [ 3279.420327][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 3279.452160][T10900] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3279.462904][T10900] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3279.470896][T10900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3279.689469][T24966] Bluetooth: hci3: command tx timeout [ 3281.088153][T12328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3281.089682][T10900] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3281.109686][T10900] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3281.120064][T10900] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3281.120313][T12328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3281.134574][T10900] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3281.147001][T10900] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3281.157051][T10900] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3281.170377][T12328] bond0 (unregistering): Released all slaves [ 3281.628769][T24966] Bluetooth: hci5: command tx timeout [ 3281.706002][T12328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3281.719734][T12328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3281.731522][T12328] bond0 (unregistering): Released all slaves [ 3281.766179][T26992] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3340'. [ 3281.773393][T24966] Bluetooth: hci3: command tx timeout [ 3283.203967][T24966] Bluetooth: hci2: command tx timeout [ 3283.408747][T27018] loop5: detected capacity change from 0 to 512 [ 3283.461779][T27018] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 3283.766601][T24966] Bluetooth: hci5: command tx timeout [ 3284.628279][T26767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3284.667307][T26767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3284.917169][T12328] hsr_slave_0: left promiscuous mode [ 3284.940205][T12328] hsr_slave_1: left promiscuous mode [ 3284.952738][T27039] loop5: detected capacity change from 0 to 256 [ 3284.968435][T12328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3284.982509][T12328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3284.994800][T12328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3285.002787][T12328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3285.035121][T27039] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 3285.092827][T12328] hsr_slave_0: left promiscuous mode [ 3285.114424][T12328] hsr_slave_1: left promiscuous mode [ 3285.134753][T12328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3285.153355][T12328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3285.175118][T12328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3285.182603][T12328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3285.287135][T24966] Bluetooth: hci2: command tx timeout [ 3285.304611][T12328] veth1_macvtap: left promiscuous mode [ 3285.310342][T12328] veth0_macvtap: left promiscuous mode [ 3285.316621][T12328] veth1_vlan: left promiscuous mode [ 3285.323745][T12328] veth0_vlan: left promiscuous mode [ 3285.342856][T12328] veth1_macvtap: left promiscuous mode [ 3285.348588][T12328] veth0_macvtap: left promiscuous mode [ 3285.355656][T12328] veth1_vlan: left promiscuous mode [ 3285.361060][T12328] veth0_vlan: left promiscuous mode [ 3285.848115][T24966] Bluetooth: hci5: command tx timeout [ 3287.120875][T12328] team0 (unregistering): Port device team_slave_1 removed [ 3287.322980][T12328] team0 (unregistering): Port device team_slave_0 removed [ 3287.363636][T24966] Bluetooth: hci2: command tx timeout [ 3287.963244][T24966] Bluetooth: hci5: command tx timeout [ 3289.466235][T24966] Bluetooth: hci2: command tx timeout [ 3289.905663][T12328] team0 (unregistering): Port device team_slave_1 removed [ 3290.050932][T12328] team0 (unregistering): Port device team_slave_0 removed [ 3291.222695][T26767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3291.302465][T26767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3291.917017][T26995] chnl_net:caif_netlink_parms(): no params data found [ 3291.950825][T26998] chnl_net:caif_netlink_parms(): no params data found [ 3291.972374][T27003] chnl_net:caif_netlink_parms(): no params data found [ 3292.080816][T27060] loop5: detected capacity change from 0 to 512 [ 3292.124684][T27060] ext3: Unknown parameter 'obj_user' [ 3293.217725][T26998] bridge0: port 1(bridge_slave_0) entered blocking state [ 3293.243483][T26998] bridge0: port 1(bridge_slave_0) entered disabled state [ 3293.250873][T26998] bridge_slave_0: entered allmulticast mode [ 3293.285483][T26998] bridge_slave_0: entered promiscuous mode [ 3293.353421][T26995] bridge0: port 1(bridge_slave_0) entered blocking state [ 3293.373455][T26995] bridge0: port 1(bridge_slave_0) entered disabled state [ 3293.380913][T26995] bridge_slave_0: entered allmulticast mode [ 3293.415137][T26995] bridge_slave_0: entered promiscuous mode [ 3293.456196][T27003] bridge0: port 1(bridge_slave_0) entered blocking state [ 3293.483476][T27003] bridge0: port 1(bridge_slave_0) entered disabled state [ 3293.490839][T27003] bridge_slave_0: entered allmulticast mode [ 3293.546109][T27003] bridge_slave_0: entered promiscuous mode [ 3293.572910][T26998] bridge0: port 2(bridge_slave_1) entered blocking state [ 3293.582977][T26998] bridge0: port 2(bridge_slave_1) entered disabled state [ 3293.624755][T26998] bridge_slave_1: entered allmulticast mode [ 3293.632806][T26998] bridge_slave_1: entered promiscuous mode [ 3293.707830][T26776] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3293.728066][T26995] bridge0: port 2(bridge_slave_1) entered blocking state [ 3293.753673][T26995] bridge0: port 2(bridge_slave_1) entered disabled state [ 3293.761076][T26995] bridge_slave_1: entered allmulticast mode [ 3293.794210][T26995] bridge_slave_1: entered promiscuous mode [ 3293.850442][T27003] bridge0: port 2(bridge_slave_1) entered blocking state [ 3293.873458][T27003] bridge0: port 2(bridge_slave_1) entered disabled state [ 3293.880999][T27003] bridge_slave_1: entered allmulticast mode [ 3293.899157][T27003] bridge_slave_1: entered promiscuous mode [ 3293.959107][T26998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3293.987380][T26776] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3294.124121][T26995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3294.303959][T26998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3294.447212][T26776] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3294.480278][T26995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3294.546586][T26767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3294.599546][T27003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3294.653021][T27003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3294.727222][T26998] team0: Port device team_slave_0 added [ 3294.752991][T26776] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3294.877169][T26767] 8021q: adding VLAN 0 to HW filter on device team0 [ 3294.958269][T26998] team0: Port device team_slave_1 added [ 3295.236188][T26995] team0: Port device team_slave_0 added [ 3295.419255][T27003] team0: Port device team_slave_0 added [ 3295.529357][T26995] team0: Port device team_slave_1 added [ 3295.599995][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 3295.607289][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3295.657286][T27003] team0: Port device team_slave_1 added [ 3295.667965][T26998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3295.687420][T26998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3295.725086][T26998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3295.834720][T26998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3295.842089][T26998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3295.886665][T26998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3295.912942][T26995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3295.921395][T26995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3295.948375][T26995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3295.968217][T26995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3295.983306][T26995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3296.009941][T26995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3296.025478][T27003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3296.032525][T27003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3296.058691][T27003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3296.170865][T12328] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3296.230266][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 3296.237664][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3296.256316][T27003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3296.266188][T27003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3296.296709][T27003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3296.338673][T26998] hsr_slave_0: entered promiscuous mode [ 3296.348321][T26998] hsr_slave_1: entered promiscuous mode [ 3296.357677][T26998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3296.366087][T26998] Cannot create hsr debugfs directory [ 3296.482715][T12328] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3296.732490][T12328] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3296.776176][T27003] hsr_slave_0: entered promiscuous mode [ 3296.794545][T27003] hsr_slave_1: entered promiscuous mode [ 3296.817679][T27003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3296.833240][T27003] Cannot create hsr debugfs directory [ 3296.848225][T26995] hsr_slave_0: entered promiscuous mode [ 3296.870066][T26995] hsr_slave_1: entered promiscuous mode [ 3296.878642][T26995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3296.887380][T26995] Cannot create hsr debugfs directory [ 3297.060239][T12328] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3297.703378][T25162] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 3297.725580][T26998] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3297.909928][T25162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 3297.922447][T25162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3297.933315][T26998] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3297.953554][T25162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3297.964088][T25162] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 3297.973593][T25162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3297.993718][T25162] usb 6-1: config 0 descriptor?? [ 3298.012649][T25162] gspca_main: spca561-2.14.0 probing abcd:cdee [ 3298.162341][T26998] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3298.409046][T25162] spca561 6-1:0.0: probe with driver spca561 failed with error -22 [ 3298.425972][T25162] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3298.433123][T25162] usb 6-1: MIDIStreaming interface descriptor not found [ 3298.595908][T26998] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3298.630692][T25162] usb 6-1: USB disconnect, device number 66 [ 3299.137674][T26776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3299.591926][T26776] 8021q: adding VLAN 0 to HW filter on device team0 [ 3299.688440][T26767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3299.710456][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 3299.717747][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3299.784911][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 3299.792082][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3300.481365][T12328] bridge_slave_1: left allmulticast mode [ 3300.493256][T12328] bridge_slave_1: left promiscuous mode [ 3300.499064][T12328] bridge0: port 2(bridge_slave_1) entered disabled state [ 3300.589034][T12328] bridge_slave_0: left allmulticast mode [ 3300.613278][T12328] bridge_slave_0: left promiscuous mode [ 3300.619081][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 3300.676136][T12328] bridge_slave_1: left allmulticast mode [ 3300.681823][T12328] bridge_slave_1: left promiscuous mode [ 3300.694314][T12328] bridge0: port 2(bridge_slave_1) entered disabled state [ 3300.731506][T12328] bridge_slave_0: left allmulticast mode [ 3300.745169][T12328] bridge_slave_0: left promiscuous mode [ 3300.750933][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 3300.796114][T12328] bridge_slave_1: left allmulticast mode [ 3300.809483][T12328] bridge_slave_1: left promiscuous mode [ 3300.835144][T12328] bridge0: port 2(bridge_slave_1) entered disabled state [ 3300.876370][T10900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3300.890020][T12328] bridge_slave_0: left allmulticast mode [ 3300.903609][T10900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3300.911156][T12328] bridge_slave_0: left promiscuous mode [ 3300.918784][T10900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3300.928750][T10900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3300.932929][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 3300.954064][T10900] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3300.961816][T10900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3301.791209][T27185] loop5: detected capacity change from 0 to 4096 [ 3301.849675][T10900] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3301.873673][T10900] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3301.887816][T10900] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3301.909765][T27185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3301.912801][T10900] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3301.934976][T10900] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3301.942600][T10900] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3302.287501][T25792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3303.045158][T10900] Bluetooth: hci0: command tx timeout [ 3303.242200][T12328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3303.262293][T12328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3303.274509][T12328] bond0 (unregistering): Released all slaves [ 3303.295403][T12328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3303.312642][T12328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3303.326856][T12328] bond0 (unregistering): Released all slaves [ 3303.632125][T12328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3303.655862][T12328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3303.669051][T12328] bond0 (unregistering): Released all slaves [ 3304.013773][T10900] Bluetooth: hci4: command tx timeout [ 3304.302391][T27003] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3304.400155][T27003] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3304.600119][T27003] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3304.619659][T27003] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3305.159204][T10900] Bluetooth: hci0: command tx timeout [ 3306.083293][T10900] Bluetooth: hci4: command tx timeout [ 3306.551706][T12328] hsr_slave_0: left promiscuous mode [ 3306.577433][T12328] hsr_slave_1: left promiscuous mode [ 3306.603459][T12328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3306.619078][T12328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3306.630885][T12328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3306.669960][T12328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3306.699735][T12328] hsr_slave_0: left promiscuous mode [ 3306.710516][T12328] hsr_slave_1: left promiscuous mode [ 3306.726098][T12328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3306.754944][T12328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3306.798384][T12328] hsr_slave_0: left promiscuous mode [ 3306.827072][T12328] hsr_slave_1: left promiscuous mode [ 3306.840839][T12328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3306.859810][T12328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3306.904467][T12328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3306.916587][T12328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3307.157588][T12328] veth1_macvtap: left promiscuous mode [ 3307.173429][T12328] veth0_macvtap: left promiscuous mode [ 3307.179507][T12328] veth1_vlan: left promiscuous mode [ 3307.197219][T12328] veth0_vlan: left promiscuous mode [ 3307.219192][T10900] Bluetooth: hci0: command tx timeout [ 3307.244299][T12328] veth1_macvtap: left promiscuous mode [ 3307.249930][T12328] veth0_macvtap: left promiscuous mode [ 3307.258175][T12328] veth1_vlan: left promiscuous mode [ 3307.264641][T12328] veth0_vlan: left promiscuous mode [ 3308.183612][T10900] Bluetooth: hci4: command tx timeout [ 3309.208180][T12328] team0 (unregistering): Port device team_slave_1 removed [ 3309.284560][T10900] Bluetooth: hci0: command tx timeout [ 3309.440365][T12328] team0 (unregistering): Port device team_slave_0 removed [ 3310.244139][T10900] Bluetooth: hci4: command tx timeout [ 3311.036298][T12328] team0 (unregistering): Port device team_slave_1 removed [ 3311.154545][T12328] team0 (unregistering): Port device team_slave_0 removed [ 3312.542574][T12328] team0 (unregistering): Port device team_slave_1 removed [ 3312.642626][T12328] team0 (unregistering): Port device team_slave_0 removed [ 3313.725276][T27239] pim6reg1: entered promiscuous mode [ 3313.730634][T27239] pim6reg1: entered allmulticast mode [ 3314.169053][T27174] chnl_net:caif_netlink_parms(): no params data found [ 3314.224313][T27003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3314.297714][T26995] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3314.304716][T11787] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 3314.569011][T26995] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3314.601384][T27186] chnl_net:caif_netlink_parms(): no params data found [ 3314.610032][T11787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3314.623981][T11787] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3314.637124][T11787] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3314.638995][T26995] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3314.648020][T11787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3314.674021][T11787] usb 6-1: config 0 descriptor?? [ 3314.733044][T26995] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3315.110667][T27003] 8021q: adding VLAN 0 to HW filter on device team0 [ 3315.168588][T27174] bridge0: port 1(bridge_slave_0) entered blocking state [ 3315.169607][T11787] plantronics 0003:047F:FFFF.009F: unknown main item tag 0x0 [ 3315.203425][T27174] bridge0: port 1(bridge_slave_0) entered disabled state [ 3315.222705][T27174] bridge_slave_0: entered allmulticast mode [ 3315.233782][T27174] bridge_slave_0: entered promiscuous mode [ 3315.246816][T11787] plantronics 0003:047F:FFFF.009F: No inputs registered, leaving [ 3315.274053][T11787] plantronics 0003:047F:FFFF.009F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 3315.370778][T27174] bridge0: port 2(bridge_slave_1) entered blocking state [ 3315.433810][T27174] bridge0: port 2(bridge_slave_1) entered disabled state [ 3315.441647][T27174] bridge_slave_1: entered allmulticast mode [ 3315.455491][ T5298] usb 6-1: USB disconnect, device number 67 [ 3315.508979][T27174] bridge_slave_1: entered promiscuous mode [ 3315.761453][T23757] bridge0: port 1(bridge_slave_0) entered blocking state [ 3315.768894][T23757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3315.840250][T26998] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3315.895306][T26998] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3315.921178][T27174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3315.942270][T27174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3315.955387][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 3315.962677][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3316.236077][T26998] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3316.349930][T26998] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3316.525448][T27186] bridge0: port 1(bridge_slave_0) entered blocking state [ 3316.544360][T27186] bridge0: port 1(bridge_slave_0) entered disabled state [ 3316.551794][T27186] bridge_slave_0: entered allmulticast mode [ 3316.560390][T27186] bridge_slave_0: entered promiscuous mode [ 3316.582019][T27186] bridge0: port 2(bridge_slave_1) entered blocking state [ 3316.617724][T27186] bridge0: port 2(bridge_slave_1) entered disabled state [ 3316.634861][T27186] bridge_slave_1: entered allmulticast mode [ 3316.653446][T27186] bridge_slave_1: entered promiscuous mode [ 3316.820537][T27174] team0: Port device team_slave_0 added [ 3316.832291][T27174] team0: Port device team_slave_1 added [ 3317.126246][T27186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3317.163745][T27186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3317.188419][T27174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3317.203728][T27174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3317.253214][T27174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3317.400066][T27174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3317.408325][T27174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3317.435724][T27174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3317.506465][T27186] team0: Port device team_slave_0 added [ 3317.519280][T27186] team0: Port device team_slave_1 added [ 3317.678265][T27174] hsr_slave_0: entered promiscuous mode [ 3317.688496][T27174] hsr_slave_1: entered promiscuous mode [ 3317.854677][T27186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3317.873002][T27186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3317.901910][T27186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3317.984293][T27186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3317.991330][T27186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3318.045542][T27186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3318.282931][T26995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3318.548217][T26998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3318.582384][T27003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3318.764181][T27186] hsr_slave_0: entered promiscuous mode [ 3318.778311][T27186] hsr_slave_1: entered promiscuous mode [ 3318.788281][T27186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3318.796865][T27186] Cannot create hsr debugfs directory [ 3318.928529][T26995] 8021q: adding VLAN 0 to HW filter on device team0 [ 3318.988026][T26998] 8021q: adding VLAN 0 to HW filter on device team0 [ 3319.247030][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 3319.254443][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3319.276426][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 3319.283682][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3319.489169][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 3319.496371][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3319.512214][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 3319.519420][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3320.075833][T12328] bridge_slave_1: left allmulticast mode [ 3320.081533][T12328] bridge_slave_1: left promiscuous mode [ 3320.100245][T12328] bridge0: port 2(bridge_slave_1) entered disabled state [ 3320.111568][T12328] bridge_slave_0: left allmulticast mode [ 3320.117829][T12328] bridge_slave_0: left promiscuous mode [ 3320.123928][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 3320.135337][T12328] bridge_slave_1: left allmulticast mode [ 3320.141238][T12328] bridge_slave_1: left promiscuous mode [ 3320.154472][T12328] bridge0: port 2(bridge_slave_1) entered disabled state [ 3320.173536][T12328] bridge_slave_0: left allmulticast mode [ 3320.179232][T12328] bridge_slave_0: left promiscuous mode [ 3320.191958][T12328] bridge0: port 1(bridge_slave_0) entered disabled state [ 3320.857293][T11787] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 3321.055956][T11787] usb 6-1: config index 0 descriptor too short (expected 48676, got 36) [ 3321.072971][T11787] usb 6-1: config 110 has an invalid descriptor of length 189, skipping remainder of the config [ 3321.083874][T11787] usb 6-1: config 110 has 0 interfaces, different from the descriptor's value: 22 [ 3321.094439][T11787] usb 6-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 3321.104505][T11787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3321.719100][T12328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3321.737461][T12328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3321.750142][T12328] bond0 (unregistering): Released all slaves [ 3322.754638][T12328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3322.768187][T12328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3322.782663][T12328] bond0 (unregistering): Released all slaves [ 3322.907646][T26998] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3322.919187][T26998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3323.068368][T27003] veth0_vlan: entered promiscuous mode [ 3323.136695][T12328] hsr_slave_0: left promiscuous mode [ 3323.142974][T12328] hsr_slave_1: left promiscuous mode [ 3323.154033][T12328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3323.162069][T12328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3323.177300][T12328] hsr_slave_0: left promiscuous mode [ 3323.183988][T12328] hsr_slave_1: left promiscuous mode [ 3323.190699][T12328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3323.201950][T12328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3323.621410][T11787] usb 6-1: string descriptor 0 read error: -71 [ 3323.733971][T11787] usb 6-1: USB disconnect, device number 68 [ 3324.058497][T12328] team0 (unregistering): Port device team_slave_1 removed [ 3324.181451][T12328] team0 (unregistering): Port device team_slave_0 removed [ 3325.940952][T12328] team0 (unregistering): Port device team_slave_1 removed [ 3326.091590][T12328] team0 (unregistering): Port device team_slave_0 removed [ 3327.708052][T27003] veth1_vlan: entered promiscuous mode [ 3328.216864][T27174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3328.763775][T27174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3328.820049][T27174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3328.896356][T27174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3329.419488][T27003] veth0_macvtap: entered promiscuous mode [ 3329.956106][T27003] veth1_macvtap: entered promiscuous mode [ 3330.019038][T26995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3330.105774][T26998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3330.278844][T27003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3330.292374][T27003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3330.308179][T27003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3330.437685][T27003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3330.449657][T27003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3330.463521][T27003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3330.521602][T27003] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3330.536401][T27003] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3330.549117][T27003] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3330.558189][T27003] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3330.679709][T27186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3330.753116][T27186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3330.785354][T27186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3330.847698][T27186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3331.030256][T27174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3331.075633][T26995] veth0_vlan: entered promiscuous mode [ 3331.191581][ T29] audit: type=1326 audit(1726387140.578:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27362 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3331.227461][ T29] audit: type=1326 audit(1726387140.578:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27362 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3331.267641][T27174] 8021q: adding VLAN 0 to HW filter on device team0 [ 3331.327129][ T29] audit: type=1326 audit(1726387140.578:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27362 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3331.347787][T26995] veth1_vlan: entered promiscuous mode [ 3331.374941][ T29] audit: type=1326 audit(1726387140.578:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27362 comm="syz.5.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3331.386459][T26998] veth0_vlan: entered promiscuous mode [ 3331.437963][T10174] bridge0: port 1(bridge_slave_0) entered blocking state [ 3331.445320][T10174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3331.488681][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3331.521846][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3331.551322][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 3331.558606][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3331.572206][T26998] veth1_vlan: entered promiscuous mode [ 3331.659081][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3331.677932][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3331.679478][T26995] veth0_macvtap: entered promiscuous mode [ 3331.771024][T26995] veth1_macvtap: entered promiscuous mode [ 3331.885330][T26998] veth0_macvtap: entered promiscuous mode [ 3331.908964][T26998] veth1_macvtap: entered promiscuous mode [ 3331.941582][T26995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3331.973177][T26995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3331.993385][T26995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3332.007370][T26995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3332.026507][T26995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3332.058967][T26995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3332.072447][T26995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3332.096196][T26995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3332.111353][T26995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3332.129932][T26995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3332.195470][T27186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3332.217445][T26995] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3332.232135][T26995] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3332.243889][T26995] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3332.252651][T26995] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3332.328345][T26998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3332.383581][T26998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3332.395564][T26998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3332.417498][T26998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3332.431057][T26998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3332.447123][T26998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3332.472776][T26998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3332.537314][T26998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3332.562747][T26998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3332.594689][T26998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3332.610297][T26998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3332.630081][T26998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3332.649765][T26998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3332.662529][T26998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3332.771024][T27186] 8021q: adding VLAN 0 to HW filter on device team0 [ 3332.811681][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 3332.818300][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 3332.830699][T27174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3332.915126][T26998] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3332.937678][T26998] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3332.975076][T26998] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3333.019768][T26998] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3333.136474][T10174] bridge0: port 1(bridge_slave_0) entered blocking state [ 3333.143843][T10174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3333.264979][T24966] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3333.283441][T24966] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3333.296084][T24966] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3333.304860][T24966] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3333.312765][T24966] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3333.321402][T24966] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3333.974735][T23745] bridge0: port 2(bridge_slave_1) entered blocking state [ 3333.981965][T23745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3334.295758][T23745] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3334.416077][T27390] loop2: detected capacity change from 0 to 512 [ 3334.478800][T27390] EXT4-fs (loop2): Test dummy encryption mode enabled [ 3334.518675][T27390] EXT4-fs (loop2): 1 truncate cleaned up [ 3334.574856][T27390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3334.639969][T23745] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3335.462025][T24966] Bluetooth: hci6: command tx timeout [ 3335.552125][T23745] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3335.714379][T27003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3335.969975][T23745] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3336.094780][T23755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3336.138141][T23755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3336.199497][T27174] veth0_vlan: entered promiscuous mode [ 3336.341558][T27174] veth1_vlan: entered promiscuous mode [ 3336.396507][T23755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3336.435929][T23755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3337.161493][T27409] serio: Serial port ptm0 [ 3338.957975][T24966] Bluetooth: hci6: command tx timeout [ 3339.265063][ T29] audit: type=1326 audit(1726387148.638:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27416 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3339.335109][T23745] bridge_slave_1: left allmulticast mode [ 3339.342719][ T29] audit: type=1326 audit(1726387148.638:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27416 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3339.366676][T23745] bridge_slave_1: left promiscuous mode [ 3339.372510][T23745] bridge0: port 2(bridge_slave_1) entered disabled state [ 3339.414652][ T29] audit: type=1326 audit(1726387148.658:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27416 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3339.439921][T23745] bridge_slave_0: left allmulticast mode [ 3339.463008][T23745] bridge_slave_0: left promiscuous mode [ 3339.475016][T23745] bridge0: port 1(bridge_slave_0) entered disabled state [ 3339.507027][ T29] audit: type=1326 audit(1726387148.658:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27416 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3339.574251][ T29] audit: type=1326 audit(1726387148.658:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27416 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3339.657593][ T29] audit: type=1326 audit(1726387148.708:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27416 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3339.720931][ T29] audit: type=1326 audit(1726387148.708:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27416 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3339.752171][ T29] audit: type=1326 audit(1726387148.728:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27416 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3339.917229][ T29] audit: type=1326 audit(1726387148.728:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27416 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3340.052686][ T29] audit: type=1326 audit(1726387148.728:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27416 comm="syz.5.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3341.043240][T24966] Bluetooth: hci6: command tx timeout [ 3342.288570][T23745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3342.320489][T23745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3342.624645][T23745] bond0 (unregistering): Released all slaves [ 3343.062135][T27174] veth0_macvtap: entered promiscuous mode [ 3343.118401][T27174] veth1_macvtap: entered promiscuous mode [ 3343.126930][T24966] Bluetooth: hci6: command tx timeout [ 3343.279480][T27385] chnl_net:caif_netlink_parms(): no params data found [ 3343.339279][T23745] hsr_slave_0: left promiscuous mode [ 3343.370284][T23745] hsr_slave_1: left promiscuous mode [ 3343.381904][T23745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3343.392617][T23745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3343.411440][T23745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3343.420778][T23745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3343.527082][T23745] veth1_macvtap: left promiscuous mode [ 3343.532698][T23745] veth0_macvtap: left promiscuous mode [ 3343.562179][T23745] veth1_vlan: left promiscuous mode [ 3343.567929][T23745] veth0_vlan: left promiscuous mode [ 3344.034554][T27450] loop5: detected capacity change from 0 to 40427 [ 3347.373688][T22638] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 3347.527992][T23745] team0 (unregistering): Port device team_slave_1 removed [ 3347.584189][T22638] usb 3-1: Using ep0 maxpacket: 8 [ 3347.597307][T10900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3347.599276][T22638] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 3347.620685][T22638] usb 3-1: config 179 has no interface number 0 [ 3347.659795][T22638] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 3347.673546][T10900] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3347.678377][T22638] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 3347.685306][T10900] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3347.704565][T10900] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3347.716809][T10900] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3347.724454][T10900] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3347.745667][T22638] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3347.763991][T22638] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 3347.776031][T22638] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3347.789977][T22638] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 3347.828655][T22638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3347.870970][T27473] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3347.884275][T23745] team0 (unregistering): Port device team_slave_0 removed [ 3348.653740][T20888] usb 3-1: USB disconnect, device number 29 [ 3348.653805][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 3348.668045][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 3349.923603][T10900] Bluetooth: hci3: command tx timeout [ 3350.428628][T27490] Bluetooth: MGMT ver 1.23 [ 3350.476971][T27491] ptrace attach of "./syz-executor exec"[25792] was attempted by "./syz-executor exec"[27491] [ 3350.863484][T22638] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 3351.067676][T22638] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3351.119219][T22638] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3351.178051][T22638] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 3351.190858][T22638] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3351.221846][T22638] usb 6-1: config 0 descriptor?? [ 3351.250656][T27174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3351.266782][T27174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3351.279414][T27174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3351.291067][T27174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3351.301809][T27174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3351.312999][T27174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3351.335978][T27174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3351.437894][T27174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3351.455780][T27174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3351.466953][T27174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3351.481358][T27174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3351.492020][T27174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3351.503709][T27174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3351.549255][T27174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3351.595473][T27186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3351.727210][T27174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3351.748016][T27174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3351.784283][T27174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3351.799079][T27174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3352.007355][T10900] Bluetooth: hci3: command tx timeout [ 3352.145874][T27385] bridge0: port 1(bridge_slave_0) entered blocking state [ 3352.184083][T27385] bridge0: port 1(bridge_slave_0) entered disabled state [ 3352.191460][T27385] bridge_slave_0: entered allmulticast mode [ 3352.202164][T27385] bridge_slave_0: entered promiscuous mode [ 3352.224508][T27385] bridge0: port 2(bridge_slave_1) entered blocking state [ 3352.231755][T27385] bridge0: port 2(bridge_slave_1) entered disabled state [ 3352.266127][T27385] bridge_slave_1: entered allmulticast mode [ 3352.278852][T27385] bridge_slave_1: entered promiscuous mode [ 3352.528362][T27385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3352.695469][T27385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3352.864834][T22638] usbhid 6-1:0.0: can't add hid device: -71 [ 3352.870904][T22638] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 3352.959337][T22638] usb 6-1: USB disconnect, device number 69 [ 3353.087245][T27385] team0: Port device team_slave_0 added [ 3353.108079][T27385] team0: Port device team_slave_1 added [ 3353.390227][T27385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3353.397488][T27385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3353.424271][T27385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3353.440655][T27530] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3414'. [ 3353.460142][T23757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3353.485920][T23757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3353.837032][T23745] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3353.928665][T27535] ptrace attach of "./syz-executor exec"[25792] was attempted by "./syz-executor exec"[27535] [ 3353.944769][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 3353.944787][ T29] audit: type=1326 audit(1726387163.308:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27532 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3354.213513][T10900] Bluetooth: hci3: command tx timeout [ 3354.824740][ T29] audit: type=1326 audit(1726387163.308:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27532 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3354.870238][T27385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3354.900975][ T29] audit: type=1326 audit(1726387163.308:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27532 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3354.903224][T27385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3354.965371][ T29] audit: type=1326 audit(1726387163.308:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27532 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3354.992338][ T29] audit: type=1326 audit(1726387163.308:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27532 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3355.015106][T27385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3355.030334][ T29] audit: type=1326 audit(1726387163.318:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27532 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3355.054760][ T29] audit: type=1326 audit(1726387163.318:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27532 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3355.113309][ T29] audit: type=1326 audit(1726387163.318:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27532 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3355.156738][ T29] audit: type=1326 audit(1726387163.318:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27532 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3355.187249][ T29] audit: type=1326 audit(1726387163.318:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27532 comm="syz.5.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3355.248068][T23745] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3355.407971][T23745] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3355.468225][T27186] veth0_vlan: entered promiscuous mode [ 3355.490814][T12328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3355.495587][T27478] chnl_net:caif_netlink_parms(): no params data found [ 3355.506850][T12328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3355.609258][T23745] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3355.719157][T27385] hsr_slave_0: entered promiscuous mode [ 3355.726639][T27385] hsr_slave_1: entered promiscuous mode [ 3355.739054][T27385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3355.751218][T27385] Cannot create hsr debugfs directory [ 3356.122098][T27186] veth1_vlan: entered promiscuous mode [ 3356.243403][T10900] Bluetooth: hci3: command tx timeout [ 3356.389301][T27478] bridge0: port 1(bridge_slave_0) entered blocking state [ 3356.401156][T27478] bridge0: port 1(bridge_slave_0) entered disabled state [ 3356.411085][T27478] bridge_slave_0: entered allmulticast mode [ 3356.440504][T27478] bridge_slave_0: entered promiscuous mode [ 3356.551739][T27478] bridge0: port 2(bridge_slave_1) entered blocking state [ 3356.572465][T27478] bridge0: port 2(bridge_slave_1) entered disabled state [ 3356.580044][T27478] bridge_slave_1: entered allmulticast mode [ 3356.588179][T27478] bridge_slave_1: entered promiscuous mode [ 3356.727530][T27478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3356.779209][T23745] bridge_slave_1: left allmulticast mode [ 3356.785389][T23745] bridge_slave_1: left promiscuous mode [ 3356.791346][T23745] bridge0: port 2(bridge_slave_1) entered disabled state [ 3356.806442][T23745] bridge_slave_0: left allmulticast mode [ 3356.812237][T23745] bridge_slave_0: left promiscuous mode [ 3356.838633][T23745] bridge0: port 1(bridge_slave_0) entered disabled state [ 3360.205158][T27587] loop2: detected capacity change from 0 to 16 [ 3360.234413][T27587] erofs: (device loop2): mounted with root inode @ nid 36. [ 3360.363384][T12702] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 3360.519384][T27588] xt_hashlimit: overflow, rate too high: 0 [ 3360.774730][T12702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3360.785909][T12702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3360.803820][T12702] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 3360.813596][T12702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3360.935876][T12702] usb 1-1: config 0 descriptor?? [ 3361.063270][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 3361.063293][ T29] audit: type=1326 audit(1726387170.448:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3361.174845][ T29] audit: type=1326 audit(1726387170.448:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3361.239118][ T29] audit: type=1326 audit(1726387170.528:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3361.290957][ T29] audit: type=1326 audit(1726387170.528:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3361.325664][T27593] loop2: detected capacity change from 0 to 512 [ 3361.350760][T27593] journal_path: Lookup failure for './bus' [ 3361.358819][T27593] EXT4-fs: error: could not find journal device path [ 3361.372805][ T29] audit: type=1326 audit(1726387170.528:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3361.418858][ T29] audit: type=1326 audit(1726387170.528:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3361.471715][ T29] audit: type=1326 audit(1726387170.528:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3361.737775][ T29] audit: type=1326 audit(1726387170.528:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3361.813990][ T29] audit: type=1326 audit(1726387170.528:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3361.932369][ T29] audit: type=1326 audit(1726387170.528:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a337def9 code=0x7ffc0000 [ 3363.184439][T27605] evm: overlay not supported [ 3363.699063][T24966] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3363.712534][T24966] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3363.721532][T24966] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3363.730344][T24966] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3363.739275][T24966] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3363.747125][T24966] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3363.928844][T12702] usbhid 1-1:0.0: can't add hid device: -71 [ 3363.936709][T12702] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3363.951450][T12702] usb 1-1: USB disconnect, device number 62 [ 3364.159817][T23745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3364.184131][T23745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3364.198628][T23745] bond0 (unregistering): Released all slaves [ 3364.218990][T27478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3365.115660][T27478] team0: Port device team_slave_0 added [ 3365.185240][T27478] team0: Port device team_slave_1 added [ 3365.364306][T27618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3433'. [ 3366.092188][T24966] Bluetooth: hci5: command tx timeout [ 3366.197469][T27631] loop0: detected capacity change from 0 to 128 [ 3366.299421][T27631] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 3366.321904][T27631] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 3367.220063][T27638] loop5: detected capacity change from 0 to 512 [ 3367.245518][T27638] journal_path: Lookup failure for './bus' [ 3367.298890][T27638] EXT4-fs: error: could not find journal device path [ 3367.490864][T27641] loop2: detected capacity change from 0 to 1024 [ 3367.502282][T27641] EXT4-fs: Ignoring removed orlov option [ 3367.517624][T27641] EXT4-fs (loop2): Test dummy encryption mode enabled [ 3367.544386][T27478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3367.575987][T27641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3367.628024][T27478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3367.705123][T27478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3368.394162][T24966] Bluetooth: hci5: command tx timeout [ 3368.672961][T27174] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 3368.814402][T23745] hsr_slave_0: left promiscuous mode [ 3368.914627][T23745] hsr_slave_1: left promiscuous mode [ 3368.931701][T23745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3368.948281][T23745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3368.974345][T23745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3368.981936][T23745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3369.050213][T23745] veth1_macvtap: left promiscuous mode [ 3369.076413][T23745] veth0_macvtap: left promiscuous mode [ 3369.082153][T23745] veth1_vlan: left promiscuous mode [ 3369.113393][T23745] veth0_vlan: left promiscuous mode [ 3369.215008][T12327] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 3369.535598][T12327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3369.589266][T12327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3369.741908][T12327] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3369.966975][T12327] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3369.993220][T12327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3370.045557][T12327] usb 3-1: config 0 descriptor?? [ 3370.471354][T12327] plantronics 0003:047F:FFFF.00A0: ignoring exceeding usage max [ 3370.518707][T24966] Bluetooth: hci5: command tx timeout [ 3370.531553][T12327] plantronics 0003:047F:FFFF.00A0: No inputs registered, leaving [ 3370.544586][T12327] plantronics 0003:047F:FFFF.00A0: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 3370.712679][T27649] loop0: detected capacity change from 0 to 40427 [ 3370.747304][T27649] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 3370.782163][T27649] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 3370.796510][T27649] F2FS-fs (loop0): Image doesn't support compression [ 3370.828669][T27649] F2FS-fs (loop0): invalid crc value [ 3370.851510][T27649] F2FS-fs (loop0): Found nat_bits in checkpoint [ 3371.023441][T27649] F2FS-fs (loop0): Start checkpoint disabled! [ 3371.035443][T27649] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 3371.044535][T27649] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 3371.612364][T23757] kworker/u8:20: attempt to access beyond end of device [ 3371.612364][T23757] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 3371.642111][T23757] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 3371.904256][T24735] usb 3-1: reset high-speed USB device number 30 using dummy_hcd [ 3371.931794][T23745] team0 (unregistering): Port device team_slave_1 removed [ 3372.116732][T23745] team0 (unregistering): Port device team_slave_0 removed [ 3372.495384][T27003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3372.573636][T24966] Bluetooth: hci5: command tx timeout [ 3372.920980][T12327] usb 3-1: USB disconnect, device number 30 [ 3375.462974][T27478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3375.478770][T27478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3375.592757][T27478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3375.840617][T27685] loop2: detected capacity change from 0 to 512 [ 3375.938216][T27685] EXT4-fs (loop2): Test dummy encryption mode enabled [ 3375.991089][T27685] EXT4-fs (loop2): 1 truncate cleaned up [ 3376.000908][T27685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3376.035241][T27478] hsr_slave_0: entered promiscuous mode [ 3376.128215][T27478] hsr_slave_1: entered promiscuous mode [ 3376.210338][T27692] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3450'. [ 3376.280089][T27478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3376.291499][T27478] Cannot create hsr debugfs directory [ 3377.040925][T27003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3378.402636][T27385] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3378.548087][T27385] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3378.617918][T27385] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3378.760182][T27385] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3380.930521][T27606] chnl_net:caif_netlink_parms(): no params data found [ 3381.678384][T27745] loop2: detected capacity change from 0 to 512 [ 3381.699014][T27745] EXT4-fs (loop2): Test dummy encryption mode enabled [ 3381.757407][T27745] EXT4-fs (loop2): 1 truncate cleaned up [ 3381.765708][T27745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3382.725508][T27003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3383.064183][T27763] loop5: detected capacity change from 0 to 256 [ 3383.081305][T27763] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 3383.289202][T27606] bridge0: port 1(bridge_slave_0) entered blocking state [ 3383.312849][T27606] bridge0: port 1(bridge_slave_0) entered disabled state [ 3383.361960][T27606] bridge_slave_0: entered allmulticast mode [ 3383.383073][T27606] bridge_slave_0: entered promiscuous mode [ 3383.428318][T27606] bridge0: port 2(bridge_slave_1) entered blocking state [ 3383.553804][T25162] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3383.648025][T27606] bridge0: port 2(bridge_slave_1) entered disabled state [ 3383.921448][T27606] bridge_slave_1: entered allmulticast mode [ 3384.011188][T27606] bridge_slave_1: entered promiscuous mode [ 3384.244002][T25162] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 3384.266975][T25162] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3384.280493][T25162] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 3384.289655][T25162] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3384.308864][T22638] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 3384.332948][T25162] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 3384.618341][T22638] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3384.665348][T22638] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3384.722185][T22638] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 3384.766771][T22638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3384.842479][T22638] usb 1-1: config 0 descriptor?? [ 3384.930073][T27606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3384.958048][T27773] overlayfs: failed to resolve './file2': -2 [ 3385.530691][T27606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3385.734398][T22638] lenovo 0003:17EF:6047.00A1: unknown main item tag 0x0 [ 3385.741601][T22638] lenovo 0003:17EF:6047.00A1: unknown main item tag 0x0 [ 3385.748852][T22638] lenovo 0003:17EF:6047.00A1: unknown main item tag 0x0 [ 3385.756535][T22638] lenovo 0003:17EF:6047.00A1: unknown main item tag 0x0 [ 3385.771664][T22638] lenovo 0003:17EF:6047.00A1: unknown main item tag 0x0 [ 3385.797665][T22638] lenovo 0003:17EF:6047.00A1: hidraw0: USB HID v0.01 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 3385.961587][T27606] team0: Port device team_slave_0 added [ 3386.017767][T22638] lenovo 0003:17EF:6047.00A1: Failed to switch middle button: -71 [ 3386.028794][T27606] team0: Port device team_slave_1 added [ 3386.034669][T22638] lenovo 0003:17EF:6047.00A1: Fn-lock setting failed: -71 [ 3386.046092][T22638] lenovo 0003:17EF:6047.00A1: Sensitivity setting failed: -71 [ 3386.070786][T22638] usb 1-1: USB disconnect, device number 63 [ 3386.082635][T27478] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3386.112293][T27478] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3386.190706][T27478] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3386.203989][T27478] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3386.240482][T27606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3386.254873][T27606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3386.282172][T27606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3386.302122][T27385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3386.315399][T23745] bridge_slave_1: left allmulticast mode [ 3386.321073][T23745] bridge_slave_1: left promiscuous mode [ 3386.332707][T23745] bridge0: port 2(bridge_slave_1) entered disabled state [ 3386.345057][T23745] bridge_slave_0: left allmulticast mode [ 3386.350808][T23745] bridge_slave_0: left promiscuous mode [ 3386.358632][T23745] bridge0: port 1(bridge_slave_0) entered disabled state [ 3386.904928][T12702] usb 3-1: USB disconnect, device number 31 [ 3388.628934][T27796] loop2: detected capacity change from 0 to 512 [ 3388.711408][T27796] EXT4-fs (loop2): Test dummy encryption mode enabled [ 3389.021481][T27796] EXT4-fs (loop2): 1 truncate cleaned up [ 3389.260236][T27796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3390.646792][T27807] loop0: detected capacity change from 0 to 128 [ 3390.666650][T27807] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 3390.730036][T27807] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 3390.751154][T27003] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3391.104536][T23745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3391.121672][T23745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3391.157414][T23745] bond0 (unregistering): Released all slaves [ 3391.209081][T27606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3391.232387][T27606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3391.278913][T27606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3391.407593][T27789] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3469'. [ 3391.649349][T23745] hsr_slave_0: left promiscuous mode [ 3391.674217][T23745] hsr_slave_1: left promiscuous mode [ 3391.703870][T23745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3391.718793][T23745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3391.780477][T23745] veth1_vlan: left promiscuous mode [ 3391.788960][T23745] veth0_vlan: left promiscuous mode [ 3391.940587][T27821] syz.0.3480[27821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3391.940777][T27821] syz.0.3480[27821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3392.025340][T27823] loop5: detected capacity change from 0 to 512 [ 3392.086226][T27823] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 3393.324705][T27830] loop0: detected capacity change from 0 to 512 [ 3393.356684][T27830] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm syz.0.3481: corrupted in-inode xattr: invalid ea_ino [ 3393.386712][T27830] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3481: couldn't read orphan inode 12 (err -117) [ 3393.405220][T27830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3393.465583][T27830] syz.0.3481[27830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3393.465778][T27830] syz.0.3481[27830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3394.395164][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 3394.414395][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 3394.706826][T27174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3394.729756][T10900] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3394.759629][T10900] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3394.772411][T10900] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3394.784734][T10900] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3394.823515][T10900] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3394.831037][T10900] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3394.967578][T27839] loop5: detected capacity change from 0 to 2048 [ 3395.159921][T27839] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3396.472226][T23745] team0 (unregistering): Port device team_slave_1 removed [ 3396.591665][T23745] team0 (unregistering): Port device team_slave_0 removed [ 3396.890892][T10900] Bluetooth: hci4: command tx timeout [ 3397.215346][T25792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3397.441150][T27849] loop5: detected capacity change from 0 to 512 [ 3397.453794][T27849] EXT4-fs (loop5): Test dummy encryption mode enabled [ 3397.529754][T27849] EXT4-fs (loop5): 1 truncate cleaned up [ 3397.541746][T27849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3398.601688][T25792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3398.969431][T10900] Bluetooth: hci4: command tx timeout [ 3399.163703][T22638] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 3399.366379][T22638] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3399.386296][T22638] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3399.410606][T22638] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 3399.420350][T22638] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3399.890211][T27606] hsr_slave_0: entered promiscuous mode [ 3399.908177][T22638] logitech-hidpp-device 0003:046D:C086.00A2: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.5-1/input0 [ 3400.013047][T27606] hsr_slave_1: entered promiscuous mode [ 3400.065003][T27606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3400.101905][T27606] Cannot create hsr debugfs directory [ 3400.124682][T22638] usb 6-1: USB disconnect, device number 70 [ 3400.165902][T27859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3488'. [ 3400.189797][T27859] tipc: Invalid UDP bearer configuration [ 3400.189877][T27859] tipc: Enabling of bearer rejected, failed to enable media [ 3400.516793][T27864] loop0: detected capacity change from 0 to 256 [ 3400.536916][T27864] exfat: Deprecated parameter 'namecase' [ 3400.684376][T27864] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 3401.043356][T10900] Bluetooth: hci4: command tx timeout [ 3402.475775][T27883] loop5: detected capacity change from 0 to 128 [ 3402.749199][T27478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3403.216118][T10900] Bluetooth: hci4: command tx timeout [ 3403.370787][T27835] chnl_net:caif_netlink_parms(): no params data found [ 3403.402378][T27899] loop0: detected capacity change from 0 to 1024 [ 3403.454660][T27899] EXT4-fs: Ignoring removed orlov option [ 3403.489535][T27899] EXT4-fs (loop0): Test dummy encryption mode enabled [ 3403.564002][T27899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3404.033294][T12702] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 3404.876683][T12702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3404.888205][T12702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3404.903597][T12702] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3404.917038][T12702] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3404.926546][T12702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3404.947962][T12702] usb 1-1: config 0 descriptor?? [ 3405.395124][T12702] plantronics 0003:047F:FFFF.00A3: ignoring exceeding usage max [ 3405.437794][T12702] plantronics 0003:047F:FFFF.00A3: No inputs registered, leaving [ 3405.438876][T27478] 8021q: adding VLAN 0 to HW filter on device team0 [ 3405.481704][T12702] plantronics 0003:047F:FFFF.00A3: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 3405.718373][T15824] bridge0: port 1(bridge_slave_0) entered blocking state [ 3405.725770][T15824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3405.740266][T15824] bridge0: port 2(bridge_slave_1) entered blocking state [ 3405.747631][T15824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3405.755212][ T934] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 3405.808818][T27932] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3499'. [ 3405.818252][T27932] bridge_slave_1: left allmulticast mode [ 3405.824387][T27932] bridge_slave_1: left promiscuous mode [ 3405.830518][T27932] bridge0: port 2(bridge_slave_1) entered disabled state [ 3405.868510][T27932] bridge_slave_0: left allmulticast mode [ 3405.874418][T27932] bridge_slave_0: left promiscuous mode [ 3405.880391][T27932] bridge0: port 1(bridge_slave_0) entered disabled state [ 3405.987230][ T934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3405.998664][ T934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3406.011685][ T934] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 3406.021089][ T934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3406.051457][ T934] usb 6-1: config 0 descriptor?? [ 3406.220992][T27835] bridge0: port 1(bridge_slave_0) entered blocking state [ 3406.248987][T27835] bridge0: port 1(bridge_slave_0) entered disabled state [ 3406.286893][T27835] bridge_slave_0: entered allmulticast mode [ 3406.300612][T27835] bridge_slave_0: entered promiscuous mode [ 3406.345610][T27835] bridge0: port 2(bridge_slave_1) entered blocking state [ 3406.352890][T27835] bridge0: port 2(bridge_slave_1) entered disabled state [ 3406.378726][T27835] bridge_slave_1: entered allmulticast mode [ 3406.413425][T27835] bridge_slave_1: entered promiscuous mode [ 3406.417171][T27941] loop2: detected capacity change from 0 to 512 [ 3406.451576][T27941] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 3406.563657][T24966] Bluetooth: hci2: command 0x0406 tx timeout [ 3406.581740][ T934] sony 0003:054C:0268.00A4: unknown main item tag 0x0 [ 3406.601385][ T934] sony 0003:054C:0268.00A4: unknown main item tag 0x0 [ 3406.608433][ T934] sony 0003:054C:0268.00A4: unknown main item tag 0x0 [ 3406.615571][ T934] sony 0003:054C:0268.00A4: unknown main item tag 0x0 [ 3406.622478][ T934] sony 0003:054C:0268.00A4: unknown main item tag 0x0 [ 3406.681945][ T934] sony 0003:054C:0268.00A4: hiddev1,hidraw1: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.5-1/input0 [ 3406.694148][ T934] sony 0003:054C:0268.00A4: failed to claim input [ 3407.437266][T27835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3407.476435][T27835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3407.522105][T27174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3407.619875][ T934] usb 6-1: USB disconnect, device number 71 [ 3407.716034][T11795] usb 1-1: USB disconnect, device number 64 [ 3408.589425][T27835] team0: Port device team_slave_0 added [ 3408.637481][T27961] loop2: detected capacity change from 0 to 128 [ 3408.796593][T27835] team0: Port device team_slave_1 added [ 3409.715357][T27960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3503'. [ 3409.755016][T24966] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3409.800868][T24966] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3409.833830][T24966] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3409.857836][T24966] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3409.866384][T24966] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3409.877658][T24966] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3411.338332][T23745] bridge_slave_1: left allmulticast mode [ 3411.347684][T23745] bridge_slave_1: left promiscuous mode [ 3411.381868][T23745] bridge0: port 2(bridge_slave_1) entered disabled state [ 3411.465508][T23745] bridge_slave_0: left allmulticast mode [ 3411.471483][T23745] bridge_slave_0: left promiscuous mode [ 3411.508391][T23745] bridge0: port 1(bridge_slave_0) entered disabled state [ 3412.093480][T24966] Bluetooth: hci3: command tx timeout [ 3413.856830][T23745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3413.870811][T23745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3413.892109][T23745] bond0 (unregistering): Released all slaves [ 3414.017521][T27835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3414.032420][T27835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3414.158045][T27835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3414.163713][T24966] Bluetooth: hci3: command tx timeout [ 3414.451694][T27835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3414.472567][T27835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3414.476876][T28009] loop0: detected capacity change from 0 to 512 [ 3414.500894][T27835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3414.525691][T28011] Cannot find add_set index 0 as target [ 3414.547387][T28009] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 3414.800316][T27606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3414.909871][T23745] hsr_slave_0: left promiscuous mode [ 3414.927798][T23745] hsr_slave_1: left promiscuous mode [ 3414.943275][T23745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3416.243312][T24966] Bluetooth: hci3: command tx timeout [ 3416.265995][T28017] loop2: detected capacity change from 0 to 512 [ 3416.304527][T23745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3416.329096][T28017] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 3417.593483][T12327] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 3418.227677][T12327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3418.287313][T12327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3418.333674][T24966] Bluetooth: hci3: command tx timeout [ 3418.345521][T12327] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3418.358049][T12327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3418.394896][T12327] usb 1-1: config 0 descriptor?? [ 3418.638150][T12327] usbhid 1-1:0.0: can't add hid device: -71 [ 3418.664295][T12327] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3418.698271][T12327] usb 1-1: USB disconnect, device number 65 [ 3418.905313][T23745] team0 (unregistering): Port device team_slave_1 removed [ 3418.913385][T22638] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 3419.124596][T23745] team0 (unregistering): Port device team_slave_0 removed [ 3419.125689][T22638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3419.147024][T22638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3419.168532][T22638] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 3419.191764][T22638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3419.225155][T22638] usb 3-1: config 0 descriptor?? [ 3419.666034][T22638] usbhid 3-1:0.0: can't add hid device: -71 [ 3419.672249][T22638] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 3419.721570][T22638] usb 3-1: USB disconnect, device number 32 [ 3420.115698][T27606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3420.164579][T27606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3420.388594][T27835] hsr_slave_0: entered promiscuous mode [ 3420.399458][T28058] loop5: detected capacity change from 0 to 128 [ 3420.467890][T28060] loop2: detected capacity change from 0 to 512 [ 3420.530517][T27835] hsr_slave_1: entered promiscuous mode [ 3420.595981][T27835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3420.656308][T27835] Cannot create hsr debugfs directory [ 3420.665266][T27606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3420.688139][T28060] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 3423.563225][T22638] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 3423.580669][T28085] loop2: detected capacity change from 0 to 512 [ 3423.680469][T28085] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 3423.778526][T22638] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3423.807770][T22638] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3423.894417][T22638] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3424.101761][T22638] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3424.555699][T22638] usb 6-1: config 0 descriptor?? [ 3424.789909][T10900] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3424.835838][T10900] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3424.869192][T10900] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3424.903715][T10900] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3424.915783][T10900] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3424.925863][T10900] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3425.359592][T27966] chnl_net:caif_netlink_parms(): no params data found [ 3425.415386][T22638] usb 6-1: string descriptor 0 read error: -71 [ 3425.427236][T22638] uclogic 0003:256C:006D.00A5: failed retrieving string descriptor #200: -71 [ 3425.456638][T22638] uclogic 0003:256C:006D.00A5: failed retrieving pen parameters: -71 [ 3425.465459][T22638] uclogic 0003:256C:006D.00A5: failed probing pen v2 parameters: -71 [ 3425.475380][T22638] uclogic 0003:256C:006D.00A5: failed probing parameters: -71 [ 3425.483005][T22638] uclogic 0003:256C:006D.00A5: probe with driver uclogic failed with error -71 [ 3425.521277][T22638] usb 6-1: USB disconnect, device number 72 [ 3425.722866][T28103] syzkaller0: entered promiscuous mode [ 3425.742119][T28103] syzkaller0: entered allmulticast mode [ 3427.043609][T10900] Bluetooth: hci0: command 0x0406 tx timeout [ 3427.047385][T20817] Bluetooth: hci6: command tx timeout [ 3427.084848][ T934] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 3427.381192][ T934] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3427.392210][ T934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3427.432048][ T934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3427.487937][ T934] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3427.501508][ T934] usb 6-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 3427.511086][ T934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3427.522445][ T934] usb 6-1: config 0 descriptor?? [ 3428.569251][ T934] nintendo 0003:057E:2009.00A6: unknown main item tag 0x0 [ 3428.576694][ T934] nintendo 0003:057E:2009.00A6: unknown main item tag 0x0 [ 3428.584958][ T934] nintendo 0003:057E:2009.00A6: unknown main item tag 0x0 [ 3428.594531][ T934] nintendo 0003:057E:2009.00A6: unknown main item tag 0x0 [ 3428.602042][ T934] nintendo 0003:057E:2009.00A6: unknown main item tag 0x0 [ 3428.631078][ T934] nintendo 0003:057E:2009.00A6: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.5-1/input0 [ 3428.791491][ T934] nintendo 0003:057E:2009.00A6: Failed to get joycon info; ret=-38 [ 3428.811800][ T934] nintendo 0003:057E:2009.00A6: Failed to retrieve controller info; ret=-38 [ 3428.853591][ T934] nintendo 0003:057E:2009.00A6: Failed to initialize controller; ret=-38 [ 3429.007464][ T934] nintendo 0003:057E:2009.00A6: probe - fail = -38 [ 3429.017811][ T934] nintendo 0003:057E:2009.00A6: probe with driver nintendo failed with error -38 [ 3429.031659][ T934] usb 6-1: USB disconnect, device number 73 [ 3429.130540][T24966] Bluetooth: hci6: command tx timeout [ 3431.213427][T24966] Bluetooth: hci6: command tx timeout [ 3433.299541][T24966] Bluetooth: hci6: command tx timeout [ 3435.594299][T28133] loop5: detected capacity change from 0 to 128 [ 3436.668090][T28139] loop5: detected capacity change from 0 to 512 [ 3436.703081][T28139] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 3542.153098][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 3542.160220][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P28127/1:b..l [ 3542.172936][ C1] rcu: (detected by 1, t=10502 jiffies, g=394693, q=207 ncpus=2) [ 3542.181289][ C1] task:syz.2.3532 state:R running task stack:25488 pid:28127 tgid:28126 ppid:27003 flags:0x00004002 [ 3542.199849][ C1] Call Trace: [ 3542.203320][ C1] [ 3542.206816][ C1] __schedule+0x1800/0x4a60 [ 3542.211407][ C1] ? __pfx___schedule+0x10/0x10 [ 3542.216276][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3542.221923][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3542.227951][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 3542.233280][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 3542.238420][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 3542.244306][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3542.250084][ C1] irqentry_exit+0x5e/0x90 [ 3542.254970][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3542.260977][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 3542.266303][ C1] Code: 2b 00 74 08 4c 89 f7 e8 5a 06 8b 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 3542.285943][ C1] RSP: 0018:ffffc90003b57140 EFLAGS: 00000206 [ 3542.292025][ C1] RAX: 0000000000000001 RBX: 1ffff9200076ae34 RCX: 6c0b3cc183c82d00 [ 3542.300009][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c608f40 [ 3542.308103][ C1] RBP: ffffc90003b57298 R08: ffffffff941e4847 R09: 1ffffffff283c908 [ 3542.316163][ C1] R10: dffffc0000000000 R11: fffffbfff283c909 R12: 1ffff9200076ae30 [ 3542.324702][ C1] R13: dffffc0000000000 R14: ffffc90003b571a0 R15: 0000000000000246 [ 3542.332731][ C1] ? shmem_alloc_and_add_folio+0x2cf/0x14f0 [ 3542.338693][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 3542.343910][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3542.349590][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3542.355730][ C1] ? __set_page_owner+0x671/0x800 [ 3542.360986][ C1] ? page_ext_get+0x20/0x2a0 [ 3542.365642][ C1] page_ext_get+0x3d/0x2a0 [ 3542.370223][ C1] ? page_ext_get+0x20/0x2a0 [ 3542.374955][ C1] __page_table_check_zero+0xb1/0x350 [ 3542.380362][ C1] post_alloc_hook+0x206/0x230 [ 3542.385184][ C1] get_page_from_freelist+0x2e4c/0x2f10 [ 3542.390878][ C1] ? __alloc_pages_noprof+0x166/0x6c0 [ 3542.396405][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3542.402163][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3542.407823][ C1] ? prepare_alloc_pages+0x369/0x5d0 [ 3542.413148][ C1] __alloc_pages_noprof+0x256/0x6c0 [ 3542.418368][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 3542.424111][ C1] ? __lock_acquire+0x137a/0x2040 [ 3542.429159][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3542.434814][ C1] alloc_pages_mpol_noprof+0x3e8/0x680 [ 3542.440410][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 3542.446540][ C1] ? filemap_get_entry+0x123/0x3b0 [ 3542.451701][ C1] ? __pfx_lock_release+0x10/0x10 [ 3542.456754][ C1] folio_alloc_mpol_noprof+0x36/0x50 [ 3542.462060][ C1] shmem_alloc_and_add_folio+0x2cf/0x14f0 [ 3542.467800][ C1] ? filemap_get_entry+0x328/0x3b0 [ 3542.472927][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 3542.478413][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 3542.484601][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3542.490403][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3542.496429][ C1] shmem_get_folio_gfp+0x8dc/0x2370 [ 3542.501669][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 3542.507347][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3542.513024][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3542.518684][ C1] ? fault_in_readable+0x1a6/0x2b0 [ 3542.523819][ C1] shmem_write_begin+0x170/0x4d0 [ 3542.528785][ C1] ? __pfx_shmem_write_begin+0x10/0x10 [ 3542.534272][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3542.539922][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3542.545593][ C1] ? fault_in_iov_iter_readable+0x229/0x280 [ 3542.551516][ C1] generic_perform_write+0x39b/0x840 [ 3542.556856][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 3542.562709][ C1] ? preempt_count_add+0x93/0x190 [ 3542.567783][ C1] ? mnt_put_write_access_file+0xbb/0x100 [ 3542.573537][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3542.579183][ C1] ? file_update_time+0x3b8/0x430 [ 3542.584232][ C1] shmem_file_write_iter+0xfc/0x120 [ 3542.589628][ C1] vfs_write+0xa74/0xc90 [ 3542.593925][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 3542.599850][ C1] ? __pfx_vfs_write+0x10/0x10 [ 3542.604753][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3542.610556][ C1] ksys_write+0x1a0/0x2c0 [ 3542.614920][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3542.620573][ C1] ? __pfx_ksys_write+0x10/0x10 [ 3542.625435][ C1] ? exc_page_fault+0x590/0x8c0 [ 3542.630292][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3542.636012][ C1] ? do_syscall_64+0xb6/0x230 [ 3542.640739][ C1] do_syscall_64+0xf3/0x230 [ 3542.645304][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3542.651244][ C1] RIP: 0033:0x7fcac4d7c9df [ 3542.655673][ C1] RSP: 002b:00007fcac4bf7df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3542.664110][ C1] RAX: ffffffffffffffda RBX: 00000000013bd7ef RCX: 00007fcac4d7c9df [ 3542.672123][ C1] RDX: 00000000013bd7ef RSI: 00007fcaba200000 RDI: 0000000000000003 [ 3542.680155][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000005535 [ 3542.688142][ C1] R10: 000000002000ac02 R11: 0000000000000293 R12: 0000000000000003 [ 3542.696120][ C1] R13: 00007fcac4bf7ef0 R14: 00007fcac4bf7eb0 R15: 00007fcaba200000 [ 3542.704123][ C1] [ 3542.707149][ C1] rcu: rcu_preempt kthread starved for 10501 jiffies! g394693 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 3542.718437][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 3542.728429][ C1] rcu: RCU grace-period kthread stack dump: [ 3542.734354][ C1] task:rcu_preempt state:R running task stack:25744 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 3542.746270][ C1] Call Trace: [ 3542.749538][ C1] [ 3542.752466][ C1] __schedule+0x1800/0x4a60 [ 3542.757007][ C1] ? __pfx___schedule+0x10/0x10 [ 3542.761878][ C1] ? __pfx_lock_release+0x10/0x10 [ 3542.766910][ C1] ? __asan_memset+0x23/0x50 [ 3542.771513][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 3542.777335][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3542.783788][ C1] ? schedule+0x90/0x320 [ 3542.788032][ C1] schedule+0x14b/0x320 [ 3542.792204][ C1] schedule_timeout+0x1be/0x310 [ 3542.797094][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 3542.802549][ C1] ? __pfx_process_timeout+0x10/0x10 [ 3542.807909][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3542.813648][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 3542.819241][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 3542.824104][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 3542.829349][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 3542.835477][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 3542.840788][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3542.846713][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3542.852362][ C1] ? finish_swait+0xd4/0x1e0 [ 3542.857002][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 3542.861618][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 3542.866991][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3542.873188][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 3542.878956][ C1] ? __kthread_parkme+0x169/0x1d0 [ 3542.884025][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 3542.889248][ C1] kthread+0x2f2/0x390 [ 3542.893355][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 3542.898577][ C1] ? __pfx_kthread+0x10/0x10 [ 3542.903180][ C1] ret_from_fork+0x4d/0x80 [ 3542.907698][ C1] ? __pfx_kthread+0x10/0x10 [ 3542.912413][ C1] ret_from_fork_asm+0x1a/0x30 [ 3542.917668][ C1] [ 3542.921113][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 3542.927539][ C1] Sending NMI from CPU 1 to CPUs 0: [ 3542.932830][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30