last executing test programs: 39.31413253s ago: executing program 0 (id=291): openat$kvm(0xffffffffffffff9c, 0x0, 0x189100, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0x208e24b) r1 = syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000"], 0x1, 0x1a2, &(0x7f0000000000)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r1], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYRES64=r1], &(0x7f0000001200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x35, 0x0, 0x0, 0xfffffffffffffd54}, 0x90) fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, 0xffffffffffffffff, 0x15, 0x0, @val=@tracing={0x0, 0x8001}}, 0x40) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000100)=0x3d) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRES64=r4, @ANYRES32=r1, @ANYRES32=r1], 0x1, 0x537, &(0x7f0000001340)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) r6 = fsopen(&(0x7f0000000000)='overlay\x00', 0x0) r7 = fsopen(&(0x7f0000000100)='sysv\x00', 0x1) fsmount(r7, 0x1, 0x100) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='\xeb\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) 37.893396621s ago: executing program 0 (id=292): openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904", @ANYRES16=r0], 0x0) 35.038050655s ago: executing program 0 (id=295): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_emit_ethernet(0x3e, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) io_setup(0x7, &(0x7f0000000280)=0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_freeze_timeout', 0x42, 0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0xfffffc98}]) 33.732671086s ago: executing program 0 (id=296): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0/../file0\x00', 0x802, &(0x7f00000006c0)={[{@shortname_lower}, {@shortname_winnt}, {@shortname_lower}, {@rodir}, {@rodir}, {@utf8}, {@fat=@tz_utc}, {@utf8no}, {@fat=@usefree}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@fat=@check_strict}, {@numtail}, {@fat=@uid}, {@uni_xlateno}, {@shortname_winnt}]}, 0x0, 0x2a5, &(0x7f0000001000)="$eJzs3b9ra1UcAPDvTZM02iEZnETwDm9wsby81cEUqSB2UjL4A/Thew8eTSg0EKiKsZN/gYOD/4ebu+DifyC4Cm4WKVy5ubdJTNukaU0r9fNZejjn+73ne3JO2+mefPpKf//JweDZ8Ze/RqORRKUTnThJohWVOPN1AAD3yUmWxR9ZYbXMamVdNQEA6zXz/792Scjm+a43110WALBG73/w4bs7e3u776VpI6L/zbCbRPGzGN95Fs+jF0/jYTTjNCKbKNpvv7O3G9U014oH/dGwm2f2P/m5fP7O7xHj/HY0o3VxfjstzOSPht1avBiRJBHPO3n+o2jGS+fy8/HdRxfkR7cerzXKIvL87WjGL5/FQfTiSeS50/m/aqfpW9m3f37xUR6c5yejYXdzHDeVbdzqxgAAAAAAAAAAAAAAAAAAAAAAcK9tpxOteNDPu8r7dzZOx+Pb/xgf369TGY8X+UlEfdyYux9olMX3Z/frPEzTNEuK+On9PtV4uRrVO1s4AAAAAAAAAAAAAAAAAAAA/IcMjj7ff9zrPT38VxrlS/6T1/qv+5zOTM+rsTh4c6W5YqMMz2udj2n/9HF/0pMv4jrFD2tpxJKa5xov5PUsD/4ry7IsSSJutk21q8y1pLG1OCb/gH/8buv1/cfJss+wcbZxP8wO1eNwcDS3p5GsUmG20vGrL4iplyfmSs/ZuuEv0Ru/FZOVPckKq6iVjbjs+DVWOs+39zcIAAAAAAAAAAAAAAAAAAAoTF/6vWDweGFqZW1FAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAtm37//wqNUZl8heB6HA7ueIkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8D/wdAAD//yPiYEY=") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000010000000", 0xfe60) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800015b00d7000000000000000000"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x4, @vifc_lcl_addr=@rand_addr=0x64010101, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001200320002130000020000000000000002000000000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x202) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000140)="71da6f3585b32a692eeb80200b807223fbf6405831b37cfa", 0x18}, {&(0x7f0000000200)="9d", 0x1}], 0x2) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000a80)={{0x2, 0x4f24, @local}, {0x0, @link_local}, 0x12, {0x2, 0x0, @multicast1}, 'lo\x00'}) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @multicast2}, {0x0, @dev}, 0x0, {0x2, 0x4000, @empty}, 'lo\x00'}) socket$netlink(0x10, 0x3, 0x13) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={@rand_addr, @broadcast}, 0x0) 32.06178145s ago: executing program 0 (id=298): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x20321, 0x0) write$binfmt_elf32(r3, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", ['\x00', '\x00', '\x00']}, 0x6d5) r4 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)=@caif=@dbg={0x25, 0x2}, 0x80) write$binfmt_misc(r3, 0x0, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 30.500862893s ago: executing program 0 (id=309): open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="67b8ed77ab82513664511ea67d1fcaadffba39938d78be1ff85280771cf63d5f423eadaf2193d1e15762b9fe3a3f3c7d8a18f88d43f98558a0422d07ccaab56ad8ab2b9b747b61f26421cc72cc01f6ca35858dbe4b83312410696970ed243f36e1d5630000000000", @ANYRES32, @ANYRES8, @ANYBLOB="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", @ANYRES16], 0x9, 0x2af, &(0x7f00000001c0)="$eJzs3b9ra1UcAPDvTdMk6pAOTiJ4QQenx+tbXVIkDx5mUjKogz5sC9IEoYWCP/DSydXF0b9AENz8J1z8D9wV3OxQOHKTe5u0pmmjTau+z2doT+8533O+9/T0F+V+8+HL44PdPPZPvvglOp0sGr3oxWkWW9GIWkopxUzv6wAA/stOU4rf09QqcVlEdNaXFgCwRiv//P9h7SkBAGv2zrvvvbUzGPTfzvNOPB5/dTws/7Iv30/7d/bj4xjFXjyMbpxN/xdQ/7ZQvn2cUiqaeWkrXhsXx8MycvzBT9X8O79FTOK3oxtbk0sX458M+tv51K9vnMcXZR7PV+v3yvhH0Y0XF6z/ZNB/VMXPrV/EsBWvvzqX/4Poxs8fxScxit1JErP4L7fz/M30zR+fv1+mV8ZnxfGwPRk3kzbu+FMDAAAAAAAAAAAAAAAAAAAAAMD/2IOqdk47JvV7yktV/Z2Ns/KDzchr8/V9iro+UFZPdKk+UJHi25TazYhB/2Ge56kaOItvxkvNaN7PXQMAAAAAAAAAAAAAAAAAAMC/y9Gnnx08HY32Dm+lUVcDqB/r/7vz9OauvBLLB7dnazWq5pKZY6Mek5WtJTOXN3FL23Jd47mrcv7u+1Un7Fw/ZnPZ/vyTRuf8Sn26Dp5mi/ewfb7znfqQ/Dg/phU3XLR1VVda6fi1FnZ1V96E1guTRrFkTGSLE2tf+LqsurLLd9G6+tBuVo258EtnY6Xz/NfvFZlqHQAAAAAAAAAAAAAAAAAAsFazh34XdJ4sDW2k9trSAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA7NXv9/xUaRRV8g8GtODy651sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGfBnAAAA//+haF7r") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) lseek(r3, 0x851, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1152c08, 0x0, 0xfe, 0x0, &(0x7f0000000000)) sysinfo(&(0x7f0000000080)) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0xfc, 0xc52, &(0x7f0000003340)="$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") open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) sync() open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='ns\x00') 14.830144572s ago: executing program 4 (id=316): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c8, &(0x7f0000002500)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) mlockall(0x1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x4048810) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x28) sendmsg$NFT_MSG_GETSETELEM(r5, 0x0, 0x11) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_usb_control_io$hid(r3, &(0x7f0000000680)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x0, "7325ba8c"}, @main=@item_012={0x0, 0x0, 0xa}, @global]}}, 0x0}, 0x0) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x1, 0x91) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000808) 13.79470865s ago: executing program 2 (id=317): gettid() openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x80200, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000003c0)=ANY=[@ANYBLOB="706172743d3078300002a27f9edc6b44900000c63d5f852c6769643d", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES8, @ANYRES32, @ANYRES8, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611", @ANYRES16, @ANYBLOB="4599"], 0x1, 0x701, &(0x7f00000009c0)="$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") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x400000, 0x0, 0x0, 0x7, 0x1}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES64=0x0, @ANYBLOB="d9e9aee9afb18270208988e87b8ee46c4e5fcb4148906b1b4cc6510d7df0cb3154fa4fe7e2ba6d0c10506d56b1b50613a52ea8787081c5f468b6143e7169d85d3198d422ba8211fecb99b77d0f9876c6e8364dc8a3072f3560ad0faed8d79f7c52870eb4b82ad228210fdbe3fb8556e17e922ab874a77720680a0d285fb45a2ba45bb4283a5e83070707102c25be0ede5d304e9bc132a5195ee22ada3e68fdc44c050b5d9744295b2dd946aa260fce3c7a33983552f2a761eba99aacde515f6e9b72cbdcfd23a767671c0b9ac69da2f85839ee4dc83b8c64e50b64ff5df7f603295422533ec4", @ANYRES32, @ANYRES8, @ANYRESDEC, @ANYRES64], 0x9, 0x2b4, &(0x7f00000001c0)="$eJzs3c9qK2UUAPAzydw06iJF3CiCA7pwVW7dummUChezUiKoCw3ee0GScOEWAlYw3lWfwKXv4SO4ceMbCG4Fd+2iMjKZmSZt0z+0MYX6+60O880538l8IVnl5Os3x8PHz5J4cfhHtNtJNHZiJ46S2IxG1H6MNACA++Moz+Pv/CaZaWP13QAA61B+/5fuuhcAYD0+/fyLj7u93u4nWdaO1zsHk34SEeODSb9c7z6Nb2MUT+JhdOI4Ij9Rxh896u1GmhU2453xdNIvMsdf/VbV7/4VMcvfjk5sLs/fzkp1frPKfTmy6D59ULfaidfO5KcR8ai3+96Z/IjxNPqtePfthf63ohO/fxPPYhSPo6gz3/+H7Sz7MP/p8Psvi22K/KQR/Y3ZfXN5c11nAgAAAAAAAAAAAAAAAAAAAADA/beVZUk5vmc2v6e4NJufM+k3j2frW1ltcb7PtJ4PlNSFyvlAeVQjeqZ5/FzP13mYZVle3TjPT+ON1B8LAAAAAAAAAAAAAAAAAAAAQGHvu/3hYDR68nwlQT0NoP5Z/03r7CxceSv2h4PmxQU3rr/X4rSBotdLb440jRU9lquCl4p+Vl55Y364n0UZ1Aez0r1e/aAsuj8cZNVS/ZCHg+Sqvdr1wf0yX4q0FbdtLJ+9JY7z02faPmn1dFZrRU+j9crilb36vfZPnufXq/P+n+UZVVeS2YiN6+3+oAqWvsAiaJ8/i18vLnjhR0bz1h86AAAAAAAAAAAAAAAAAADAUvMf/S5ZfHFpauM/awoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1mz+//910I6IwShZuHIumFbJl91TBa14vnfHLxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/gX8DAAD//3boRtk=") setrlimit(0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0xce942, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.169442694s ago: executing program 1 (id=318): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000300)='1\x00', 0xffffff4a) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_dev$media(&(0x7f0000000400), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000003080)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f0000000140)="5832b113e20ef2a80611015dcbbee21557854650d326be5e8c0d83738ce384b49d9991faffff8e53f45df0cec25e27881102cf5c68593321686ac36cc5fcb40e1125043c5431b3a0238681ad4a26ca97480df472394905de8138", 0x5a}], 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x48009}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) syz_usb_connect(0x0, 0x43, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xe7, 0xc2, 0xf7, 0x8, 0x421, 0x335, 0x5f0e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x31, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4}, @mdlm_detail={0x4}]}]}}]}}]}}, 0x0) 11.57136874s ago: executing program 2 (id=319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x12}, [@FRA_SRC={0x14, 0x2, @dev}]}, 0x30}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x0) dup(0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r5) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 11.57080162s ago: executing program 3 (id=320): socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0), 0x4) vmsplice(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'vlan1\x00', 0x0}) sendto$packet(r3, &(0x7f00000003c0)="02030e00d3fc02000000ab5d71acedd7c9560385dcb188a8", 0x18, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000300)='1\x00', 0xffffff4a) write$sysctl(r6, &(0x7f0000000000)='2\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_open_dev$media(&(0x7f0000000400), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.917005922s ago: executing program 1 (id=321): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)='veth0_macvtap\x00', 0x8, 0x8000000000000001, 0x7ff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'team_slave_1\x00', 0x0}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x2015}) read$FUSE(r2, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x6a, 0x2}, @cond}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000180)={0x1, 0x68, &(0x7f0000000100)="f13b8716bcfdcca0c8af3538908cd9249f533b44e0242eab855e96f55b9ffada39f62d8b23dd050e4bd47c6e12e3bd98840d9ae70008ed417a94f6c6b2fccb3a3bcb625653302c9301e4fe75a70cdee4c457f97a50895e6577df2340fb458bd55be572ac782da8b5"}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8f}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x4000000000080002, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r8, &(0x7f0000000d00)={0x11, 0x1, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000240)={0x60002009}) epoll_pwait2(r3, &(0x7f0000000180), 0x1, 0x0, 0x0, 0xfffffd06) syz_emit_ethernet(0xae, &(0x7f0000000440)=ANY=[@ANYRES64=r4], 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="682ad9ec5c58"}, 0x14) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1) 9.089494432s ago: executing program 4 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r6 = open(&(0x7f0000000040)='./file0\x00', 0x147042, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x401) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x80086603, &(0x7f0000000140)) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000001c0), 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) prctl$PR_GET_PDEATHSIG(0x29, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a00)=ANY=[@ANYBLOB="300000000301010100000000000000000a000000100800800c00028005000100010000000c0000"], 0x30}}, 0x0) 8.76449801s ago: executing program 1 (id=323): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fef5251d8a250e33413d038fb4"}]}, 0x40}}, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r11, 0x0, 0x488, &(0x7f00000000c0)={{0x29, @rand_addr=0x64010101, 0x4e23, 0x1, 'lblcr\x00', 0x2, 0x3f, 0x70}, {@local, 0x4e21, 0x0, 0x6, 0xfffffcb9, 0x5d09}}, 0x44) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) 7.911461833s ago: executing program 4 (id=324): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200014, &(0x7f00000009c0)=ANY=[@ANYBLOB="00043b09170ca77bde7929733bbeb1ad6f4cb6652ee1635fc6609d08"], 0x1, 0x5fb, &(0x7f0000000000)="$eJzs3U9vHGcdB/DvbOKNbaRkkyZtg5CwilShRiT+k4KRkIBSwEIVqsSlUtWDRezGyjqtbBc5OSCDeAW8giJkDhUHDpwQSDlw5szNqEckTrn4ZjSzs96N42ydxPWu289Hmn2eZ5+ZZ37zy8yTmbEsB/jSWngnY1spsnDtrc2yvbM9197Znlvt1pOcS9JIxpMU5dd/TfJpspXOkqvdjr7yMe9NNh9+8u7V5U5rvF6q9YtB2x3NfiytTqxVeVzjzT73eL0jnEpyqS5h6Pa6/nNo93NelwDAKCuSM4d930om65v18jmgc1fcucc+1baGHQAAAACcgAu72c1mzg87DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhN6r//X9RLo1ufStH9+//N+rvU9VPtwbADAAAAAAAAAIBj8PXd7GYz57vtvaL6mf8rVeNy9fmVfJT1LGUt17OZxWxkI2uZSdLqG6i5ubixsTZzhC1nD91y9mSOFwAAAAAAAAC+oH6bhd7P/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYBQUyZleNZfrsmilcTbJeJJm2bmV/L1bP80eDDsAAAAAOAEXdrObzZyvm3tF55n/xeq5fzwf5W42spKNtLOUW9W7gM5Tf2Nne669sz23Wi6Pj/vD/z1VGNWI6b57OGzP09UaV/bXXshP8otcy1TezlpW8qssZiNLmcqbVW0xRVr124tWN87D4/3BI623PyvWl6tIJrKclSq26/llPkg7t9KojqFaZ/Aef1Nmp/h+7Yg5ulWX5RH9rC5HQ6vKyNh+Rqbr3JfZuDg4E095nhzc00wa+++gLn8OOZ+syzLXb550zrcGdR7MxGzf2ffi4Ewkr/7x9w9vt+/eub28fm10TqNndDATc32ZeOlLlYlmnY3OLNqdLXOk2fKVatvzWcnZaq5ZyrdzM/OZzeu5mZl8N6/35fXKEa61xtNda9/4Zl0ZS/LjuhwNZV4v9uW1f6ZrVX393/SydOn4Z6SzX60r5cn6xsj9L3DxwNzczcQLgzPxh73yc719987a7cUPj7i/V+uyzMCPRioT5flyqfzHqlqPnh1l3wuH9s1UfZf3+xqP9V3Z7+tcqT/PB0+4Upv1PdzBkYrMVn0vHbqXuarv5brvwRPucgAYeZOvTTYn/jvxr4mPJ343cXvirfE3zs2f+1ozY/88+7czf2n8qfG94rV8nF/vP/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPYf3e/TuL7fbSmorKI5W9C8kIhHFKKz/9959XRyCMe/fvFFvJs2w+7JkJ+Lzd2Fj98Mb6vfvfWlldfH/p/aW7N+e/cy43Z+bnbyyvtJemO5/DjhIAOE69m/5hRwIAAAAAAAAAAAAAADzJSfwS8rCPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GJbeCdjWykyM319umzvbM+1y6Vb7605nqQoK/9I8mmylc6SVt9wxZP2895k8+En715d7o013l2/GLRdZW9w94FYGgdiegaPjDf73OP1jnAqyaW6hKH7fwAAAP//zp0C6g==") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='siox_set_data\x00', r1}, 0xf) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x49, 0x0, 0x5}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000000080)="e3", 0x1}], 0x1}, 0x24048401) r6 = gettid() sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0x1}], 0x1, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0x38}, 0x20040001) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3f}}]}, 0xfc, 0x564, &(0x7f00000003c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) pwritev2(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce8220100090581"], 0x0) execve(0x0, &(0x7f0000000100), 0x0) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x4}}, 0xe8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 7.805879522s ago: executing program 2 (id=325): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYRES16=0x0, @ANYBLOB="5df049e7c8fb4977eb885edfaf66b1bbdfa4f8b352df455d6fb7d69d490db6a85f6671040c16e22d769bbad51f865f49094613f7c4572d008311fc7c6596fe3e8d315e45ad342f2a054f70eac0e46c703017033489750102c2f4872e0d60af224c98d13b3edf114d046e23ff412edfae9f3518ef6a28a37a7823e1355dc335", @ANYBLOB="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", @ANYRES32=0x0, @ANYRES8], 0x5, 0x7e1, &(0x7f00000004c0)="$eJzs3U1oHOf5APBnFNmRlf/fhLS4xjjOxEnBBkdZyY6CyCHZrEbyJKtdsbsKNqUkppaDsZyEuIFahzq+tLS0hJ56THLopT2VXloKLbTQ9lRor70FAj0kLS300BJQmZmVJVlf/pA/SH8/Yc07M+/M+7zvrufZkTQzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABE0pis1UaTaOatuVPp5hqTnfbMFuuX9/frNZMt2o1Iin8xNBT7q0X7v7iyel/x7XAcrOYOxlAxGYrFh/Y9/NwXBgeWt98ioJ02uNHCS5cXL5xZWJh/+y4Gcgd895drZn80HDc4stNZK++285n6dJbm3XY6MT5ee/rkVDedyptZ93S3l82kjU5W77U76ZHG0XR0YuJ4mo2cbs+1pifrzSwdrBY++9RYrTaevjQym9U73Xbr6ZdGuo2TebOZt6bLDYvVRZ1nizfiy3kv7WX1mTQ9d35h/vjakPasC7KoNLpmyWdLq+cOPvnwx+989M/z82PbdXesNjY2Ojo2NjqeREStNriy4JmJZ56t1QZr14l1Ne7qm5b70A4fweHWDfTzfzQjj1bMxalIN/xqxGR0oh0zsfIGXr2+bzn/f/npv/1xq3bfW5X/qyw/cHD/yuoDUeb/Q9Xcoc3yf9X27gc3iflOfa30/1JcjsW4EGdiIRZiPt6+I+0lO7evgZ2NbDqyaEUe3WhHHjNRL5ek/SVpTMR4jEctXo2TMRXdSGMq8mhGFt04Hd3oRVa+oxrRiSzq0Yt2dCKNI9GIo5HGaEzERByPNLIYidPRjrloxXRMRr3cy7k4X4778evi2vfN137x+p8+fr98tZYrjW41xO9GlJX+sUWldclc/uemRcRvd+rwDbdlaTn/AwAAAJ9bSfnT9+L8f1c8Wpam8mb2lW22Giy+vXt3IgQAAABuV/mb/4PFZFdRejSS4vy/trbST3bdm+AAAACAHZGU19glETEcj1Wl5culavc6NgAAAGBnlL//P1RMhiOulAuc/wMAAMDnzCs/6xeuv8f+R8v32B2YfTD51d+j09mVnPjg1JPJxXpRr37xgWq7/uSVa3vsTR1Ion9DwXJf44OLDxXzg43sYLJ889zPHqymn5bfDwxe23xtHC/sqZYmSVIEcHV20wBiTQB7+724FkA5F9+Lx6s6j5+tpmeX11S9HZ7Km9lIo918bjTq9b0DvexU7503zn8jyu5/pzWzN4lz5xfmR7725sLZMparxV6uXuz3d919FLeIZak/AvHo+rsbF7vaVV6I0W93uGq3trr/A5f2FoWBm2jzW3H4/8o6h4erusNr+z9UtDk6slnvh6v+ja7r+eD6N1YVxen+3HVRPFEtfeLIE9VkgyjGtoqiGIux1VH0B+HmxmLDKOLhiHj/8Sun/vW7dpId3y6K47cZBcC9cq6860+Rhap0VGWh/yxVivzf6ezaHWvyTrXBjR7lkrKVbZ7kc+PZ/d9LWxzRj1R1jlSfJwYPbJBXahsc0d86/9bv+0f0Ez/+4QdfPfSHn95yXh9arrJnufDIbx4aiDKKPf0oFvtrOruS71/LJFVW/bBY/uGm7XabY0kxhA98/eJbse/S5cWnzl888/r86/NvjI0dH6+dqNWeSZL+i7dUfmKQewDYwOE4VCXyTZ+xs8lTeMoPAFXuPrHVWfUDkTxy7U8Kipz4ZizE2ThWXm0QEY9t3O7wqj9DOBaH+8FufNY6vOoJL8e2ObfcHdGvO7Zt3eFVj5dZ8aUf3MnXAwDuhsPb5OFN8/+qc/dj25x3r83lR6u6R5cj2DyXR8Tzd3c0AOB/Q9b5NBnufTvpdPLZV0cnJkbrvZNZ2mk3Xk47+eR0luatXtaJwXprOktnO+1eu9FuFoVX8smsm3bnZmfbnV461e6ks+1ufqp88nvaf/R7N5upt3p5ozvbzOrdLG20W716o5dO5t1GOjv3YjPvnsw65cbd2ayRT+WNei9vt9Jue67TyEbStJtlqyrmk1mrl0/lRbGVznbymXrnakQ052aydDLrNjr5bK9d7XC5rbw11e7MlLv96957PdoAcH+4dHnxwpmFhfm3b63wlxupvHnrQ24sDAD3wEqW/uT/r1/nh+8AAAAAAAAAAAAAAHB/uM3r/9YX9uzsDoe2qrN0JWL9qmRpaekmmtgT29TZ3R+qHR6ou1K4uiP7GYiNxvn+KSSbr3rt+ecvbLb5i1f2n7yxJrb9nzIYEf1LXd/9ZPfP36tWvXBL3Rm4+a3+HBG30NZSskWde3tcAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICN/DcAAP//jRtoaA==") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x0, 0x14, 0x10, 0x1ba, 0x0}) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x6000, 0x0) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r3, 0x80044d76, 0x1000000000000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r2}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x48) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000079003000000000009500f400"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x21) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90424fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) 7.556505673s ago: executing program 3 (id=326): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vbi(&(0x7f0000000380), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000003c0)={0x5, @sdr}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1f2, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') fstat(0xffffffffffffffff, 0x0) semget(0x1, 0x0, 0x404) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) mount$fuseblk(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_io_uring_setup(0x27f3, 0x0, &(0x7f0000000140), 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r4], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x90) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000180), &(0x7f0000000ac0)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r5, 0x2}, 0x20) 7.203636253s ago: executing program 1 (id=327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x2402, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000400)=0x8) socket(0x2b, 0x4, 0xfffffffd) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000040), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) unshare(0x20020680) unshare(0x28011980) r5 = syz_io_uring_setup(0x3f2c, &(0x7f0000000540)={0x0, 0x2, 0x0, 0xfffffffe}, &(0x7f0000000440)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c40)='./file0\x00'}) io_uring_enter(r5, 0x2, 0x0, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d7265757365f3ab2c686561702a64697361626c655f726f6c6c5f666f72776172642c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6163746976655f6c6f67597450ebf359559911cdca69d328733d362c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6d6f64653d61646170746976652c6772706a71756f74613d255c252f2d275e2c6e6f69"], 0x1, 0x5505, &(0x7f0000002480)="$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") 5.758180447s ago: executing program 2 (id=328): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000300)='1\x00', 0xffffff4a) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_dev$media(&(0x7f0000000400), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000003080)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f0000000140)="5832b113e20ef2a80611015dcbbee21557854650d326be5e8c0d83738ce384b49d9991faffff8e53f45df0cec25e27881102cf5c68593321686ac36cc5fcb40e1125043c5431b3a0238681ad4a26ca97480df472394905de8138", 0x5a}], 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x48009}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) 5.71980451s ago: executing program 1 (id=329): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000300)='1\x00', 0xffffff4a) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_dev$media(&(0x7f0000000400), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000003080)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f0000000140)="5832b113e20ef2a80611015dcbbee21557854650d326be5e8c0d83738ce384b49d9991faffff8e53f45df0cec25e27881102cf5c68593321686ac36cc5fcb40e1125043c5431b3a0238681ad4a26ca97480df472394905de8138", 0x5a}], 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) syz_usb_connect(0x0, 0x43, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xe7, 0xc2, 0xf7, 0x8, 0x421, 0x335, 0x5f0e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x31, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4}, @mdlm_detail={0x4}]}]}}]}}]}}, 0x0) 5.116996982s ago: executing program 3 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x10000) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8042, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000000000000000000000000000000000000000000380001000000000000000300000000000000ffffffffffffffff000000000000000000000000000000000900ef00"/120], 0x78) socket(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x80000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x48, r7, 0x713, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x48}}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0xa0, 0x0, &(0x7f00000009c0)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@fda={0x66646185, 0x7, 0x2, 0x100000000000003d}, @fd, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x6}}, &(0x7f0000000440)={0x0, 0x20, 0x38}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000940)={@ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/252, 0xfc, 0x0, 0x1c}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}}, @increfs_done={0x40106308, 0x2}], 0x1, 0x1800, &(0x7f00000007c0)='b'}) socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) 4.181992071s ago: executing program 2 (id=331): r0 = syz_open_dev$media(&(0x7f0000000400), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 2.751193524s ago: executing program 3 (id=332): memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x8, 0x5, 0x3c0, 0x0, 0x270, 0xffffffff, 0x1c8, 0x270, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@uncond, 0xae01, 0xd8, 0x110, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@unspec=@connlimit={{0x40}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @loopback, @icmp_id, @icmp_id}}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'bridge0\x00', 'ipvlan0\x00'}, 0x3f5, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@empty, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0xff00, {0x0, @multicast1, @multicast1, @gre_key}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'caif0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4, @ipv6=@loopback, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmget$private(0x0, 0x4000, 0x800, &(0x7f000035f000/0x4000)=nil) shmat(0x0, &(0x7f000040d000/0x1000)=nil, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2.750721264s ago: executing program 4 (id=333): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200000c0000000000feff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$inet(0x2, 0x0, 0xfffffff8) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000280)={[{@minixdf}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nodelalloc}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x23, 0x44d, &(0x7f0000000980)="$eJzs28tvG0UYAPBv7SR9k1CVRx9AoCDKK2nSUnpAQiCQOICEBIdyDElalboNaoJEq4oWhMoRVeLEBXFE4i/gBBcEnJC4wh1VqlAvLZyM1t5NbMd2HnXsUP9+0jozu2PPfN6d9exONoC+NZq+JBE7I+KPiBiuZusLjFb/3L55afqfm5emkyiX3/47qZS7dfPSdF40f9+OPDMQUfgsif1N6p2/cPHMVKk0ez7Ljy+c/WB8/sLF506fnTo1e2r23OTx40ePTLxwbPL5jsSZxnVr38dzB/a+/u61N6dPXHvvl++SPP6GODpktN3GJ8rlDlfXW7tq0slADxvCmhSr3TQGK/1/OIqxtPOG47VPe9o4YEOVy+Xy/a03XykDd7Gkcg4ovxS9bgjQZfkPfXr9my9dGnpsCjderl4ApXHfzpbqloEoZGUGG65vO2k0Ik5c+ffrdImNuQ8BAFDnh3T882yz8V8hau8L3ZPNoYxExL0RsTsijkXEnoi4L6JS9oGIeHCN9TdOkiwf/xSuryuwVUrHfy9mc1v147989BcjxSy3qxL/YHLydGn2cPadHIrBLWl+ok0dP776+xetttWO/9IlrT8fC2btuD6wpf49M1MLU3cSc60bn0TsG2gWf7I4E5BExN6I2LfOOk4//e2BVttWjr+NDswzlb+JeLK6/69EQ/y5pP385PjWKM0eHs+PiuV+/e3qW63qv6P4OyDd/9ubHv+L8Y8ktfO182v59K+eSl+v/vl5y2ua9R7/Q8k7des+mlpYOD8RMZS8UW107frJhnKTS+XT+A8dbN7/d8fSN7E/ItKD+KGIeDgiHsna/mhEPBYRB9t8Cz+/8vj7649/Y6Xxz6xp/y8lhqJxTfNE8cxP39dVOrL04avb/0crqUPZmtWc/1bTrrUezQAAAPB/VYiInZEUxhbThcLYWPV/+PfE9kJpbn7hmZNzH56bqT4jMBKDhfxO13DN/dCJ7J5Lnp9syB/J7ht/WdxWyY9Nz5Vmeh089LkdLfp/6q9ir1sHbDjPa0H/0v+hf+n/0L/0f+hfTfr/tl60A+i+Zr//l1d+29aNaAvQXQ3937Qf9BHX/9C/1tP/nTPg7tC2Lw91rx1AV81vi5UfkpeQWJaIwqZoxiZKXN4czehQotdnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM74LwAA//8cB+YG") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r1, r1, 0x0, 0x80000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) write$tun(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) sched_setscheduler(0x0, 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000380)=0x4000) socket(0x0, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[]) keyctl$clear(0x5, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, 0x0) request_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='/proc/cpuinfo\x00', r6) 2.749455044s ago: executing program 2 (id=341): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) symlinkat(&(0x7f0000000440)='./file0\x00', r2, &(0x7f0000000480)='./file0\x00') sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fef5251d8a250e33413d038fb4"}]}, 0x40}}, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) r14 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r14, 0x0, 0x488, &(0x7f00000000c0)={{0x29, @rand_addr=0x64010101, 0x4e23, 0x1, 'lblcr\x00', 0x2, 0x3f, 0x70}, {@local, 0x4e21, 0x0, 0x6, 0xfffffcb9, 0x5d09}}, 0x44) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff0100000724", @ANYRES16=r1], 0x0) 1.464713464s ago: executing program 3 (id=334): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000000b7030000000000008500000071000000950000000000000065bf7f0e062ec0bc5d904547a930de79b2ae29ab"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) rt_sigtimedwait(&(0x7f0000000040)={[0x3f0a85d]}, &(0x7f00000002c0), &(0x7f0000000200)={0x0, 0x989680}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d413600000000000002900000001000000", 0x6033) r2 = dup2(r0, r0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x6f06, &(0x7f00000005c0), &(0x7f0000000580), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x11, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000007c0)="010000000000000000fe7f000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f0000002680)=""/4110, 0x26, 0x100e, 0x1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x86, &(0x7f0000002600)}, 0x10) rt_sigsuspend(&(0x7f0000000380)={[0x6]}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f00)={{r6}, &(0x7f0000000580), &(0x7f0000001ec0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x1, 0x0, 0x0, 0xd}]}}, 0x0, 0x26}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdirat(r9, &(0x7f0000000000)='./file0\x00', 0x0) move_mount(r9, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = dup(r10) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x4, 0x0, 0x0) 1.04108496s ago: executing program 1 (id=335): openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff01", @ANYRES16=r0], 0x0) 922.427151ms ago: executing program 4 (id=336): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fef5251d8a250e33413d038fb4"}]}, 0x40}}, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r11, 0x0, 0x488, &(0x7f00000000c0)={{0x29, @rand_addr=0x64010101, 0x4e23, 0x1, 'lblcr\x00', 0x2, 0x3f, 0x70}, {@local, 0x4e21, 0x0, 0x6, 0xfffffcb9, 0x5d09}}, 0x44) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) 111.88882ms ago: executing program 3 (id=337): r0 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(0xffffffffffffffff, r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b00)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x40043, 0x0) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000900)=0x3ff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @desc3}, 0x21, 0x0, '\x00', @c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @aes256, 0x0, @desc3}) openat(0xffffffffffffff9c, &(0x7f0000000700)='mnt/encrypted_dir\x00', 0x41c0b1, 0x108) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0xcc, 0xe8}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x20}, 0x38) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) read$FUSE(r9, &(0x7f00000015c0)={0x2020}, 0x2081) openat$cgroup(r4, &(0x7f0000000600)='syz0\x00', 0x200002, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = getpgrp(0x0) syz_open_procfs(r11, &(0x7f0000000940)='net/hci\x00') ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000180)={@private0, @rand_addr=' \x01\x00', @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10480000d}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x2c, r7, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 0s ago: executing program 4 (id=338): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) read$char_usb(r2, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$sock_SIOCSPGRP(r3, 0x8902, 0x0) r4 = openat$mixer(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r4, 0x80304d65, &(0x7f0000000080)) openat$vcs(0xffffff9c, &(0x7f0000000240), 0x541002, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000003c0)) ioctl$SNDCTL_DSP_GETFMTS(r4, 0x8004500b, &(0x7f00000000c0)=0x1000003) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000380)={0x0, 'wlan1\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000580)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000006c0)={0x0, 0x80000001, 0x10}, &(0x7f0000000700)=0xc) kernel console output (not intermixed with test programs): ): veth1_to_batadv: link becomes ready [ 207.384219][ T4668] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.403313][ T4668] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.413394][ T4668] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.426279][ T3688] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.446884][ T4668] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.462683][ T3688] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.474953][ T3898] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 207.484560][ T4841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 207.499645][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 207.518973][ T4843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 207.563120][ T4844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 207.580943][ T3898] usb 5-1: device descriptor read/8, error -71 [ 207.645478][ T3688] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.659394][ T3688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.685226][ T3688] usb 4-1: Product: syz [ 207.689444][ T3688] usb 4-1: Manufacturer: syz [ 207.694108][ T3688] usb 4-1: SerialNumber: syz [ 207.701654][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.715242][ T3898] usb usb5-port1: unable to enumerate USB device [ 207.733836][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.770674][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 207.776361][ T3688] usb 4-1: selecting invalid altsetting 1 [ 207.801471][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.810899][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.837191][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.570375][ T4835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.668696][ T4835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.755695][ T4835] CUSE: unknown device info "" [ 209.760605][ T4835] CUSE: DEVNAME unspecified [ 209.854910][ T3688] usb 4-1: selecting invalid altsetting 1 [ 209.860784][ T3688] cdc_ncm 4-1:1.0: bind() failure [ 210.604443][ T4865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'. [ 210.965412][ T3688] usb 4-1: USB disconnect, device number 5 [ 211.993110][ T4869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.139759][ T4869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.170091][ T4874] process 'syz.4.201' launched './file0' with NULL argv: empty string added [ 212.265347][ T4869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.575322][ T4874] loop4: detected capacity change from 0 to 1024 [ 213.602615][ T4874] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.704911][ T3658] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.714428][ T3658] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.723461][ T3658] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.732904][ T3656] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.743724][ T3658] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.786765][ T3658] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.816797][ T26] audit: type=1804 audit(1725028227.668:55): pid=4877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.202" name="/newroot/13/bus/file0" dev="overlay" ino=98 res=1 errno=0 [ 214.786146][ T4887] chnl_net:caif_netlink_parms(): no params data found [ 215.273935][ T4887] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.352646][ T4887] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.374642][ T4887] device bridge_slave_0 entered promiscuous mode [ 215.420990][ T4887] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.450961][ T4887] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.478192][ T4887] device bridge_slave_1 entered promiscuous mode [ 215.617659][ T4887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.967152][ T4887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.986744][ T3659] Bluetooth: hci7: command tx timeout [ 216.034234][ T4901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 216.169254][ T4887] team0: Port device team_slave_0 added [ 216.209316][ T4887] team0: Port device team_slave_1 added [ 216.374734][ T4887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.402147][ T4887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.528033][ T4887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.662819][ T4887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.690368][ T4887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.764325][ T4887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.821902][ T4906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.206'. [ 216.922845][ T4887] device hsr_slave_0 entered promiscuous mode [ 216.939524][ T4887] device hsr_slave_1 entered promiscuous mode [ 216.966901][ T4887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.994897][ T4887] Cannot create hsr debugfs directory [ 217.054836][ T3689] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 217.094341][ T4910] netlink: 'syz.0.209': attribute type 10 has an invalid length. [ 217.105385][ T3745] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 217.179357][ T4910] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 217.344892][ T3689] usb 5-1: device descriptor read/64, error -71 [ 217.777007][ T3689] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 217.795798][ T3745] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 218.270661][ T3656] Bluetooth: hci7: command tx timeout [ 218.312754][ T3745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.370913][ T3745] usb 4-1: config 0 descriptor?? [ 218.594948][ T3689] usb 5-1: device descriptor read/64, error -71 [ 219.462898][ T4908] binder: BC_ATTEMPT_ACQUIRE not supported [ 219.473031][ T3689] usb usb5-port1: attempt power cycle [ 219.498350][ T4908] binder: 4907:4908 ioctl c0306201 20000580 returned -22 [ 219.530631][ T4887] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.717778][ T3656] Bluetooth: hci7: command tx timeout [ 220.814925][ T3689] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 220.846226][ T3745] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 220.941007][ T3745] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 220.964027][ T3745] asix: probe of 4-1:0.0 failed with error -71 [ 221.042402][ T3745] usb 4-1: USB disconnect, device number 6 [ 221.112142][ T4887] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.114866][ T3689] usb 5-1: device not accepting address 14, error -71 [ 221.501503][ T4944] loop4: detected capacity change from 0 to 512 [ 221.566508][ T4944] EXT4-fs error (device loop4): __ext4_fill_super:5399: inode #2: comm syz.4.214: iget: special inode unallocated [ 221.620752][ T4887] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.655247][ T4944] EXT4-fs (loop4): get root inode failed [ 221.686134][ T4944] EXT4-fs (loop4): mount failed [ 223.224940][ T3656] Bluetooth: hci7: command tx timeout [ 223.761675][ T4887] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.504640][ T4963] tty tty3: ldisc open failed (-12), clearing slot 2 [ 227.906596][ T4974] netlink: 'syz.4.221': attribute type 12 has an invalid length. [ 228.636170][ T4976] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 228.847265][ T4981] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 228.975992][ T22] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 229.047425][ T4887] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.106519][ T4887] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.159428][ T4887] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 229.217316][ T4887] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.435167][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.469648][ T22] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 229.530445][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.624120][ T22] usb 4-1: config 0 descriptor?? [ 229.665235][ T4887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.687419][ T22] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 229.694356][ T22] usb 4-1: No valid video chain found. [ 229.910530][ T4933] usb 4-1: USB disconnect, device number 7 [ 229.922851][ T4887] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.086496][ T4996] loop4: detected capacity change from 0 to 2048 [ 231.348119][ T4996] loop4: p1 < > p4 [ 231.355165][ T4996] loop4: p4 size 8388608 extends beyond EOD, truncated [ 231.639617][ T4774] udevd[4774]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 231.643312][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.658863][ T4773] udevd[4773]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 231.703109][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.760432][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.772579][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.792599][ T3932] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.799832][ T3932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.141122][ T5009] loop3: detected capacity change from 0 to 512 [ 232.194875][ T3659] Bluetooth: hci2: command tx timeout [ 232.200708][ T3656] Bluetooth: hci2: hardware error 0x01 [ 232.212768][ T5009] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 232.428103][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.475871][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.509274][ T3932] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.516500][ T3932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.640096][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.718867][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.787770][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.832687][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.867240][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805f2cc000: rx timeout, send abort [ 232.969653][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.008407][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.151747][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.187584][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.238209][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.275682][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.298025][ T4887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.332880][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.372411][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.375692][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805f2cc000: abort rx timeout. Force session deactivation [ 233.385674][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.583535][ T3656] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 236.358696][ T5031] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 236.378340][ T5031] cramfs: wrong magic [ 237.896453][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.915173][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.927794][ T4887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.961907][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.976171][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.018024][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 238.037171][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.052382][ T4887] device veth0_vlan entered promiscuous mode [ 238.060617][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.070898][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.099242][ T4887] device veth1_vlan entered promiscuous mode [ 238.127551][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 238.136931][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 238.146056][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 238.176524][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.198893][ T4887] device veth0_macvtap entered promiscuous mode [ 238.221837][ T4887] device veth1_macvtap entered promiscuous mode [ 238.251534][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.262131][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.286055][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.303524][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.323626][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.336255][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.347655][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.358601][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.368764][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.381945][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.394157][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.414693][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.456611][ T4887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.465178][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.506969][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 238.550293][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.597968][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.866087][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.004570][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.113144][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.131398][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.163571][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.192661][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.212908][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.243158][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.254610][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.276919][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.288438][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.300480][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.310720][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.321524][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.333523][ T4887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.348644][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.349450][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.416702][ T4887] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.416741][ T4887] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.416768][ T4887] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.416804][ T4887] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.671479][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.671565][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.676318][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 239.813541][ T4771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.813596][ T4771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.818086][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 241.142049][ T5069] netlink: 104 bytes leftover after parsing attributes in process `syz.2.196'. [ 241.167261][ T5069] overlayfs: overlapping lowerdir path [ 241.811628][ T14] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 242.105914][ T5075] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 242.226462][ T14] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 242.249286][ T14] usb 5-1: can't read configurations, error -61 [ 243.204814][ T14] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 243.374931][ T3722] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 243.630259][ T14] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 243.650750][ T14] usb 5-1: can't read configurations, error -61 [ 243.665024][ T14] usb usb5-port1: attempt power cycle [ 243.671221][ T3658] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 243.683040][ T3658] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 243.691563][ T3658] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 243.701718][ T3658] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 243.709615][ T3658] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 243.717801][ T3658] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 243.754940][ T3722] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.771040][ T3722] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 243.780312][ T3722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.790649][ T3722] usb 1-1: config 0 descriptor?? [ 244.039874][ T4933] usb 1-1: USB disconnect, device number 5 [ 244.198473][ T5080] chnl_net:caif_netlink_parms(): no params data found [ 244.220601][ T26] audit: type=1326 audit(1725028258.208:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5082 comm="syz.2.238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7874f79ef9 code=0x0 [ 244.491407][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.505458][ T5080] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.516938][ T5080] device bridge_slave_0 entered promiscuous mode [ 244.526963][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.534586][ T5080] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.545664][ T5080] device bridge_slave_1 entered promiscuous mode [ 244.586319][ T5080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.608649][ T5080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.678775][ T5080] team0: Port device team_slave_0 added [ 244.698193][ T5080] team0: Port device team_slave_1 added [ 244.789782][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.801176][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.847958][ T5080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.869389][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.885556][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.924835][ T5080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.086790][ T5080] device hsr_slave_0 entered promiscuous mode [ 245.113571][ T5080] device hsr_slave_1 entered promiscuous mode [ 245.324942][ T5080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.333629][ T5080] Cannot create hsr debugfs directory [ 246.255339][ T5112] tmpfs: Bad value for 'nr_inodes' [ 246.627205][ T3656] Bluetooth: hci8: command tx timeout [ 247.279840][ T26] audit: type=1326 audit(1725028261.268:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 247.358262][ T26] audit: type=1326 audit(1725028261.268:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 248.525649][ T26] audit: type=1326 audit(1725028261.298:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfa6778890 code=0x7ffc0000 [ 248.604383][ T26] audit: type=1326 audit(1725028261.298:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcfa677b727 code=0x7ffc0000 [ 248.654826][ T3658] Bluetooth: hci8: command tx timeout [ 248.766881][ T26] audit: type=1326 audit(1725028261.298:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 248.928284][ T26] audit: type=1326 audit(1725028261.298:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 249.035136][ T26] audit: type=1326 audit(1725028261.298:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 249.265115][ T26] audit: type=1326 audit(1725028261.298:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 249.265745][ T5080] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.332441][ T3656] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 249.343169][ T3656] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 249.352897][ T3656] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 249.361176][ T3656] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 249.369820][ T3656] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 249.377272][ T3656] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 249.617526][ T26] audit: type=1326 audit(1725028261.298:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 249.683725][ T26] audit: type=1326 audit(1725028261.308:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 249.770764][ T26] audit: type=1326 audit(1725028261.308:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 249.863364][ T26] audit: type=1326 audit(1725028261.308:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 249.931381][ T26] audit: type=1326 audit(1725028261.308:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 250.044497][ T5080] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.134842][ T26] audit: type=1326 audit(1725028261.308:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 250.157284][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.174851][ T26] audit: type=1326 audit(1725028261.308:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 250.310384][ T5132] loop4: detected capacity change from 0 to 16 [ 250.384299][ T5132] erofs: (device loop4): mounted with root inode @ nid 36. [ 250.391711][ T26] audit: type=1326 audit(1725028261.308:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 250.391759][ T26] audit: type=1326 audit(1725028261.308:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.0.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 250.504926][ T5080] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.736169][ T3656] Bluetooth: hci8: command tx timeout [ 251.406126][ T5080] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.445582][ T3656] Bluetooth: hci9: command tx timeout [ 251.467578][ T5127] chnl_net:caif_netlink_parms(): no params data found [ 251.714656][ T5145] netlink: 'syz.0.250': attribute type 10 has an invalid length. [ 251.735080][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.742272][ T5127] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.749651][ T4933] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 251.797375][ T5127] device bridge_slave_0 entered promiscuous mode [ 251.827092][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.834208][ T5127] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.892552][ T5127] device bridge_slave_1 entered promiscuous mode [ 252.112701][ T5127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.145378][ T5127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.188459][ T5080] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 252.205046][ T4933] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 252.216634][ T4933] usb 5-1: can't read configurations, error -61 [ 252.272145][ T5080] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 252.304193][ T5127] team0: Port device team_slave_0 added [ 252.329126][ T5080] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 252.355685][ T5127] team0: Port device team_slave_1 added [ 252.384926][ T4933] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 252.407375][ T5080] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 252.487960][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.500406][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.564880][ T3659] Bluetooth: hci3: command 0x0406 tx timeout [ 252.574396][ T5127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.668825][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.685346][ T5149] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 252.692298][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.798155][ T5127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.814948][ T3659] Bluetooth: hci8: command tx timeout [ 252.835056][ T4933] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 252.842722][ T4933] usb 5-1: can't read configurations, error -61 [ 252.880712][ T4933] usb usb5-port1: attempt power cycle [ 252.908749][ T5127] device hsr_slave_0 entered promiscuous mode [ 252.926428][ T5127] device hsr_slave_1 entered promiscuous mode [ 252.933295][ T5127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.941031][ T5127] Cannot create hsr debugfs directory [ 253.022930][ T5080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.059206][ T5051] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 253.127682][ T5080] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.154614][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.175536][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.215999][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.236594][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.267630][ T3699] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.274828][ T3699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.305548][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 253.324976][ T4933] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 253.421265][ T5127] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.442785][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.455219][ T5051] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.467983][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.476900][ T5051] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 253.491831][ T3699] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.499003][ T3699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.507625][ T5051] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.525471][ T3659] Bluetooth: hci9: command tx timeout [ 253.526125][ T5051] usb 1-1: config 0 descriptor?? [ 253.543551][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.625192][ T4933] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 253.634980][ T4933] usb 5-1: can't read configurations, error -61 [ 253.645257][ T5127] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.689272][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.711648][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.727541][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.746923][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.784137][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.792082][ T3632] usb 1-1: USB disconnect, device number 6 [ 253.805045][ T4933] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 253.835376][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.845638][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.856720][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.917257][ T5127] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.936680][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.946639][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.962076][ T5080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.049320][ T5127] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.115157][ T4933] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 254.131305][ T4933] usb 5-1: can't read configurations, error -61 [ 254.152081][ T4933] usb usb5-port1: unable to enumerate USB device [ 254.302634][ T5127] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 254.359443][ T5127] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 254.386220][ T5127] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 254.418031][ T5127] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 254.654172][ T5162] loop4: detected capacity change from 0 to 256 [ 254.701485][ T5162] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.902714][ T3659] Bluetooth: hci9: command tx timeout [ 256.912645][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.923917][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.430376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.445663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.460893][ T5080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.472097][ T5127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.512241][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.523835][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.542628][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.562688][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.586885][ T5127] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.613863][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.640253][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.659538][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.675754][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.696950][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.715777][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.737026][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.744347][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.768611][ T5080] device veth0_vlan entered promiscuous mode [ 257.786428][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.807141][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.828916][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.845561][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.852749][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.879253][ T5080] device veth1_vlan entered promiscuous mode [ 257.899250][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 257.917037][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.957945][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 257.977120][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.994124][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.011873][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.035051][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.073611][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.084580][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.104280][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.124473][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.135541][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.144379][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.154274][ T5080] device veth0_macvtap entered promiscuous mode [ 258.176792][ T5080] device veth1_macvtap entered promiscuous mode [ 258.193936][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 258.206559][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 258.225937][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.238098][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.251145][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.294126][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.325991][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.339656][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.364878][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.384888][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.415364][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.434884][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.461419][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.482856][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.504834][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.514695][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.538263][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.561978][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.584212][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.606704][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.621931][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.637162][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.663256][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.684834][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.694692][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.725043][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.744869][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.774840][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.794920][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.816912][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.842113][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.854519][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.877486][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.900901][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.922427][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.944435][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.956728][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.968088][ T3659] Bluetooth: hci9: command tx timeout [ 258.973729][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.987432][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.002479][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.015780][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.050600][ T5080] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.062630][ T5080] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.072565][ T5080] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.081654][ T5080] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.093825][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.102303][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.127378][ T5127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.224419][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.233365][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.245981][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.259640][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.286515][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 259.351855][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.377868][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.396385][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.417700][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.439012][ T5127] device veth0_vlan entered promiscuous mode [ 259.462308][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.486238][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.496271][ T5127] device veth1_vlan entered promiscuous mode [ 259.522935][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 259.545914][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 259.554415][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 259.586100][ T5127] device veth0_macvtap entered promiscuous mode [ 259.594070][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.603720][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.616168][ T5127] device veth1_macvtap entered promiscuous mode [ 259.635055][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.654444][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.720169][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.738098][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 259.738115][ T26] audit: type=1326 audit(1725028273.728:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5176 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 259.744899][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.783961][ T5179] loop3: detected capacity change from 0 to 512 [ 259.801090][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.817117][ T26] audit: type=1326 audit(1725028273.728:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5176 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 259.878078][ T26] audit: type=1326 audit(1725028273.768:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5176 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 259.900559][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.911048][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.921935][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.934217][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.946274][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.956535][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.969131][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.981790][ T5179] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 259.994815][ T5179] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 260.004341][ T5179] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.237: Failed to acquire dquot type 0 [ 260.017941][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.028850][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.042857][ T5179] EXT4-fs (loop3): Remounting filesystem read-only [ 260.049933][ T26] audit: type=1326 audit(1725028273.768:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5176 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 260.072885][ T5179] EXT4-fs (loop3): 1 orphan inode deleted [ 260.087862][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.101200][ T5179] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 260.110712][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.121128][ T5179] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 260.131444][ T26] audit: type=1326 audit(1725028273.768:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5176 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 260.156822][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.178007][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.194189][ T5179] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 260.218210][ T26] audit: type=1326 audit(1725028273.778:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5176 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcfa6779ef9 code=0x7ffc0000 [ 260.247424][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.267210][ T5179] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 260.283677][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.298575][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.307402][ T5179] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.237: Failed to acquire dquot type 0 [ 260.338171][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.356806][ T5179] EXT4-fs (loop3): Remounting filesystem read-only [ 260.377058][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.394944][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.424978][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.444879][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.464784][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.543091][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.603952][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.618927][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.631792][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.674987][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.691808][ T5187] EXT4-fs (loop3): shut down requested (2) [ 260.710298][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.814875][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.886937][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.927919][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.969892][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.015058][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.043707][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.068997][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.087377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.104665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.149239][ T5127] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.184833][ T5127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.193604][ T5127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.244800][ T5127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.254698][ T5080] EXT4-fs (loop3): unmounting filesystem. [ 261.444320][ T5193] loop3: detected capacity change from 0 to 512 [ 261.772467][ T5193] EXT4-fs (loop3): Test dummy encryption mode enabled [ 261.960905][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.019331][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.399726][ T3700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.419203][ T3700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.437453][ T5193] EXT4-fs error (device loop3): __ext4_iget:5055: inode #11: block 1: comm syz.3.257: invalid block [ 262.489926][ T5193] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.257: couldn't read orphan inode 11 (err -117) [ 262.585208][ T5193] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 262.748091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 262.806024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 263.639147][ T5193] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 264.439749][ T5212] netlink: 3 bytes leftover after parsing attributes in process `syz.0.259'. [ 266.296727][ T5080] EXT4-fs (loop3): unmounting filesystem. [ 267.674113][ T14] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 267.720750][ T3656] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 267.737220][ T3651] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 267.771453][ T3651] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 267.780521][ T3656] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 267.788083][ T3651] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 267.797997][ T3656] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 267.808711][ T3656] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 267.816369][ T3651] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 267.824671][ T3656] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 267.863385][ T3654] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 267.870911][ T3654] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 267.878433][ T3656] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 268.185015][ T14] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 268.198302][ T14] usb 2-1: can't read configurations, error -61 [ 268.226834][ T5239] sctp: [Deprecated]: syz.0.266 (pid 5239) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.226834][ T5239] Use struct sctp_sack_info instead [ 268.257630][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 268.347260][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 268.384963][ T14] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 268.393682][ T5243] Cannot find del_set index 2 as target [ 268.551311][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.564363][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.573439][ T5231] device bridge_slave_0 entered promiscuous mode [ 268.596940][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.612521][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.628662][ T5231] device bridge_slave_1 entered promiscuous mode [ 268.638472][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.649152][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.657872][ T5233] device bridge_slave_0 entered promiscuous mode [ 268.677727][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.687458][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.696432][ T5233] device bridge_slave_1 entered promiscuous mode [ 268.771890][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.785243][ T14] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 268.792865][ T14] usb 2-1: can't read configurations, error -61 [ 268.802793][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.824998][ T14] usb usb2-port1: attempt power cycle [ 268.827463][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.852721][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.932852][ T5231] team0: Port device team_slave_0 added [ 268.951980][ T5233] team0: Port device team_slave_0 added [ 268.966080][ T5231] team0: Port device team_slave_1 added [ 268.977043][ T5233] team0: Port device team_slave_1 added [ 269.068629][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.083399][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.134974][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.244836][ T14] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 269.454194][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.472091][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.926383][ T3654] Bluetooth: hci10: command tx timeout [ 269.934020][ T3654] Bluetooth: hci11: command tx timeout [ 270.225514][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.239936][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.248346][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.274982][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.325859][ T14] usb 2-1: device descriptor read/all, error -71 [ 270.546365][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.553407][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.654886][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.790333][ T5231] device hsr_slave_0 entered promiscuous mode [ 270.816070][ T5231] device hsr_slave_1 entered promiscuous mode [ 270.846251][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.901221][ T5231] Cannot create hsr debugfs directory [ 271.057553][ T5271] loop3: detected capacity change from 0 to 512 [ 273.454858][ T3659] Bluetooth: hci11: command tx timeout [ 273.454900][ T3658] Bluetooth: hci10: command tx timeout [ 273.460480][ T3656] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 273.472334][ T3654] Bluetooth: hci4: command 0x0406 tx timeout [ 273.476013][ T3656] Bluetooth: hci3: Injecting HCI hardware error event [ 273.478414][ T3659] Bluetooth: hci3: hardware error 0x00 [ 274.435657][ T5233] device hsr_slave_0 entered promiscuous mode [ 274.473652][ T5233] device hsr_slave_1 entered promiscuous mode [ 274.486580][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.502744][ T5233] Cannot create hsr debugfs directory [ 275.008908][ T5282] netlink: 'syz.3.274': attribute type 1 has an invalid length. [ 275.417681][ T5285] loop3: detected capacity change from 0 to 256 [ 276.404943][ T3659] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 276.411816][ T3659] Bluetooth: hci11: command tx timeout [ 276.976329][ T3659] Bluetooth: hci10: command tx timeout [ 277.005086][ T5285] FAT-fs (loop3): bogus logical sector size 8 [ 277.011239][ T5285] FAT-fs (loop3): Can't find a valid FAT filesystem [ 277.099761][ T5233] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.450128][ T5290] fuse: Bad value for 'fd' [ 277.663583][ T5233] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.397360][ T5233] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.467107][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 278.485191][ T3658] Bluetooth: hci11: command tx timeout [ 278.519840][ T5233] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.794174][ T5231] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.852483][ T5302] netlink: 'syz.3.278': attribute type 10 has an invalid length. [ 278.940744][ T5302] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 279.013575][ T5231] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.045086][ T3658] Bluetooth: hci10: command tx timeout [ 279.055491][ T3687] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 279.151623][ T5231] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.342496][ T5231] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.445516][ T3687] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 279.463881][ T3687] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.494519][ T3687] usb 1-1: config 0 has no interface number 0 [ 279.500902][ T3687] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 279.524944][ T3687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.594452][ T3687] usb 1-1: config 0 descriptor?? [ 279.777732][ T5231] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 279.859026][ T3687] usb 1-1: USB disconnect, device number 7 [ 279.893772][ T5231] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.925587][ T5231] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.956194][ T5231] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 279.999702][ T5233] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 280.047186][ T5233] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 280.088858][ T5233] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 280.139625][ T5233] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 280.261962][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.285042][ T14] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 280.334631][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.366082][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.382729][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.429740][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.446682][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.486706][ T3895] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.493921][ T3895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.519851][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.555481][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 280.592217][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.626626][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.668250][ T3932] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.675435][ T3932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.685352][ T14] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 280.736316][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.767568][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.788387][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.818204][ T14] usb 4-1: config 0 descriptor?? [ 280.821185][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.882415][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.906681][ T14] usb 4-1: bad CDC descriptors [ 280.913363][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.927508][ T14] usb 4-1: bad CDC descriptors [ 280.965337][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.988444][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.057397][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.076436][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.116147][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 281.161848][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.201470][ T5231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 281.261275][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.392629][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.419569][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 281.432568][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.460551][ T5316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.284'. [ 281.503811][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 281.529847][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.567030][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.574164][ T4727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.669755][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 281.706212][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.738518][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.745673][ T4727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.786562][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.827313][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 282.196080][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.247069][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 282.259716][ T3659] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 282.407863][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 282.423449][ T3659] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 282.432424][ T3659] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 282.443505][ T3659] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 282.451995][ T3659] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 282.459871][ T3659] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 282.461586][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.229214][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 283.256342][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.277731][ T948] usb 4-1: USB disconnect, device number 8 [ 283.312784][ T3815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.343241][ T3815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.376636][ T3815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.405925][ T3815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.432140][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.614649][ T5337] syz.3.287[5337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.615852][ T5337] syz.3.287[5337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.653292][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.721291][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.800422][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.278158][ T5322] chnl_net:caif_netlink_parms(): no params data found [ 284.400416][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.414318][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.475264][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.650152][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 284.695948][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.727884][ T5322] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.735629][ T5322] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.744463][ T5322] device bridge_slave_0 entered promiscuous mode [ 284.755652][ T5322] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.763785][ T5322] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.772872][ T5322] device bridge_slave_1 entered promiscuous mode [ 284.846138][ T5322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.860457][ T5322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.933862][ T3815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 284.943573][ T3815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.965487][ T5322] team0: Port device team_slave_0 added [ 284.974332][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.996771][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.237040][ T3658] Bluetooth: hci12: command tx timeout [ 285.540859][ T5322] team0: Port device team_slave_1 added [ 285.574968][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.607486][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.682860][ T5231] device veth0_vlan entered promiscuous mode [ 285.700419][ T5233] device veth0_vlan entered promiscuous mode [ 285.711756][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 285.731754][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.774429][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.814498][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.882048][ T5233] device veth1_vlan entered promiscuous mode [ 285.914534][ T5231] device veth1_vlan entered promiscuous mode [ 285.938655][ T5322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.958321][ T5322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.987856][ T5322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.007731][ T5322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.018653][ T5322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.048996][ T5322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.284238][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.294380][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 286.313502][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.327848][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.285740][ T3656] Bluetooth: hci12: command tx timeout [ 287.367935][ T5233] device veth0_macvtap entered promiscuous mode [ 287.404393][ T5231] device veth0_macvtap entered promiscuous mode [ 287.442821][ T5322] device hsr_slave_0 entered promiscuous mode [ 287.456056][ T5322] device hsr_slave_1 entered promiscuous mode [ 287.474838][ T5322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.482489][ T5322] Cannot create hsr debugfs directory [ 287.490197][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 287.497958][ T5359] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 287.526712][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.662273][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.696598][ T5233] device veth1_macvtap entered promiscuous mode [ 287.732314][ T5231] device veth1_macvtap entered promiscuous mode [ 287.741712][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 287.795354][ T5359] usb 4-1: Using ep0 maxpacket: 32 [ 287.863312][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.952046][ T5359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.961343][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.973117][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.995314][ T5371] overlayfs: missing 'lowerdir' [ 288.044553][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.054849][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.065013][ T5359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.065557][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.085341][ T5359] usb 4-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 288.104804][ T5359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.105513][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.133254][ T5359] usb 4-1: config 0 descriptor?? [ 288.139400][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.139427][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.139446][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.139464][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.139479][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.502521][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.513478][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.533916][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.547770][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.558821][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.583176][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.601012][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.622673][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.649758][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.674888][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.701874][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.722314][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.750891][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.786710][ T5359] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0934.0006/input/input8 [ 288.814879][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.855482][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.866610][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.887311][ T3658] Bluetooth: hci5: command 0x0406 tx timeout [ 288.893425][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.910908][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.925034][ T5359] uclogic 0003:28BD:0934.0006: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.3-1/input0 [ 288.934996][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.957288][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.970863][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.986767][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.000021][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.008155][ T5359] usb 4-1: USB disconnect, device number 9 [ 289.017684][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.028675][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.049205][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.073418][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.092054][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.128190][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 289.155929][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.196188][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 289.206252][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.240833][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.265754][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.297848][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.319029][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.339526][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.365574][ T3656] Bluetooth: hci12: command tx timeout [ 289.371242][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.382243][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.393178][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.403465][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.414846][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.425205][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.436613][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.447789][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.458647][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.470231][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.481062][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.491560][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.502826][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.513746][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.524701][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.538631][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.554260][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.565317][ T3687] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 289.575681][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.586080][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.596725][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.607454][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.618042][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.628292][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.638840][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.649022][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.660372][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.670523][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.682284][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.692896][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.736393][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.754886][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.781633][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.805058][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.845615][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.875460][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.902826][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.919929][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.931264][ T3687] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 289.954771][ T3687] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.965837][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.984913][ T3687] usb 1-1: config 0 has no interface number 0 [ 289.996874][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.014496][ T3687] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 290.047077][ T5233] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.056428][ T3687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.089755][ T5233] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.098639][ T5233] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.107530][ T5233] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.118908][ T3687] usb 1-1: config 0 descriptor?? [ 290.126737][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.151854][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.275508][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 291.066481][ T3687] usb 1-1: USB disconnect, device number 8 [ 291.067164][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.129635][ T5231] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.146394][ T5231] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.163133][ T5231] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.182381][ T5231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.429898][ T5048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.454681][ T3658] Bluetooth: hci12: command tx timeout [ 291.462556][ T5048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.477981][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 291.500104][ T3932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.519175][ T3932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.626433][ T5322] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.661548][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 291.713539][ T4943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.736975][ T4943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.968970][ T5322] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.993395][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 292.802268][ T5322] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.993983][ T4943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.017096][ T4943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.070827][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 293.605926][ T5400] Illegal XDP return value 4294967274 on prog (id 119) dev N/A, expect packet loss! [ 294.468007][ T5322] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.662866][ T5410] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 294.686440][ T5409] fuse: Bad value for 'fd' [ 295.033951][ T3745] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 295.844973][ T3745] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.865636][ T3745] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 295.915007][ T3745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.985844][ T3745] usb 5-1: config 0 descriptor?? [ 296.128049][ T5322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 296.174541][ T5322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 296.216541][ T3691] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 296.256629][ T3688] usb 5-1: USB disconnect, device number 23 [ 296.287902][ T5322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 296.467666][ T5322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 299.275922][ T3691] usb 4-1: Using ep0 maxpacket: 8 [ 299.734908][ T3691] usb 4-1: device descriptor read/all, error -71 [ 300.178713][ T5322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.265673][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.274944][ T4772] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 300.293517][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.350242][ T5322] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.366725][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.387698][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.414871][ T3691] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 300.438399][ T5419] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.445571][ T5419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.484221][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.514847][ T4772] usb 5-1: Using ep0 maxpacket: 8 [ 300.531254][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.585837][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.625656][ T5419] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.632815][ T5419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.641331][ T4772] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 300.661339][ T4772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.695250][ T3691] usb 4-1: Using ep0 maxpacket: 8 [ 300.722261][ T4772] usb 5-1: config 0 descriptor?? [ 300.738183][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.805707][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.825554][ T4772] usb 5-1: bad CDC descriptors [ 300.834979][ T3691] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 300.844158][ T3691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.846884][ T4772] usb 5-1: bad CDC descriptors [ 300.865426][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.900409][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.917726][ T3691] usb 4-1: config 0 descriptor?? [ 300.958817][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.974265][ T3691] usb 4-1: bad CDC descriptors [ 300.980674][ T3691] usb 4-1: bad CDC descriptors [ 300.992524][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 301.011276][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 301.031916][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.062659][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 301.082069][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 301.125211][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.152814][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.772151][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.786731][ T3932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.830583][ T5322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.854805][ T3691] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 301.930892][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 301.951615][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 302.027542][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 302.046260][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.091522][ T5322] device veth0_vlan entered promiscuous mode [ 302.103194][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 302.114883][ T3691] usb 3-1: Using ep0 maxpacket: 16 [ 302.140684][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.184645][ T5322] device veth1_vlan entered promiscuous mode [ 302.241568][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 302.255782][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 302.274943][ T3691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 302.284638][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 302.316100][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.350193][ T5322] device veth0_macvtap entered promiscuous mode [ 302.398667][ T3691] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 302.421222][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 302.449378][ T3691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.465737][ T5322] device veth1_macvtap entered promiscuous mode [ 302.511814][ T3691] usb 3-1: config 0 descriptor?? [ 302.534532][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.583254][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.617926][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.669591][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.702330][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.750769][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.796865][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.804638][ T5448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.847880][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.888104][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.914997][ T153] usb 5-1: USB disconnect, device number 24 [ 302.916749][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.987917][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.013146][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.026071][ T7] usb 4-1: USB disconnect, device number 11 [ 303.043590][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.065994][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.088442][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.099513][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.109776][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.120723][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.132011][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.142977][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.153268][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.164184][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.176883][ T5322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.186722][ T5448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.194611][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 303.210842][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.252172][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.292118][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.324121][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.350852][ T5455] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 303.359276][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.360690][ T5455] ADFS-fs (loop7): error: unable to read block 3, try 0 [ 303.376515][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.388062][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.818058][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.418107][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.474957][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.529952][ T5465] loop3: detected capacity change from 0 to 512 [ 306.537647][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.564568][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.580476][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.602536][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.639945][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.664764][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.704763][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.704931][ T3691] usbhid 3-1:0.0: can't add hid device: -71 [ 306.714597][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.714618][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.714636][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.730834][ T3691] usbhid: probe of 3-1:0.0 failed with error -71 [ 306.787728][ T3691] usb 3-1: USB disconnect, device number 5 [ 306.821573][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.845284][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.877708][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.908066][ T5322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.929053][ T5322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.951388][ T5322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.974856][ T5463] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 307.011373][ T5322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.028649][ T5465] loop3: detected capacity change from 0 to 2048 [ 307.045174][ T5322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.053955][ T5322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.071235][ T3659] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 307.083801][ T3654] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 307.087427][ T5465] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 307.100265][ T3659] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 307.108491][ T5322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.118142][ T3659] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 307.135412][ T3659] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 307.142808][ T3659] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 307.596103][ T5474] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 308.084268][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.145700][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.179910][ T5472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 308.451977][ T5476] loop3: detected capacity change from 0 to 1024 [ 308.482204][ T5476] hfsplus: unable to parse mount options [ 309.021961][ T3658] Bluetooth: hci6: command 0x0406 tx timeout [ 309.032396][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 309.032410][ T26] audit: type=1326 audit(1725028323.018:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.4.311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3202b79ef9 code=0x0 [ 309.205108][ T3658] Bluetooth: hci13: command tx timeout [ 309.237197][ T4943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.360408][ T4943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.680508][ T4943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 310.910311][ T5485] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 310.980015][ T5485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.165889][ T5485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 311.297607][ T3658] Bluetooth: hci13: command tx timeout [ 311.905547][ T26] audit: type=1326 audit(1725028325.898:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3202b79ef9 code=0x7ffc0000 [ 312.319879][ T26] audit: type=1326 audit(1725028326.038:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3202b79ef9 code=0x7ffc0000 [ 312.365171][ T26] audit: type=1326 audit(1725028326.278:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3202b79ef9 code=0x7ffc0000 [ 312.407850][ T26] audit: type=1326 audit(1725028326.278:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3202b79ef9 code=0x7ffc0000 [ 312.453201][ T26] audit: type=1326 audit(1725028326.278:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3202b79ef9 code=0x7ffc0000 [ 312.485504][ T26] audit: type=1326 audit(1725028326.288:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3202b79ef9 code=0x7ffc0000 [ 312.529119][ T26] audit: type=1326 audit(1725028326.288:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3202b79ef9 code=0x7ffc0000 [ 312.562109][ T26] audit: type=1326 audit(1725028326.288:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3202b79ef9 code=0x7ffc0000 [ 312.586735][ T26] audit: type=1326 audit(1725028326.288:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3202b79ef9 code=0x7ffc0000 [ 312.617234][ T3927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.653463][ T5468] chnl_net:caif_netlink_parms(): no params data found [ 312.660453][ T3927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.696285][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 312.705242][ T3723] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 313.028271][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.038074][ T5468] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.073001][ T5468] device bridge_slave_0 entered promiscuous mode [ 313.099488][ T5468] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.134945][ T3723] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 313.139800][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.164829][ T3723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.170790][ T5468] device bridge_slave_1 entered promiscuous mode [ 313.196323][ T3723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.220484][ T3723] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 313.264816][ T3723] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 313.265429][ T5468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.294287][ T3723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.330019][ T3723] usb 5-1: config 0 descriptor?? [ 313.338665][ T5468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.365202][ T3658] Bluetooth: hci13: command tx timeout [ 313.546387][ T5468] team0: Port device team_slave_0 added [ 313.568828][ T5468] team0: Port device team_slave_1 added [ 314.100194][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 314.100210][ T26] audit: type=1326 audit(1725028328.088:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3202b79afb code=0x7ffc0000 [ 314.198838][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.235064][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.335687][ T26] audit: type=1326 audit(1725028328.118:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3202b79afb code=0x7ffc0000 [ 314.352193][ T5468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.361529][ T26] audit: type=1326 audit(1725028328.138:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3202babfe5 code=0x7ffc0000 [ 314.475209][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.482191][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.484905][ T26] audit: type=1326 audit(1725028328.348:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3202b79ef9 code=0x7ffc0000 [ 314.533138][ T5468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.538966][ T3723] hid-picolcd 0003:04D8:C002.0007: unbalanced collection at end of report description [ 314.574832][ T4772] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 314.608481][ T3723] hid-picolcd 0003:04D8:C002.0007: device report parse failed [ 314.622005][ T5468] device hsr_slave_0 entered promiscuous mode [ 314.646285][ T3723] hid-picolcd: probe of 0003:04D8:C002.0007 failed with error -22 [ 314.667713][ T5468] device hsr_slave_1 entered promiscuous mode [ 314.688622][ T26] audit: type=1326 audit(1725028328.348:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3202b79ef9 code=0x7ffc0000 [ 314.717761][ T5468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.746374][ T5468] Cannot create hsr debugfs directory [ 314.796460][ T26] audit: type=1326 audit(1725028328.388:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3202b79ef9 code=0x7ffc0000 [ 314.824781][ T4772] usb 2-1: Using ep0 maxpacket: 8 [ 314.873009][ T3723] usb 5-1: USB disconnect, device number 25 [ 314.880638][ T26] audit: type=1326 audit(1725028328.388:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3202b79ef9 code=0x7ffc0000 [ 314.955131][ T4772] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 314.970731][ T26] audit: type=1326 audit(1725028328.388:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3202b79ef9 code=0x7ffc0000 [ 315.013681][ T4772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.049811][ T4772] usb 2-1: config 0 descriptor?? [ 315.080934][ T26] audit: type=1326 audit(1725028328.398:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3202b79ef9 code=0x7ffc0000 [ 315.110833][ T4772] usb 2-1: bad CDC descriptors [ 315.121380][ T4772] usb 2-1: bad CDC descriptors [ 315.196145][ T26] audit: type=1326 audit(1725028328.398:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3202b79ef9 code=0x7ffc0000 [ 315.453559][ T5468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.467013][ T3658] Bluetooth: hci13: command tx timeout [ 316.637071][ T5468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.688718][ T3691] usb 2-1: USB disconnect, device number 11 [ 316.893221][ T5468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.040561][ T5468] bond0: (slave netdevsim0): Releasing backup interface [ 317.064233][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.070655][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.103144][ T5468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.141711][ T5545] netlink: 'syz.1.321': attribute type 4 has an invalid length. [ 317.252336][ T5546] netlink: 'syz.1.321': attribute type 4 has an invalid length. [ 318.429925][ T5554] netlink: 'syz.1.323': attribute type 12 has an invalid length. [ 318.912174][ T5468] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 318.940724][ T5468] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.215525][ T5563] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 319.239390][ T5468] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.316651][ T5468] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 319.335476][ T5560] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.325'. [ 319.359357][ T5567] loop3: detected capacity change from 0 to 8 [ 319.504913][ T3723] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 320.855150][ T3723] usb 5-1: Using ep0 maxpacket: 32 [ 320.998653][ T3723] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 44346, setting to 1024 [ 321.048754][ T3723] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 321.094509][ T3723] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 321.106556][ T5468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.144820][ T3723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.196099][ T5558] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 321.216154][ T3723] hub 5-1:4.0: bad descriptor, ignoring hub [ 321.222117][ T3723] hub: probe of 5-1:4.0 failed with error -5 [ 321.222560][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.261433][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.278351][ T5468] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.288155][ T3723] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 321.291853][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.309781][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.351841][ T5048] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.358977][ T5048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.432444][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 321.465856][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.514805][ T5402] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 321.528814][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.545937][ T5048] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.553072][ T5048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.599343][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.679422][ T5048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.746307][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.784894][ T5402] usb 2-1: Using ep0 maxpacket: 8 [ 321.840870][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.876523][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 321.905128][ T5402] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 321.940587][ T5402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.969170][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.989071][ T5402] usb 2-1: config 0 descriptor?? [ 322.018575][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 322.064304][ T5402] usb 2-1: bad CDC descriptors [ 322.070845][ T5402] usb 2-1: bad CDC descriptors [ 322.078748][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 322.096486][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 322.140942][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 322.219617][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.046413][ T3723] usb 5-1: USB disconnect, device number 26 [ 323.407748][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.428452][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.459172][ T5468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.588544][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.615482][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.727583][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 323.742232][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.800402][ T5468] device veth0_vlan entered promiscuous mode [ 323.817365][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.851772][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.906828][ T5468] device veth1_vlan entered promiscuous mode [ 324.031984][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 324.080155][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 324.122863][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 324.276605][ T4089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.290144][ T5468] device veth0_macvtap entered promiscuous mode [ 324.315619][ T5597] netlink: 'syz.2.341': attribute type 12 has an invalid length. [ 324.336953][ T5468] device veth1_macvtap entered promiscuous mode [ 324.752992][ T5597] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 325.125831][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.172979][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.235759][ T3691] usb 2-1: USB disconnect, device number 12 [ 325.247258][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.265408][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.278039][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.300843][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.323296][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 325.323313][ T26] audit: type=1326 audit(1725028339.308:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb551579ef9 code=0x7ffc0000 [ 325.325410][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.332860][ T26] audit: type=1326 audit(1725028339.308:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb551579ef9 code=0x7ffc0000 [ 325.386663][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.386686][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.386701][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.386715][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.386727][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.386742][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.386754][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.386768][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.386779][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.386793][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.386805][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.386821][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.386832][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.386841][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.386852][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.386870][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.386881][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.388714][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.473748][ T26] audit: type=1326 audit(1725028339.308:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb551579ef9 code=0x7ffc0000 [ 325.554858][ T3722] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 325.593184][ T26] audit: type=1326 audit(1725028339.308:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb551579ef9 code=0x7ffc0000 [ 325.656660][ T26] audit: type=1326 audit(1725028339.308:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb551579ef9 code=0x7ffc0000 [ 325.719454][ T3815] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 325.729853][ T3815] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 325.739097][ T3815] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.766759][ T26] audit: type=1326 audit(1725028339.308:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb551579ef9 code=0x7ffc0000 [ 325.767267][ T3815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.824514][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.837139][ T26] audit: type=1326 audit(1725028339.308:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb551579ef9 code=0x7ffc0000 [ 325.854812][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.866960][ T26] audit: type=1326 audit(1725028339.348:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb551579ef9 code=0x7ffc0000 [ 325.893384][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.904319][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.915532][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.930829][ T26] audit: type=1326 audit(1725028339.348:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb551579ef9 code=0x7ffc0000 [ 325.953984][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.964557][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.975896][ T26] audit: type=1326 audit(1725028339.348:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fb551579ef9 code=0x7ffc0000 [ 326.000566][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.022285][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.035424][ T3689] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 326.046491][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.066713][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.089680][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.100345][ T3722] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.116384][ T3722] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 326.134862][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.154894][ T3722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.163232][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.186766][ T3722] usb 3-1: config 0 descriptor?? [ 326.195235][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.216357][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.243745][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.274837][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.296362][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.305516][ T5622] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 326.314858][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.334854][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.354834][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.374855][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.392469][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.405249][ T3689] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.420353][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.435341][ T3689] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 326.444676][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.448169][ T3722] usb 3-1: USB disconnect, device number 6 [ 326.454660][ T3689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.473678][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.494375][ T3689] usb 2-1: config 0 descriptor?? [ 326.500552][ T5617] netlink: 'syz.4.336': attribute type 12 has an invalid length. [ 326.527663][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 326.578115][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 326.608308][ T5468] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.623441][ T5468] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.633023][ T5468] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.645483][ T27] INFO: task syz.1.149:4594 blocked for more than 144 seconds. [ 326.653212][ T27] Not tainted 6.1.107-syzkaller #0 [ 326.658887][ T5468] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.688388][ T5624] loop3: detected capacity change from 0 to 128 [ 326.698162][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 326.728544][ T27] task:syz.1.149 state:D stack:24776 pid:4594 ppid:3641 flags:0x00004004 [ 326.750006][ T5402] usb 2-1: USB disconnect, device number 13 [ 326.762564][ T27] Call Trace: [ 326.769399][ T27] [ 326.775959][ T27] __schedule+0x143f/0x4570 [ 326.784388][ T5624] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 326.785188][ T27] ? __mutex_lock+0x6b4/0xd80 [ 326.812870][ T5624] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038 (0x7fffffff) [ 326.845921][ T27] ? release_firmware_map_entry+0x186/0x186 [ 326.852072][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 326.862423][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 326.871058][ T27] schedule+0xbf/0x180 [ 326.884731][ T27] schedule_preempt_disabled+0xf/0x20 [ 326.884777][ T27] __mutex_lock+0x6b9/0xd80 [ 326.884805][ T27] ? __mutex_lock+0x53c/0xd80 [ 326.884830][ T27] ? exfat_sync_fs+0x67/0x100 [ 326.884869][ T27] ? mutex_lock_nested+0x10/0x10 [ 326.884905][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 326.884933][ T27] exfat_sync_fs+0x67/0x100 [ 326.884969][ T27] iterate_supers+0x127/0x1e0 [ 326.884996][ T27] ? sync_inodes_one_sb+0x60/0x60 [ 326.885026][ T27] ksys_sync+0xd7/0x1c0 [ 326.885051][ T27] ? sync_filesystem+0x220/0x220 [ 326.885078][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 326.885110][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 326.885141][ T27] __do_sys_sync+0xa/0x10 [ 326.885165][ T27] do_syscall_64+0x3b/0xb0 [ 326.885198][ T27] ? clear_bhb_loop+0x45/0xa0 [ 326.885233][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.885280][ T27] RIP: 0033:0x7f6366579ef9 [ 326.885305][ T27] RSP: 002b:00007f6367416038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 326.885333][ T27] RAX: ffffffffffffffda RBX: 00007f6366715f80 RCX: 00007f6366579ef9 [ 326.885351][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.885365][ T27] RBP: 00007f63665e793e R08: 0000000000000000 R09: 0000000000000000 [ 326.885381][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.885395][ T27] R13: 0000000000000000 R14: 00007f6366715f80 R15: 00007ffc6f78a508 [ 326.885431][ T27] [ 326.885552][ T27] [ 326.885552][ T27] Showing all locks held in the system: [ 326.885564][ T27] 1 lock held by rcu_tasks_kthre/12: [ 326.885579][ T27] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 326.885654][ T27] 1 lock held by rcu_tasks_trace/13: [ 326.885668][ T27] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 326.885741][ T27] 3 locks held by kworker/1:0/22: [ 326.885754][ T27] #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 326.885818][ T27] #1: ffffc900001c7d20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 326.885881][ T27] #2: ffff88807cc9d240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120 [ 326.885954][ T27] 1 lock held by khungtaskd/27: [ 326.885967][ T27] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 326.886044][ T27] 3 locks held by kworker/u4:4/56: [ 326.886084][ T27] 1 lock held by udevd/3091: [ 326.886098][ T27] 2 locks held by getty/3397: [ 326.886110][ T27] #0: ffff888029463098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 326.886178][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 326.886240][ T27] 3 locks held by syz-executor/3645: [ 326.886257][ T27] 2 locks held by kworker/1:4/3689: [ 326.886282][ T27] 2 locks held by syz.1.149/4594: [ 326.886296][ T27] #0: ffff88805acb60e0 (&type->s_umount_key#63){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 326.886370][ T27] #1: ffff88805acb40e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 326.886444][ T27] 2 locks held by syz.2.144/4785: [ 326.886458][ T27] #0: ffff88805acb60e0 (&type->s_umount_key#63){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 326.886529][ T27] #1: ffff88805acb40e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 326.886601][ T27] 2 locks held by syz.3.226/5022: [ 326.886613][ T27] #0: ffff88805acb60e0 (&type->s_umount_key#63){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 326.886698][ T27] #1: ffff88805acb40e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 326.886767][ T27] 2 locks held by syz.1.230/5042: [ 326.886780][ T27] #0: ffff88805acb60e0 (&type->s_umount_key#63){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 326.886864][ T27] #1: ffff88805acb40e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 326.886934][ T27] 2 locks held by syz.2.255/5166: [ 326.886946][ T27] #0: ffff88805acb60e0 (&type->s_umount_key#63){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 326.887017][ T27] #1: ffff88805acb40e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 326.887089][ T27] 2 locks held by syz.4.256/5169: [ 326.887102][ T27] #0: ffff88805acb60e0 (&type->s_umount_key#63){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 326.887175][ T27] #1: ffff88805acb40e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 326.887247][ T27] 2 locks held by syz.1.273/5279: [ 326.887260][ T27] #0: ffff88805acb60e0 (&type->s_umount_key#63){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 326.887337][ T27] #1: ffff88805acb40e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 326.887408][ T27] 3 locks held by kworker/1:12/5389: [ 326.887421][ T27] #0: ffff8880288e6538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 326.887485][ T27] #1: ffffc900036b7d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 326.887551][ T27] #2: ffffffff8e4f8de8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 326.887627][ T27] 3 locks held by kworker/1:13/5402: [ 326.887641][ T27] #0: ffff8880192b8d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 326.887704][ T27] #1: ffffc9000364fd20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 326.887768][ T27] #2: ffff888144762190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730 [ 326.887833][ T27] 2 locks held by syz.0.309/5427: [ 326.887846][ T27] #0: ffff88805acb60e0 (&type->s_umount_key#63){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 326.887920][ T27] #1: ffff88805acb40e0 (&sbi->s_lock){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 326.887991][ T27] 3 locks held by syz-executor/5468: [ 326.888006][ T27] 1 lock held by syz.1.335/5614: [ 326.888018][ T27] 1 lock held by syz.3.337/5624: [ 326.888043][ T27] 1 lock held by syz.4.338/5626: [ 326.888054][ T27] #0: ffffffff8d1e82a8 (sched_core_mutex){+.+.}-{3:3}, at: sched_core_get+0x49/0x1d0 [ 326.888115][ T27] 2 locks held by syz.4.338/5630: [ 326.888128][ T27] [ 326.888134][ T27] ============================================= [ 326.888134][ T27] [ 326.888151][ T27] NMI backtrace for cpu 0 [ 326.888166][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.107-syzkaller #0 [ 326.888184][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.888195][ T27] Call Trace: [ 326.888202][ T27] [ 326.888209][ T27] dump_stack_lvl+0x1e3/0x2cb [ 326.888240][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 326.888269][ T27] ? panic+0x764/0x764 [ 326.888295][ T27] ? vprintk_emit+0x622/0x740 [ 326.888329][ T27] ? printk_sprint+0x490/0x490 [ 326.888362][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 326.888400][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 326.888437][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 326.888470][ T27] ? _printk+0xd1/0x111 [ 326.888491][ T27] ? panic+0x764/0x764 [ 326.888513][ T27] ? __wake_up_klogd+0xcc/0x100 [ 326.888535][ T27] ? panic+0x764/0x764 [ 326.888556][ T27] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 326.888592][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 326.888628][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 326.888666][ T27] watchdog+0xf88/0xfd0 [ 326.888700][ T27] ? watchdog+0x1f8/0xfd0 [ 326.888732][ T27] kthread+0x28d/0x320 [ 326.888751][ T27] ? hungtask_pm_notify+0x50/0x50 [ 326.888777][ T27] ? kthread_blkcg+0xd0/0xd0 [ 326.888799][ T27] ret_from_fork+0x1f/0x30 [ 326.888841][ T27] [ 326.888849][ T27] Sending NMI from CPU 0 to CPUs 1: [ 326.888881][ C1] NMI backtrace for cpu 1 [ 326.888890][ C1] CPU: 1 PID: 5468 Comm: syz-executor Not tainted 6.1.107-syzkaller #0 [ 326.888907][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.888916][ C1] RIP: 0010:unwind_next_frame+0x4bf/0x2220 [ 326.888938][ C1] Code: b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 4c 39 e8 4c 0f 46 f9 48 8d 43 fc 48 0f 47 e8 <4c> 0f 46 e3 49 39 ef 76 a9 e9 a7 fd ff ff 89 d9 80 e1 07 80 c1 03 [ 326.888952][ C1] RSP: 0018:ffffc90003b6eb40 EFLAGS: 00000283 [ 326.888984][ C1] RAX: ffffffff8eab9cdc RBX: ffffffff8eab9ce0 RCX: ffffffff8eab9ce4 [ 326.888997][ C1] RDX: ffffffff8f18efa4 RSI: ffffffff81786ac3 RDI: dffffc0000000000 [ 326.889034][ C1] RBP: ffffffff8eab9ce0 R08: 0000000000000001 R09: ffffc90003b6ed10 [ 326.889046][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8eab9ce0 [ 326.889058][ C1] R13: ffffffff81786ac2 R14: ffffffff8eab9ce0 R15: ffffffff8eab9ce4 [ 326.889071][ C1] FS: 000055556cc96500(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 326.889087][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 326.889098][ C1] CR2: 0000001b3201aff8 CR3: 0000000039c29000 CR4: 00000000003506e0 [ 326.889113][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 326.889123][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 326.889133][ C1] Call Trace: [ 326.889138][ C1] [ 326.889144][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 326.889170][ C1] ? read_lock_is_recursive+0x10/0x10 [ 326.889199][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 326.889227][ C1] ? nmi_handle+0x25/0x440 [ 326.889262][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 326.889290][ C1] ? nmi_handle+0x12e/0x440 [ 326.889316][ C1] ? nmi_handle+0x25/0x440 [ 326.889343][ C1] ? unwind_next_frame+0x4bf/0x2220 [ 326.889361][ C1] ? default_do_nmi+0x62/0x150 [ 326.889378][ C1] ? exc_nmi+0xa8/0x100 [ 326.889394][ C1] ? end_repeat_nmi+0x16/0x31 [ 326.889420][ C1] ? stack_trace_save+0x112/0x1c0 [ 326.889447][ C1] ? stack_trace_save+0x113/0x1c0 [ 326.889470][ C1] ? unwind_next_frame+0x4bf/0x2220 [ 326.889489][ C1] ? unwind_next_frame+0x4bf/0x2220 [ 326.889509][ C1] ? unwind_next_frame+0x4bf/0x2220 [ 326.889528][ C1] [ 326.889532][ C1] [ 326.889544][ C1] ? __unwind_start+0x59d/0x720 [ 326.889560][ C1] ? stack_trace_save+0x113/0x1c0 [ 326.889585][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 326.889609][ C1] arch_stack_walk+0x10d/0x140 [ 326.889631][ C1] ? stack_trace_save+0x113/0x1c0 [ 326.889658][ C1] stack_trace_save+0x113/0x1c0 [ 326.889683][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 326.889714][ C1] ? skb_release_data+0x5de/0x7a0 [ 326.889740][ C1] kasan_set_track+0x4b/0x70 [ 326.889797][ C1] kasan_save_free_info+0x27/0x40 [ 326.889816][ C1] ____kasan_slab_free+0xd6/0x120 [ 326.889834][ C1] __kmem_cache_free+0x25c/0x3c0 [ 326.889856][ C1] ? skb_release_data+0x5de/0x7a0 [ 326.889882][ C1] skb_release_data+0x5de/0x7a0 [ 326.889914][ C1] consume_skb+0xa3/0x140 [ 326.889939][ C1] netlink_broadcast+0xf8b/0x10b0 [ 326.889969][ C1] ? rtmsg_ifa+0x1e7/0x3a0 [ 326.889992][ C1] ? rtmsg_ifa+0x1e7/0x3a0 [ 326.890017][ C1] nlmsg_notify+0xfb/0x1c0 [ 326.890047][ C1] ? rtnl_notify+0x59/0xc0 [ 326.890072][ C1] rtmsg_ifa+0x234/0x3a0 [ 326.890096][ C1] ? __inet_del_ifa+0x1020/0x1020 [ 326.890123][ C1] ? blocking_notifier_call_chain+0x18e/0x1b0 [ 326.890147][ C1] __inet_insert_ifa+0x9b7/0xbd0 [ 326.890178][ C1] ? inet_rcu_free_ifa+0xc0/0xc0 [ 326.890209][ C1] inet_rtm_newaddr+0x8d3/0x18e0 [ 326.890250][ C1] ? inet_netconf_fill_devconf+0x9b0/0x9b0 [ 326.890284][ C1] ? inet_netconf_fill_devconf+0x9b0/0x9b0 [ 326.890307][ C1] rtnetlink_rcv_msg+0x818/0xff0 [ 326.890338][ C1] ? rtnetlink_bind+0x80/0x80 [ 326.890366][ C1] ? __local_bh_enable_ip+0x164/0x1f0 [ 326.890394][ C1] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 326.890414][ C1] ? _local_bh_enable+0xa0/0xa0 [ 326.890442][ C1] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 326.890461][ C1] ? __dev_queue_xmit+0x1790/0x3cf0 [ 326.890488][ C1] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 326.890510][ C1] ? netdev_core_pick_tx+0x320/0x320 [ 326.890532][ C1] ? ref_tracker_free+0x638/0x7d0 [ 326.890552][ C1] ? memcpy+0x3c/0x60 [ 326.890569][ C1] ? refcount_inc+0x80/0x80 [ 326.890587][ C1] ? __copy_skb_header+0x47b/0x600 [ 326.890636][ C1] netlink_rcv_skb+0x1cd/0x410 [ 326.890662][ C1] ? rtnetlink_bind+0x80/0x80 [ 326.890689][ C1] ? netlink_ack+0x1290/0x1290 [ 326.890712][ C1] ? __netlink_deliver_tap+0x73e/0x770 [ 326.890744][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 326.890771][ C1] netlink_unicast+0x7d8/0x970 [ 326.890800][ C1] ? netlink_detachskb+0x90/0x90 [ 326.890823][ C1] ? __virt_addr_valid+0x45b/0x530 [ 326.890846][ C1] ? __phys_addr_symbol+0x2b/0x70 [ 326.890867][ C1] ? __check_object_size+0x4dd/0xa30 [ 326.890888][ C1] ? bpf_lsm_netlink_send+0x5/0x10 [ 326.890912][ C1] netlink_sendmsg+0xa26/0xd60 [ 326.890944][ C1] ? netlink_getsockopt+0x580/0x580 [ 326.890969][ C1] ? __might_fault+0xa1/0x110 [ 326.890991][ C1] ? aa_sock_msg_perm+0x91/0x150 [ 326.891017][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 326.891056][ C1] ? security_socket_sendmsg+0x7d/0xa0 [ 326.891079][ C1] ? netlink_getsockopt+0x580/0x580 [ 326.891105][ C1] __sys_sendto+0x480/0x600 [ 326.891133][ C1] ? __ia32_sys_getpeername+0x80/0x80 [ 326.891176][ C1] ? print_irqtrace_events+0x210/0x210 [ 326.891206][ C1] __x64_sys_sendto+0xda/0xf0 [ 326.891232][ C1] do_syscall_64+0x3b/0xb0 [ 326.891257][ C1] ? clear_bhb_loop+0x45/0xa0 [ 326.891282][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.891306][ C1] RIP: 0033:0x7ff29d97bd8c [ 326.891319][ C1] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 326.891333][ C1] RSP: 002b:00007ffd4865c960 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 326.891349][ C1] RAX: ffffffffffffffda RBX: 00007ff29e644620 RCX: 00007ff29d97bd8c [ 326.891362][ C1] RDX: 0000000000000028 RSI: 00007ff29e644670 RDI: 0000000000000003 [ 326.891373][ C1] RBP: 0000000000000000 R08: 00007ffd4865c9b4 R09: 000000000000000c [ 326.891383][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 326.891393][ C1] R13: 0000000000000000 R14: 00007ff29e644670 R15: 0000000000000000 [ 326.891413][ C1] [ 326.891966][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 326.891978][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.107-syzkaller #0 [ 326.891999][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.892011][ T27] Call Trace: [ 326.892018][ T27] [ 326.892026][ T27] dump_stack_lvl+0x1e3/0x2cb [ 326.892065][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 326.892100][ T27] ? panic+0x764/0x764 [ 326.892129][ T27] ? vscnprintf+0x59/0x80 [ 326.892158][ T27] panic+0x318/0x764 [ 326.892184][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 326.892220][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 326.892250][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 326.892292][ T27] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 326.892330][ T27] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 326.892367][ T27] watchdog+0xfc7/0xfd0 [ 326.892401][ T27] ? watchdog+0x1f8/0xfd0 [ 326.892435][ T27] kthread+0x28d/0x320 [ 326.892453][ T27] ? hungtask_pm_notify+0x50/0x50 [ 326.892481][ T27] ? kthread_blkcg+0xd0/0xd0 [ 326.892503][ T27] ret_from_fork+0x1f/0x30 [ 326.892548][ T27] [ 326.892844][ T27] Kernel Offset: disabled [ 328.360690][ T27] Rebooting in 86400 seconds..