last executing test programs: 15.75746758s ago: executing program 1 (id=530): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x77, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4={0x3, 0x0, 0x0, "e7e03604"}, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0xa, "2dc8363b"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x17, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x11, 0xa, 0x0, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x80000001}, 0x8) syz_open_procfs(0x0, &(0x7f0000000640)='task\x00') mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) memfd_create(&(0x7f00000023c0)='\xff-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\x01)\x0f\xc8\xc0:\x9cc\x02d\xee\xa9\x8bcc\xad\x89\x9ck\xde\x05\x00\x00\x00UE\xc98M\xcd\xfb\xcc\x97\xb4\v\xa9=\xcd\xf7\xe5\x99\t~\xb90a\xa9\xb2\x04K\x98\x93=\x88\x00\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'nicvf0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) 13.666845083s ago: executing program 3 (id=533): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000140)={0x100, r7}, 0x0) landlock_restrict_self(r6, 0x0) r8 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000000)='./file0\x00', r8, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 13.323871018s ago: executing program 1 (id=535): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2521000000050020000000000009001f0070687931000000000a0001007770616e340000000a0001007770616e3300000005002000"], 0x48}}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000086c0)={0x0, 0x0, &(0x7f0000008680)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000007f48af5b0281ebc6ed3c9", @ANYRES16=r1, @ANYBLOB="01002cbd7000000000002e0400000c002d000200aa60899eda72f6895a0003000020050010000009000200", @ANYRES32=r2, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x337}, 0x8) 12.795774666s ago: executing program 0 (id=537): r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x10000000}, 0xc) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x2f) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) close(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) setsockopt$packet_int(r3, 0x107, 0x3, &(0x7f00000000c0)=0x6, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000001200), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="050000000000006b000000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000080010000000000000000000000121f07d1bd541f00"], 0x48}}, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="050000000000000000000000000000007e44efa6b2b88740d63bafbb26d64322bcf9a905c4e7ad319e0c69601daefbf46004cf0797e3c7eeeb8a8e3e900ce4097ca12fab31003db297147d19a0b7c6cc85dc44554106fc044a34b3df041c783ed7710c8ac1a7d5f0da7c3222991752613e4162621372379507de67594acf76945b9068a3c8dd4bf1b1bdac148cb79cf3acfc1d38f968595a20477e46e26f0188cabd18c4ab8c9ea806fb7abab55ba96a4801deed8c24110267936de686eda4deaf645f39e45ef7d408d21a89ad66ce036628a9e132eea16425", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000080010000000000000000000000f8ca44b8874fdf8a"], 0x48}}, 0x0) close(r9) 11.852719805s ago: executing program 1 (id=539): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0x0, &(0x7f0000000180), &(0x7f00000001c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x10, 0xb4}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaad827c20000000800450000700000000000019378ac01000000000000800490780300000045000000000000000004000000000000e00000018900007f000001e0000002e00900000200000000000000007fbd4ab9191414bb4410000000000000000000000000000000000000000000000000000000000000ddb7213042d3ba46903dcc4f0a7f8ea575753b6fc6d237fc21dec3a2fcd2e368cca801015fbedc65ed75e24d9f88bbfb691a3038386a9c983b8f61aa84839b22bc77d33001c2bb0034b102af628948d703beaca70deef35f6224b3c3dd0018f23204f76ad2ae5917bc90efbe9dcc"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020400) ioctl$TIOCSTI(0xffffffffffffffff, 0x80045432, &(0x7f0000000000)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f000000000000000000010000000032000000ff020400000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000060001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0) 11.751732723s ago: executing program 0 (id=541): syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r5 = epoll_create1(0x0) epoll_wait(r5, &(0x7f0000000080)=[{}], 0x1, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) writev(r0, &(0x7f0000009e80)=[{&(0x7f0000009f00)='O', 0x1}], 0x1) 9.756098068s ago: executing program 2 (id=545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) write$binfmt_script(r5, &(0x7f0000000140)={'#! ', './file0'}, 0xfda6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10) 9.524337165s ago: executing program 3 (id=546): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfe00}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 8.77342391s ago: executing program 2 (id=547): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKRESETZONE(r3, 0x40101288, 0x0) 8.131880437s ago: executing program 3 (id=550): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipvlan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f00000001c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) time(0xfffffffffffffffc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r9, 0x5412, &(0x7f0000000080)=0xa) 7.613043365s ago: executing program 2 (id=551): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xc}, 0x1c) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000040), 0x4) 7.438256167s ago: executing program 0 (id=552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 7.075075254s ago: executing program 1 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_PTRACER(0x59616d61, r0) sendmmsg$unix(r3, &(0x7f0000000000), 0x4f8, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x188}}, 0x0) 6.617271837s ago: executing program 3 (id=554): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "0000000000000000000000000f000500"}}}]}, 0x48}}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001c00), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x19, 0x17, &(0x7f0000000300)=ANY=[@ANYBLOB="180000007f00000000000000660c000018110000", @ANYRES32, @ANYBLOB="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"], 0x0, 0x0, 0xf5, &(0x7f0000001b00)=""/245, 0x41000, 0x40, '\x00', r7, 0x1a, r8, 0x8, &(0x7f0000001c40)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000001c80), 0x0, 0x10, 0x9}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.703593204s ago: executing program 4 (id=555): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000340)) 5.693704585s ago: executing program 3 (id=556): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000140)={0x100, r7}, 0x0) landlock_restrict_self(r6, 0x0) r8 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000000)='./file0\x00', r8, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 5.645246568s ago: executing program 0 (id=557): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x128, 0xc8, 0x8, 0x128, 0x5803, 0x240, 0x2e8, 0x2e8, 0x240, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x128, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'pim6reg0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@unspec=@state={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x2}}}}, 0x370) 4.458332945s ago: executing program 4 (id=558): socket(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500c63703b600004811000000d00008004300ff030000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27d08000000337c0004000000000000bf852c8986626691b01bded93a8d"], 0xe0}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) epoll_create1(0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = socket(0x0, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r0, @ANYBLOB="741e097498d94080b509c746a26f", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) socket(0x0, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x5b23, 0x0) 4.328136104s ago: executing program 0 (id=559): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000806, &(0x7f0000001780)=ANY=[@ANYBLOB='iocharset=cp1255,umask=00000000000000000000777,gid=', @ANYRESHEX=0xee01, @ANYBLOB=',dmask=00000000000000000000005,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646d61736b3d30303030303030303030303030303030303030303032372c6572726f72733d636f6e74696e75652c6572726f72733d72656d6f756e742d726f2c00a36a9f3782f0352ef82c07fa1b6ef8989ed1a01b254c18f4a1aa23"], 0x9, 0x1505, &(0x7f0000000180)="$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") mkdir(0x0, 0xab2d923667459f5b) mount(0x0, 0x0, 0x0, 0x200052, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x2000040, &(0x7f00000009c0)={[{@dioread_nolock}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@noacl}, {@usrquota}], [{@fowner_eq}, {@measure}, {@subj_type={'subj_type', 0x3d, ')\\\\'}}, {@fowner_eq}, {@context={'context', 0x3d, 'sysadm_u'}}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0x200, 0x7f, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x48) unlink(&(0x7f0000000080)='./file0/file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000280)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x40000000004) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 3.779170055s ago: executing program 1 (id=560): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/149, 0x95, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) 3.191748877s ago: executing program 2 (id=561): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x4, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f0000000280)="78d04a34", 0x4, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4f, 0x2}}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) r6 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$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") getpid() gettid() r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x24, &(0x7f00000001c0)=0x269b, 0x4) truncate(&(0x7f00000002c0)='./file1\x00', 0x9) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/41, 0x29}, 0x0) ioctl$EXT4_IOC_SETFSUUID(r6, 0x4008662c, &(0x7f0000000200)={0x0, 0x0, "a189968e8b6a66b2729559bac60e39c6"}) 3.031329199s ago: executing program 1 (id=562): syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r5 = epoll_create1(0x0) epoll_wait(r5, &(0x7f0000000080)=[{}], 0x1, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) writev(r0, &(0x7f0000009e80)=[{&(0x7f0000009f00)='O', 0x1}], 0x1) 1.323960114s ago: executing program 4 (id=563): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.248070639s ago: executing program 2 (id=564): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 1.157372086s ago: executing program 4 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xc2000, 0x41) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r2, 0x0, 0xee}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r3, 0x1, r1, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)={r3}) 970.90877ms ago: executing program 4 (id=566): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "0000000000000000000000000f000500"}}}]}, 0x48}}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001c00), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x19, 0x17, &(0x7f0000000300)=ANY=[@ANYBLOB="180000007f00000000000000660c000018110000", @ANYRES32, @ANYBLOB="0000000000004000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001000008500000006000000bf91000000000000b7020000020000008500000084000000b70000000000c4f1cce9ddcebf7efdc7fb000095000000000000001b3779cd6e558813013f503cebb048514d85f128be7733ae7d763f12f37319110e8a1a84830ed2f4aa75c8a89e777b74c8ec5441f378a92877c75fe59e8844eebb5514a3a50e88343ca71147ade3196e966be31310448c0eeef2b88ea70dbebfa69db26d2f9745873942de64036de1408e02fc9cc2f8bba8399e1c483d86"], 0x0, 0x0, 0xf5, &(0x7f0000001b00)=""/245, 0x41000, 0x40, '\x00', r7, 0x1a, r8, 0x8, &(0x7f0000001c40)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f0000001c80), 0x0, 0x10, 0x9}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 613.714616ms ago: executing program 2 (id=567): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x6a, 0x2, 0x20000000, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) 570.02µs ago: executing program 3 (id=568): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000080) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) 0s ago: executing program 4 (id=569): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2(&(0x7f0000000040), 0x0) mknod$loop(0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x4, &(0x7f00000004c0)={[], [{@euid_eq}, {@obj_type={'obj_type', 0x3d, 'GPL\x00'}}, {@uid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x39, 0xd, 0x61, 0x38, 0x33, 0x33, 0x33], 0x2d, [0x36, 0x36, 0x36, 0x37], 0x2d, [0x37, 0x63, 0x38, 0x61], 0x2d, [0x0, 0x38, 0x33, 0x33], 0x2d, [0x65, 0x3f, 0x65, 0x32, 0x0, 0x64, 0x36, 0x36]}}}, {@dont_appraise}]}) syz_read_part_table(0x5de, &(0x7f00000008c0)="$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") kernel console output (not intermixed with test programs): IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.805527][ T3605] usb 4-1: Using ep0 maxpacket: 8 [ 144.859401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.900341][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.907579][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.918096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.926640][ T3605] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 144.940385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.948001][ T3605] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 144.959723][ T3605] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.970030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.980021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.998658][ T3605] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.013650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.026322][ T3605] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.041899][ T3605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.074758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.094003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.121507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.142020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.150907][ T5271] affs: No valid root block on device nbd0 [ 145.156729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.157227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.189624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.211008][ T5193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.325662][ T3605] usb 4-1: GET_CAPABILITIES returned 0 [ 145.331169][ T3605] usbtmc 4-1:16.0: can't read capabilities [ 145.460553][ T1073] Bluetooth: hci6: command 0x040f tx timeout [ 145.478466][ T9] device hsr_slave_0 left promiscuous mode [ 145.497910][ T9] device hsr_slave_1 left promiscuous mode [ 145.515018][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.532758][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.535831][ T3638] usb 4-1: USB disconnect, device number 7 [ 145.550960][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.561188][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.588291][ T9] device bridge_slave_1 left promiscuous mode [ 145.595618][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.609016][ T9] device bridge_slave_0 left promiscuous mode [ 145.625861][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.648450][ T9] device veth1_macvtap left promiscuous mode [ 145.654502][ T9] device veth0_macvtap left promiscuous mode [ 145.670887][ T9] device veth1_vlan left promiscuous mode [ 145.676846][ T9] device veth0_vlan left promiscuous mode [ 145.889129][ T5279] loop0: detected capacity change from 0 to 32768 [ 146.014214][ T5279] XFS (loop0): Mounting V5 Filesystem [ 146.112325][ T9] team0 (unregistering): Port device team_slave_1 removed [ 146.158687][ T9] team0 (unregistering): Port device team_slave_0 removed [ 146.176618][ T5279] XFS (loop0): Ending clean mount [ 146.226002][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.285080][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.346194][ T4901] XFS (loop0): Unmounting Filesystem [ 146.385612][ T1073] Bluetooth: hci1: command 0x1001 tx timeout [ 146.397461][ T3567] Bluetooth: hci1: sending frame failed (-49) [ 146.477594][ T9] bond0 (unregistering): Released all slaves [ 146.597734][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.611097][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.647771][ T5193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.743966][ C0] blk_update_request: I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 146.768928][ C0] blk_update_request: I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.780570][ C0] Buffer I/O error on dev loop8, logical block 65535984, async page read [ 147.100040][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.109279][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.136369][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.145903][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.163169][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.172948][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.189673][ T5193] device veth0_vlan entered promiscuous mode [ 147.204965][ T5193] device veth1_vlan entered promiscuous mode [ 147.278033][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 147.316005][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 147.337712][ T5313] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 147.375014][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.412656][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.443030][ T5193] device veth0_macvtap entered promiscuous mode [ 147.467956][ T5193] device veth1_macvtap entered promiscuous mode [ 147.515929][ T3605] Bluetooth: hci6: command 0x0419 tx timeout [ 147.546738][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.580429][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.610162][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.635778][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.683314][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.762961][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.805854][ T5319] loop3: detected capacity change from 0 to 256 [ 147.815538][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.845792][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.997114][ T5193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.056019][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.105462][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.145939][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.193900][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.234560][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.373986][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.419763][ T5193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.464894][ T5193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.475089][ T3604] Bluetooth: hci1: command 0x1009 tx timeout [ 148.711209][ T5193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.000719][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.056295][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.064313][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.073361][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.082159][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.092207][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.103700][ T5193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.136740][ T5193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.145971][ T5193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.154677][ T5193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.159260][ T5325] loop2: detected capacity change from 0 to 512 [ 149.215122][ T5328] affs: No valid root block on device nbd3 [ 149.231977][ T5325] EXT4-fs (loop2): Test dummy encryption mode enabled [ 149.329488][ T5325] EXT4-fs error (device loop2): __ext4_iget:4872: inode #11: block 1: comm syz.2.364: invalid block [ 149.384191][ T5325] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.364: couldn't read orphan inode 11 (err -117) [ 149.384632][ T5267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.411600][ T5325] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,resuid=0x000000000000ee00,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 149.464745][ T5325] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 149.473226][ T5325] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 149.492016][ T5267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.501168][ T5337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 149.523513][ T3949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.576745][ T3949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.597142][ T5337] batman_adv: Cannot find parent device [ 149.631305][ T5340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 149.772229][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.821363][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.282148][ T5353] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 150.584562][ T5348] loop0: detected capacity change from 0 to 32768 [ 150.646143][ T3638] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 150.751160][ T5348] XFS (loop0): Mounting V5 Filesystem [ 150.876052][ T5348] XFS (loop0): Ending clean mount [ 151.007323][ T4901] XFS (loop0): Unmounting Filesystem [ 151.065804][ T3638] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 151.077162][ T3638] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 151.096228][ T3638] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.117014][ T3638] usb 5-1: config 0 has no interface number 0 [ 151.130555][ T3638] usb 5-1: config 0 interface 29 altsetting 0 endpoint 0xF has invalid maxpacket 12150, setting to 1024 [ 151.154847][ T3638] usb 5-1: config 0 interface 29 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 151.176500][ T3638] usb 5-1: config 0 interface 29 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.515878][ T3638] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0115, bcdDevice=cb.61 [ 151.551950][ T3638] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.518315][ T3638] usb 5-1: Product: syz [ 152.522517][ T3638] usb 5-1: Manufacturer: syz [ 152.528323][ T3638] usb 5-1: SerialNumber: syz [ 152.658232][ T3638] usb 5-1: config 0 descriptor?? [ 152.668502][ T5380] affs: No valid root block on device nbd3 [ 152.691072][ T5352] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 152.717175][ T3638] kvaser_usb 5-1:0.29: Cannot get usb endpoint(s) [ 152.806389][ T5390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 152.811545][ T5386] loop0: detected capacity change from 0 to 256 [ 152.817549][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 153.763918][ T5267] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.817362][ T5402] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 153.907703][ T5267] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.931123][ T5409] loop3: detected capacity change from 0 to 512 [ 153.957558][ T5388] chnl_net:caif_netlink_parms(): no params data found [ 153.973713][ T1073] usb 5-1: USB disconnect, device number 7 [ 154.193570][ T5267] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.225222][ T5409] EXT4-fs (loop3): Test dummy encryption mode enabled [ 154.278771][ C0] blk_update_request: I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 154.306032][ C0] blk_update_request: I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.317718][ C0] Buffer I/O error on dev loop8, logical block 65535984, async page read [ 154.429287][ T5409] EXT4-fs error (device loop3): __ext4_iget:4872: inode #11: block 1: comm syz.3.381: invalid block [ 154.448432][ T5409] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.381: couldn't read orphan inode 11 (err -117) [ 154.462870][ T5388] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.472133][ T5406] loop2: detected capacity change from 0 to 32768 [ 154.478258][ T5388] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.479865][ T5409] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,resuid=0x000000000000ee00,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 154.486717][ T5388] device bridge_slave_0 entered promiscuous mode [ 154.523938][ T5388] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.531146][ T5388] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.539407][ T5388] device bridge_slave_1 entered promiscuous mode [ 154.572373][ T5267] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.589059][ T5409] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 154.597526][ T5409] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 154.681062][ T5406] XFS (loop2): Mounting V5 Filesystem [ 154.686566][ T5388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.694183][ T5388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.801960][ T5388] team0: Port device team_slave_0 added [ 154.865434][ T2987] Bluetooth: hci1: command 0x0409 tx timeout [ 154.930058][ T5388] team0: Port device team_slave_1 added [ 155.008731][ T5406] XFS (loop2): Ending clean mount [ 156.260659][ T5388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.269210][ T4658] XFS (loop2): Unmounting Filesystem [ 156.278751][ T5388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.305445][ T5388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.329145][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'. [ 156.569456][ T5445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 156.649112][ T5450] affs: No valid root block on device nbd3 [ 156.664354][ T5388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.691482][ T5388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.725119][ T5388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.752347][ T5458] loop0: detected capacity change from 0 to 128 [ 156.877779][ T25] audit: type=1800 audit(1725354299.087:38): pid=5458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.390" name="bus" dev="loop0" ino=1048634 res=0 errno=0 [ 157.027019][ T3608] Bluetooth: hci1: command 0x041b tx timeout [ 157.101259][ T4044] Bluetooth: hci0: Frame reassembly failed (-84) [ 157.118923][ T5388] device hsr_slave_0 entered promiscuous mode [ 157.134261][ T5388] device hsr_slave_1 entered promiscuous mode [ 157.134741][ T5468] loop2: detected capacity change from 0 to 256 [ 157.164542][ T5470] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.208928][ C1] blk_update_request: I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 158.404647][ C1] blk_update_request: I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.416274][ C1] Buffer I/O error on dev loop8, logical block 65535984, async page read [ 158.815095][ T5490] loop2: detected capacity change from 0 to 512 [ 159.105843][ T2987] Bluetooth: hci1: command 0x040f tx timeout [ 159.162252][ T7] Bluetooth: hci0: command 0x1003 tx timeout [ 159.169446][ T5194] Bluetooth: hci0: sending frame failed (-49) [ 159.299294][ T5490] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 159.310517][ T5490] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 159.474839][ T5507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 159.519342][ T5513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'. [ 159.819976][ T5388] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 159.844109][ T5388] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 159.867510][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 159.888657][ T5388] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 159.928307][ T5267] device hsr_slave_0 left promiscuous mode [ 159.939100][ T5267] device hsr_slave_1 left promiscuous mode [ 159.952073][ T5525] affs: No valid root block on device nbd2 [ 159.964336][ T5267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.979179][ T5267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.013896][ T5267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.024546][ T5267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.049161][ T5267] device bridge_slave_1 left promiscuous mode [ 160.059222][ T5267] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.072375][ T5267] device bridge_slave_0 left promiscuous mode [ 160.089106][ T5267] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.122899][ T5267] device veth1_macvtap left promiscuous mode [ 160.129212][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 160.145975][ T5267] device veth0_macvtap left promiscuous mode [ 160.152497][ T5267] device veth1_vlan left promiscuous mode [ 160.175918][ T5267] device veth0_vlan left promiscuous mode [ 160.320344][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 160.332005][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 160.343240][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.354388][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.369499][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.379005][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.665883][ T7] usb 4-1: GET_CAPABILITIES returned 0 [ 160.671400][ T7] usbtmc 4-1:16.0: can't read capabilities [ 160.871313][ T7] usb 4-1: USB disconnect, device number 8 [ 161.078160][ T5520] loop4: detected capacity change from 0 to 32768 [ 161.173864][ T5520] XFS (loop4): Mounting V5 Filesystem [ 161.185618][ T3608] Bluetooth: hci1: command 0x0419 tx timeout [ 161.185812][ T3605] Bluetooth: hci0: command 0x1001 tx timeout [ 161.208962][ T5194] Bluetooth: hci0: sending frame failed (-49) [ 161.218777][ T5267] team0 (unregistering): Port device team_slave_1 removed [ 161.234881][ T5267] team0 (unregistering): Port device team_slave_0 removed [ 161.254991][ T5267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.277943][ T5267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.313860][ T5520] XFS (loop4): Ending clean mount [ 161.443749][ T5267] bond0 (unregistering): Released all slaves [ 161.453585][ T5193] XFS (loop4): Unmounting Filesystem [ 161.474546][ T5550] loop3: detected capacity change from 0 to 256 [ 161.563808][ T5388] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 161.777229][ T5388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.073838][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.141608][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.337679][ T5388] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.475650][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.484364][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.503850][ T5554] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 162.547326][ T5435] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.554422][ T5435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.575955][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.584984][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.602103][ T5435] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.609261][ T5435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.625203][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.634865][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.711079][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.762574][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.801652][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.833093][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.851522][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.869940][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.891066][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.906277][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.944294][ T5388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.990999][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.006721][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.025009][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.243156][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.265569][ T1073] Bluetooth: hci0: command 0x1009 tx timeout [ 163.270202][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.301858][ T5388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.325963][ T3642] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 163.347204][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.360524][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.501015][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.523225][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.527241][ T5572] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 163.539772][ T5572] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 163.546323][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.580040][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.655856][ T5388] device veth0_vlan entered promiscuous mode [ 163.706640][ T5388] device veth1_vlan entered promiscuous mode [ 163.722523][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.765701][ T3642] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 163.773904][ T3642] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 163.774817][ T5575] loop2: detected capacity change from 0 to 512 [ 163.790397][ T3642] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.806424][ T3642] usb 5-1: config 0 has no interface number 0 [ 163.812688][ T3642] usb 5-1: config 0 interface 29 altsetting 0 endpoint 0xF has invalid maxpacket 12150, setting to 1024 [ 163.873066][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.914610][ T3642] usb 5-1: config 0 interface 29 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 163.947094][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.972020][ T5388] device veth0_macvtap entered promiscuous mode [ 163.977100][ T3642] usb 5-1: config 0 interface 29 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.047525][ T5388] device veth1_macvtap entered promiscuous mode [ 164.125140][ T5575] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.136974][ T5575] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038 (0x7fffffff) [ 164.185783][ T3642] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0115, bcdDevice=cb.61 [ 164.205695][ T3642] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.213707][ T3642] usb 5-1: Product: syz [ 164.234900][ T5388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.265412][ T5388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.275256][ T5388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.291208][ T3642] usb 5-1: Manufacturer: syz [ 164.315394][ T3642] usb 5-1: SerialNumber: syz [ 164.337106][ T3642] usb 5-1: config 0 descriptor?? [ 164.355657][ T5564] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 164.365662][ T5388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.375889][ T5388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.376152][ T3642] kvaser_usb 5-1:0.29: Cannot get usb endpoint(s) [ 164.387113][ T5388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.403785][ T5388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.425626][ T5388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.442335][ T5388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.476121][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.496433][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.504579][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.551643][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.599413][ T5388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.630552][ T5388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.650886][ T5388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.671236][ T5388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.693602][ T5388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.734155][ T5388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.754696][ T5388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.767192][ T5388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.790048][ T5584] affs: No valid root block on device nbd2 [ 164.800160][ T5388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.830209][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.850984][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.897859][ T5388] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.916021][ T5388] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.924774][ T5388] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.933599][ T5388] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.036027][ T4044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.047485][ T4044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.060610][ T5589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 165.087935][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.096123][ T5589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 165.141402][ T3839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.158090][ T3839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.201573][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.461247][ T3605] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 165.721032][ T3605] usb 3-1: Using ep0 maxpacket: 8 [ 165.801589][ T3607] usb 5-1: USB disconnect, device number 8 [ 165.860116][ T3605] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 165.880356][ T3605] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 165.919840][ T3605] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.940846][ T3605] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.972786][ C0] blk_update_request: I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 165.989411][ T3605] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.002629][ C0] blk_update_request: I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.014276][ C0] Buffer I/O error on dev loop8, logical block 65535984, async page read [ 166.033068][ T3605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.249537][ T5604] loop4: detected capacity change from 0 to 256 [ 166.495708][ T3605] usb 3-1: GET_CAPABILITIES returned 0 [ 166.509351][ T3605] usbtmc 3-1:16.0: can't read capabilities [ 166.924214][ T1073] usb 3-1: USB disconnect, device number 6 [ 168.515752][ T5608] loop1: detected capacity change from 0 to 32768 [ 169.044395][ T5623] affs: No valid root block on device nbd4 [ 169.196749][ T5630] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 169.205136][ T5630] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 169.309557][ T5608] XFS (loop1): Mounting V5 Filesystem [ 169.388247][ T5638] loop2: detected capacity change from 0 to 512 [ 169.732656][ T5608] XFS (loop1): log mount failed [ 169.919141][ T5638] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.966998][ T3608] Bluetooth: hci0: command 0x0409 tx timeout [ 169.972352][ T5638] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038 (0x7fffffff) [ 170.019308][ T3677] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.047557][ T5614] chnl_net:caif_netlink_parms(): no params data found [ 170.148368][ T3677] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.208724][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.235952][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.244607][ T5614] device bridge_slave_0 entered promiscuous mode [ 170.253145][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.260772][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.269135][ T5614] device bridge_slave_1 entered promiscuous mode [ 170.304177][ T3677] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.461839][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.480248][ T5660] loop2: detected capacity change from 0 to 256 [ 170.495720][ T1073] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 170.511132][ T3677] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.534921][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.741348][ T5614] team0: Port device team_slave_0 added [ 171.245777][ T5614] team0: Port device team_slave_1 added [ 171.447855][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.454803][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.481188][ T1073] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 171.495690][ T1073] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 171.504858][ T1073] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.517051][ T1073] usb 5-1: config 0 has no interface number 0 [ 171.523156][ T1073] usb 5-1: config 0 interface 29 altsetting 0 endpoint 0xF has invalid maxpacket 12150, setting to 1024 [ 171.558008][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.569080][ T1073] usb 5-1: config 0 interface 29 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 171.597778][ T1073] usb 5-1: config 0 interface 29 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.636057][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.643020][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.703306][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.718126][ T5667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'. [ 171.737375][ T5665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'. [ 171.808420][ T5614] device hsr_slave_0 entered promiscuous mode [ 171.816577][ T5614] device hsr_slave_1 entered promiscuous mode [ 171.823895][ T5614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.831928][ T1073] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0115, bcdDevice=cb.61 [ 171.841835][ T5614] Cannot create hsr debugfs directory [ 171.847405][ T1073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.867336][ T1073] usb 5-1: Product: syz [ 171.871607][ T1073] usb 5-1: Manufacturer: syz [ 171.881740][ T1073] usb 5-1: SerialNumber: syz [ 171.926046][ T1073] usb 5-1: config 0 descriptor?? [ 171.955690][ T5647] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 171.976248][ T1073] kvaser_usb 5-1:0.29: Cannot get usb endpoint(s) [ 171.985701][ T3607] Bluetooth: hci0: command 0x041b tx timeout [ 172.048952][ T2987] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 172.386771][ T2987] usb 3-1: Using ep0 maxpacket: 8 [ 172.942094][ T2987] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 173.026123][ T2987] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 173.129507][ T2987] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.307833][ T2987] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.374647][ T1073] usb 5-1: USB disconnect, device number 9 [ 173.416182][ T2987] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.437887][ T5694] loop3: detected capacity change from 0 to 128 [ 173.449029][ T2987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.483473][ T25] audit: type=1800 audit(1725354315.687:39): pid=5694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.433" name="bus" dev="loop3" ino=1048641 res=0 errno=0 [ 173.727447][ C1] blk_update_request: I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 173.746297][ C1] blk_update_request: I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.757929][ C1] Buffer I/O error on dev loop8, logical block 65535984, async page read [ 173.848828][ T5701] affs: No valid root block on device nbd1 [ 173.864267][ T5267] Bluetooth: hci2: Frame reassembly failed (-84) [ 173.878853][ T2987] usb 3-1: GET_CAPABILITIES returned 0 [ 173.885588][ T2987] usbtmc 3-1:16.0: can't read capabilities [ 174.039339][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 174.061440][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 174.065597][ T3608] Bluetooth: hci0: command 0x040f tx timeout [ 174.081027][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.091538][ T3608] usb 3-1: USB disconnect, device number 7 [ 174.147852][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 174.366733][ T3677] device hsr_slave_0 left promiscuous mode [ 174.399701][ T3677] device hsr_slave_1 left promiscuous mode [ 174.454137][ T3677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.465516][ T3677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.483043][ T3677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.501911][ T3677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.526011][ T3677] device bridge_slave_1 left promiscuous mode [ 174.542752][ T3677] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.564854][ T3677] device bridge_slave_0 left promiscuous mode [ 174.583318][ T3677] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.680853][ T3677] device veth1_macvtap left promiscuous mode [ 174.688215][ T3677] device veth0_macvtap left promiscuous mode [ 174.720086][ T3677] device veth1_vlan left promiscuous mode [ 174.766483][ T3677] device veth0_vlan left promiscuous mode [ 174.887498][ T5722] loop2: detected capacity change from 0 to 256 [ 175.126236][ T5708] loop1: detected capacity change from 0 to 32768 [ 175.810432][ T5708] XFS (loop1): Mounting V5 Filesystem [ 175.997276][ T3642] Bluetooth: hci2: command 0x1003 tx timeout [ 176.003423][ T3569] Bluetooth: hci2: sending frame failed (-49) [ 176.046251][ T5739] loop2: detected capacity change from 0 to 512 [ 176.146541][ T5708] XFS (loop1): Ending clean mount [ 176.181226][ T5739] EXT4-fs (loop2): Test dummy encryption mode enabled [ 176.282576][ T5739] EXT4-fs error (device loop2): __ext4_iget:4872: inode #11: block 1: comm syz.2.439: invalid block [ 176.323679][ T5739] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.439: couldn't read orphan inode 11 (err -117) [ 176.341232][ T3642] Bluetooth: hci0: command 0x0419 tx timeout [ 176.357147][ T5739] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,resuid=0x000000000000ee00,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 176.448671][ T5388] XFS (loop1): Unmounting Filesystem [ 176.467117][ T3677] team0 (unregistering): Port device team_slave_1 removed [ 176.472601][ T5739] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 176.484096][ T3677] team0 (unregistering): Port device team_slave_0 removed [ 176.491864][ T5739] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 176.511375][ T3677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.525171][ T3677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.601298][ T3677] bond0 (unregistering): Released all slaves [ 176.868238][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.901053][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.916236][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.926709][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.953388][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.977818][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.986732][ T3949] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.993793][ T3949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.002618][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.528466][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.537343][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.545803][ T3839] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.552872][ T3839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.573790][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.640431][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.693487][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.737882][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.769029][ T5614] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.786466][ T5614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.807662][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.831148][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.846503][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.858245][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.878575][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.914337][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.953570][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.005550][ T3852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.082429][ T3642] Bluetooth: hci2: command 0x1001 tx timeout [ 178.094342][ T3569] Bluetooth: hci2: sending frame failed (-49) [ 179.094848][ T5766] affs: No valid root block on device nbd2 [ 179.110626][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.141645][ T4076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.170819][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.198894][ T5770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 179.221104][ T5770] batman_adv: Cannot find parent device [ 179.230893][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 179.243073][ T5775] loop2: detected capacity change from 0 to 256 [ 179.293132][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.317629][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.354778][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.383457][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.397299][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.433597][ T3605] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 179.442513][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.511568][ T5614] device veth0_vlan entered promiscuous mode [ 179.529503][ T5614] device veth1_vlan entered promiscuous mode [ 180.145432][ T21] Bluetooth: hci2: command 0x1009 tx timeout [ 180.245755][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.251742][ T3604] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 180.263537][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 180.282439][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.327979][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.354457][ T5614] device veth0_macvtap entered promiscuous mode [ 180.371652][ T5614] device veth1_macvtap entered promiscuous mode [ 180.480516][ T5614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.493244][ T5614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.503278][ T5614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.514845][ T5614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.525663][ T5614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.537083][ T5614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.547693][ T5614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.559348][ T5614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.570706][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.581069][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.595821][ T3604] usb 2-1: Using ep0 maxpacket: 8 [ 180.601118][ T3605] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 180.606312][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.717489][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.735875][ T3604] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 180.747366][ T3604] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 180.757941][ T3604] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 180.767967][ T3604] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.783015][ T5614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.794138][ T3604] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.803831][ T3605] usb 5-1: New USB device found, idVendor=0408, idProduct=4011, bcdDevice=fa.f1 [ 180.813116][ T5614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.823275][ T3605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.831467][ T3604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.840307][ T5614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.851106][ T3605] usb 5-1: Product: syz [ 180.855275][ T3605] usb 5-1: Manufacturer: syz [ 180.862071][ T3605] usb 5-1: SerialNumber: syz [ 180.868537][ T3605] usb 5-1: config 0 descriptor?? [ 180.875726][ T5614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.886897][ T5614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.897569][ T5614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.909410][ T3605] usb 5-1: Found UVC 0.00 device syz (0408:4011) [ 180.917547][ T5614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.928201][ T3605] usb 5-1: No valid video chain found. [ 180.937687][ T5614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.949100][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.958256][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.967936][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.982913][ T5614] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.992622][ T5614] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.001576][ T5614] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.018928][ T5614] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.125719][ T3604] usb 2-1: GET_CAPABILITIES returned 0 [ 181.131371][ T3604] usbtmc 2-1:16.0: can't read capabilities [ 181.332043][ T3642] usb 2-1: USB disconnect, device number 5 [ 181.390428][ T5435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.416695][ T5435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.447053][ T4076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.466455][ T4076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.487491][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.510929][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.690526][ T5787] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 182.621518][ T25] audit: type=1326 audit(1725354324.827:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e955feb9 code=0x7ffc0000 [ 182.690699][ T25] audit: type=1326 audit(1725354324.827:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e955feb9 code=0x7ffc0000 [ 182.803676][ T5798] loop1: detected capacity change from 0 to 512 [ 182.814568][ T1073] usb 5-1: USB disconnect, device number 10 [ 182.872187][ T5801] loop2: detected capacity change from 0 to 512 [ 182.883808][ T5798] EXT4-fs (loop1): Test dummy encryption mode enabled [ 182.895402][ T25] audit: type=1326 audit(1725354324.827:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f95e955feb9 code=0x7ffc0000 [ 182.922415][ T5798] EXT4-fs error (device loop1): __ext4_iget:4872: inode #11: block 1: comm syz.1.453: invalid block [ 182.954057][ T5798] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.453: couldn't read orphan inode 11 (err -117) [ 183.022256][ T25] audit: type=1326 audit(1725354324.827:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e955feb9 code=0x7ffc0000 [ 183.066296][ T5798] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,resuid=0x000000000000ee00,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 183.066718][ T25] audit: type=1326 audit(1725354324.827:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f95e955feb9 code=0x7ffc0000 [ 183.367941][ T5801] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 183.636950][ T5801] EXT4-fs (loop2): 1 truncate cleaned up [ 183.738561][ T25] audit: type=1326 audit(1725354324.827:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e955feb9 code=0x7ffc0000 [ 183.765436][ T5801] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,discard,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 183.768066][ T25] audit: type=1326 audit(1725354324.887:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz.2.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e955feb9 code=0x7ffc0000 [ 183.916285][ T5790] loop0: detected capacity change from 0 to 40427 [ 183.956543][ T5811] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 184.003744][ T5813] affs: No valid root block on device nbd4 [ 184.089875][ T5790] F2FS-fs (loop0): Found nat_bits in checkpoint [ 184.183091][ T5819] loop4: detected capacity change from 0 to 256 [ 184.383016][ T5790] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 185.136988][ T25] audit: type=1326 audit(1725354327.347:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a398deb9 code=0x7ffc0000 [ 185.375454][ T25] audit: type=1326 audit(1725354327.347:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a398deb9 code=0x7ffc0000 [ 185.576630][ T5614] attempt to access beyond end of device [ 185.576630][ T5614] loop0: rw=524288, want=45072, limit=40427 [ 185.601172][ T5614] attempt to access beyond end of device [ 185.601172][ T5614] loop0: rw=0, want=45072, limit=40427 [ 185.621871][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 185.639815][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 185.719353][ T9] attempt to access beyond end of device [ 185.719353][ T9] loop0: rw=2049, want=41088, limit=40427 [ 185.734253][ T5839] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 185.858866][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.938462][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 186.006966][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.088208][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.110216][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.120691][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.134149][ T5820] device bridge_slave_0 entered promiscuous mode [ 186.154447][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.178816][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.192432][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.203279][ T5820] device bridge_slave_1 entered promiscuous mode [ 186.307972][ T21] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 186.367538][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.379317][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.389054][ T3642] Bluetooth: hci2: command 0x0409 tx timeout [ 186.476162][ T5820] team0: Port device team_slave_0 added [ 186.484508][ T5820] team0: Port device team_slave_1 added [ 186.532854][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.541436][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.568004][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 186.577329][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.597466][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.604673][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.632019][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.776229][ T21] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 186.796381][ T21] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 186.811243][ T21] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.821837][ T21] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.835950][ T21] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 186.844988][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.096337][ T5820] device hsr_slave_0 entered promiscuous mode [ 187.125612][ T21] usb 3-1: GET_CAPABILITIES returned 0 [ 187.131133][ T21] usbtmc 3-1:16.0: can't read capabilities [ 187.151366][ T5820] device hsr_slave_1 entered promiscuous mode [ 187.215462][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.249376][ T5820] Cannot create hsr debugfs directory [ 187.339550][ T21] usb 3-1: USB disconnect, device number 8 [ 187.500674][ T5864] affs: No valid root block on device nbd1 [ 188.465753][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 188.863870][ T9] device hsr_slave_0 left promiscuous mode [ 188.872824][ T9] device hsr_slave_1 left promiscuous mode [ 188.895292][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.913163][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.926703][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.960065][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.975388][ T9] device bridge_slave_1 left promiscuous mode [ 188.998749][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.032145][ T9] device bridge_slave_0 left promiscuous mode [ 189.042941][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.093111][ T9] device veth1_macvtap left promiscuous mode [ 189.110431][ T9] device veth0_macvtap left promiscuous mode [ 189.124360][ T9] device veth1_vlan left promiscuous mode [ 189.144565][ T9] device veth0_vlan left promiscuous mode [ 189.505651][ T5878] loop2: detected capacity change from 0 to 40427 [ 189.532346][ T5896] loop4: detected capacity change from 0 to 512 [ 189.593841][ T5878] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 189.609769][ T5896] EXT4-fs (loop4): Test dummy encryption mode enabled [ 189.627190][ T5878] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 189.630471][ T5902] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 189.687555][ T5878] F2FS-fs (loop2): invalid crc value [ 189.701729][ T5878] F2FS-fs (loop2): invalid crc value [ 189.707470][ T5896] EXT4-fs error (device loop4): __ext4_iget:4872: inode #11: block 1: comm syz.4.471: invalid block [ 189.715402][ T5878] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 189.739452][ T5896] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.471: couldn't read orphan inode 11 (err -117) [ 189.760927][ T5896] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 189.810148][ T9] team0 (unregistering): Port device team_slave_1 removed [ 189.834976][ T9] team0 (unregistering): Port device team_slave_0 removed [ 189.945626][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.124964][ T5896] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 190.267977][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.309726][ T5896] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.471: Directory hole found for htree leaf block 0 [ 190.545770][ T3642] Bluetooth: hci2: command 0x040f tx timeout [ 190.626891][ T3642] Bluetooth: hci0: command 0x0409 tx timeout [ 190.650640][ T5906] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 190.785718][ T5908] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 192.278710][ T9] bond0 (unregistering): Released all slaves [ 192.391718][ T5936] loop4: detected capacity change from 0 to 512 [ 192.433365][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 192.487710][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'. [ 192.532591][ T5936] EXT4-fs (loop4): Test dummy encryption mode enabled [ 192.570214][ T5936] EXT4-fs error (device loop4): __ext4_iget:4872: inode #11: block 1: comm syz.4.475: invalid block [ 192.611097][ T5936] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.475: couldn't read orphan inode 11 (err -117) [ 192.625590][ T3642] Bluetooth: hci2: command 0x0419 tx timeout [ 192.680175][ T5936] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,resuid=0x000000000000ee00,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 192.692154][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 192.708439][ T3642] Bluetooth: hci0: command 0x041b tx timeout [ 192.770155][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 192.808098][ T5936] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 192.817407][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 192.871252][ T5936] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 192.875382][ T3642] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 192.901632][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 192.980118][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 193.155522][ T3642] usb 2-1: Using ep0 maxpacket: 8 [ 193.206043][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.215378][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.256475][ T5874] device bridge_slave_0 entered promiscuous mode [ 193.275572][ T3642] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 193.287651][ T3642] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 193.298117][ T3642] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.308405][ T3642] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.321587][ T3642] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 193.324204][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.355004][ T3642] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.379737][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.409118][ T5874] device bridge_slave_1 entered promiscuous mode [ 193.524253][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.575266][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.586303][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.645476][ T3642] usb 2-1: GET_CAPABILITIES returned 0 [ 193.650980][ T3642] usbtmc 2-1:16.0: can't read capabilities [ 193.684053][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.696130][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.725300][ T5972] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 193.765997][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.788586][ T5874] team0: Port device team_slave_0 added [ 193.796128][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.815976][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.845234][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.852351][ T3677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.852699][ T3608] usb 2-1: USB disconnect, device number 6 [ 193.893741][ T5874] team0: Port device team_slave_1 added [ 193.975730][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.002448][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.032299][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.155541][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.161860][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.176137][ T3677] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.183257][ T3677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.435779][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.550488][ T5966] loop2: detected capacity change from 0 to 40427 [ 194.641892][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.787002][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.795106][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 194.802960][ C1] eth0: bad gso: type: 1, size: 1408 [ 194.852266][ T5966] F2FS-fs (loop2): Found nat_bits in checkpoint [ 194.875445][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.891563][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.907262][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.018269][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 195.252848][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.413668][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.456042][ T5966] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 195.466099][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.473054][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.607757][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.015626][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.034651][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.240859][ T5874] device hsr_slave_0 entered promiscuous mode [ 196.323180][ T5874] device hsr_slave_1 entered promiscuous mode [ 196.356363][ T5874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.366958][ T5874] Cannot create hsr debugfs directory [ 196.376884][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.446458][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.512023][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.573878][ T5820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.598391][ T25] audit: type=1326 audit(1725354338.807:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e955feb9 code=0x7ffc0000 [ 196.643155][ T25] audit: type=1326 audit(1725354338.827:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e955feb9 code=0x7ffc0000 [ 196.667797][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.715823][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.865528][ T3642] Bluetooth: hci0: command 0x0419 tx timeout [ 196.962181][ T5874] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.000724][ T4658] attempt to access beyond end of device [ 197.000724][ T4658] loop2: rw=524288, want=45072, limit=40427 [ 197.031815][ T4658] attempt to access beyond end of device [ 197.031815][ T4658] loop2: rw=0, want=45072, limit=40427 [ 197.067604][ T5874] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.152702][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.168015][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.212364][ T5874] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.268162][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.290121][ T4044] attempt to access beyond end of device [ 197.290121][ T4044] loop2: rw=2049, want=41088, limit=40427 [ 197.332399][ T5874] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.409861][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.456375][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.597531][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.617167][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.652809][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.660987][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.679223][ T5820] device veth0_vlan entered promiscuous mode [ 197.698786][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 197.722821][ T5820] device veth1_vlan entered promiscuous mode [ 197.749879][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 197.858108][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.875764][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.893997][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.903251][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.925093][ T5874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 197.944749][ T5820] device veth0_macvtap entered promiscuous mode [ 197.960974][ T5874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 198.006414][ T5820] device veth1_macvtap entered promiscuous mode [ 198.027972][ T5874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 198.053092][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.062172][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 198.099708][ T5874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 198.115615][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 198.128843][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.150404][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.164000][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.181728][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.191878][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.221234][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.243779][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.262861][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.283623][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.302187][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.311966][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.338879][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.351074][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.373801][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.384402][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 198.415442][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.435378][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.453218][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.463513][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.478592][ T6027] loop4: detected capacity change from 0 to 40427 [ 198.486871][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.530568][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.544999][ T6027] F2FS-fs (loop4): Found nat_bits in checkpoint [ 198.552998][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 198.564520][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 198.580680][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.591235][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.603068][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 198.615986][ T5820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.624831][ T6027] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 198.631204][ T5820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.651573][ T7] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.660716][ T5820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.675295][ T5820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.680714][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 198.697716][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.710407][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.884850][ T3677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.903762][ T3677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.913828][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.153909][ T3652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.195157][ T3652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.342067][ T6029] chnl_net:caif_netlink_parms(): no params data found [ 199.417527][ T7] usb 2-1: GET_CAPABILITIES returned 0 [ 199.418891][ T5193] attempt to access beyond end of device [ 199.418891][ T5193] loop4: rw=524288, want=45072, limit=40427 [ 199.423032][ T7] usbtmc 2-1:16.0: can't read capabilities [ 199.449938][ T7] usb 2-1: USB disconnect, device number 7 [ 199.462296][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.473304][ T5193] attempt to access beyond end of device [ 199.473304][ T5193] loop4: rw=0, want=45072, limit=40427 [ 199.484031][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.543717][ T9] attempt to access beyond end of device [ 199.543717][ T9] loop4: rw=2049, want=41088, limit=40427 [ 199.572185][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.672787][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.695888][ T6044] netlink: 2 bytes leftover after parsing attributes in process `syz.3.494'. [ 199.704762][ T6047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.494'. [ 199.844169][ T6029] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.845785][ T6047] infiniband sy: ib_query_port failed (-19) [ 199.853008][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.858768][ T6047] infiniband sy: Couldn't set up InfiniBand P_Key/GID cache [ 199.872863][ T6047] siw: device registration error -19 [ 199.874799][ T6029] device bridge_slave_0 entered promiscuous mode [ 199.901449][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.924630][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.932150][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.965548][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.986997][ T6029] device bridge_slave_1 entered promiscuous mode [ 200.038288][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.049759][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.132904][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.141813][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.154497][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.161624][ T3677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.546914][ T3608] Bluetooth: hci3: command 0x0409 tx timeout [ 200.965211][ T6029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.001949][ T6029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.071984][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.103908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.291888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.495823][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.503019][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.764302][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.777472][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.802212][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.818087][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.845997][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.862535][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.931026][ T6029] team0: Port device team_slave_0 added [ 202.068478][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.080754][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.090502][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.100694][ T6075] loop1: detected capacity change from 0 to 512 [ 202.109263][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 202.122494][ T6029] team0: Port device team_slave_1 added [ 202.140315][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.151108][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.159538][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'. [ 202.170981][ T6069] batman_adv: Cannot find parent device [ 202.204941][ T6075] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.505: casefold flag without casefold feature [ 202.220457][ T5874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.226856][ T6075] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.505: missing EA_INODE flag [ 202.255562][ T6075] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.505: error while reading EA inode 12 err=-117 [ 202.269829][ T6029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.277349][ T6029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.285369][ T6075] EXT4-fs (loop1): 1 orphan inode deleted [ 202.310034][ T6029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.312244][ T6075] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 202.375791][ T6029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.382765][ T6029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.404835][ T25] audit: type=1804 audit(1725354344.587:51): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.505" name="/newroot/28/file0/bus" dev="loop1" ino=19 res=1 errno=0 [ 202.411184][ T6029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.445983][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 202.602333][ T6029] device hsr_slave_0 entered promiscuous mode [ 202.617913][ T6029] device hsr_slave_1 entered promiscuous mode [ 202.630823][ T6029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.653684][ T6029] Cannot create hsr debugfs directory [ 202.715453][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 202.769681][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.782760][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.790333][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 202.796295][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.831507][ T6061] chnl_net:caif_netlink_parms(): no params data found [ 202.855713][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 202.882556][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 202.892958][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.911617][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.920162][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.930711][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.943945][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.953959][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.053652][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.063509][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 203.077020][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.084177][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.093870][ T6061] device bridge_slave_0 entered promiscuous mode [ 203.117362][ T5874] device veth0_vlan entered promiscuous mode [ 203.129061][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 203.136671][ T3638] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 203.137961][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 203.166950][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.174416][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.183198][ T6061] device bridge_slave_1 entered promiscuous mode [ 203.220326][ T6061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.233901][ T6061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.255847][ T7] usb 4-1: GET_CAPABILITIES returned 0 [ 203.261366][ T7] usbtmc 4-1:16.0: can't read capabilities [ 203.308255][ T5874] device veth1_vlan entered promiscuous mode [ 203.381711][ T6061] team0: Port device team_slave_0 added [ 203.448538][ T6061] team0: Port device team_slave_1 added [ 203.460685][ T7] usb 4-1: USB disconnect, device number 9 [ 203.472606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.492749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.506150][ T5874] device veth0_macvtap entered promiscuous mode [ 203.546558][ T3638] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 203.554667][ T3638] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 203.563752][ T3638] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.576884][ T5874] device veth1_macvtap entered promiscuous mode [ 203.587015][ T6061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.593962][ T6061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.605409][ T3638] usb 2-1: config 0 has no interface number 0 [ 203.627534][ T3638] usb 2-1: config 0 interface 29 altsetting 0 endpoint 0xF has invalid maxpacket 12150, setting to 1024 [ 203.639480][ T3638] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 203.649640][ T3638] usb 2-1: config 0 interface 29 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.651190][ T6061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.734353][ T6061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.743063][ T6061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.770119][ T6061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.794325][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.805540][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.817451][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.828206][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.838740][ T3638] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0115, bcdDevice=cb.61 [ 203.840169][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.854100][ T3638] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.861986][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.873383][ T3638] usb 2-1: Product: syz [ 203.881030][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.881563][ T3638] usb 2-1: Manufacturer: syz [ 203.891567][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.891588][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.909536][ T3638] usb 2-1: SerialNumber: syz [ 203.916944][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 203.922175][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.939319][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.946146][ T3638] usb 2-1: config 0 descriptor?? [ 203.961742][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.986309][ T6090] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 203.990858][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 204.012217][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.020544][ T3638] kvaser_usb 2-1:0.29: Cannot get usb endpoint(s) [ 204.038852][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.050713][ T6122] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 204.065079][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.078809][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.089777][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.100511][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.110702][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.121393][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.131260][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.141905][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.153018][ T5874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.163741][ T5874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.175244][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.235057][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.249657][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.261388][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.271263][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.280180][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.293237][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.328907][ T6061] device hsr_slave_0 entered promiscuous mode [ 204.336784][ T6061] device hsr_slave_1 entered promiscuous mode [ 204.343359][ T6061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.351418][ T6061] Cannot create hsr debugfs directory [ 204.419990][ T6029] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 204.465284][ T6029] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 204.518346][ T3839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.527775][ T3839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.554390][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.568280][ T6029] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 204.601698][ T6029] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 204.640450][ T3839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.677128][ T3839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.687352][ T144] device hsr_slave_0 left promiscuous mode [ 204.698057][ T144] device hsr_slave_1 left promiscuous mode [ 204.706108][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.713681][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.733115][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.742003][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.751679][ T144] device bridge_slave_1 left promiscuous mode [ 204.758218][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.767169][ T144] device bridge_slave_0 left promiscuous mode [ 204.773491][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.787451][ T144] device hsr_slave_0 left promiscuous mode [ 204.796431][ T144] device hsr_slave_1 left promiscuous mode [ 204.797249][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.797299][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.798893][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.798919][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.799485][ T144] device bridge_slave_1 left promiscuous mode [ 204.799590][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.806991][ T144] device bridge_slave_0 left promiscuous mode [ 204.807110][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.825226][ T144] device veth1_macvtap left promiscuous mode [ 204.825405][ T144] device veth0_macvtap left promiscuous mode [ 204.825491][ T144] device veth1_vlan left promiscuous mode [ 204.825571][ T144] device veth0_vlan left promiscuous mode [ 204.827482][ T144] device veth1_macvtap left promiscuous mode [ 204.827531][ T144] device veth0_macvtap left promiscuous mode [ 204.827618][ T144] device veth1_vlan left promiscuous mode [ 204.827683][ T144] device veth0_vlan left promiscuous mode [ 204.866182][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 205.558763][ T4475] usb 2-1: USB disconnect, device number 8 [ 205.672840][ T144] team0 (unregistering): Port device team_slave_1 removed [ 205.797301][ C0] blk_update_request: I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 205.810889][ C0] blk_update_request: I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.811276][ T144] team0 (unregistering): Port device team_slave_0 removed [ 205.822527][ C0] Buffer I/O error on dev loop8, logical block 65535984, async page read [ 205.902958][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.955056][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.985560][ T2987] Bluetooth: hci4: command 0x041b tx timeout [ 206.112195][ T144] bond0 (unregistering): Released all slaves [ 206.246390][ T144] team0 (unregistering): Port device team_slave_1 removed [ 206.265351][ T144] team0 (unregistering): Port device team_slave_0 removed [ 206.283366][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.300823][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.380370][ T144] bond0 (unregistering): Released all slaves [ 206.451175][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 206.643708][ T6061] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.667465][ T6029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.692126][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.700958][ T3839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.712929][ T6029] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.730068][ T6061] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.760091][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.779871][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.823045][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.830281][ T3677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.865029][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.887847][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.906102][ T3677] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.913170][ T3677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.945610][ T2987] Bluetooth: hci3: command 0x0419 tx timeout [ 206.954647][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.006454][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.034362][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'. [ 207.063762][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.514'. [ 207.481965][ T6029] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.501729][ T6029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.546127][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.556359][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.577279][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.587573][ T3607] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 207.605059][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.662216][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.686002][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.694924][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.703855][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.721084][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.749801][ T6061] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.775930][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.800132][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.825710][ T3607] usb 4-1: Using ep0 maxpacket: 8 [ 207.828253][ T6061] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.873097][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.881325][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.893367][ T6029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.923078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.933690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.946201][ T3607] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 207.973642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.982005][ T3607] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 207.993090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.001352][ T3607] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.011999][ T3607] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.027657][ T3607] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.031038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.037251][ T3607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.048951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.070086][ T6029] device veth0_vlan entered promiscuous mode [ 208.071700][ T3604] Bluetooth: hci4: command 0x040f tx timeout [ 208.082679][ T4474] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 208.084391][ T6029] device veth1_vlan entered promiscuous mode [ 208.138105][ T6061] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 208.148670][ T6061] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 208.160107][ T6061] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 208.171671][ T6061] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 208.211573][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.221391][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.231756][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.241506][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.252898][ T6029] device veth0_macvtap entered promiscuous mode [ 208.282704][ T6029] device veth1_macvtap entered promiscuous mode [ 208.327588][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.339974][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.341403][ T3607] usb 4-1: GET_CAPABILITIES returned 0 [ 208.350665][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.361550][ T3607] usbtmc 4-1:16.0: can't read capabilities [ 208.366736][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.382780][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.394802][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.405191][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.416441][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.427661][ T6029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.443122][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.452235][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.460716][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.470210][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.485550][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.498417][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.515557][ T4474] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 208.529173][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.529509][ T4474] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 208.540116][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.549577][ T4474] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.569322][ T4474] usb 2-1: config 0 has no interface number 0 [ 208.575518][ T4474] usb 2-1: config 0 interface 29 altsetting 0 endpoint 0xF has invalid maxpacket 12150, setting to 1024 [ 208.579642][ T21] usb 4-1: USB disconnect, device number 10 [ 208.587528][ T4474] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 208.609299][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.614870][ T4474] usb 2-1: config 0 interface 29 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.630908][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.643171][ T6029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.653713][ T6029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.665776][ T6029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.691537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.721824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.767848][ T6029] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.778488][ T6029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.788567][ T6029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.798077][ T4474] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0115, bcdDevice=cb.61 [ 208.808042][ T4474] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.825356][ T6029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.836109][ T4474] usb 2-1: Product: syz [ 208.840290][ T4474] usb 2-1: Manufacturer: syz [ 208.844882][ T4474] usb 2-1: SerialNumber: syz [ 208.864747][ T6061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.873319][ T4474] usb 2-1: config 0 descriptor?? [ 208.907404][ T6193] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 208.926801][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.934996][ T4474] kvaser_usb 2-1:0.29: Cannot get usb endpoint(s) [ 208.953293][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.996759][ T6061] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.021596][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.036965][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.046418][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.053484][ T3623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.081967][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.723259][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.189097][ T3638] Bluetooth: hci4: command 0x0419 tx timeout [ 210.494137][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.590501][ T3949] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.597600][ T3949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.135707][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.234354][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.349675][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.464190][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.480110][ T6223] squashfs: Unknown parameter ' /z' [ 212.503437][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.604889][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.770656][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.882438][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.953288][ T21] usb 2-1: USB disconnect, device number 9 [ 213.014572][ T6061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.046820][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.079097][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.086581][ T3677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.132640][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.145894][ T3677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.162572][ T6232] loop1: detected capacity change from 0 to 512 [ 213.280564][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.291005][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.015562][ T6232] EXT4-fs (loop1): inline encryption not supported [ 214.022127][ T6232] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 214.041186][ T3677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.049637][ C1] blk_update_request: I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 214.061753][ C0] blk_update_request: I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.073379][ C0] Buffer I/O error on dev loop8, logical block 65535984, async page read [ 214.154768][ T3677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.177670][ T6232] EXT4-fs (loop1): 1 truncate cleaned up [ 214.196890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 214.223558][ T6232] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,nojournal_checksum,inlinecrypt,nombcache,block_validity,quota,,errors=continue. Quota mode: writeback. [ 214.251245][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 214.350630][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.368251][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.400588][ T6061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.539078][ T6250] pim6reg: tun_chr_ioctl cmd 1074025677 [ 214.544792][ T6250] pim6reg: linktype set to 27 [ 214.684663][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 214.748067][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'. [ 214.940671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.959427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.013522][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.021494][ T4475] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 215.045146][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.061747][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.079967][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.091504][ T6061] device veth0_vlan entered promiscuous mode [ 215.095465][ T2987] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 215.114682][ T6061] device veth1_vlan entered promiscuous mode [ 215.153008][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 215.169360][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 215.184676][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.201461][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.217681][ T6061] device veth0_macvtap entered promiscuous mode [ 215.253293][ T6061] device veth1_macvtap entered promiscuous mode [ 215.308788][ T4475] usb 2-1: Using ep0 maxpacket: 16 [ 215.336598][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.365392][ T2987] usb 4-1: Using ep0 maxpacket: 8 [ 215.381658][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.402192][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.423168][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.434733][ T4475] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.455342][ T4475] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.465097][ T4475] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 215.485352][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.485599][ T2987] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 215.505332][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.535358][ T4475] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 215.538072][ T2987] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 215.544502][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.575370][ T4475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.586714][ T2987] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.598676][ T4475] usb 2-1: config 0 descriptor?? [ 215.603717][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.623942][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.625582][ T2987] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.644747][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.682039][ T2987] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.694260][ T6061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.701888][ T2987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.710289][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.737813][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.762873][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.783133][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.811836][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.832496][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.853634][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.875602][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.895416][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.909702][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.921567][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.932252][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.942377][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.952992][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.964869][ T6061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.973910][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.985714][ T2987] usb 4-1: GET_CAPABILITIES returned 0 [ 215.991204][ T2987] usbtmc 4-1:16.0: can't read capabilities [ 216.004287][ T3949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.054771][ T6061] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.064628][ T6061] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.066521][ T1076] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 216.074621][ T6061] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.100208][ T6061] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.114675][ T4475] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 216.126408][ T4475] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 216.178330][ T4475] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input5 [ 216.214719][ T3606] usb 4-1: USB disconnect, device number 11 [ 216.342236][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.374038][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.391503][ T4475] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 216.437475][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.442613][ T6280] loop0: detected capacity change from 0 to 2048 [ 216.455700][ T1076] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 216.470180][ T5267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.480761][ T1076] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 216.481515][ T5267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.505990][ T1076] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.507541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.541274][ T1076] usb 3-1: config 0 has no interface number 0 [ 216.550091][ T1076] usb 3-1: config 0 interface 29 altsetting 0 endpoint 0xF has invalid maxpacket 12150, setting to 1024 [ 216.561364][ T1076] usb 3-1: config 0 interface 29 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 216.572072][ T1076] usb 3-1: config 0 interface 29 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.596374][ T4475] usb 2-1: USB disconnect, device number 10 [ 216.654823][ T6280] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.746516][ T1076] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0115, bcdDevice=cb.61 [ 216.828851][ T1076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.865143][ T1076] usb 3-1: Product: syz [ 216.869803][ T1076] usb 3-1: Manufacturer: syz [ 216.874396][ T1076] usb 3-1: SerialNumber: syz [ 216.891314][ T1076] usb 3-1: config 0 descriptor?? [ 216.995791][ T6275] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 217.016271][ T1076] kvaser_usb 3-1:0.29: Cannot get usb endpoint(s) [ 217.301923][ T6299] loop7: detected capacity change from 0 to 16384 [ 217.622139][ T6299] blk_update_request: I/O error, dev loop7, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 0 [ 217.679555][ T6301] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 217.705452][ T6301] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.748113][ T6301] ldm_validate_partition_table(): Disk read failed. [ 217.755179][ T6301] Dev loop7: unable to read RDB block 0 [ 217.761447][ T6301] loop7: unable to read partition table [ 217.795831][ T6301] loop7: partition table beyond EOD, truncated [ 217.817146][ T6301] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 218.594699][ T3604] usb 3-1: USB disconnect, device number 9 [ 218.788228][ T6318] syz.2.542 (6318): attempted to duplicate a private mapping with mremap. This is not supported. [ 219.032958][ C0] blk_update_request: I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 219.102369][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 219.118228][ C0] blk_update_request: I/O error, dev loop8, sector 524287872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 219.129904][ C0] Buffer I/O error on dev loop8, logical block 65535984, async page read [ 219.711435][ T6328] batman_adv: Cannot find parent device [ 219.791803][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.543'. [ 220.885415][ T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 221.558119][ T6343] loop3: detected capacity change from 0 to 128 [ 221.623405][ T144] device hsr_slave_0 left promiscuous mode [ 221.631282][ T144] device hsr_slave_1 left promiscuous mode [ 221.671146][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.702488][ T25] audit: type=1800 audit(1725354363.907:52): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.546" name="bus" dev="loop3" ino=1048652 res=0 errno=0 [ 221.744353][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.779326][ T25] audit: type=1800 audit(1725354363.907:53): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.546" name="bus" dev="loop3" ino=1048652 res=0 errno=0 [ 221.854763][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.873214][ T6347] attempt to access beyond end of device [ 221.873214][ T6347] loop3: rw=0, want=240, limit=128 [ 221.895482][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 222.096289][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.119486][ T144] device bridge_slave_1 left promiscuous mode [ 222.139048][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.185617][ T7] usb 5-1: device descriptor read/all, error -71 [ 222.221400][ T144] device bridge_slave_0 left promiscuous mode [ 222.351291][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.380330][ T144] device veth1_macvtap left promiscuous mode [ 222.464986][ T144] device veth0_macvtap left promiscuous mode [ 222.705824][ T144] device veth1_vlan left promiscuous mode [ 222.711626][ T144] device veth0_vlan left promiscuous mode [ 222.848085][ C1] eth0: bad gso: type: 1, size: 1408 [ 223.920775][ T144] team0 (unregistering): Port device team_slave_1 removed [ 224.012968][ T144] team0 (unregistering): Port device team_slave_0 removed [ 224.268390][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.327312][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.533128][ T144] bond0 (unregistering): Released all slaves [ 224.625453][ T6366] tipc: Started in network mode [ 224.630354][ T6366] tipc: Node identity ac1414aa, cluster identity 4711 [ 224.646045][ T6366] tipc: New replicast peer: 100.1.1.1 [ 224.662060][ T6366] tipc: Enabled bearer , priority 10 [ 226.019413][ T3604] tipc: Node number set to 2886997162 [ 226.116716][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'. [ 226.186733][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'. [ 226.199662][ T6399] loop0: detected capacity change from 0 to 256 [ 226.342361][ T6399] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 226.605526][ T2987] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 227.245605][ T2987] usb 5-1: Using ep0 maxpacket: 8 [ 227.365672][ T2987] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 227.453049][ T2987] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 227.542324][ T6413] loop2: detected capacity change from 0 to 1024 [ 228.915506][ T2987] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.990333][ T6413] attempt to access beyond end of device [ 228.990333][ T6413] loop2: rw=0, want=5780, limit=1024 [ 229.147420][ T2987] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.213471][ T2987] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 229.263922][ T2987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.355603][ T2987] usb 5-1: can't set config #16, error -71 [ 229.375728][ T2987] usb 5-1: USB disconnect, device number 13 [ 229.415026][ T3608] Bluetooth: hci5: command 0x1003 tx timeout [ 229.421409][ T5194] Bluetooth: hci5: sending frame failed (-49) [ 229.455216][ T25] audit: type=1326 audit(1725354371.657:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3c4deeb9 code=0x7fc00000 [ 229.623467][ T6425] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 229.677546][ T25] audit: type=1326 audit(1725354371.687:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d3c4deeb9 code=0x7fc00000 [ 229.715430][ T25] audit: type=1326 audit(1725354371.687:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3c4deeb9 code=0x7fc00000 [ 231.866889][ T3606] Bluetooth: hci5: command 0x1001 tx timeout [ 231.873908][ T5194] Bluetooth: hci5: sending frame failed (-49) [ 234.855465][ T2987] Bluetooth: hci5: command 0x1009 tx timeout [ 275.879536][ T9] ODEBUG: Out of memory. ODEBUG disabled [ 279.880045][ T2987] Bluetooth: hci1: command 0x0406 tx timeout [ 309.868400][ T3606] Bluetooth: hci2: command 0x0406 tx timeout [ 315.865322][ T1076] Bluetooth: hci0: command 0x0406 tx timeout [ 325.847531][ T1076] Bluetooth: hci3: command 0x0406 tx timeout [ 330.858784][ T1076] Bluetooth: hci4: command 0x0406 tx timeout [ 335.635266][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 335.642215][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3839/1:b..l [ 335.650582][ C1] (detected by 1, t=10502 jiffies, g=26237, q=1349) [ 335.657421][ C1] task:kworker/u4:8 state:R running task stack:21560 pid: 3839 ppid: 2 flags:0x00004000 [ 335.669060][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 335.676877][ C1] Call Trace: [ 335.680140][ C1] [ 335.683048][ C1] __schedule+0x12c4/0x45b0 [ 335.687559][ C1] ? kasan_set_track+0x4b/0x80 [ 335.692298][ C1] ? batadv_iv_ogm_schedule+0x281/0x1000 [ 335.697899][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x6fa/0x800 [ 335.705262][ C1] ? worker_thread+0xaca/0x1280 [ 335.710090][ C1] ? ret_from_fork+0x1f/0x30 [ 335.714655][ C1] ? mark_lock+0x98/0x340 [ 335.718977][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 335.724926][ C1] ? release_firmware_map_entry+0x190/0x190 [ 335.730788][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 335.735786][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 335.741045][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 335.746129][ C1] ? __cond_resched+0x20/0x20 [ 335.750783][ C1] irqentry_exit+0x53/0x80 [ 335.755170][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 335.761121][ C1] RIP: 0010:__rcu_read_unlock+0x33/0x100 [ 335.766727][ C1] Code: 53 49 bc 00 00 00 00 00 fc ff df 65 4c 8b 35 54 a4 96 7e 4d 8d ae 3c 04 00 00 4c 89 eb 48 c1 eb 03 42 0f b6 04 23 84 c0 75 61 <41> 8b 6d 00 ff cd 42 0f b6 04 23 84 c0 75 69 41 89 6d 00 85 ed 75 [ 335.786305][ C1] RSP: 0018:ffffc900030a7a28 EFLAGS: 00000246 [ 335.792342][ C1] RAX: 0000000000000000 RBX: 1ffff11005364baf RCX: ffff888029b25940 [ 335.800282][ C1] RDX: 0000000000000000 RSI: ffffffff8ad8f7a0 RDI: ffffffff8ad8f760 [ 335.808227][ C1] RBP: ffffc900030a7b98 R08: ffffffff8a0ba049 R09: fffffbfff20e1e19 [ 335.816172][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 335.824114][ C1] R13: ffff888029b25d7c R14: ffff888029b25940 R15: dffffc0000000000 [ 335.832060][ C1] ? batadv_iv_ogm_schedule+0x649/0x1000 [ 335.837678][ C1] batadv_iv_ogm_schedule+0x6cc/0x1000 [ 335.843117][ C1] ? skb_push+0x93/0x100 [ 335.847336][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 335.854500][ C1] ? batadv_send_skb_packet+0x3bc/0x5f0 [ 335.860020][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6fa/0x800 [ 335.867044][ C1] process_one_work+0x8a1/0x10c0 [ 335.871965][ C1] ? worker_detach_from_pool+0x260/0x260 [ 335.877574][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 335.883093][ C1] ? kthread_data+0x4e/0xc0 [ 335.887575][ C1] ? wq_worker_running+0x97/0x170 [ 335.892573][ C1] worker_thread+0xaca/0x1280 [ 335.897236][ C1] kthread+0x3f6/0x4f0 [ 335.901276][ C1] ? rcu_lock_release+0x20/0x20 [ 335.906098][ C1] ? kthread_blkcg+0xd0/0xd0 [ 335.910663][ C1] ret_from_fork+0x1f/0x30 [ 335.915057][ C1] [ 335.918049][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10526 jiffies! g26237 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 335.930336][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=11800 [ 335.938193][ C1] rcu: rcu_preempt kthread starved for 10532 jiffies! g26237 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 335.949526][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 335.959468][ C1] rcu: RCU grace-period kthread stack dump: [ 335.965324][ C1] task:rcu_preempt state:I stack:27064 pid: 15 ppid: 2 flags:0x00004000 [ 335.974502][ C1] Call Trace: [ 335.977766][ C1] [ 335.980673][ C1] __schedule+0x12c4/0x45b0 [ 335.985153][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 335.991021][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 335.996891][ C1] ? __mod_timer+0xa8e/0xeb0 [ 336.001456][ C1] ? release_firmware_map_entry+0x190/0x190 [ 336.007322][ C1] ? mod_timer_pending+0x20/0x20 [ 336.012228][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 336.017574][ C1] schedule+0x11b/0x1f0 [ 336.021703][ C1] schedule_timeout+0x1b9/0x300 [ 336.026540][ C1] ? console_conditional_schedule+0x40/0x40 [ 336.032406][ C1] ? update_process_times+0x200/0x200 [ 336.037753][ C1] ? prepare_to_swait_event+0x321/0x340 [ 336.043273][ C1] rcu_gp_fqs_loop+0x2bf/0x1080 [ 336.048095][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 336.053280][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 336.058455][ C1] ? rcu_gp_init+0xdae/0x1140 [ 336.063102][ C1] ? rcu_gp_init+0x1140/0x1140 [ 336.067837][ C1] ? finish_swait+0xc5/0x1d0 [ 336.072399][ C1] rcu_gp_kthread+0xa4/0x360 [ 336.076962][ C1] ? _raw_spin_unlock+0x40/0x40 [ 336.081794][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 336.086873][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 336.092738][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 336.097735][ C1] kthread+0x3f6/0x4f0 [ 336.101775][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 336.106875][ C1] ? kthread_blkcg+0xd0/0xd0 [ 336.111438][ C1] ret_from_fork+0x1f/0x30 [ 336.115832][ C1] [ 336.118824][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 336.125120][ C1] Sending NMI from CPU 1 to CPUs 0: [ 336.130309][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340