last executing test programs: 18m40.803480171s ago: executing program 2 (id=74): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002e000000350000000000ba008500000008000000950000000000000064f1c0dcf95d6806f8a1572b41a1410824581835d80532cb457f454698165b61a3cf5fc6dd8428230e35230163cf094949fc8b0a9114f43d1b6538f5976be4adc07e8c97d76b1895c322a1ef1f83dd6c1023158a1086f7d0f9dce435554bc34e6bdea4217cfaa9a1f8ad1087c697acd9a7ab696922c9e35f0aee6156c599c7b297de0019b27d67bfb3fe241454a04080bf7f8ce021129c820f9b80fe04be5b11cc7bf16c8a029df573db052357c71be1f5e8ce8db0f96ee1d8a312e9671e652bd642dd65d5b9de99038bc9a5d905441c0785d333135a04000130af1bb4cd5b295b9add7a0247cada056be3a9e29f9d4b57ddd4130ccbbbcd6e000000000000004102d74c391acc0880312cc8a8c51c7bddd3698f620a69f46984c2a2e742fadecf6fa7000000000000f001000080000000001b7e62ca8c3572c3dc46dc7579c100010000000000001af7d2149c8ab5ef187087f74b65a6c7da154853894437ffcb5cc3a2b13759c42b350b09a639a8f257d81204e7e61b7f7230db061fabbdc611df1129695265a3426e02f9b24ebc1355c3bde34d28c2be8594af30231a567d1f0ac5297daa6e9e82eb90c602adffc6a3de64b1db82ac547aaf07000023aebbf4917450e54b989c6065aeafe708ed91d86ee0aebd842815a9bad226f1eda090456f50863060f074c0469fb827520400000000000f00cdb628b5f371ce3b1431b2726cbd8b933f3ce2d452d46d563b254fc3bef447d869a8cc49e160581b4ae43a81264d498b4b6e7c2f9bc962da260e699a9a0d2da32c555047cad7e5deefca3a0942d6170aa75648bd19133373dcee41ddece3fe4c111558e0c4a37ccb72e26c31362cfb9606941dfdb10fee16eb67ab9e957ca01b838defa334e36f703204b01dd394bd1dd08b0e1aa9eb396c61dc2b69bc6aec6e8d2a1c5240b734896365f854ed663cc0ab4c4a03468eebe3786f77327ed31360554b8bca4d90e8e7fefeb95831f49537e3f08ad06bc6c0c1842fe5db582677b6a6886bbf"], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18m40.051788635s ago: executing program 2 (id=79): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r3, 0x0, 0x3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x8001, 0x0) write$binfmt_elf64(r6, &(0x7f00000001c0)=ANY=[], 0x10034) 18m38.826767227s ago: executing program 2 (id=87): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8000000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000006c0)=@o_path={&(0x7f0000000040)='./file0\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 18m38.452790279s ago: executing program 2 (id=91): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001240)={&(0x7f0000002100)="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", &(0x7f0000001080)=""/133, &(0x7f0000001140)="5c4d5829e0167caf32e7c8578afc4e3c42c04d12cddddcfd6e6106eb386ac455eb099c6c2311923c81e676ea0e647b4152234490218f36db4391fe803da8b053abcfddd70a30e5edf5be7d3db7e8c8783a985c547a7b9faf3b0dfacf9d10eba71c77822394fc7d28cb6928eb580102f1bc2ccc8e8dc96a75f17650e458d22756df33aace44df0b5c1b9b80160842e8eeb5d1859e0c2526894a42397a388ddd5d998a4313cb9cf9a66023237cf3dfbab9b1ccfe621ee2e92d4382b5a4fec51b5642e80235d7dfc8378eefa9fb769d9c4aedd0ba95b4cfdabe4a", 0x0, 0xb, r0, 0x4}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x72, 0x0, 0x0, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xba, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0x16, &(0x7f00000004c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000000)='GPL\x00', 0x5, 0x70, &(0x7f0000000580)=""/112, 0x41100, 0x25, '\x00', r6, 0x0, r4, 0x8, &(0x7f0000000940)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x10e36, r1, 0x0, &(0x7f00000009c0)=[r0, r0], 0x0, 0x10, 0x40, @void, @value}, 0x94) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r8 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) truncate(0x0, 0x2ba4) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r8, r7, 0x0, 0x8000000d) 18m32.782570562s ago: executing program 2 (id=113): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004808) sendmsg$sock(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000900)='o', 0xfffffdef}], 0x1}, 0x40080d1) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000000)={'veth0_virt_wifi\x00', @broadcast}) 18m31.628624099s ago: executing program 2 (id=118): syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x420000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 28.633277166s ago: executing program 4 (id=3660): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x5000) 28.46329518s ago: executing program 4 (id=3661): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000180)=0x6) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa08, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32=r7], 0x48}}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}) 25.156008857s ago: executing program 4 (id=3671): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r0}, 0x38) 23.56542236s ago: executing program 4 (id=3674): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_to_batadv\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) sendto$packet(r0, &(0x7f00000000c0)="3f030e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 23.382632245s ago: executing program 4 (id=3676): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 22.424956835s ago: executing program 4 (id=3681): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000180)=0x6) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080), 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa08, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32=r7], 0x48}}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}) 11.977334448s ago: executing program 0 (id=3704): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000", @ANYRES32, @ANYBLOB="0000000000000000b705000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 11.024814968s ago: executing program 0 (id=3705): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 10.787131378s ago: executing program 0 (id=3707): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000007007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) rmdir(&(0x7f0000000040)='./control\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 9.912020221s ago: executing program 3 (id=3708): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000003c0)={[{@dioread_lock}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@data_err_ignore}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setreuid(0xee00, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) r6 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000180), 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') open(&(0x7f0000000200)='./bus\x00', 0x161b42, 0x0) 8.73348086s ago: executing program 3 (id=3710): recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000005ceeac4354e1a76b001e2a1b496f0c346c2b3039c6e835abd3269ed26e12a4b97ab99ba574e4f632ea9e7a1d1f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x64000600) ptrace(0x10, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x180, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000031c0)) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(r2, &(0x7f0000000140)='./file0/file0\x00', 0x9c700, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 7.777459599s ago: executing program 0 (id=3713): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x0, 0x0, 0x3ff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1a6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3c6, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xa]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) r1 = dup(0xffffffffffffffff) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x20000, '\x00', 0x0, r1, 0x8000000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$inet6(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x5128ef2c52fe809}, 0x800) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 6.847681577s ago: executing program 0 (id=3714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0xfffc}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x0, 0x0, 0x600}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=']) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x2, 0x2, 0x6, 0x1, 0x1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) socket(0x10, 0x803, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) setreuid(0x0, 0x0) read$FUSE(r2, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000d40)="a371444f1cd810c673e9893bebbaf22a96b924dfb4d5119b7af4fab3aa0d2eaf484edb039b26d6d50f774323d6cd2fa3d9b8cc899e58b1a8936fe8e8558e524dfbc9647872d5bd01a7d38e7afb0fc4cc1f6ac5361d304b586fff1a03e66981ee61428689ab4aea6640106385e6a039c7c314b9e4a17fde20f628de733b6b48c2523de39477547a50b2103f0a29d6aa1606d27c75caa8207dabf4c638ee944c9ddd93da9767fdd952cdf71fe269e98492ad4dbb4d3ba1e0c2eb6ce85c8c3ff79aba1efedb4e28cda38a79beab1c24b7ee3219795c97c392f62311ddccf58059eb8f6fed43d09685d50a3ec061ae2b023bbaed98d5752284aa0b667f1871d207ff7e0c9646fd28c8e961e8c1c0cec8420c579a242e15983730cfa96ac26df7e9c35ac0f4b43228680f33e8eac5b809e63be1ff949baff5257dd5e1514b81ebf80170d77a9fcea7963843f2200b46a56028619f13b786a504117591e5f0a407d6c41d0e6ab1d3263cc251aaa1ece3a495ce33e907ed014d93647dd39d8b1680c2e5d9d5fbdb916da14fa924381f3ac742984cdde5e55f32ec23ef8d986ce992947e914b445852f26ae85bf9fcb2b9dfb343fe589c5818b1914fa35fdefebc82790d69c758f666de26929cf86f0a359c43272b2526e51d3064e8e05e845b61288dda8dd59328859c63d7fba72ebc9d6258cd20ab6c3a1884c6d74ee329b898ce0412c2935347cba5d0603ceae952ace0313ff1356211aeb460600028eb5d2f95fb14e5d2b8fc5a7213ce27d9f3a4873e588028b9ff82b58b35848d5b7cf6e488145534d1c7e415c0e6da4c4460c7b1667e9948660c9b56ae7cb993a84b0cc2dc170399a6ef2f8f966c77fafeccd0ab96316d7e42ed1e87e5c1b6b74b5e4cf91254de1c0eeca314d822a3dcc1f7735946239b9ea65e9933421534bf910c8dae8d153d61b05658bb1c3493f67e07947cae5fb4e9568162889e4adae876fce21b3ace148585e248a20217d15f06e5c49ef54a3c2123abf97644fe1cba7a6bab767d5f95650fb99e3a978116f81f68ad310b3e94ac094a5dd1a6190ecbc2df1d51ea003560fa43d338f1d693cf6dc592a21c60b15f7de18ee9ac67bbcc24467692a47aeb5def10b03a7c58ead9bfd30881e7842d2e5e2f50c0ec6837e005a6e824e029e8f016fccf183a6140c34ebc2a21e6c4cf43cda73c069a6bf141cc5cd29ab865fda6dfad0ac41f98dda1556819d505e86f9ebed405c8c7c73b2165c13ac8945a8c2d72f62046eff4f49ea1111656df4d35ddb1aa9c983a56f8852e0d785f5147947218462d40c97b5827df9d52330eb576dd7468dcfebf2ea925dc6fac9c52727dc254085588c5619c848a62e087b00802fd8c73e395356795a4fc91fc4560db23121cfe3c661794a740f39aa672b815ab734af418d026ba71a3918b5140c68acfdff1619c4f3c8f7507c77499fd042dfe8efc535b85c9407af3ad6c82151c2aca79b874486d103e03b33b2f7b12d5cba61084d52de19e6538485e1a34300fc11103c186b4ed23c364df0fc2444b7dae4a935c501553de12af24ec0654f826f98762961473e1d7faa8dc2b1f08b2cbf8563208f05cbf247f98068db298afd01ace4157bb2f78dc96ef1515094878211582452df5abab7c7481501a98f69f6a358207a595c05d7e14a33ce5f6bededdeb90fb7fb49ddbbc830f0172ec5f2e4a124f1ccda4f8736a3629a8f2ad1a42cebff1bfb0728f3a497b18e8e3d75bf2db8e2510ea2f87bcb7d944569b70ea4269fc79ca71b5327f7c4c53394d81483388f6765cc9a3af3405bab1efaa250700a07a74266153ea3b9a1678eb04aa8fd4cb18b2847144f55e9d9aa080d9710a785f594bed25b1ea8c6b2df97d1fe7a6f9716a31b5ca230fc463b45d57b10b4c406fa36e1a4d1e585b06318e26bf2d132e4bb30f45d63088072a72e11dea7fa97159d859044425fe1f4992c7cc23a1b1ad2db7564643b92bd8170e5957da95338033fe482c70a87b1ce01376f4bbfd2e29a109069842fc0de60dbd37cf0c45badd643a7850afe29c5bc970566f98b7907744db926fa88a78bc749a24646a8cc16416b9b00ef1d26dbf3ba6588e692c76af9d5aed63b5d1b97f2f3e1abaf9fa2d3b40116cd6bb86c7c213b05e736314cf3c8afd6f92119ef6fcfbd57333d69fb456e9fed4ebc4a5a16f63aedf8d5f56c25a731d3dc82fb6dcaf9c379b024ee43140dccd153ef755da2bc6323f9d11d5b76b53836b68eb61180221136eed17c5595e0e1cdd7caae2f3367fd458efe3024b12cb3e83607cea6e94eb7b39569b582a175b4a420c9831b65247a4668f896c95c59b235111798c920e5e4d4603fc9fb38679d3c8db1b719aca3d5057b7720fc64242440109b325959fdf45f386b70049acd8ec9d63e95750ecf8bce124d6603ee0d6eb9c0f6422c47356714d818ea16a5c6f9b0e9b6004499c3c0ca1b216033b927ee4fa08ca204a49552abb6d98b1a497c51fa01a59617c36f4b18e3552ef999870c319116c7ce346d7b6ec436921f3ad281bf8ef47ae79b37f0ad6e62036cdfe68381ba190bc190ba68c56d13b7999901a64dcee3bbff1252bb51f7fdaaad70dce02deff6e7f1192040a88db0dfc182067cd4edc1e1ee1954e744cbb6e60f8e1558579a61f5a17f9f030c40215ea02ec8d4065e4b4672509ab63673d012a2cf52f0ecfb3518e9053ece8253f0093e4f41ee71076c36319fe3c58cb65eaa29825f0aa8992fe2b36fe7e9ba708c3be5035e6b05f4f280b819cd06e6cb2b3ca2e955fe7317493725e7b5fdad9cba480d297b92ff0e13463420d061d3d7023404e9713c6e251548cdd61ab95647b474a836e90c7116bb1453c2b5dcc1f776bc7da46a1cbb8e31766478af32c819a7a0dcdfdd2e913c9f308d7adb72d2685fbf9983789ba8ba179c06bed4ea46f4172e19be4b819470c74fe7b54b2fe1abffeb12936ea07c892bff53e2164456f197908e6181f3ad89a8635412442627eecefdd39a31dd7605f7b141add6ac2a8235a22b6e1e029713d4cc0c97aa7d0be2359d7457609ca08959b9017c2404766b622326a09c3454cc7082bb956852c853715b7ff38788a4ffcd8db653a12aa45e32b4401a742ce263375f261b5d3d68a8b0b0fd11c746911dc3a97a06c170ac5070bdde28adfa1f4c9a64ac4a620c669623839456dba0a41696dc772a15a4c203a10d7c6c76bdba1fec3ef561ab1034dd68b0e8dc5b392d1c49147e51c715153d677b573b2323e2ea23b67534046d55058fbb8eda3e86ff878ebb77c2e1e04afb526655608d39755eba5c35da7faef568644ae7419c9b322112dbf47d17e6d6cb371a249ee568b2221f33c2b33d2f27ac20912a156dc394c45166a7c18db2ea6e70de38b61be16c6a70ef5c89ae741a9c85927211f1afbca02f966cc6f06fda2fa9df2675fdae6b843548cb5437760c64060fa40390ba145bb461abebe600e0892332dd86705c6676d1aba71b4af5f66b4432326562dbb75458d8deb52e697d99f750efb5e5cda4ec54460a04ccf7f48c63237d31298af554557369db18f45056af61c2e6454ca8104cc86c6aef925b20bdca9fcb771f46e9f29f9edd4b5590b1095db43737613e2f9d012e3b68bdd0306a0a64ad39a64b3c2149ae3b31b1fa1f4d8ce4fa6d3d9502ddc2ec5824c5c75d2f575fd69ceb5e8aa778224083c5f6b9ed0c71d05e1da1ed3576aeaa59e9de4d87a4be9eaba0f6e39883bc61f5f548df5d0d610743fef02404eee17334601b4a1e1a61b141c49b73f6879e2163f57831baaf40bda3961083f0075ba7e6e21bda0abc7295267a279773893ae1988e7793f4946136074e43bcbf0883e0020defaf7706dd0f53e6526e2823597dc765782c0d6fa05067f9ef8c10657089222a5bb3277bb840529646fe9555b22e19335356bf99c419657e5765d71118c23de147c1a22f554a6efa4c65adf32c0d8593f08dd4fdd503e859828e4918bafc0ab40e4161f67f7b8dd88ef1c91717efbc050e40fe482302a758e2e590cd84103798482d92e1e3b0ab11442bdf44ecf20ce6d9685a9bb3d68456fb4ab99cd9dd60b8a36f6ac5e8dd097b29faf1a3c875cf7f1735c8deefe1c29e9b1a9a1db7b0cf5b0ac89adbd79f9e33768edf8ca1c3538f5b7da0737afeeab72355d03c520dd0595ddc7ca1f0ed48d5b7335fe484639ebdad52e42f5b57fdd8ac36cb464c6810c03aa8352ea9def99c12a52356ca11a2fc6c608dbfcce8f0c040d35d74ad07f1d1f20dbe8f81920024aa0f228d2c60f90c49f5925de1a5eebe1a8c3760b9e9942597696653ad64d389da0bd772fcfed31e6a7b048fa5c5a6d5612e11551e66f37bff34c0175347ef9faddb6717ddd955885e05a251bc654922b4d347c31bd4e7a08171646b894c9d9cad4868faa8ad0497eef78f65c8290d433180f44bafdc9468078722fa572af5db40fdda587a25330179acbd2f0d104e479ac6fc2fef21239faf81402d7c19980ddacc544848e962c96a48557fd644dd23465441cbe4c6891aec8ad5004a17da4941dade028ce5d3c7134ad8fe724efafac2fcaa0e9ede5d7d0b2507a2ce0708e4cc44ba87a8325d59af87a59635edddf9b0178414da0e81ce368a8aef611ebd8c44476aeba610fd6a13bcbd0f4d353820a8aa067e25034314e644b204e3081006459e05624252780bc99bfdd799a4a3173689146b630f0cc2bde171d19f09bc093399416ac2d5dc7b980ca46067cb31cf2bce30d7a0fff3b14b75715a920efb80114a28f9e135083af7410b3884fecaf4f2746971bcd68e4c599126e4a0272359b8ef841049257094e5ec8507fe4f8478698a16854484e93152eba33caa8af8cd4963de040f9b3631d09dd9733023627af36b99e8588081baf70d2a39307166115f25993ecde1bd6283472688d6de6ed5840b67b7dfedae77368e10b1cb8bca24e5c4a062745e4d64b2d403e7948095940f66527238779d58223a638d35c42144889fa425d82d9ddd3be6fdf5de5bc5e0e21483bcf9867a5b46806eadfc960aef54088e8ae1c3c0f067ca740d6cd0e0bc4d10d441ca5312b2b3feca97a68330b5cc69efee7d05fb79233b914eca8fc9fcec811dfe62c4b7de79569c360277ffebde4e4b6d489a0c4db6edc3530080bd060c48aad2e3855aafa46d94b8ad58789500d9e766708ff4e8b76e20ccba56fc9477ca3492874ca17fd9a5f3d84fddef2253c0a1e46eaa0d3746f53d5f91e3bdbd908126f9e8e73bc7a3450962bfddb01fc35c5632855d1870b28662e2524dc497a24361491b6249c4e9a6317db3ccb9afc36e53e1dd02ef1823e3ad1dd209c364fbe1e48f9397edfce5f2f170012c9e605053aeab6bab40f7a077ba49c202f76798da5b98fc61487a6800e7480db8a517bbb01700a2cd5d8d961f7ed0ecf780cdec0e072d693f30dc256f7d320465c5ad0107988c8427acc24a5994f085748cf0dd407eb9fcfed421f3ae2af25d881c1e44477cc41f603ecb8b2665d96b3aa8a885e4cc60609baee29268e2a66b208702a411bafd256b91144b92353e5d407fbf2e25355a657d42a2ca394fbfd66650302dc935076853b8397c7e066ba381ad0ae094a842e4625b58bcb85fcf6e8d63cf07c98b182ee1223308be8d9e518ad2b2843cde131903997201d96b131975977d872663aa7e8bf73fa16ebe2fcd48451339d9f39866c6443203c72047a8dad71cc8d9f5f41ad9d9ce9acf76319373a781dbfa3bf73bed6637f4daa0eabb3824468d3209297aa9c3cbb18e99ce267c9e29132367f6ee4144840bb6d14a6cb71c76928c608b7bb6a3f3a0295701c2aa09c5135379d104217fcf0cadd6cac4a6c90580816656e78adc1008f1a4095e2378fe22c7f4664a89cb754be9d4526f7619fcb1147fae34318c16bd06665f874bdcd41388637540481e45130629ebb19e063c290e13a26050e675ee5b781a3fa0533cc14bb7a7cc1022219008b408d3936d8b592bf1e0ece0a00236701b50402b937017b2ac6ead8990c690ad672ae6da1fd38c7b935e930dfc40d022a6156a160a0f47bbc8eaf71ffbc0e59546fe0dac6a98d3dbbe523273fd9b373126b22b6688679defd3deeb56918d13a422260f53836aee222cc144445e18ce67ccf3388fdfd699fe7b148bc47ebd71e30c5d8ad02c519767054509dd696877b8d4b354301c1868770c041369b399f6a199582e511a6a28b20ed57c45192046b6f7a8ddbc0e61dfec1a62c82ff53420e039b1c1f33b34be49c8a733a8175194bacab149f04405fab831e8ed650da1862a387ab55cf8dddbbc04f7aced0a58aea806bf603e8ee37c97c800a13482ea24195dd5924bbea7844e0fd7080adbbd57f5e21f437c4bf370159c527c9bd3327b29268670d72e4791c2afc1ca3eaddc68c5dbc47b66894e08b1c608cbe5b0b68a2fd27c7bca5637c87cb3314eaf59684efbf0ea7fbab75b2d7c2ea2b49dccba438700854f9f2580311907f2c01d89aa3b913273b0d20617a7cc3545c4edb66fe2297ae678cffd56fcfda8f99072f4101c2012c995cfe3563b8aff7c1b5e1f6d3f97f07d8e2b4cd4e26e7b26eded285e596cd33ccbc5e2e65464b93ac2d28d1dfae7a1a2d102029ba3e905951c9bfba6c2baae502e502c4e582640b6e8882c2318760527786676d6826b33adaf9158bdcadd3c0b14cf220c31458d19191cbc07067572cb5639440f74e2eeaf8b7d448bdbc822bbf90b49e17f88b45a50c37027a72c4841856d78fd07efc3c093f8a29038e178bdc25dbb41cff547e019e883c0e292a19d5281a2a25c1c642669b25b9f12023a122cdf07277380147f5160d0e970f304d48ded4600871f6d0b8364aff33a6ee750b0e31f4d32dd87a58c60e41a57a2cc295dd0b592833b1ad843c12e9682984ed4fc82cf3502c5d890099c43d9b5632e20760058c731f9ed31e018e9569e565a2bd41692eac4b64d567d8f6a4c027b92d2905f30d10881260d8f10eb4b75c7eada22a0d89c8a2efd81598b497d89cf1839305ab1b3a56d7b4a9441e0a3dbed295967847edf5d8e7f5717532b5f5f64355a6c3f295ace402af95e324cf2cdfe1e408764ab13eb9f45b6df70b1657c0579e4af244ff82b482ff802782514e271ed8241c96373a549c8b135a1aa38ca715c3e1acb3b86fdd4fcf4dd24312268e94211dbd1751f4a141d056aec9c7fb87fd7dc5ddb868b6583572c8a2d2e38df53024850c9d0b6161371d99766971b2c50e55827df2aa11fd2af51e43a3d4ce02367379fd71ebe545943e6bdf477b8b66514ba9f42ca97b1b5f7173f530482c5b64daddb2d5b8643509c91cfacc33ced9eeba9cb09a6c403ccb90d73f729a5dd44ff43b4a666d8ad4dc6faeb4570dd74f0ae639a2ff7d59a33189e045dab659dac98be0913a0fd4e94d98698a3bf204bdc5ab784a459614dc8b55d443fb184bc32a0f1205f158dbf877aeddbeb5047ea7fa0ff5299f04efcf1246242cb2774202a65a844cb62981e6bff08702e9b3d8ae7a955e8c8afe5dee8f778429e5f6505f68c70fd4cd77cdc8aee0611992b47a7dbb4984b1fe0ea0228c39882af786847db2bc0e797bcf60419edb7fffa54d55517a497a5c9b6e895d9e405d249f6d00c951eb7b5e320faa667c2b93a67fb2fdf91c0c9c932896acab88fada9199399baf0773199a66a4e27c6354888103c7575ca8adb8b112de295a05c2ff66faffd9bc4ff9c9cea56d9918b72456e58117158a96e4d146a38ea13b8161abc19dc0365b3c5aae669650aab72c3223a583750c8cbcd0ece61eae2e72bc6b99f81fa5d8696083ece179f2e278b2f22ecbe7bb4004f15315061202e0ed58509fec726d60fc549d3a02b368a7dfa828ded9c38b143486395f2f68f080589b6835a60d2771ab43100ea67a7fd745e400ecb6dedbed93b50e8a0269795bcf7744c485e9bf945c62c3bfce633dc7957ef93194404e47db1cfcae5279fe83e2401e030251f374742a9f661093d6c226e8b29a77c72b15158c33972e16a2edfa35c9fdd7b9a541911a39cab3e51d38ed7cdea8a35894c0982ccd51d1021dfc17ef2bf75b6491bd88812eba56bc734060789f3869d8acc5e812d177bb79b66bc30ed567fab94f1a4cfd0fe2433188d4357aed40f33c292687a7e64eda10116c0928a02753eeafd071669983c29e82e3383bd966652bee7fc624fd34874db92ead098932a066458f8ff82c9d7b749dd6bd5c0704f7f949bc6be28e3f3a800c0bd869896db88f1d65ddbf66cb9a3e3cdacef105f3719811e43757bb5b543c8e5c629bb943e8cf2a9e17a3c8137c5a4472d37e5502798967668e6b58ed5fd2530cdadba226e40c8251ee36a049657bfbe542d3c821edb52aa2ef0a892bf00ef1c5519d6ddc806e178b7edd9c0764a5e46a9bda96e3908c3323fcda9eebc8c18640c42705089f2adc1272553a47cda1635f9bf36e2b9da9b9e337d1fb8a56c546d1dea1d5c3d8d7d87517d38d30aacb241ce8efa17ce7adb648365899a30bd9de345c2f547eda2cd8d82efbc081b57ef28ecf5eb1212b1a460c791f1e4b95a0c8dce9fb3b3f606405aacec0edcbd9f5e7d1e6d2606eb3b87bcf2674ca73410a15d8581e08c8a1b730a5f9c591f5d68a2ac3380b8d2ef02d9caa21aeac4ce9496dae97398afd1316707b45bb449dd4461e060e54c9842ba30f2e8f6ab8ce267e3b31ca231e4175e7ea63bb2ca55ba0c77933b502ba7bea6f21b6d72796d0b256fc5480ab096e2e1427d5e6ff182fa56fe637aa518a24bb5c5bab408c689e70de01b4e2e09f1bcc50209086c09a6c4e05891bbebd599a49ee72b82e6f048cc0cb2445a0b9f7707d901d2e0dd7380b1e2c876cba913c4d8b04edee024a6bbc464cb81e52b2ed79358dee476270224d882811ccb13bd8f8d76fec7004fc4c9283d37b0a7dfb560d85bdd7ce8da8d9750709e029548833a5170d29edbd9f38a9459060abdfbb3a5b2802d3c7cd36570da4c9de4a53455efb05cbdeb74ce0146b05e7f634ecd833e01ca0fe0e10ba316eeb6c2ca6ea70a0ef280195379f42f0cbeb8e75cc1098876aea71339f27bc073442c355f88ed127153abfa355464a6cdfdbadd3529c3e70720a08d4fe763df3310fee30ca45869e7a063ff95f2ca15b6c6b34cc48d2639572f3e5fb734e09a0e4f8b550d43237e219a533b6affbdfadf93fa11264f760e43da6cc3f60eecfb96908bcb0671968dae426a7320d399702281a10f2d90a276dbdbca38f6bcb9e52cf622bb754f8e8957d0569b0ea22005bea0e0e68d6f3b6437822b3815fc63e431933e63216fdec27f3b63fa00fa089332f3a4edabfca2a4c0c7def8240c14ad0e27469ac499a81372108de4b0a2067d962e783fe3b7aa7c43927dda40db30d61c9eaf776c6939ef95efa63ad782d2f06c70eb34816a126b000542dac63f88d0ec9c0d25f5b9e70073a2265415913f12f483e589cad16969ac9cd6b649d1ad73f426a06700c5d296d61a0a7b2f6ad228add7a7c9dc804cf83b19076bb3e1b703f30b3893ada9d9be8c11602138add07d7c66233e71bf850795800909771dba13a4ec1b9d4c766b1dbceadc7821788859f6bbf0410311223d608f84e7d180d51c6a89801479c2b954b2919184ed0f8333cc3ae63df9a34980461cd26f937aabd6daaf0982a26944d508c66956cb0cecaca04e4582cd2cff55da484d46daee6d895515cc2bb95500778d8116add858b2c07162f2c87fffb87fb6daef626ae7b42b4618bf94faf76539f9ba8144ea809ffa0e49d6601f4c2e9ab7f1bd2313b2007a40ed0efdc9d9fd5ccc70d7e1b690330365359217e3f16d8cb2f3df62d0f8f6bffd4121da3eff375919f95ab23b17d2e43452a613a5de4900a8a019fb5c2b1de917649a6238839a4bfacb325ae5b810b3c2abe28564b732405d23349a13b47e53b1a8ab72c75ed2066b417a4e5ddbb478116fb950b7105d724e6d682c6f9557bb6ae5af0ce55b8b19ddc48f2aea9ba68be31dc64491900c1083e0e148b9dda98173578ff3812d217b1aa9484d5f51658b6ac4b02fc2187788bf758a6f55b7f8833d2c095bf463aaad9834bb7e1a645e901b0624f9cc5bcbec4347ba1d6a923ddfc6942e68180e7900501d75fe049aed62dc370f4cf4266bacbc24e297314e74d18d4cbcf7dffe0e9dd61bebce2d2c45436de5cabaea7c8ebe149b790bfdcb3d313abbd066a19c14ef9d30e88004d7668cee65711591e97b7aeb97c39b9d6bedef82e3ca027cdfbdeef04edaf18e2f2b7a59f2992bdc4afe9a514da5f89a6e890d5fcfd1e83f4bb7a5f283875a3b52d762e7a732765420b87ea331f7b4100b4fb89eb1c6ca1699b7238c48e8878741cdf58302bf8b8d2253b632e530430c91afa9972bb173fe7b5e8831e40229f69a5b15f79695f1a31634b6fb13a2bf5b19651a6786520c963d3624738bfdbbe7de01ef3f3d7d0c7d26911b3d1d2c8cfeef80b9199b1a9ebc75b07e7dd4cca71cedc60a0abcc2280b518ecf1d327d1968b061c801e5c9a1a6390b7473257bad942deb251fd2cf8a24cf43e8e61352c6ac8aa5aa593a11740ffae40c3f2b495154a09baea42d8440665a1bdbca7c934367b902bca59dfa6c1cf71375256cdcae1c2d55fc395943e94e9b7a65d0bd71eeb39ea96c5768e062f5c997bb0b392f6c88cd61fe42f1d7b5d9acd86aa9c1e668432202c4b4198161658b79d267fdf422cbe2ff840b34c57c985faa5fd3a64434b2952ad56a2d74e80f277e5e81754015fb2d55724579a1162b20bbbbbb668e25de64ee1ccea3195d40751c9ff86562009b1f81767a20d7191cf3af7491dba86d513f996cd4de4a5267f8407eefcc380728a57b73d6dfefbc3ec896346f6f2d8674b67f49619aa053452cdca978657fdc6ade3bdc8cc2058bca1dc1baea0d94d1659cb12851193eb3eddf7cec1d91817d3afb2ac0a08e23dddfdbe72743f948b3e392806242c2959c4eef5a6be9306aa7ee552beef3b4dafe927893cfaa17f41dfc910ee338e65113e75d394081cc7b9f1af8d217521213dadf7487bc5684451d37c5feacba13687951fe9c75ab8251fb4fb9bef13a252f134ad106556a3b89818eb9c28267d547324c464eaaaeae97c263de1f84c7f34941230db1df9c376dda84843ab5322751e061d2d6ae3f32b0b978a5d7d5b3f1197d8e08f3cfc1e029721beac8202830eaeda2c4173bcd7a633faf1f352c6f8459d784bbbe8354200f44a8d84f02af9843ee279d40c82871891410cfdc76e0079c436979e3d7cd1b14dae5cfe8a352eece9bc8f0423536e7c97cbf678be065ce25abea8eeaaa094a2e805ccbb4346bcb1ce043805a550c109055a1b9ac9b1f04eaa0fdddae679e6649d358402d3dc4bd5681379ded16e515c5984be7b61ec5f86085e33b361f63e4832829c0a33b41639623c5b380c6e7afd5a9cdc37492ca3e53cec36dca66f24ed5c9b44266648f24814c0a5e563bb246e9a5bee4b60bebbbce95ddc6bc1f58109d4b510d4a66edb8664f0acac8cd08cb93e697f6727db709ed3b9d3a4", 0x2000, &(0x7f0000005140)={&(0x7f0000000240)={0x50, 0xffffffffffffffea, 0x0, {0x7, 0x28, 0x3, 0x2800050, 0x5, 0x4, 0x7, 0xdc}}, &(0x7f0000000300)={0x18, 0x0, 0xc52, {0x6}}, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0xfffffffffffffff9, {0x1}}, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x20000000000000, {0x8001}}, &(0x7f00000003c0)={0x18, 0x0, 0xa9, {0x2}}, &(0x7f0000000400)={0x28, 0x0, 0x3, {{0x2, 0x3, 0x2}}}, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0xa327, {0xb6}}, &(0x7f0000000500)={0x13, 0xfffffffffffffffe, 0x0, {'9p\x00'}}, &(0x7f0000000540)={0x20, 0x0, 0x7f, {0x0, 0x3}}, &(0x7f0000000580)={0x78, 0xffffffffffffffda, 0x3, {0x3, 0x9, 0x0, {0x5, 0xba, 0x101, 0x2, 0xb7, 0x1, 0x5, 0x7, 0x80, 0x2000, 0xc199, 0xee01, 0xee01, 0x0, 0x9}}}, &(0x7f0000000880)={0x90, 0x0, 0x8000000000000000, {0x4, 0x0, 0xbf, 0x2, 0x0, 0x9781, {0x6, 0x773, 0x8, 0x3, 0x0, 0xed, 0x5, 0xe, 0x3, 0x2000, 0xa74, 0x0, 0xee00, 0x3, 0x9}}}, &(0x7f0000000940)={0xf0, 0xfffffffffffffffe, 0x63, [{0x5, 0xd7, 0x4, 0x8, 'GPL\x00'}, {0x2, 0x0, 0x0, 0x4}, {0x1, 0x8, 0x5, 0x6733, '*!\\)*'}, {0x4, 0x200, 0x4, 0x0, '^/\x95('}, {0x3, 0x4, 0x6, 0x1, '^#%^.['}, {0x4, 0x8000000000000001, 0xd, 0x101, 'sched_switch\x00'}, {0x2, 0x400, 0x3, 0x84, '9p\x00'}]}, &(0x7f0000002d40)={0x290, 0x0, 0x9, [{{0x0, 0x1, 0x7, 0x4, 0x10000, 0x1, {0x5, 0x5, 0x4, 0x101, 0x5a, 0x3ff, 0x938, 0x1ff, 0x2, 0x1000, 0x2, 0x0, 0x0, 0x2, 0x6}}, {0x2, 0x0, 0x4, 0x7fffffff, 'GPL\x00'}}, {{0x3, 0x2, 0xfff, 0xa3, 0xffffffff, 0xffffffff, {0x6, 0x1, 0x95c, 0x2, 0x100000001, 0x9, 0x4, 0x5, 0xffff0000, 0x1000, 0x7fff, 0x0, 0x0, 0x7, 0x6}}, {0x5, 0x10001, 0x1, 0x5, '\x00'}}, {{0x4, 0x1, 0x1, 0x100, 0x6, 0x3, {0x1, 0x5, 0x4, 0x0, 0xbd, 0xc00000000000000, 0x3, 0xec, 0x7, 0xa000, 0x7, 0x0, 0x0, 0x5, 0x8}}, {0x5, 0x5, 0xc, 0x7f, '\\\x82-+{,*#S!#&'}}, {{0x6, 0x1, 0x9, 0x1, 0x5, 0x7, {0x6, 0x800, 0xd1, 0xfffffffffffffffe, 0xd59, 0x5, 0x33e, 0x81, 0xc, 0x4000, 0x4, 0x0, 0xee01, 0x6}}, {0x3, 0x9, 0x0, 0x9}}]}, &(0x7f0000005040)={0xa0, 0x0, 0x623, {{0x5, 0x0, 0xfffffffffffffffd, 0x9, 0x3, 0x8001, {0x6, 0x4, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x8, 0x6, 0x4, 0x6000, 0x9, 0x0, 0x0, 0x5, 0xb}}, {0x0, 0x1d}}}, &(0x7f0000005100)={0x20, 0x0, 0x3, {0x8, 0x0, 0x4800000, 0x401}}}) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000007c0)=ANY=[], 0x310) 6.254013157s ago: executing program 1 (id=3717): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./bus\x00', 0x910cc3, 0x0, 0x8, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x200140, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000540)='./bus\x00', 0x100000, &(0x7f0000000440)=ANY=[], 0x4, 0x0, 0x0) rmdir(&(0x7f0000001100)='./file1\x00') 5.200035605s ago: executing program 1 (id=3718): getpid() socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x73, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x3}, 0x38) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c8}}, 0x0) 5.117215622s ago: executing program 3 (id=3719): r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) brk(0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket(0x18, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000020000000000400168008001b"], 0x2c}}, 0x4004014) 3.22219156s ago: executing program 0 (id=3720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000800000002d000000ff0002"], 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.55118806s ago: executing program 1 (id=3721): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.501334584s ago: executing program 3 (id=3722): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000004c001280110001006272696467655f736c61766500000000340005800500190003"], 0x98}}, 0x0) 1.491718595s ago: executing program 1 (id=3723): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 1.406443252s ago: executing program 3 (id=3724): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2804018, &(0x7f0000000a40), 0x6, 0x763, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6ea1893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb951368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x2, 0xfd, 0x4b6, 0x100, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x2, 0x3, @void, @value, @void, @value}, 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff041, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 1.30927803s ago: executing program 1 (id=3725): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 373.404518ms ago: executing program 1 (id=3726): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000044700000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9ce, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x62a83200, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=3727): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = io_uring_setup(0x2922, &(0x7f00000000c0)) syz_io_uring_setup(0x247a, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r5}, 0x0, 0x0) kernel console output (not intermixed with test programs): b 4-1: config 0 descriptor?? [ 852.318561][T13882] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 852.396289][ T3729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.411229][ T3729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.421542][ T3729] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 852.432530][ T3729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.457922][ T3729] usb 2-1: config 0 descriptor?? [ 852.490603][T13882] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 852.511840][T13882] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 852.649398][T14091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.688033][T14091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.845486][T13882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.898723][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 852.914860][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 852.941255][T13882] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.969330][ T3729] logitech 0003:046D:C29C.0002: unknown main item tag 0x0 [ 852.987779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 853.005120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 853.019675][ T3729] logitech 0003:046D:C29C.0002: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 853.041246][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.048500][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.076502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 853.099093][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 853.116555][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 853.140384][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.147576][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.197344][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 853.215757][T13246] usbhid 4-1:0.0: can't add hid device: -71 [ 853.222014][T13246] usbhid: probe of 4-1:0.0 failed with error -71 [ 853.230028][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 853.264474][T13246] usb 4-1: USB disconnect, device number 9 [ 853.270883][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 853.307668][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 853.337183][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 853.360702][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 853.380028][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 853.411218][ T3729] logitech 0003:046D:C29C.0002: no inputs found [ 853.419323][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 853.447039][ T3729] usb 2-1: USB disconnect, device number 4 [ 853.457919][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 853.480546][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 853.507757][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 853.527348][T13882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 853.635916][ T3723] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 854.128596][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 854.144548][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 854.155965][ T3723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.169766][ T3723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.180357][ T3723] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 854.207131][T13882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.241805][ T3723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.253221][ T3723] usb 1-1: config 0 descriptor?? [ 854.317465][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 854.337784][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 854.403846][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 854.423726][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 854.456633][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 854.479913][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 854.506895][T13882] device veth0_vlan entered promiscuous mode [ 854.557509][T13882] device veth1_vlan entered promiscuous mode [ 854.667870][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 854.689638][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 854.716557][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 854.850634][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 854.930669][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2785'. [ 854.955957][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2785'. [ 854.966597][T13882] device veth0_macvtap entered promiscuous mode [ 855.723657][T13882] device veth1_macvtap entered promiscuous mode [ 855.817174][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.843806][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.874524][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.992344][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.118429][T13882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.478405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 856.488863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 856.509502][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.536377][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.546884][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.557908][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.568373][T13882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.579346][T13882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.592155][T13882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.614172][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 856.647408][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 856.661114][T13882] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.671202][T13882] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.681204][T13882] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.691085][T13882] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.866148][ T3723] usbhid 1-1:0.0: can't add hid device: -71 [ 856.872307][ T3723] usbhid: probe of 1-1:0.0 failed with error -71 [ 856.915885][ T3723] usb 1-1: USB disconnect, device number 7 [ 856.964017][ T3822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.997495][ T3822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.073238][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 857.103254][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.130242][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.202601][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 857.557320][T14207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2795'. [ 863.534781][ T3688] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 863.957440][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.057414][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.155584][ T3688] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 864.185150][ T3688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.206814][ T3688] usb 1-1: config 0 descriptor?? [ 864.997512][ T3688] isku 0003:1E7D:319C.0003: item fetching failed at offset 6/7 [ 865.178832][ T3688] isku 0003:1E7D:319C.0003: parse failed [ 865.365584][ T3688] isku: probe of 0003:1E7D:319C.0003 failed with error -22 [ 865.411009][ T3688] usb 1-1: USB disconnect, device number 8 [ 866.108103][T14312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2822'. [ 866.725818][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 866.815800][ T3688] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 866.845705][T13246] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 867.096095][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.107247][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.124569][ T7] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 867.134146][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.157230][ T7] usb 2-1: config 0 descriptor?? [ 867.175853][ T3688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.192315][ T3688] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 867.214965][ T3688] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 867.224672][ T3688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.235862][T13246] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.255681][T13246] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.262567][ T3688] usb 4-1: config 0 descriptor?? [ 867.275050][T13246] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 867.284408][T13246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.312580][T13246] usb 5-1: config 0 descriptor?? [ 867.646578][ T7] hid (null): bogus close delimiter [ 867.759244][ T3688] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max [ 867.772838][ T3688] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 867.777916][T13246] belkin 0003:1020:0006.0006: report_id 0 is invalid [ 867.791765][ T3688] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 867.816308][T13246] belkin 0003:1020:0006.0006: item 0 0 1 8 parsing failed [ 868.321335][T13246] belkin 0003:1020:0006.0006: parse failed [ 868.327600][T13246] belkin: probe of 0003:1020:0006.0006 failed with error -22 [ 868.337601][T13246] usb 5-1: USB disconnect, device number 8 [ 868.585801][ T7] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #100: -71 [ 868.596498][T13246] usb 4-1: USB disconnect, device number 10 [ 868.621100][ T7] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 868.677942][ T7] uclogic 0003:256C:006D.0004: failed probing pen v1 parameters: -71 [ 868.693643][ T7] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 869.633476][ T7] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 869.643224][ T7] usb 2-1: USB disconnect, device number 5 [ 869.971143][T14364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2838'. [ 869.998626][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.006677][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.048307][T14364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2838'. [ 870.627771][T14374] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2842'. [ 870.674539][T14374] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.266775][T14381] device syzkaller0 entered promiscuous mode [ 872.198491][T14383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 873.392933][T14393] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 876.770344][T14416] binder: BINDER_SET_CONTEXT_MGR already set [ 876.788977][T14416] binder: 14415:14416 ioctl 4018620d 20000040 returned -16 [ 876.824653][T14416] syz.4.2857 (14416): drop_caches: 2 [ 878.635675][T13246] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 878.692732][T14446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2866'. [ 878.703473][T14446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2866'. [ 878.895631][T13246] usb 2-1: Using ep0 maxpacket: 32 [ 879.015971][T13246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.085744][T13246] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 879.097082][T13246] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.151434][T13246] usb 2-1: config 0 descriptor?? [ 879.214615][T13246] hub 2-1:0.0: USB hub found [ 879.435969][T13246] hub 2-1:0.0: 2 ports detected [ 879.715859][T13246] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 879.723491][T13246] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 879.846065][T13246] usbhid 2-1:0.0: can't add hid device: -71 [ 879.857063][T13246] usbhid: probe of 2-1:0.0 failed with error -71 [ 879.932365][T13246] usb 2-1: USB disconnect, device number 6 [ 880.579497][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 880.579515][ T26] audit: type=1326 audit(1729346973.911:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14466 comm="syz.1.2875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9c2d7dff9 code=0x0 [ 882.329180][T13256] Bluetooth: hci5: command 0x0c1a tx timeout [ 882.695682][ T3729] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 883.214930][ T3729] usb 2-1: Using ep0 maxpacket: 16 [ 883.336822][ T3729] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.408451][ T3729] usb 2-1: config 0 interface 0 has no altsetting 0 [ 883.501411][ T3729] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 883.643555][ T3729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.776643][ T3729] usb 2-1: config 0 descriptor?? [ 884.299258][ T3729] kye 0003:0458:0138.0007: unknown main item tag 0x0 [ 884.306424][ T3729] kye 0003:0458:0138.0007: unknown main item tag 0x0 [ 884.313401][ T3729] kye 0003:0458:0138.0007: unexpected long global item [ 884.330016][ T3729] kye 0003:0458:0138.0007: parse failed [ 884.336105][ T3729] kye: probe of 0003:0458:0138.0007 failed with error -22 [ 884.792001][ T14] usb 2-1: USB disconnect, device number 7 [ 889.229066][T14569] syz.0.2906 (14569): drop_caches: 2 [ 889.725743][ T3632] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 889.969090][ T3632] usb 1-1: Using ep0 maxpacket: 16 [ 890.274668][ T3632] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 890.301289][ T3632] usb 1-1: config 0 has no interface number 0 [ 890.335261][ T3632] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 890.384562][ T3632] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 890.556772][ T3632] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 890.580405][ T3632] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 890.995719][ T3632] usb 1-1: Product: syz [ 891.000033][ T3632] usb 1-1: SerialNumber: syz [ 891.024221][ T3632] usb 1-1: config 0 descriptor?? [ 891.038523][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2913'. [ 891.051383][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2913'. [ 893.327320][ T3632] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 893.510656][T14611] udevd[14611]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 894.191552][ T3688] usb 1-1: USB disconnect, device number 9 [ 895.303903][ T4235] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.503193][ T4235] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.685637][ T8578] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 895.789080][ T4235] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.145836][ T4235] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.318236][T14628] kernel profiling enabled (shift: 17) [ 897.820873][T14630] overlayfs: failed to resolve './file0': -2 [ 898.143088][ T3662] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 898.170096][ T3662] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 898.179710][ T8578] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.191273][ T3652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 898.201844][ T3662] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 898.210094][ T3662] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 898.217544][ T3652] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 898.275478][ T8578] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.355925][ T8578] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 898.385847][ T8578] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.572167][ T8578] usb 2-1: config 0 descriptor?? [ 899.705739][ T8578] usb 2-1: can't set config #0, error -71 [ 899.766561][ T8578] usb 2-1: USB disconnect, device number 8 [ 900.290184][T14644] overlayfs: unrecognized mount option "uuid=auto" or missing value [ 900.345874][ T3662] Bluetooth: hci3: command tx timeout [ 901.224829][T14632] chnl_net:caif_netlink_parms(): no params data found [ 901.867456][T14679] binder: BINDER_SET_CONTEXT_MGR already set [ 901.885851][T14679] binder: 14678:14679 ioctl 4018620d 20000040 returned -16 [ 902.397600][T13256] Bluetooth: hci3: command tx timeout [ 902.805428][T14679] syz.0.2934 (14679): drop_caches: 2 [ 902.875709][T14632] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.895701][T14632] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.926808][T14632] device bridge_slave_0 entered promiscuous mode [ 902.964193][T14632] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.976356][T14632] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.002007][T14632] device bridge_slave_1 entered promiscuous mode [ 903.966122][T14632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.029134][T14632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.575814][T13256] Bluetooth: hci3: command tx timeout [ 906.140101][T14632] team0: Port device team_slave_0 added [ 906.252391][T14632] team0: Port device team_slave_1 added [ 906.635745][T13256] Bluetooth: hci3: command tx timeout [ 907.094611][T14632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.113013][ T26] audit: type=1326 audit(1729347000.441:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14725 comm="syz.1.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c2d7dff9 code=0x7ffc0000 [ 907.115129][T14632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.263116][ T26] audit: type=1326 audit(1729347000.501:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14725 comm="syz.1.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fe9c2d7dff9 code=0x7ffc0000 [ 907.296236][T14632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.335075][ T26] audit: type=1326 audit(1729347000.501:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14725 comm="syz.1.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c2d7dff9 code=0x7ffc0000 [ 907.382991][T14632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.423966][T14632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.465627][ T26] audit: type=1326 audit(1729347000.501:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14725 comm="syz.1.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c2d7dff9 code=0x7ffc0000 [ 907.516137][T14632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.550951][ T26] audit: type=1326 audit(1729347000.501:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14725 comm="syz.1.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fe9c2d7dff9 code=0x7ffc0000 [ 907.631587][ T4235] device hsr_slave_0 left promiscuous mode [ 907.652679][ T26] audit: type=1326 audit(1729347000.501:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14725 comm="syz.1.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c2d7dff9 code=0x7ffc0000 [ 907.689378][ T4235] device hsr_slave_1 left promiscuous mode [ 907.705023][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.735734][ T4235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.769626][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.794101][ T26] audit: type=1326 audit(1729347000.501:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14725 comm="syz.1.2946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c2d7dff9 code=0x7ffc0000 [ 907.825634][ T4235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.971729][ T4235] device bridge_slave_1 left promiscuous mode [ 907.988447][ T4235] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.038091][ T4235] device bridge_slave_0 left promiscuous mode [ 908.105728][ T4235] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.178465][T14742] syz.1.2949 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 909.044170][ T4235] device veth1_macvtap left promiscuous mode [ 909.060749][ T4235] device veth0_macvtap left promiscuous mode [ 909.074597][ T4235] device veth1_vlan left promiscuous mode [ 909.091250][ T4235] device veth0_vlan left promiscuous mode [ 911.026990][T14766] overlayfs: failed to resolve './file0': -2 [ 912.283116][ T4235] team0 (unregistering): Port device team_slave_1 removed [ 912.392073][ T4235] team0 (unregistering): Port device team_slave_0 removed [ 912.492655][ T4235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.608694][ T4235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.432508][ T4235] bond0 (unregistering): Released all slaves [ 914.718426][T14632] device hsr_slave_0 entered promiscuous mode [ 914.806280][T14632] device hsr_slave_1 entered promiscuous mode [ 914.843029][T14632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 914.851172][T14632] Cannot create hsr debugfs directory [ 915.070347][ T26] audit: type=1326 audit(1729347008.401:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14796 comm="syz.1.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c2d7dff9 code=0x7ffc0000 [ 915.151272][ T26] audit: type=1326 audit(1729347008.401:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14796 comm="syz.1.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fe9c2d7dff9 code=0x7ffc0000 [ 915.258696][ T26] audit: type=1326 audit(1729347008.401:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14796 comm="syz.1.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c2d7dff9 code=0x7ffc0000 [ 915.283974][ T26] audit: type=1326 audit(1729347008.401:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14796 comm="syz.1.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fe9c2d7dff9 code=0x7ffc0000 [ 915.928080][ T26] audit: type=1326 audit(915.045:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14796 comm="syz.1.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c2d7dff9 code=0x7ffc0000 [ 916.062723][ T26] audit: type=1326 audit(915.095:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14796 comm="syz.1.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c2d7dff9 code=0x7ffc0000 [ 916.214455][T14821] syz.0.2967 (14821): drop_caches: 2 [ 916.920986][T14632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 916.973878][T14632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 916.993673][T14632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 917.137134][T14632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 918.218444][T14632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.307009][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 918.329263][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 918.356415][T14632] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.563747][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 918.583250][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 918.598405][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.605711][ T4235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.642970][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 918.676531][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 918.696247][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 918.748427][ T4235] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.755731][ T4235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.826845][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 918.855165][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 918.877235][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 918.990186][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 919.004119][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 919.785585][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 919.794523][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 919.806161][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 919.814936][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 919.830306][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 919.840755][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 919.859136][T14632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 920.015906][T14874] syz.0.2980 (14874): drop_caches: 2 [ 920.033913][T14877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2979'. [ 920.881726][T14877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2979'. [ 923.994999][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 924.015879][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 924.029069][T14632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.156478][ T4162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 924.171164][ T4162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 924.222017][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 924.241284][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 924.261366][T14632] device veth0_vlan entered promiscuous mode [ 924.277547][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 924.291091][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 924.328985][T14632] device veth1_vlan entered promiscuous mode [ 924.472652][ T4162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 924.509339][ T4162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 924.850482][ T4162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 925.151779][ T4162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 925.179758][T14632] device veth0_macvtap entered promiscuous mode [ 925.213304][T14632] device veth1_macvtap entered promiscuous mode [ 925.367411][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.385543][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.402022][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.439389][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.459962][T14632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.475058][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 925.497311][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 925.515169][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 925.572842][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.659955][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 925.670877][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.688968][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 925.703184][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.770374][T14632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.002507][T14934] hub 6-0:1.0: USB hub found [ 926.012546][T14934] hub 6-0:1.0: 1 port detected [ 928.002334][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 928.021111][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 928.040067][T14632] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.049537][T14632] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.070602][T14632] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.112567][T14632] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.302705][ T9814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.345757][ T9814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.359030][ T4162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.388878][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 929.400727][ T4162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.442349][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 929.636474][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 930.376646][ T7] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 930.385405][ T7] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 930.428558][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 930.618117][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 930.644381][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.699294][ T7] usb 2-1: Product: syz [ 930.703528][ T7] usb 2-1: Manufacturer: syz [ 930.721644][ T7] usb 2-1: SerialNumber: syz [ 931.533787][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.540303][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.755789][ T7] usb 2-1: 0:2 : does not exist [ 932.797266][ T7] usb 2-1: USB disconnect, device number 9 [ 934.414193][T15032] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 939.611842][T15079] ieee802154 phy0 wpan0: encryption failed: -22 [ 944.751867][T15118] xt_bpf: check failed: parse error [ 947.304476][T15140] overlayfs: failed to resolve './file0': -2 [ 951.645618][ T8578] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 952.845705][ T8578] usb 2-1: Using ep0 maxpacket: 16 [ 952.985714][ T8578] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.007122][ T8578] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.042674][ T8578] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 953.076888][ T8578] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.108402][ T8578] usb 2-1: config 0 descriptor?? [ 953.582976][ T8578] lenovo 0003:17EF:6009.0008: global environment stack underflow [ 953.602020][ T8578] lenovo 0003:17EF:6009.0008: item 0 4 1 11 parsing failed [ 953.622872][ T8578] lenovo 0003:17EF:6009.0008: hid_parse failed [ 953.642602][ T8578] lenovo: probe of 0003:17EF:6009.0008 failed with error -22 [ 953.797161][ T8578] usb 2-1: USB disconnect, device number 10 [ 954.282189][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3054'. [ 954.293166][T15187] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 954.304988][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3054'. [ 956.661788][ T3731] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.760684][ T3731] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.816386][ T3731] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.906602][ T3731] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.280670][ T3662] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 959.294110][ T3662] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 959.304071][ T3662] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 959.313467][ T3662] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 959.322213][ T3662] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 959.332325][ T3662] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 961.556202][T13256] Bluetooth: hci3: command tx timeout [ 962.061080][T15268] ptrace attach of "./syz-executor exec"[8055] was attempted by "./syz-executor exec"[15268] [ 962.200279][ T3731] device hsr_slave_0 left promiscuous mode [ 962.213634][ T3731] device hsr_slave_1 left promiscuous mode [ 962.343742][ T3731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.382255][ T3731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.421898][ T3731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 962.449984][ T3731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.480668][ T3731] device bridge_slave_1 left promiscuous mode [ 962.494303][ T3731] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.499173][ T8578] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 962.526999][ T3731] device bridge_slave_0 left promiscuous mode [ 962.565551][ T3731] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.650453][ T3731] device veth1_macvtap left promiscuous mode [ 962.668740][ T3731] device veth0_macvtap left promiscuous mode [ 962.683993][ T3731] device veth1_vlan left promiscuous mode [ 962.705334][ T3731] device veth0_vlan left promiscuous mode [ 962.736630][ T8578] usb 4-1: device descriptor read/64, error -71 [ 963.015663][ T8578] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 963.595886][ T3662] Bluetooth: hci3: command tx timeout [ 963.995589][ T8578] usb 4-1: device descriptor read/64, error -71 [ 964.115830][ T8578] usb usb4-port1: attempt power cycle [ 964.481870][ T3731] team0 (unregistering): Port device team_slave_1 removed [ 964.555559][ T8578] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 964.587515][ T3731] team0 (unregistering): Port device team_slave_0 removed [ 964.664649][ T8578] usb 4-1: device descriptor read/8, error -71 [ 964.692330][ T3731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.755396][ T3731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.695914][ T3662] Bluetooth: hci3: command tx timeout [ 967.008094][ T3731] bond0 (unregistering): Released all slaves [ 967.756055][T13256] Bluetooth: hci3: command tx timeout [ 967.769271][T15244] chnl_net:caif_netlink_parms(): no params data found [ 968.410453][T15244] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.438840][T15244] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.798146][T15244] device bridge_slave_0 entered promiscuous mode [ 968.844345][T15342] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 968.917807][T15244] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.926161][T15244] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.946492][T15244] device bridge_slave_1 entered promiscuous mode [ 969.098852][T15244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.124963][T15244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.256618][T15244] team0: Port device team_slave_0 added [ 969.487023][ T3724] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 969.522231][T15244] team0: Port device team_slave_1 added [ 969.535767][ T127] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 969.945853][ T127] usb 2-1: Using ep0 maxpacket: 32 [ 970.095797][ T127] usb 2-1: config 0 has no interfaces? [ 970.293552][T15244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.301318][T15244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.330265][T15244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.358241][T15244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.365392][T15244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.385875][ T127] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 970.396429][T15244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.403076][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.420160][ T127] usb 2-1: Product: syz [ 970.427260][ T127] usb 2-1: Manufacturer: syz [ 970.431938][ T127] usb 2-1: SerialNumber: syz [ 970.443837][ T127] usb 2-1: config 0 descriptor?? [ 970.458142][T15244] device hsr_slave_0 entered promiscuous mode [ 970.465007][T15244] device hsr_slave_1 entered promiscuous mode [ 970.472789][T15244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 970.480702][T15244] Cannot create hsr debugfs directory [ 970.525718][ T3724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.542717][ T3724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.553725][ T3724] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 970.569020][ T3724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.599659][ T3724] usb 1-1: config 0 descriptor?? [ 970.771972][ T3693] usb 2-1: USB disconnect, device number 11 [ 971.102677][ T3724] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0 [ 971.516174][ T3724] hid-led: probe of 0003:0FC5:B080.0009 failed with error -71 [ 971.548728][ T3724] usb 1-1: USB disconnect, device number 10 [ 971.855788][T13256] Bluetooth: hci4: command 0x1003 tx timeout [ 971.863785][ T3662] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 972.089812][T15244] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 972.113713][T15244] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 972.150803][T15244] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 972.192257][T15244] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 972.579362][T15244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.637363][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 972.651749][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 972.665132][T15244] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.685398][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 972.699984][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 972.713833][ T9814] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.721056][ T9814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.752110][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 972.767518][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 972.788898][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 972.813367][ T9814] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.820603][ T9814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.834304][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 972.870214][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 972.898454][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 972.937820][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 972.982368][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 973.007996][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 973.036423][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 973.103474][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 973.152051][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 973.198150][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 973.236069][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 973.416672][T15244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 975.173017][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 975.204484][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 975.234126][T15244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.321006][T15244] device veth0_vlan entered promiscuous mode [ 975.335856][T15244] device veth1_vlan entered promiscuous mode [ 975.347944][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 975.379955][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 975.427788][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 975.464997][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 975.504134][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 975.594305][T15244] device veth0_macvtap entered promiscuous mode [ 975.634394][T15244] device veth1_macvtap entered promiscuous mode [ 975.729771][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.801304][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.860273][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.925187][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.071582][T15244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 976.209815][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 976.310061][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 976.375006][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 976.486424][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 976.776054][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 976.944879][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 976.986968][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 977.010759][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.041212][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.095532][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.125562][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.137954][T15244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.162685][T15244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.214215][T15244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.263674][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 977.289091][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 977.354709][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 977.383088][T15244] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.413367][T15244] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.447902][T15244] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.478918][T15244] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.681068][ T3731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.705926][ T3731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.751100][ T4162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 977.795026][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.835397][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.879555][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 984.942514][T15573] overlayfs: failed to resolve './file0': -2 [ 986.096529][ T3693] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 986.131633][ T7] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 986.650384][ T3693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 986.666643][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.685793][ T3693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 986.704715][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.718704][ T3693] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 986.737378][ T7] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 986.749937][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.760522][ T3693] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 986.773377][ T3693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.784481][ T7] usb 2-1: config 0 descriptor?? [ 986.795844][ T3693] usb 5-1: config 0 descriptor?? [ 986.826043][T15580] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 987.300761][ T3693] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 987.325592][ T3693] plantronics 0003:047F:FFFF.000B: item fetching failed at offset 13/15 [ 987.334617][ T3693] plantronics 0003:047F:FFFF.000B: parse failed [ 987.355627][ T3693] plantronics: probe of 0003:047F:FFFF.000B failed with error -22 [ 987.502996][ T3693] usb 5-1: USB disconnect, device number 9 [ 987.517641][ T7] usb 2-1: string descriptor 0 read error: -22 [ 987.772407][ T7] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000A/input/input37 [ 989.186671][ T7] uclogic 0003:256C:006D.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 989.214169][ T7] usb 2-1: USB disconnect, device number 12 [ 989.736703][T15624] hub 6-0:1.0: USB hub found [ 989.824688][T15623] block device autoloading is deprecated and will be removed. [ 989.837274][T15623] I/O error, dev loop128, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 989.850262][T15624] hub 6-0:1.0: 1 port detected [ 993.158251][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.164626][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.070835][T15705] autofs4:pid:15705:autofs_fill_super: called with bogus options [ 998.908073][T15688] overlayfs: invalid origin (0000007900656d5f63616368655f66726565000000000000000000000000000000000000000000000000000000000000) [ 999.245797][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 999.776153][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.791875][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.803250][ T7] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 999.817276][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.849939][ T7] usb 5-1: config 0 descriptor?? [ 1000.332778][ T7] cp2112 0003:10C4:EA90.000C: item fetching failed at offset 5/7 [ 1000.351537][ T7] cp2112 0003:10C4:EA90.000C: parse failed [ 1000.371269][ T7] cp2112: probe of 0003:10C4:EA90.000C failed with error -22 [ 1000.554921][ T7] usb 5-1: USB disconnect, device number 10 [ 1000.953299][T15741] autofs4:pid:15741:autofs_fill_super: called with bogus options [ 1002.388387][T15758] syz.1.3185 (15758): drop_caches: 2 [ 1003.560964][T15769] autofs4:pid:15769:autofs_fill_super: called with bogus options [ 1005.508028][T15785] device dummy0 entered promiscuous mode [ 1007.413937][T15792] device veth0_vlan left promiscuous mode [ 1007.646432][T15792] device veth0_vlan entered promiscuous mode [ 1010.061922][T15830] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1010.428644][T15835] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1010.437854][T15835] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1010.513769][T15837] syz.0.3207 (15837): drop_caches: 2 [ 1014.885703][ T26] audit: type=1326 audit(2000000017.240:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15888 comm="syz.1.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c2d7dff9 code=0x7ffc0000 [ 1014.943215][ T26] audit: type=1326 audit(2000000017.240:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15888 comm="syz.1.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c2d7dff9 code=0x7ffc0000 [ 1015.035737][ T26] audit: type=1326 audit(2000000017.280:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15888 comm="syz.1.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fe9c2d7dff9 code=0x7ffc0000 [ 1015.216160][ T26] audit: type=1326 audit(2000000000.000:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15888 comm="syz.1.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c2d7dff9 code=0x7ffc0000 [ 1015.239222][ T26] audit: type=1326 audit(2000000000.000:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15888 comm="syz.1.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c2d7dff9 code=0x7ffc0000 [ 1015.365265][T15898] overlayfs: failed to resolve './file1': -2 [ 1018.985284][ T3764] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.075295][ T3764] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.145687][ T3764] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.224697][ T3764] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.446251][ T3662] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1021.460081][ T3662] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1021.471416][ T3662] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1021.622141][ T3662] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1021.633550][ T3652] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1021.656029][ T3652] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1022.802721][ T3764] device hsr_slave_0 left promiscuous mode [ 1022.825761][ T3764] device hsr_slave_1 left promiscuous mode [ 1023.045379][ T3764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1023.060226][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.811993][ T3652] Bluetooth: hci3: command tx timeout [ 1023.848477][ T3764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.865212][ T3764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.876271][ T3764] device bridge_slave_1 left promiscuous mode [ 1023.883724][ T3764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.894302][ T3764] device bridge_slave_0 left promiscuous mode [ 1023.905926][ T3764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.004378][ T3764] device veth1_macvtap left promiscuous mode [ 1024.015901][ T3764] device veth0_macvtap left promiscuous mode [ 1024.045298][ T3764] device veth1_vlan left promiscuous mode [ 1024.089051][ T26] audit: type=1326 audit(2000000009.170:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16002 comm="syz.4.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463917dff9 code=0x7ffc0000 [ 1024.116347][ T3764] device veth0_vlan left promiscuous mode [ 1024.186016][ T26] audit: type=1326 audit(2000000009.170:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16002 comm="syz.4.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463917dff9 code=0x7ffc0000 [ 1024.242031][ T26] audit: type=1326 audit(2000000009.170:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16002 comm="syz.4.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f463917dff9 code=0x7ffc0000 [ 1024.364307][ T26] audit: type=1326 audit(2000000009.170:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16002 comm="syz.4.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463917dff9 code=0x7ffc0000 [ 1024.453646][ T26] audit: type=1326 audit(2000000009.170:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16002 comm="syz.4.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463917dff9 code=0x7ffc0000 [ 1024.506143][ T26] audit: type=1326 audit(2000000009.170:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16002 comm="syz.4.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f463917dff9 code=0x7ffc0000 [ 1024.539802][ T26] audit: type=1326 audit(2000000009.170:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16002 comm="syz.4.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463917dff9 code=0x7ffc0000 [ 1024.563120][ T26] audit: type=1326 audit(2000000009.170:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16002 comm="syz.4.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463917dff9 code=0x7ffc0000 [ 1024.955617][ T4044] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1025.357354][ T4044] usb 5-1: Using ep0 maxpacket: 16 [ 1025.475854][ T4044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.504029][ T4044] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.535855][ T4044] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 1025.545150][ T4044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.574155][ T4044] usb 5-1: config 0 descriptor?? [ 1025.835788][ T3652] Bluetooth: hci3: command tx timeout [ 1026.388126][ T3764] team0 (unregistering): Port device team_slave_1 removed [ 1026.612909][ T3764] team0 (unregistering): Port device team_slave_0 removed [ 1027.323063][ T3764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.429600][ T4044] lenovo 0003:17EF:6009.000D: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.4-1/input0 [ 1027.523817][ T4044] usb 5-1: USB disconnect, device number 11 [ 1027.587080][ T3764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.915561][ T3652] Bluetooth: hci3: command tx timeout [ 1027.957058][T16038] hugetlbfs: Bad value 'p' for mount option 'size' [ 1027.957058][T16038] [ 1030.006258][ T3652] Bluetooth: hci3: command tx timeout [ 1030.344302][ T3764] bond0 (unregistering): Released all slaves [ 1030.509487][T15960] chnl_net:caif_netlink_parms(): no params data found [ 1030.612378][T15960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.619804][T15960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.634498][T15960] device bridge_slave_0 entered promiscuous mode [ 1030.664983][T16032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3251'. [ 1030.689478][T16032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3251'. [ 1031.426738][T15960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.433885][T15960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.555661][T15960] device bridge_slave_1 entered promiscuous mode [ 1031.703111][T15960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.772095][T15960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.983721][T15960] team0: Port device team_slave_0 added [ 1032.024333][T15960] team0: Port device team_slave_1 added [ 1032.844083][ T4044] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1032.942122][T15960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1032.968333][T15960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1033.043045][T15960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1033.077365][T15960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1033.097005][T15960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1033.133669][T15960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.238793][T16078] overlayfs: failed to resolve './file0': -2 [ 1033.270601][ T4044] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.282202][ T4044] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1033.320370][ T4044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.350658][T15960] device hsr_slave_0 entered promiscuous mode [ 1033.366562][T15960] device hsr_slave_1 entered promiscuous mode [ 1033.374876][T15960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1033.376786][ T4044] usb 2-1: config 0 descriptor?? [ 1033.425296][T15960] Cannot create hsr debugfs directory [ 1033.452587][T16082] syz.3.3263[16082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1033.452700][T16082] syz.3.3263[16082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1034.106271][ T4044] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 1034.642729][ T4044] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000E/input/input40 [ 1034.885088][T16097] hugetlbfs: Bad value 'p' for mount option 'size' [ 1034.885088][T16097] [ 1034.925961][ T4044] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1036.320688][ T4044] usb 2-1: USB disconnect, device number 13 [ 1038.563364][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3270'. [ 1038.578168][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3270'. [ 1039.191496][T15960] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1039.241831][T15960] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1039.282273][T15960] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1039.303300][T15960] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1039.755270][T15960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1039.794145][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1039.811478][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1039.856965][T15960] 8021q: adding VLAN 0 to HW filter on device team0 [ 1039.893240][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1039.916792][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1039.991449][ T3764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.998732][ T3764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.025053][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1040.035147][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1040.047710][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1040.062872][ T3764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.070131][ T3764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.138301][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1040.163383][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1040.200067][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1040.241884][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1040.265006][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1040.290496][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1040.349685][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1040.372401][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1040.393568][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1040.418145][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1040.440514][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1040.463345][T15960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1041.465303][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1041.509337][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1041.842484][T15960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.895689][ T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1041.919433][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1041.949723][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1042.042882][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1042.064428][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1042.087302][T15960] device veth0_vlan entered promiscuous mode [ 1042.101966][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1042.116641][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1042.132681][T15960] device veth1_vlan entered promiscuous mode [ 1042.195166][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1042.217004][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1042.239635][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1042.255565][ T3724] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1042.266005][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.272114][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1042.285964][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.305548][ T7] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1042.314675][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.326873][T15960] device veth0_macvtap entered promiscuous mode [ 1042.331030][ T3688] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1042.347473][T15960] device veth1_macvtap entered promiscuous mode [ 1042.387934][T15960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.415523][T15960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.438954][ T7] usb 5-1: config 0 descriptor?? [ 1042.448290][T15960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.495712][ T3724] usb 1-1: Using ep0 maxpacket: 16 [ 1042.501310][T15960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.523702][T15960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.565043][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1042.580210][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1042.591664][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1042.604864][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1042.908385][T15960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.919939][ T3688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.983588][ T3688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.027883][T15960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.065773][ T3688] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1043.100740][T15960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1043.131952][ T3688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.173447][T15960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.248616][ T3688] usb 4-1: config 0 descriptor?? [ 1043.253873][T15960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1043.273456][T15960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1043.287234][T15960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1043.304366][T15960] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.313507][T15960] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.330211][T15960] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.342807][T15960] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.377933][ T3724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.389771][ T3724] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1043.403426][ T3724] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1043.409786][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1043.429060][ T7] hid-led 0003:1D34:000A.000F: unknown main item tag 0x0 [ 1043.436530][ T3724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.444067][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1043.461312][ T3724] usb 1-1: config 0 descriptor?? [ 1043.591632][ T3731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.607397][ T7] hid-led 0003:1D34:000A.000F: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 1043.641842][ T3731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.670985][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1044.005564][ T3688] hid (null): bogus close delimiter [ 1044.385899][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.408035][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.454154][ T4162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1044.498255][ T7] hid-led 0003:1D34:000A.000F: Dream Cheeky Webmail Notifier initialized [ 1044.515053][ T7] usb 5-1: USB disconnect, device number 12 [ 1044.544852][ T3724] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1044.569844][ T3724] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1044.577669][ T3724] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1044.584943][ T3724] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1044.605892][ T3724] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1044.620385][ T3724] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1044.628080][ T3724] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1044.641922][ T3724] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1044.655656][ T3724] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1044.663132][ T3724] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1044.687684][ T3724] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0011/input/input42 [ 1044.796804][ T3724] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1044.817091][T16171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.892544][T16171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.907825][ T3688] uclogic 0003:256C:006D.0010: failed retrieving Huion firmware version: -71 [ 1044.922997][ T3688] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 1044.939237][ T3688] uclogic: probe of 0003:256C:006D.0010 failed with error -71 [ 1045.073357][T16171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.090441][ T3688] usb 4-1: USB disconnect, device number 15 [ 1045.731671][T16171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.970739][ T3688] usb 1-1: USB disconnect, device number 11 [ 1046.943849][T16249] overlayfs: failed to resolve './file1': -2 [ 1050.087413][T16278] autofs4:pid:16278:autofs_fill_super: called with bogus options [ 1051.903977][T15810] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1052.215781][T15810] usb 4-1: Using ep0 maxpacket: 32 [ 1052.505909][T15810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.613237][T15810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.748434][T15810] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1052.785485][T15810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.823186][T15810] usb 4-1: config 0 descriptor?? [ 1053.833271][T15810] greenasia 0003:0E8F:0012.0012: item fetching failed at offset 0/3 [ 1053.850749][T15810] greenasia 0003:0E8F:0012.0012: parse failed [ 1053.857848][T15810] greenasia: probe of 0003:0E8F:0012.0012 failed with error -22 [ 1054.509824][T15810] usb 4-1: USB disconnect, device number 16 [ 1054.722995][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.729401][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.061426][T16320] device gretap1 entered promiscuous mode [ 1063.789234][T15810] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1065.275619][T15810] usb 2-1: Using ep0 maxpacket: 16 [ 1065.405864][T15810] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1065.413920][T15810] usb 2-1: config 0 has no interface number 0 [ 1065.427873][T15810] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1065.455169][T16410] fuse: Unknown parameter 'pcr' [ 1065.465546][T15810] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1065.683656][T15810] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1065.694042][T15810] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1065.702769][T15810] usb 2-1: Product: syz [ 1065.709348][T15810] usb 2-1: SerialNumber: syz [ 1065.719683][T15810] usb 2-1: config 0 descriptor?? [ 1066.104868][T15810] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 1066.515808][T15810] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1066.632918][ T3729] usb 2-1: USB disconnect, device number 14 [ 1066.823460][T16426] udevd[16426]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1067.153355][T15810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.166473][T15810] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1067.180013][T15810] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1067.189781][T15810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.208138][T15810] usb 1-1: config 0 descriptor?? [ 1067.842554][T15810] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 1067.895813][T15810] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1068.983182][ T4044] usb 1-1: USB disconnect, device number 12 [ 1070.528852][T16466] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1078.110044][T15810] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1078.370260][T15810] usb 5-1: Using ep0 maxpacket: 16 [ 1078.667537][T15810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.729736][T15810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.837736][T15810] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1078.921869][T15810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.063141][T15810] usb 5-1: config 0 descriptor?? [ 1079.545572][ T7] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1079.635332][T15810] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1079.644614][T15810] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1079.659566][T15810] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1079.667190][T15810] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1079.674438][T15810] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1079.707543][T15810] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1079.795542][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 1079.838683][T15810] cp2112 0003:10C4:EA90.0014: Part Number: 0x00 Device Version: 0x00 [ 1079.916646][ T7] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1079.926909][ T7] usb 4-1: config 179 has no interface number 0 [ 1079.948071][ T7] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1079.973818][ T7] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 1080.001132][ T7] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 1080.028021][ T7] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 1080.058885][ T7] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1080.076100][T15810] cp2112 0003:10C4:EA90.0014: error requesting SMBus config [ 1080.112231][T15810] cp2112: probe of 0003:10C4:EA90.0014 failed with error -5 [ 1080.150830][ T7] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1080.180481][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.266112][T16531] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1080.274425][T16531] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1080.325389][T15810] usb 5-1: USB disconnect, device number 13 [ 1080.335120][ T7] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input44 [ 1080.616900][ T7] usb 4-1: USB disconnect, device number 17 [ 1080.633407][ T7] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1081.012368][ T4162] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.124806][ T4162] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.214100][ T4162] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.319149][ T4162] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.130921][T16571] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3378'. [ 1083.003183][T13256] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1083.021334][T13256] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1083.031283][T13256] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1083.046848][T13256] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1083.054540][T13256] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1083.065621][T13256] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1084.985628][ T127] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1085.115787][ T3652] Bluetooth: hci3: command tx timeout [ 1085.320612][T16575] chnl_net:caif_netlink_parms(): no params data found [ 1085.386677][ T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.407267][ T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.423328][ T4162] device hsr_slave_0 left promiscuous mode [ 1085.433791][ T4162] device hsr_slave_1 left promiscuous mode [ 1085.455527][ T127] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1085.498336][ T127] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 1085.513095][ T4162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1085.531344][ T4162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.541766][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.594252][ T127] usb 1-1: config 0 descriptor?? [ 1085.595054][ T4162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1085.627350][ T4162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.656132][ T4162] device bridge_slave_1 left promiscuous mode [ 1085.669741][ T4162] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.703330][ T4162] device bridge_slave_0 left promiscuous mode [ 1085.727529][ T4162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.864509][ T4162] device veth1_macvtap left promiscuous mode [ 1085.876521][ T4162] device veth0_macvtap left promiscuous mode [ 1085.905273][ T4162] device veth1_vlan left promiscuous mode [ 1085.925680][ T4162] device veth0_vlan left promiscuous mode [ 1086.109342][ T127] holtek_mouse 0003:04D9:A070.0015: item fetching failed at offset 1/5 [ 1086.136198][ T127] holtek_mouse 0003:04D9:A070.0015: hid parse failed: -22 [ 1086.151585][ T127] holtek_mouse: probe of 0003:04D9:A070.0015 failed with error -22 [ 1086.317587][ T3724] usb 1-1: USB disconnect, device number 13 [ 1087.195566][ T3652] Bluetooth: hci3: command tx timeout [ 1088.419261][ T4162] team0 (unregistering): Port device team_slave_1 removed [ 1088.764172][T16629] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1089.331382][ T3652] Bluetooth: hci3: command tx timeout [ 1089.390302][ T4162] team0 (unregistering): Port device team_slave_0 removed [ 1089.516203][ T4162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.593875][ T4162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1090.500665][ T4162] bond0 (unregistering): Released all slaves [ 1091.020823][T16575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.145552][ T3724] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1091.220148][T16575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.140015][ T3652] Bluetooth: hci3: command tx timeout [ 1092.265572][ T3724] usb 4-1: Using ep0 maxpacket: 16 [ 1092.706993][T16575] device bridge_slave_0 entered promiscuous mode [ 1092.777036][ T3724] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 1092.791787][ T3724] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 1092.792169][T16575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.812248][ T3724] usb 4-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1092.815602][T16575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.837834][ T3724] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1092.890412][T16575] device bridge_slave_1 entered promiscuous mode [ 1092.918401][T16661] device syzkaller0 entered promiscuous mode [ 1092.925659][ T3724] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1092.942082][ T3724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1092.971141][ T3724] usb 4-1: SerialNumber: syz [ 1093.015814][T16644] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1093.023040][T16644] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1093.116574][T16575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.611574][T16644] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1093.632742][T16575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.655244][T16644] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1093.827558][T16575] team0: Port device team_slave_0 added [ 1093.882548][T16575] team0: Port device team_slave_1 added [ 1093.988573][T16575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.012044][T16575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.095500][T16575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.116654][ T3724] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1094.155142][T16575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.195064][T16575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.252285][T16575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.324286][ T3724] usb 4-1: USB disconnect, device number 18 [ 1094.430027][T16575] device hsr_slave_0 entered promiscuous mode [ 1094.446320][T16575] device hsr_slave_1 entered promiscuous mode [ 1094.453463][T16575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1094.461292][T16575] Cannot create hsr debugfs directory [ 1096.059230][ T26] audit: type=1107 audit(2000000081.140:470): pid=16708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1097.236885][T16723] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1097.246919][T16723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1097.254412][T16723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1097.848233][T16575] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1097.870780][T16575] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1098.070835][T16575] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1098.319987][T16575] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1099.145706][ T3693] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1099.417837][T16575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.466664][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1099.476670][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1099.500105][T16575] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.555791][ T3693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.572513][ T3693] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1099.615242][ T3693] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1099.636784][ T3693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.662897][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1099.680949][ T3693] usb 5-1: config 0 descriptor?? [ 1099.690460][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1099.724450][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.731813][ T4235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.799780][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1099.970052][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1100.118717][ T4235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.125979][ T4235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1100.244514][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1100.391451][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1100.422767][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1100.556556][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1100.568423][ T3693] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 1100.599659][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1100.609851][ T3693] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1100.648450][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1100.679665][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1100.727267][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1100.762560][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1100.777285][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1100.839370][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1100.854457][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1100.877952][T16575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1101.216493][T16781] overlayfs: failed to resolve './file0': -2 [ 1102.442804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1102.450971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1102.513386][T16575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1102.682029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1102.737434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1102.857739][ T3724] usb 5-1: USB disconnect, device number 14 [ 1102.893420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1102.967293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1103.091056][T16575] device veth0_vlan entered promiscuous mode [ 1103.121860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1103.169166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1103.191200][T16575] device veth1_vlan entered promiscuous mode [ 1103.269727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1103.297090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1103.333609][T16575] device veth0_macvtap entered promiscuous mode [ 1103.372367][T16575] device veth1_macvtap entered promiscuous mode [ 1103.395577][ T3724] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1103.457766][T16575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.502467][T16575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.519629][T16575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.533730][T16575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.564236][T16575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.589064][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1103.610873][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1103.637127][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1103.646818][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1103.677065][T16575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.687862][T16809] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 1103.694737][T16575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.712467][T16575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.723789][T16575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.739584][T16575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.751310][T16575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.765737][ T3724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.784212][T16575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1103.788074][ T3724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.799421][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1103.820763][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1103.834926][T16575] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.839367][ T3724] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1103.844807][T16575] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.864687][T16575] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.874887][T16575] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.892862][ T3724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.939245][ T3724] usb 5-1: config 0 descriptor?? [ 1104.084537][ T3764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.117338][ T3764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.158909][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1104.342149][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.369144][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.430556][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1104.446691][ T3724] hid (null): bogus close delimiter [ 1105.214923][ T3764] Bluetooth: hci4: Frame reassembly failed (-84) [ 1105.795657][ T3724] uclogic 0003:256C:006D.0017: failed retrieving string descriptor #100: -71 [ 1105.804536][ T3724] uclogic 0003:256C:006D.0017: failed retrieving pen parameters: -71 [ 1105.824654][ T3724] uclogic 0003:256C:006D.0017: failed probing pen v1 parameters: -71 [ 1105.845503][ T3724] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 1105.853507][ T3724] uclogic: probe of 0003:256C:006D.0017 failed with error -71 [ 1105.880128][ T3724] usb 5-1: USB disconnect, device number 15 [ 1106.078797][T16853] binder: BINDER_SET_CONTEXT_MGR already set [ 1106.085089][T16853] binder: 16852:16853 ioctl 4018620d 20000040 returned -16 [ 1106.123728][T16853] syz.1.3441 (16853): drop_caches: 2 [ 1106.968558][T13256] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1107.750068][ T4044] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1108.002419][T16890] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1108.016757][ T4044] usb 5-1: Using ep0 maxpacket: 16 [ 1108.158432][ T4044] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1108.335800][ T4044] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1108.344963][ T4044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.399921][ T4044] usb 5-1: Product: syz [ 1108.406840][ T4044] usb 5-1: Manufacturer: syz [ 1108.411494][ T4044] usb 5-1: SerialNumber: syz [ 1108.440574][ T4044] usb 5-1: config 0 descriptor?? [ 1108.512841][ T4044] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1108.531118][ T4044] usb 5-1: Detected FT232R [ 1108.740085][ T4044] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1109.034087][ T4044] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1109.222011][ T4044] usb 5-1: USB disconnect, device number 16 [ 1109.262316][ T4044] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1109.301359][ T4044] ftdi_sio 5-1:0.0: device disconnected [ 1111.187669][T16934] EXT4-fs warning (device sda1): verify_group_input:172: Reserved blocks too high (10) [ 1115.980514][T16964] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1116.076981][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.400097][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.131538][T17037] loop0: detected capacity change from 0 to 256 [ 1120.500348][T17053] raw_sendmsg: syz.4.3501 forgot to set AF_INET. Fix it! [ 1122.124959][T17078] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1125.333221][ T127] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1125.831392][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.927337][ T127] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1126.152897][ T127] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1126.186819][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.282124][ T127] usb 2-1: config 0 descriptor?? [ 1127.401288][ T127] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 1127.442518][ T127] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1127.521195][T17170] syz.3.3544 (17170): drop_caches: 2 [ 1128.834039][T17196] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1130.023837][ T3724] usb 2-1: USB disconnect, device number 15 [ 1130.071677][T17208] binder: BINDER_SET_CONTEXT_MGR already set [ 1130.137293][T17208] binder: 17207:17208 ioctl 4018620d 20000040 returned -16 [ 1130.560717][T17213] syz.0.3557 (17213): drop_caches: 2 [ 1132.093372][T17237] tipc: Failed to remove unknown binding: 66,1,1/0:1556552295/1556552297 [ 1132.496337][T17237] tipc: Failed to remove unknown binding: 66,1,1/0:1556552295/1556552297 [ 1134.666487][T17256] binder: 17254:17256 ioctl 4018620d 0 returned -22 [ 1142.702897][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.785772][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.866474][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.947659][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.284095][ T3652] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1144.296686][ T3652] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1144.327222][ T3652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1144.349037][ T3652] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1144.359709][ T3652] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1144.367562][ T3652] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1145.963206][T17348] loop0: detected capacity change from 0 to 2048 [ 1146.127496][T17348] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1146.581998][T13256] Bluetooth: hci3: command tx timeout [ 1147.529013][ T3641] EXT4-fs (loop0): unmounting filesystem. [ 1148.600254][ T3688] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1148.790480][T13256] Bluetooth: hci3: command tx timeout [ 1149.135866][ T3688] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.172430][ T3688] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1149.263114][ T11] device hsr_slave_0 left promiscuous mode [ 1149.274833][ T11] device hsr_slave_1 left promiscuous mode [ 1149.303125][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1149.329417][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1149.347256][ T3688] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1149.350268][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1149.375782][ T3688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1149.395101][ T3688] usb 4-1: SerialNumber: syz [ 1149.403432][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.419671][ T11] device bridge_slave_1 left promiscuous mode [ 1149.435912][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.474459][ T11] device bridge_slave_0 left promiscuous mode [ 1149.482404][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.536001][ T11] device veth1_macvtap left promiscuous mode [ 1149.542265][ T11] device veth0_macvtap left promiscuous mode [ 1149.553580][ T11] device veth1_vlan left promiscuous mode [ 1149.560785][ T11] device veth0_vlan left promiscuous mode [ 1149.708865][ T3688] usb 4-1: 0:2 : does not exist [ 1149.726565][ T3688] usb 4-1: unit 255 not found! [ 1149.778781][ T3688] usb 4-1: USB disconnect, device number 19 [ 1149.888807][T17292] udevd[17292]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1151.303482][T13256] Bluetooth: hci3: command tx timeout [ 1152.815629][ T3724] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1153.186095][ T3724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.206463][ T3724] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1153.222249][ T3724] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1153.231858][ T3724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.268424][ T3724] usb 4-1: config 0 descriptor?? [ 1153.316263][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1153.356026][T13256] Bluetooth: hci3: command tx timeout [ 1153.599514][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1153.679644][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1153.752769][ T3724] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 1153.761679][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1153.858371][ T3724] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1155.518221][T16192] usb 4-1: USB disconnect, device number 20 [ 1155.741495][ T11] bond0 (unregistering): Released all slaves [ 1155.856944][T17342] chnl_net:caif_netlink_parms(): no params data found [ 1155.873746][T17417] device pim6reg1 entered promiscuous mode [ 1155.881629][T17453] netlink: 'syz.1.3614': attribute type 25 has an invalid length. [ 1155.895907][T17453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3614'. [ 1155.909671][T17454] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3614'. [ 1155.920951][T17454] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3614'. [ 1156.335713][T17342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.355637][T17342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.392824][T17342] device bridge_slave_0 entered promiscuous mode [ 1156.416419][T17342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.455646][T17342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.473102][T17342] device bridge_slave_1 entered promiscuous mode [ 1156.564044][T17342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.582671][T17342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.487513][T17342] team0: Port device team_slave_0 added [ 1157.805125][T17342] team0: Port device team_slave_1 added [ 1158.605619][T17342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1158.666488][T17342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1158.733073][T17342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.884172][T17342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.925562][T17342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.172161][T17496] loop0: detected capacity change from 0 to 1024 [ 1159.181580][T17496] EXT4-fs: Ignoring removed orlov option [ 1159.187434][T17496] ext4: Unknown parameter 'noacl' [ 1159.563615][T17342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.991098][T17342] device hsr_slave_0 entered promiscuous mode [ 1160.026233][T17342] device hsr_slave_1 entered promiscuous mode [ 1160.269595][T17342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1160.278068][T17342] Cannot create hsr debugfs directory [ 1160.978906][T17505] futex_wake_op: syz.3.3617 tries to shift op by 32; fix this program [ 1161.577130][ T127] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1161.975769][ T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.001268][ T127] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1162.050488][ T127] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1162.108636][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.170817][ T127] usb 1-1: config 0 descriptor?? [ 1162.628063][T17342] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1162.670305][ T127] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 1162.689545][T17342] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1162.728016][ T127] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1162.742378][T17342] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1162.780215][T17342] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1163.022316][T17535] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1163.038210][T17535] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1163.168479][T17342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.222272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1163.237784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1163.272727][T17342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.361920][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1163.381452][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1163.412849][ T3822] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.420291][ T3822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1163.487512][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1163.527846][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1163.601270][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1163.646562][ T3822] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.653860][ T3822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.698578][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1163.765825][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1163.784357][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1163.822775][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1163.843007][ T3822] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1163.879222][T17420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1163.903716][T17420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1163.932514][T17420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1163.945064][T17420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1164.096343][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1164.117355][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1164.133643][T17342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1164.684693][ T3724] usb 1-1: USB disconnect, device number 14 [ 1165.275565][ T7] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1165.411223][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1165.439595][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1165.521735][T17342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.535708][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 1165.615020][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1165.631313][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1165.665931][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.685947][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1165.696824][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1165.709698][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1165.767098][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1165.784500][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1165.821063][T17342] device veth0_vlan entered promiscuous mode [ 1165.872134][T17342] device veth1_vlan entered promiscuous mode [ 1165.936717][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1165.946596][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1165.959501][T17342] device veth0_macvtap entered promiscuous mode [ 1166.309133][T17342] device veth1_macvtap entered promiscuous mode [ 1166.316359][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1166.374935][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.509842][ T7] usb 2-1: Product: syz [ 1166.622500][ T7] usb 2-1: Manufacturer: syz [ 1166.647990][ T7] usb 2-1: SerialNumber: syz [ 1166.653415][T17342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.741666][T17342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.812527][T17342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.823158][T17342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.837580][T17342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.856843][T17342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.878978][T17342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.894312][T17342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.915329][T17342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.932502][T17342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.943460][T17342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.967404][T17342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.974835][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1166.984893][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1166.994243][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1167.004222][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1167.013993][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1167.023462][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1167.032051][ T14] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1167.051555][T17342] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.077281][T17342] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.095462][T17342] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.104306][T17342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.185484][T16192] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1167.251343][ T3822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.269538][ T3822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.276579][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 1167.292240][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1167.360548][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.382486][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.395972][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1167.408191][ T9814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1167.430453][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1167.451768][ T14] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1167.461645][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.498143][ T14] usb 5-1: config 0 descriptor?? [ 1167.515929][T17585] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1167.546045][T16192] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.562530][ T14] hub 5-1:0.0: USB hub found [ 1167.573391][T16192] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1167.590191][T16192] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1167.603246][T16192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.616613][T16192] usb 1-1: config 0 descriptor?? [ 1167.765729][ T14] hub 5-1:0.0: 2 ports detected [ 1168.099087][T16192] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 1168.126547][T16192] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1168.711524][ T3723] usb 2-1: USB disconnect, device number 16 [ 1170.172300][T17671] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3650'. [ 1170.388287][T16192] usb 5-1: USB disconnect, device number 17 [ 1170.773657][ T8578] usb 1-1: USB disconnect, device number 15 [ 1174.473078][T17712] device vlan3 entered promiscuous mode [ 1174.478904][T17712] device syz_tun entered promiscuous mode [ 1174.725507][ T8578] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1175.030561][T17721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3661'. [ 1175.040444][T17721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3661'. [ 1175.105882][ T8578] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1175.305631][ T8578] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1175.319458][ T8578] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.352255][ T8578] usb 2-1: Product: syz [ 1175.371033][ T8578] usb 2-1: Manufacturer: syz [ 1175.391189][ T8578] usb 2-1: SerialNumber: syz [ 1175.427259][ T8578] usb 2-1: config 0 descriptor?? [ 1175.821313][T17724] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1176.114628][ T8578] usb 2-1: USB disconnect, device number 17 [ 1176.154775][T17730] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3663'. [ 1177.198091][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.204398][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.440882][T17741] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 1178.121708][T17750] loop0: detected capacity change from 0 to 128 [ 1178.260060][T17750] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1178.290524][T17750] ext4 filesystem being mounted at /938/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1179.773609][ T3641] EXT4-fs (loop0): unmounting filesystem. [ 1180.052432][T17773] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1180.233335][T17775] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3676'. [ 1181.127380][T17788] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3679'. [ 1181.139622][T17788] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3679'. [ 1181.982995][T16192] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1182.062382][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3681'. [ 1182.071533][ T26] audit: type=1400 audit(2000000167.138:471): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=17791 comm="syz.1.3683" [ 1182.107605][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3681'. [ 1182.305556][T16192] usb 4-1: Using ep0 maxpacket: 16 [ 1182.425800][T16192] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.677615][T16192] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1182.693529][T16192] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1182.703901][T16192] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 166 [ 1182.717460][T16192] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1182.805877][T16192] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1182.815447][T16192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1182.824080][T16192] usb 4-1: SerialNumber: syz [ 1182.855877][T17787] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1182.887034][T16192] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1182.897585][T16192] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 1183.127548][T16192] usb 4-1: USB disconnect, device number 21 [ 1184.744789][T17815] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1185.427293][T17820] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3691'. [ 1190.209476][T17843] loop0: detected capacity change from 0 to 40427 [ 1190.247351][T17843] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1190.416770][T17843] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1190.449484][T17843] F2FS-fs (loop0): invalid crc value [ 1190.511866][T17843] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1190.601332][T17843] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1190.610900][T17843] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1190.757756][T16192] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1191.155858][T16192] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.180021][T16192] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.210751][T16192] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1191.239371][T16192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.295076][T16192] usb 4-1: config 0 descriptor?? [ 1191.338893][T13048] EXT4-fs (loop4): unmounting filesystem. [ 1192.092581][T16192] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0 [ 1192.101537][T16192] cp2112 0003:10C4:EA90.001C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1192.293536][ T3652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1192.309287][T16192] cp2112 0003:10C4:EA90.001C: error requesting version [ 1192.336485][ T3662] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1192.345688][ T3662] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1192.346709][T16192] cp2112: probe of 0003:10C4:EA90.001C failed with error -5 [ 1192.363962][ T3662] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1192.375324][ T3662] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1192.382755][ T3662] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1192.551462][ T3723] usb 4-1: USB disconnect, device number 22 [ 1192.693619][ T3871] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.409828][ T3871] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.470951][T17872] chnl_net:caif_netlink_parms(): no params data found [ 1194.107628][ T3871] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.478949][ T3871] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.490702][T13256] Bluetooth: hci4: command tx timeout [ 1194.736244][T17901] ptrace attach of "./syz-executor exec"[8055] was attempted by "./syz-executor exec"[17901] [ 1194.751643][T17872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.759195][T17872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.767791][T17872] device bridge_slave_0 entered promiscuous mode [ 1194.807235][T17872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.841812][T17872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.853038][T17872] device bridge_slave_1 entered promiscuous mode [ 1194.979003][T17872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1195.018034][T17872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1195.095458][ T8578] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1195.132392][T17872] team0: Port device team_slave_0 added [ 1195.152394][T17872] team0: Port device team_slave_1 added [ 1195.224022][T17872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1195.241580][T17872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1195.319012][T17872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1195.345645][ T8578] usb 4-1: device descriptor read/64, error -71 [ 1195.359350][T17872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1195.380394][T17872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1195.445239][T17872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1195.635490][ T8578] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1195.846204][ T8578] usb 4-1: device descriptor read/64, error -71 [ 1196.066754][ T8578] usb usb4-port1: attempt power cycle [ 1196.249757][T17872] device hsr_slave_0 entered promiscuous mode [ 1196.279262][T17872] device hsr_slave_1 entered promiscuous mode [ 1196.291733][T17872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1196.300050][T17872] Cannot create hsr debugfs directory [ 1196.565608][ T3662] Bluetooth: hci4: command tx timeout [ 1196.665535][ T8578] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1196.775830][ T8578] usb 4-1: device descriptor read/8, error -71 [ 1197.073057][ T8578] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1197.195732][ T8578] usb 4-1: device descriptor read/8, error -71 [ 1197.333112][ T8578] usb usb4-port1: unable to enumerate USB device [ 1197.527384][T17939] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1198.643212][T13256] Bluetooth: hci4: command tx timeout [ 1200.494422][T17952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.715612][T13256] Bluetooth: hci4: command tx timeout [ 1200.985120][T17952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1201.024943][T17952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1201.499221][T17952] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.508421][T17952] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.517879][T17952] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.526862][T17952] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.878529][T17973] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3722'. [ 1201.898245][ T3871] device hsr_slave_0 left promiscuous mode [ 1201.908739][ T3871] device hsr_slave_1 left promiscuous mode [ 1201.918062][ T3871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1201.927887][ T3871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.942949][ T3871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1201.952001][ T3871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1201.961698][ T3871] device bridge_slave_1 left promiscuous mode [ 1201.968456][ T3871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.987728][ T3871] device bridge_slave_0 left promiscuous mode [ 1201.994015][ T3871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.088071][ T3871] device dummy0 left promiscuous mode [ 1202.094369][ T3871] device veth1_macvtap left promiscuous mode [ 1202.100776][ T3871] device veth0_macvtap left promiscuous mode [ 1202.107246][ T3871] device veth1_vlan left promiscuous mode [ 1202.125702][ T3871] device veth0_vlan left promiscuous mode [ 1203.371639][ T3871] team0 (unregistering): Port device team_slave_1 removed [ 1203.399099][T17988] [ 1203.401501][T17988] ============================================ [ 1203.407653][T17988] WARNING: possible recursive locking detected [ 1203.413797][T17988] 6.1.113-syzkaller #0 Not tainted [ 1203.418910][T17988] -------------------------------------------- [ 1203.425057][T17988] syz.3.3727/17988 is trying to acquire lock: [ 1203.431130][T17988] ffff888075bc1238 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 1203.440050][T17988] [ 1203.440050][T17988] but task is already holding lock: [ 1203.447429][T17988] ffff88807d925a38 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc2/0xbe0 [ 1203.456337][T17988] [ 1203.456337][T17988] other info that might help us debug this: [ 1203.464482][T17988] Possible unsafe locking scenario: [ 1203.464482][T17988] [ 1203.471929][T17988] CPU0 [ 1203.475204][T17988] ---- [ 1203.478479][T17988] lock(&trie->lock); [ 1203.482553][T17988] lock(&trie->lock); [ 1203.486624][T17988] [ 1203.486624][T17988] *** DEADLOCK *** [ 1203.486624][T17988] [ 1203.494763][T17988] May be due to missing lock nesting notation [ 1203.494763][T17988] [ 1203.503078][T17988] 3 locks held by syz.3.3727/17988: [ 1203.508272][T17988] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x207/0x6f0 [ 1203.518300][T17988] #1: ffff88807d925a38 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc2/0xbe0 [ 1203.527626][T17988] #2: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x16a/0x470 [ 1203.537032][T17988] [ 1203.537032][T17988] stack backtrace: [ 1203.542921][T17988] CPU: 1 PID: 17988 Comm: syz.3.3727 Not tainted 6.1.113-syzkaller #0 [ 1203.551074][T17988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1203.561152][T17988] Call Trace: [ 1203.564435][T17988] [ 1203.567385][T17988] dump_stack_lvl+0x1e3/0x2cb [ 1203.572105][T17988] ? nf_tcp_handle_invalid+0x642/0x642 [ 1203.577593][T17988] ? panic+0x764/0x764 [ 1203.581689][T17988] validate_chain+0x4711/0x5950 [ 1203.586567][T17988] ? 0xffffffffa00007e0 [ 1203.590850][T17988] ? 0xffffffffa00007e0 [ 1203.595014][T17988] ? reacquire_held_locks+0x660/0x660 [ 1203.600397][T17988] ? is_bpf_text_address+0x22/0x2a0 [ 1203.605606][T17988] ? reacquire_held_locks+0x660/0x660 [ 1203.610982][T17988] ? stack_trace_save+0x1c0/0x1c0 [ 1203.616015][T17988] ? kernel_text_address+0x9f/0xd0 [ 1203.621139][T17988] ? __kernel_text_address+0x9/0x40 [ 1203.626364][T17988] ? mark_lock+0x9a/0x340 [ 1203.630721][T17988] ? mark_lock+0x9a/0x340 [ 1203.635073][T17988] ? mark_lock+0x9a/0x340 [ 1203.639425][T17988] __lock_acquire+0x125b/0x1f80 [ 1203.644301][T17988] lock_acquire+0x1f8/0x5a0 [ 1203.648819][T17988] ? trie_delete_elem+0x90/0x690 [ 1203.653787][T17988] ? read_lock_is_recursive+0x10/0x10 [ 1203.659171][T17988] ? __lock_acquire+0x125b/0x1f80 [ 1203.664221][T17988] _raw_spin_lock_irqsave+0xd1/0x120 [ 1203.669512][T17988] ? trie_delete_elem+0x90/0x690 [ 1203.674457][T17988] ? _raw_spin_lock+0x40/0x40 [ 1203.679172][T17988] ? read_lock_is_recursive+0x10/0x10 [ 1203.684698][T17988] trie_delete_elem+0x90/0x690 [ 1203.689533][T17988] ? __cant_sleep+0x270/0x270 [ 1203.694222][T17988] bpf_prog_b9f8cf72c95fdcd7+0x40/0x44 [ 1203.699698][T17988] ? bpf_trace_run4+0x16a/0x470 [ 1203.704569][T17988] bpf_trace_run4+0x253/0x470 [ 1203.709257][T17988] ? bpf_trace_run3+0x440/0x440 [ 1203.714111][T17988] ? percpu_ref_put+0x19/0x180 [ 1203.718880][T17988] __bpf_trace_mm_page_alloc+0xba/0xe0 [ 1203.724344][T17988] __alloc_pages+0x717/0x770 [ 1203.728941][T17988] ? zone_statistics+0x160/0x160 [ 1203.733982][T17988] ? __lock_acquire+0x1f80/0x1f80 [ 1203.739023][T17988] __kmalloc_large_node+0x91/0x1d0 [ 1203.744231][T17988] ? bpf_map_kmalloc_node+0xce/0x1c0 [ 1203.749528][T17988] __kmalloc_node+0x111/0x230 [ 1203.754210][T17988] ? _raw_spin_lock+0x40/0x40 [ 1203.758898][T17988] bpf_map_kmalloc_node+0xce/0x1c0 [ 1203.764022][T17988] trie_update_elem+0x1c5/0xbe0 [ 1203.768885][T17988] ? exc_page_fault+0x1c0/0x620 [ 1203.773746][T17988] ? asm_exc_page_fault+0x22/0x30 [ 1203.778874][T17988] bpf_map_update_value+0x5cf/0x6f0 [ 1203.784087][T17988] map_update_elem+0x503/0x680 [ 1203.788871][T17988] __sys_bpf+0x337/0x6c0 [ 1203.793131][T17988] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1203.798522][T17988] ? print_irqtrace_events+0x210/0x210 [ 1203.803994][T17988] ? print_irqtrace_events+0x210/0x210 [ 1203.809468][T17988] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1203.815455][T17988] ? lockdep_hardirqs_on+0x94/0x130 [ 1203.820660][T17988] __x64_sys_bpf+0x78/0x90 [ 1203.825086][T17988] do_syscall_64+0x3b/0xb0 [ 1203.829509][T17988] ? clear_bhb_loop+0x45/0xa0 [ 1203.834196][T17988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1203.840100][T17988] RIP: 0033:0x7f9f1657dff9 [ 1203.844524][T17988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1203.864224][T17988] RSP: 002b:00007f9f17328038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1203.872646][T17988] RAX: ffffffffffffffda RBX: 00007f9f16735f80 RCX: 00007f9f1657dff9 [ 1203.880619][T17988] RDX: 0000000000000020 RSI: 0000000020000080 RDI: 0000000000000002 [ 1203.888609][T17988] RBP: 00007f9f165f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1203.896581][T17988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1203.904554][T17988] R13: 0000000000000000 R14: 00007f9f16735f80 R15: 00007ffc5e9566e8 [ 1203.912551][T17988] [ 1204.051299][ T3871] team0 (unregistering): Port device team_slave_0 removed [ 1204.160466][ T3871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1204.210883][ T3871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1204.775907][ T3871] bond0 (unregistering): Released all slaves [ 1204.848528][ T3871] smc: removing net device lo with user defined pnetid SYZ2 [ 1204.952815][T17872] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1204.977696][T17872] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1204.990100][T17872] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1205.001961][T17872] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1205.113791][T17872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1205.128245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1205.140088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1205.164704][T17872] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.188409][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1205.208653][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1205.218587][ T3700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.225752][ T3700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.233787][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1205.250949][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1205.260002][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1205.272750][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.279930][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1205.293554][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1205.309557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1205.327633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1205.343759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1205.354918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1205.382715][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1205.394263][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1205.403478][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1205.414665][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1205.427540][T17872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1205.441176][T17872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1205.451234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1205.462033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1205.615077][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1205.623874][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1205.639568][T17872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1205.877760][T17764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1205.886876][T17764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1205.904263][T17764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1205.913593][T17764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1205.925021][T17764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1205.933584][T17764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1205.948015][T17872] device veth0_vlan entered promiscuous mode [ 1205.963795][T17872] device veth1_vlan entered promiscuous mode [ 1205.989033][T17764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1205.998515][T17764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1206.014436][T17872] device veth0_macvtap entered promiscuous mode [ 1206.028047][T17872] device veth1_macvtap entered promiscuous mode [ 1206.043106][T17872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.054541][T17872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.066077][T17872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1206.073421][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1206.086767][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1206.095275][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1206.106633][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1206.119340][T17872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.130014][T17872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.143920][T17872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.154628][T17872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.168419][T17872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1206.178892][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1206.191278][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1206.202518][T17872] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.212333][T17872] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.221499][T17872] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.231800][T17872] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.287891][T17872] ieee80211 phy63: Selected rate control algorithm 'minstrel_ht' [ 1206.327413][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.332449][T17872] ieee80211 phy64: Selected rate control algorithm 'minstrel_ht' [ 1206.335285][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.362693][ T3871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.369741][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1206.371423][ T3871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.387940][ T3871] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready