last executing test programs: 2m31.373392568s ago: executing program 0 (id=1098): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 2m30.497642386s ago: executing program 0 (id=1099): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fd, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, @fda}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 1m37.246315608s ago: executing program 0 (id=1106): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000100013070000000000000000ac14c3aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) 1m32.293778104s ago: executing program 0 (id=1147): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) rmdir(&(0x7f0000000100)='./control\x00') 1m31.384399085s ago: executing program 0 (id=1148): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffc}}}, 0x32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x20, 0x0, 0x1000003, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x1, 0x453, &(0x7f0000000a40)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) 1m15.388694976s ago: executing program 1 (id=1169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000040000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 1m14.893321578s ago: executing program 3 (id=1170): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) rmdir(&(0x7f0000000100)='./control\x00') 1m14.225144394s ago: executing program 1 (id=1171): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) 1m12.790507486s ago: executing program 1 (id=1172): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='sched_switch\x00', r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) openat(0xffffffffffffff9c, 0x0, 0x440, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1m12.432950569s ago: executing program 3 (id=1173): syz_open_procfs$namespace(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 36.532220796s ago: executing program 0 (id=1161): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000400)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x0, 0xb, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) 18.030406973s ago: executing program 2 (id=1174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) close_range(r6, 0xffffffffffffffff, 0x0) 13.852747719s ago: executing program 3 (id=1176): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x5, 0x1006, 0x7, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000480)={@local, @random="7e4173edf6b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @rand_addr, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast2}, {@empty}, {@loopback}]}, @cipso={0x86, 0x21, 0x0, [{0x0, 0x12, "0001632a66835e9504005d8b00000000"}, {0x0, 0x9, "4ef661e96b4014"}]}]}}}}}}}, 0x0) 13.489268628s ago: executing program 2 (id=1178): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 12.855903699s ago: executing program 3 (id=1180): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x1, 0x453, &(0x7f0000000a40)="$eJzs3E1PXNUbAPDnXqDNn/YvVfENW0VbW7QKQhU1MU3YuSC60IXbCVBs5EULJrYhBhIXbk3sB9C4tR/BaBNfNroy3arRhZoQU1g0sYsxd94Y6AztKPQa5vdL7vScO2d6zr1Pnzt3Tk9uAG2rP3tJIg5GxA8R0VOubm7QX/5j/erSRLYlUSy++mdSard2dWmi2rT6uQPZSxoxkEak7yfxYIN+F85feLMwMzN1rlIfWpx9a2jh/IWnzs4Wpqemp+aGTw2Pjj737PMjw9sNv+9gC8f60vfrv37S+fLcpxfX5q6dHunOxlv9fP1x7JT+6N98Lusc3+nOcnZPXTnpzHEgtKQjIrJwdZXyvyc6YiN4PfHNT7kODthVxcz+pm8vF4E9LIm8RwDko/pFn/3+rW4N7gP+Ku7WDQi5Wh0r/wBcq8ztrNfi3xlpufD28a++3PT7fif1R8Tr468cybbYpXkYAAAAgHb2xVhEPNlo/i+Ne+vaZeX7IuL+iHggIvoiSut6DkfEkYh4KCIerq4nasHW9lvmf5r/zyQ7YnUs4sW6tV3rdfGvONRRqf0/q0RXcubszNTTEXFHRAxE1/6svt0qrdk3Ct81e29j/u9yd3nP0kR1LrAyjj86t/wrmCwsFv7xAbPJ6kpEX2ej+Ce1lUBJRDwSEY/eyl/4dWlF3XTvpeu1XS98cPeVZs3r53+zLet/c/zZTcWPI040zP+VWptk+/WZQ6XrwVD1qnCjby+Oftasf/HPV5b/3Q3jX1u5eiipX6+70Hofl3t//rHZe9eLxeL28W98/d+XvFYa4L7KvncLi4vnhiP2JeM37h9pfcx7VfV8VM9XFv+Boxvx32iZxl2VUnZCj0bEsYh4rLJ2+UTpuz/i8Yh4IiJObtPn8vQvTe/j5H++svhPtpT/rRd+X/nwWLP+bx7/LP+fKQ1moLLH/d/N3WqA8h4nAAAAAAAAADsjLT0DL0kHa+U0HRwsP8OvN7rTmfmFxZNn5t+Zmyw/K+9QdKXVlV49detBh0vljfrIlvqpiLgzIj7q+F+pPjgxPzOZ98FDmzvQJP8zv3XkPTpg13leK7Qv+Q/tS/5D+5L/0L7kP7Qv+Q/tS/5D+6rk/3Le4wBuv63f/+9dGT997fPDl3IaDnAbuf+HtvRvnuunoKCwVwt5X5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/hv+DgAA///vYdKh") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e23, 0x8}}}}}, 0x0) 10.428620014s ago: executing program 2 (id=1182): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10.428292591s ago: executing program 1 (id=1175): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file2\x00', 0x0, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000600000000000000c1be000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/4351], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x54704099) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='hugepage_update\x00', r0, 0x0, 0x80000001}, 0xffffffffffffff92) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'veth0_to_team\x00'}) 10.107471901s ago: executing program 3 (id=1183): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x17, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) socket(0x10, 0x803, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000f40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xfd}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9.235183171s ago: executing program 4 (id=1184): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4003, &(0x7f00000000c0)={[{@nobarrier}]}, 0x2, 0x4e6, &(0x7f0000000840)="$eJzs3MtrXNUfAPDvvUnapo9f8qvPPrSjVQyKTZM+Fy6sKHQjCIrUZUzSUpu20kRoS7BRpIILpX+Bj53gX+BKN6LiQnGruBWhSDatLmTkztwbZzozeXWSaZPPB6Y9595z7znn3nuS85ibANatUvZPErE1In6JiL5qtD5Bqfrfzdnp0b9mp0eTKJdf/jOppLsxOz1aJC2O25JHBtKI9L0kdjXJd/LS5TMjExPjF/L44FSah86OnBo/NX5u+OjRgwd6jxwePtSWemZlurHz7fO7dxx/7dqLoyeuvf7dF1l5y/n+2npU9S8xh66GLaUo1V/LGo8v8ex3um014aQ7+zftXGFYtOypzW5XT6X995VzlX198cK7RboNnSwksCKyxr6xYevc77KZcq0kqR4ArBGJJg3rVPGL/sZsNlKdHm0cBzfR3dYuSEddPxaVCmX1vpl/qnu6KyPYUn91bNSzQvnfGxEnZv7+OPtE03kIAID2+upYxOa831F8qnvSuL8m3f/yWaH+iPh/RGyPiHvy/st9EZW0D0TEgzXHJPl60nxKt8Qb+z8/9eaB2u5q22T9v2fyta36/t/c+kV/Vx7bVql/T3Ly9MT4/vyaDETPxiw+1HjquWm1r5//+aNW+Zdq+n/ZJ8u/6Avm5fij+5YJurGRqZHbrXfh+juVC3ulsf5JdCdFKGJHROxcxvmza3b6yc93t9pfV/+sng31/7D1ydswDil/GvFE9f7PxC31j3zdI6msT559c3Dy0uWnT9euTw4dOTx8aHBTTIzvHyyeikbf/3j1pTzYMIxY+P6vrOz+b276/M+tXPYnteu1k0vP4+qv77cc0yz3+d+QvFIJF+tSF0empi4MRWxIZhq3D/937MWR3rr0Wf0H9jZv/9sj/vkkP25XRGQP8UMR8XBE7MnL/khEPBoRe+ep/7fPPfZGqyHknXD/x5Z0/1sFnv0hovmurjPffNmQ8QelRdY/u/8HK6GBfMvYyNSmheo1X0lrA7d9AQEAAOAusCcitkaS7svnOLdGmu7bF7FlbgZlcuqpk+ffOjdWfUegP3rSYqarr2Y+dCifG87i2VHDNfFs/4HKvHG5XC73ZvFs/D6xrbNVh3VvS4v2n/m98ZUWYK1Z0jpaqzfagLvS8tfR2/+FDGB1raHv8wNLpP3D+rXo9r9Sb8EBHdOs/V+JuNmBogCrrFn7f7UD5QBWn/E/rF/aP6xbC75MC6xJi3pJfhmB7cfnSZN0r0ymrQNp1G3JfuLV/RWA/ogicfEFx/lP+Fsa0Z4SdrW1pr119zRtmmZTtCOvSBdM072EP8SwuoH0zihGNbAxIhZ4eucetitF4PJKF6zSCD7r7E8nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA2/dvAAAA//+lFtmI") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000980)={0x100, 0x0, &(0x7f00000007c0)=[@increfs, @increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/58, 0x3a, 0x0, 0x2c}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@flat=@handle={0x73682a85, 0x1000, 0x2}, @flat=@handle, @ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/19, 0x13, 0x1, 0xb}}, &(0x7f0000000540)={0x0, 0x18, 0x30}}}, @register_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000700)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/110, 0x6e, 0x0, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x1d}, @fda={0x66646185, 0x8, 0x1, 0x13}}, &(0x7f0000000780)={0x0, 0x28, 0x50}}}], 0x90, 0x0, &(0x7f00000008c0)="fbf70e95dc450a811eb90eef3178c094f8610c6ae788cc5e6455668e92a86141f553d1e59478f4e964dd10452a2fe99f605c97931164f3af3f71a1706dc2a63f02886ffb783b0349513fa3e45f0cda0ad74f925bcb38f421593811d561b6558e59785b3a0c9608840f7f3f3170d0af978ce232cfb5b88d692191559035407d378ebe550503222ef65c53dbc7a9582ef7"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/meminfo\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x9, 0x16, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_x_nat_t_port={0x1, 0x15}, @sadb_x_nat_t_type={0x1}, @sadb_ident={0x2, 0xb, 0x7, 0x0, 0x10000}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, @in6={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}]}, 0xb0}, 0x1, 0x7}, 0x0) 8.225844114s ago: executing program 2 (id=1185): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f0000000000)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) futex(0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6695d4982a83b71b906769e737201ac6b7a7804454156569cb03a5be811debc957b5831b89b59d703e748c7c", 0x25}, 0x48, 0xfffffffffffffffd) 6.896612748s ago: executing program 1 (id=1186): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xf) 6.833736377s ago: executing program 3 (id=1187): getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x100, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_submit(0x0, 0x1, &(0x7f0000000b00)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8, r3, &(0x7f0000000300)="a6697f59a78980116e3c3394", 0xc, 0xffff}]) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x564, &(0x7f00000008c0)="$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") r4 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000ec0)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x2, 0x0, 0x7, './file1'}]}}, 0x2a) 5.46152078s ago: executing program 1 (id=1188): syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000ff0f00000700000004100000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001800000000efffffffffff6009418873ffff0000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4b9, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x1}]}, {0x0, [0x61, 0xca2ff20c77941e13]}}, &(0x7f0000000000)=""/222, 0x28, 0xde, 0x1, 0x0, 0x0, @void, @value}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@known='system.posix_acl_default\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) pipe2$9p(0x0, 0x0) 4.479898704s ago: executing program 4 (id=1189): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) utime(0x0, 0x0) 2.977030331s ago: executing program 4 (id=1190): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.66399256s ago: executing program 2 (id=1191): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c9801288763"], 0xffdd) 2.385680496s ago: executing program 4 (id=1192): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000013000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000005002700000000001c001a"], 0x44}}, 0x0) 2.153128183s ago: executing program 4 (id=1193): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) rmdir(&(0x7f0000000100)='./control\x00') 1.245576537s ago: executing program 4 (id=1194): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="7165392f62865c8900000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) inotify_init1(0x0) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, 0x0, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, &(0x7f0000000cc0)={0x0, 0xf, 0x30, {0x5, 0xf, 0x30, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0xa, 0x1, 0x1b, 0x0, 0x4, [0xc00f]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x8, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "caf565844125e14e038174f9ccb3b393"}]}}, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb9, 0x80, 0x9e, 0x10, "dae0723d", "194eb3f0"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6c, 0x10, 0x8, 0x9, 0x7, 0x8000, 0x7}}}, &(0x7f0000001240)={0x84, &(0x7f0000000dc0)={0x40, 0xe, 0xd, "04caad00f36f79f4586342b2b2"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x9d}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x76}, &(0x7f0000000e80)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x20, 0x2}}, &(0x7f0000000f80)={0x40, 0x7, 0x2, 0xfffd}, &(0x7f0000000fc0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000001000)={0x40, 0xb, 0x2, "8ac4"}, &(0x7f0000001040)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000001080)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000010c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, &(0x7f0000001100)={0x40, 0x19, 0x2, "02bc"}, &(0x7f0000001140)={0x40, 0x1a, 0x2, 0xc2}, &(0x7f0000001180)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000011c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001200)={0x40, 0x21, 0x1, 0x9}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000440)={0x40, 0x23, 0x32, {0x32, 0xd, "fd7585f706c6f22896d4c3f2ed0c3cf6b9c01aeced23e37857dcb85d157c9288bff5d46d8a00b00ba27c892496b613f0"}}, 0x0, &(0x7f0000000380)={0x0, 0xf, 0x55, {0x5, 0xf, 0x55, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x70, 0x0, 0x6, 0x0, 0xc}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x0, 0x0, 0xc, [0xc03f, 0x7d9bd3c01470e28d, 0xff0000]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x0, 0x59db}, @ssp_cap={0x20, 0x10, 0xa, 0xfd, 0x5, 0x8, 0x0, 0xaf, [0xc00f, 0xff0000, 0x3f0f, 0xf, 0x30]}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x2, 0x5, 0x9, "69af0200", "121f0668"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x94, 0x80, 0x4, 0xf, 0x6, 0x5, 0xb644}}}, &(0x7f0000000ac0)={0x84, &(0x7f00000006c0)={0x20, 0xb, 0x35, "2aae2409fc97c9e876622eec85abe814b05b8b8f92f5f6b980c793b5538944ce087521e397f19fe4f872bde8cfd602eaade595abdd"}, &(0x7f0000000700)={0x0, 0xa, 0x5a, 0x2}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x1, 0x20, [0x9600]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x8001}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000880)={0x40, 0xb, 0x2, '9>'}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000900)={0x40, 0x13, 0x6}, &(0x7f0000000940)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000980)={0x40, 0x19, 0x2, "6fbc"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x4}}) 0s ago: executing program 2 (id=1195): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00220f000000b3a8407a730b93bf028083"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x4805, 0x0) kernel console output (not intermixed with test programs): 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.763342][ T6489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1156.773944][ T6489] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1156.783671][ T6489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.828312][ T1579] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 1156.839917][ T1579] usb 5-1: No valid video chain found. [ 1156.952256][ T6489] usb 3-1: config 0 descriptor?? [ 1157.096205][ T1579] usb 5-1: USB disconnect, device number 12 [ 1157.172906][ T9970] veth0_vlan: entered promiscuous mode [ 1157.288889][ T9996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.345694][ T9970] veth1_vlan: entered promiscuous mode [ 1157.448925][ T9980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.514830][ T6489] hid-picolcd 0003:04D8:F002.0017: unknown main item tag 0x0 [ 1157.642393][ T6489] hid-picolcd 0003:04D8:F002.0017: No report with id 0xf3 found [ 1157.650450][ T6489] hid-picolcd 0003:04D8:F002.0017: No report with id 0xf4 found [ 1157.817010][T10161] netlink: 'syz.2.987': attribute type 27 has an invalid length. [ 1158.389435][T10161] bridge0: port 3(syz_tun) entered disabled state [ 1158.434298][T10161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.444536][T10161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.802594][ T6489] usb 3-1: reset high-speed USB device number 16 using dummy_hcd [ 1159.145905][T10161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.207147][T10161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1159.794273][T10161] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.804194][T10161] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.814193][T10161] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.823813][T10161] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.346540][T10170] bridge0: port 3(syz_tun) entered blocking state [ 1160.354443][T10170] bridge0: port 3(syz_tun) entered forwarding state [ 1160.389863][T10170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1160.421691][T10170] 8021q: adding VLAN 0 to HW filter on device team0 [ 1160.467212][T10170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1160.650301][ T9970] veth0_macvtap: entered promiscuous mode [ 1160.760791][ T9980] veth0_vlan: entered promiscuous mode [ 1160.785720][ T9970] veth1_macvtap: entered promiscuous mode [ 1160.826076][ T9996] veth0_vlan: entered promiscuous mode [ 1160.971327][ T9980] veth1_vlan: entered promiscuous mode [ 1161.009708][ T9996] veth1_vlan: entered promiscuous mode [ 1161.122279][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1161.133853][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.153221][ T9970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1161.208948][ T9970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1161.220668][ T9970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.237562][ T9970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1161.260155][ T9970] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.269421][ T9970] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.279587][ T9970] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.288936][ T9970] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.477188][ T9980] veth0_macvtap: entered promiscuous mode [ 1161.528967][ T9980] veth1_macvtap: entered promiscuous mode [ 1161.812036][ T9996] veth0_macvtap: entered promiscuous mode [ 1161.833430][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1161.844314][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.854761][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1161.865631][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.884199][ T9980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1161.925416][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1161.938579][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.949655][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1161.960600][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.976389][ T9980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1162.030748][ T9980] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.043419][ T9980] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.056258][ T9980] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.066011][ T9980] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.245967][ T9996] veth1_macvtap: entered promiscuous mode [ 1162.328193][ T1579] usb 3-1: USB disconnect, device number 16 [ 1162.617612][ T9996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1162.629928][ T9996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.642051][ T9996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1162.656280][ T9996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.667161][ T9996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1162.680343][ T9996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.697184][ T9996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1163.050945][ T9996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1163.061922][ T9996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.074596][ T9996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1163.086610][ T9996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.096805][ T9996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1163.107948][ T9996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.123961][ T9996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1163.205127][ T9996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.214409][ T9996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.224865][ T9996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.234297][ T9996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.192870][ T9988] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1164.434610][ T9988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.446118][ T9988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.456544][ T9988] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1164.466068][ T9988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.655634][ T9988] usb 5-1: config 0 descriptor?? [ 1165.397049][T10220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.444589][T10220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.853059][ T9988] uclogic 0003:256C:006D.0018: failed retrieving Huion firmware version: -71 [ 1165.862642][ T9988] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 1165.870836][ T9988] uclogic 0003:256C:006D.0018: probe with driver uclogic failed with error -71 [ 1165.994407][ T9988] usb 5-1: USB disconnect, device number 13 [ 1167.193211][ T1579] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1167.402534][ T1579] usb 3-1: Using ep0 maxpacket: 32 [ 1167.465644][ T1579] usb 3-1: config 0 has no interfaces? [ 1167.570348][ T1579] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1167.581294][ T1579] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.590189][ T1579] usb 3-1: Product: syz [ 1167.594792][ T1579] usb 3-1: Manufacturer: syz [ 1167.599687][ T1579] usb 3-1: SerialNumber: syz [ 1167.711260][ T1579] usb 3-1: config 0 descriptor?? [ 1168.877095][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.885375][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.952745][ T3339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.961131][ T3339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.526961][T10277] loop3: detected capacity change from 0 to 512 [ 1169.543813][T10277] EXT4-fs: Ignoring removed nobh option [ 1169.669014][T10277] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1169.675452][ T3180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.686454][ T3180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.694265][T10277] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.962: attempt to clear invalid blocks 2 len 1 [ 1169.698514][T10277] EXT4-fs (loop3): Remounting filesystem read-only [ 1169.735191][T10277] EXT4-fs (loop3): 1 truncate cleaned up [ 1169.789495][T10277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1169.924586][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.932999][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.041315][ T1579] usb 3-1: USB disconnect, device number 17 [ 1170.371262][ T6301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.379782][ T6301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.482742][ T3389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.490870][ T3389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.927479][T10288] bridge0: port 3(syz_tun) entered blocking state [ 1170.935126][T10288] bridge0: port 3(syz_tun) entered disabled state [ 1170.945340][T10288] syz_tun: entered allmulticast mode [ 1170.954347][T10288] syz_tun: entered promiscuous mode [ 1170.962451][T10288] bridge0: port 3(syz_tun) entered blocking state [ 1170.969703][T10288] bridge0: port 3(syz_tun) entered forwarding state [ 1171.334043][ T9970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1172.422580][ T1579] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1172.688807][ T1821] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1172.852166][ T1821] usb 5-1: Using ep0 maxpacket: 8 [ 1172.875827][ T1821] usb 5-1: config 0 has no interfaces? [ 1172.882016][ T1821] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1172.893335][ T1821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.995238][ T1821] usb 5-1: config 0 descriptor?? [ 1173.302135][ T1579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.313641][ T1579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1173.324108][ T1579] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1173.333641][ T1579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.352432][ T1579] usb 4-1: config 0 descriptor?? [ 1173.527799][ T29] audit: type=1326 audit(1727445054.190:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 1173.551180][ T29] audit: type=1326 audit(1727445054.190:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 1173.576593][ T29] audit: type=1326 audit(1727445054.190:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 1173.599989][ T29] audit: type=1326 audit(1727445054.190:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f445a7 code=0x7ffc0000 [ 1173.624300][ T29] audit: type=1326 audit(1727445054.190:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 1173.647646][ T29] audit: type=1326 audit(1727445054.200:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 1173.670296][ T29] audit: type=1326 audit(1727445054.200:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f445a7 code=0x7ffc0000 [ 1173.695247][ T29] audit: type=1326 audit(1727445054.200:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 1174.042176][ T29] audit: type=1326 audit(1727445054.420:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 1174.064974][ T29] audit: type=1326 audit(1727445054.420:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.4.1004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f445a7 code=0x7ffc0000 [ 1174.127443][T10303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.211061][T10303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.550596][ T1579] uclogic 0003:256C:006D.0019: failed retrieving Huion firmware version: -71 [ 1174.560193][ T1579] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 1174.572047][ T1579] uclogic 0003:256C:006D.0019: probe with driver uclogic failed with error -71 [ 1174.669240][ T1579] usb 4-1: USB disconnect, device number 15 [ 1175.652561][ T1579] usb 5-1: USB disconnect, device number 14 [ 1178.210947][T10326] loop0: detected capacity change from 0 to 128 [ 1178.290719][T10330] bridge0: port 3(syz_tun) entered blocking state [ 1178.298200][T10330] bridge0: port 3(syz_tun) entered disabled state [ 1178.305710][T10330] syz_tun: entered allmulticast mode [ 1178.314487][T10330] syz_tun: entered promiscuous mode [ 1178.322554][T10330] bridge0: port 3(syz_tun) entered blocking state [ 1178.329698][T10330] bridge0: port 3(syz_tun) entered forwarding state [ 1179.452256][ T1579] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1179.690381][ T1579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.702359][ T1579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.715008][ T1579] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1179.727454][ T1579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.762988][T10341] loop2: detected capacity change from 0 to 128 [ 1180.000366][ T1579] usb 4-1: config 0 descriptor?? [ 1180.784949][T10339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1180.874034][T10339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1182.177017][ T1579] uclogic 0003:256C:006D.001A: failed retrieving Huion firmware version: -71 [ 1182.186664][ T1579] uclogic 0003:256C:006D.001A: failed probing parameters: -71 [ 1182.218340][ T1579] uclogic 0003:256C:006D.001A: probe with driver uclogic failed with error -71 [ 1182.325599][ T1579] usb 4-1: USB disconnect, device number 16 [ 1184.459477][T10363] bridge0: port 3(syz_tun) entered blocking state [ 1184.467087][T10363] bridge0: port 3(syz_tun) entered disabled state [ 1184.474963][T10363] syz_tun: entered allmulticast mode [ 1184.483829][T10363] syz_tun: entered promiscuous mode [ 1184.491745][T10363] bridge0: port 3(syz_tun) entered blocking state [ 1184.499059][T10363] bridge0: port 3(syz_tun) entered forwarding state [ 1185.015433][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 1185.015521][ T29] audit: type=1326 audit(1727445065.700:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1185.149039][ T29] audit: type=1326 audit(1727445065.750:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1185.172565][ T29] audit: type=1326 audit(1727445065.750:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1185.195434][ T29] audit: type=1326 audit(1727445065.760:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1185.218153][ T29] audit: type=1326 audit(1727445065.780:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1185.241062][ T29] audit: type=1326 audit(1727445065.780:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1185.266174][ T29] audit: type=1326 audit(1727445065.780:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1185.290028][ T29] audit: type=1326 audit(1727445065.790:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1185.312841][ T29] audit: type=1326 audit(1727445065.790:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1185.335523][ T29] audit: type=1326 audit(1727445065.800:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 1186.721252][T10383] usb usb8: usbfs: process 10383 (syz.0.1034) did not claim interface 0 before use [ 1187.262752][ T1579] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1187.480333][ T1579] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.491740][ T1579] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1187.505251][ T1579] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1187.515692][ T1579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.714763][ T1579] usb 3-1: config 0 descriptor?? [ 1188.693122][T10382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.081328][T10382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.089304][ T1579] uclogic 0003:256C:006D.001B: failed retrieving Huion firmware version: -71 [ 1191.099961][ T1579] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 1191.108498][ T1579] uclogic 0003:256C:006D.001B: probe with driver uclogic failed with error -71 [ 1191.252898][ T1579] usb 3-1: USB disconnect, device number 18 [ 1192.176935][T10433] loop2: detected capacity change from 0 to 256 [ 1192.499934][T10433] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1192.816510][T10442] loop4: detected capacity change from 0 to 256 [ 1194.728322][T10460] loop3: detected capacity change from 0 to 256 [ 1195.198827][T10460] FAT-fs (loop3): Directory bread(block 64) failed [ 1195.206512][T10460] FAT-fs (loop3): Directory bread(block 65) failed [ 1195.213975][T10460] FAT-fs (loop3): Directory bread(block 66) failed [ 1195.221071][T10460] FAT-fs (loop3): Directory bread(block 67) failed [ 1195.228342][T10460] FAT-fs (loop3): Directory bread(block 68) failed [ 1195.235546][T10460] FAT-fs (loop3): Directory bread(block 69) failed [ 1195.242779][T10460] FAT-fs (loop3): Directory bread(block 70) failed [ 1195.249602][T10460] FAT-fs (loop3): Directory bread(block 71) failed [ 1195.257070][T10460] FAT-fs (loop3): Directory bread(block 72) failed [ 1195.264308][T10460] FAT-fs (loop3): Directory bread(block 73) failed [ 1196.310812][ T1579] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1196.669402][ T1579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.681181][ T1579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.692033][ T1579] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1196.701617][ T1579] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.752044][ T1579] usb 1-1: config 0 descriptor?? [ 1197.616019][T10463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.633176][T10463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.088274][ T1579] uclogic 0003:256C:006D.001C: failed retrieving Huion firmware version: -71 [ 1198.097818][ T1579] uclogic 0003:256C:006D.001C: failed probing parameters: -71 [ 1198.106281][ T1579] uclogic 0003:256C:006D.001C: probe with driver uclogic failed with error -71 [ 1198.302865][ T1579] usb 1-1: USB disconnect, device number 12 [ 1198.950025][T10481] loop4: detected capacity change from 0 to 1024 [ 1198.970376][T10481] EXT4-fs: Ignoring removed orlov option [ 1198.984636][T10481] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1199.177221][T10481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1199.949465][T10481] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 1201.588062][T10501] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1201.695352][T10503] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1201.882934][T10501] overlayfs: upper fs does not support tmpfile. [ 1201.968410][T10501] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1202.938404][ T9897] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1202.953305][ T9897] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1202.973596][ T9897] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1203.006711][ T9897] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1203.023231][ T9897] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1203.038654][ T9897] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1204.302684][T10524] chnl_net:caif_netlink_parms(): no params data found [ 1204.537982][ T9860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.152831][ T9897] Bluetooth: hci3: command tx timeout [ 1205.713610][T10524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.721448][T10524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.735893][T10524] bridge_slave_0: entered allmulticast mode [ 1205.745771][T10524] bridge_slave_0: entered promiscuous mode [ 1205.868531][T10543] loop1: detected capacity change from 0 to 512 [ 1205.893986][T10524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.902449][T10524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.910421][T10524] bridge_slave_1: entered allmulticast mode [ 1205.920302][T10524] bridge_slave_1: entered promiscuous mode [ 1206.041420][T10543] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.1080: casefold flag without casefold feature [ 1206.122231][T10543] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1080: couldn't read orphan inode 15 (err -117) [ 1206.257530][T10543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1206.481249][T10524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.619220][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1206.659003][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1206.675251][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1206.696263][T10524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.786740][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1206.838783][ T51] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1206.908376][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1207.327854][ T9897] Bluetooth: hci3: command tx timeout [ 1207.512301][T10524] team0: Port device team_slave_0 added [ 1207.532662][T10524] team0: Port device team_slave_1 added [ 1207.952990][ T9996] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1208.017448][T10524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1208.025099][T10524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1208.052220][T10524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1208.305087][T10524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1208.312952][T10524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1208.339680][T10524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1209.100891][ T51] Bluetooth: hci6: command tx timeout [ 1209.415665][ T51] Bluetooth: hci3: command tx timeout [ 1209.575978][T10563] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 1209.634181][T10524] hsr_slave_0: entered promiscuous mode [ 1209.794924][T10524] hsr_slave_1: entered promiscuous mode [ 1209.920168][ T714] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.070458][T10548] chnl_net:caif_netlink_parms(): no params data found [ 1210.187711][ T714] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.307467][T10567] ptrace attach of "./syz-executor exec"[9980] was attempted by "./syz-executor exec"[10567] [ 1210.355104][ T714] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.643059][ T714] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.185724][ T51] Bluetooth: hci6: command tx timeout [ 1211.322793][ T714] bridge_slave_1: left allmulticast mode [ 1211.328829][ T714] bridge_slave_1: left promiscuous mode [ 1211.336060][ T714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.386876][ T714] bridge_slave_0: left allmulticast mode [ 1211.393868][ T714] bridge_slave_0: left promiscuous mode [ 1211.401113][ T714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.485280][ T51] Bluetooth: hci3: command tx timeout [ 1212.143864][ T714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1212.213721][ T714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1212.268154][ T714] bond0 (unregistering): Released all slaves [ 1212.295547][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.302492][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 1213.232169][ T51] Bluetooth: hci6: command tx timeout [ 1213.263541][ T1579] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1213.474583][ T1579] usb 2-1: device descriptor read/64, error -71 [ 1213.626207][ T714] hsr_slave_0: left promiscuous mode [ 1213.684463][ T714] hsr_slave_1: left promiscuous mode [ 1213.732162][ T1579] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1213.853178][ T714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1213.861017][ T714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1213.900333][ T714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1213.908411][ T714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.941887][ T1579] usb 2-1: device descriptor read/64, error -71 [ 1213.963336][ T714] veth1_macvtap: left promiscuous mode [ 1213.969175][ T714] veth0_macvtap: left promiscuous mode [ 1213.975476][ T714] veth1_vlan: left promiscuous mode [ 1213.981116][ T714] veth0_vlan: left promiscuous mode [ 1214.143947][ T1579] usb usb2-port1: attempt power cycle [ 1214.227705][T10593] loop4: detected capacity change from 0 to 512 [ 1214.571737][ T1579] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1214.610018][T10593] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.1092: casefold flag without casefold feature [ 1214.639164][T10593] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1092: couldn't read orphan inode 15 (err -117) [ 1214.999855][T10593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1215.403512][ T51] Bluetooth: hci6: command tx timeout [ 1216.009509][ T1579] usb 2-1: device descriptor read/8, error -71 [ 1216.789378][T10605] loop1: detected capacity change from 0 to 256 [ 1216.845129][ T714] team0 (unregistering): Port device team_slave_1 removed [ 1217.001170][ T714] team0 (unregistering): Port device team_slave_0 removed [ 1217.658861][T10608] loop0: detected capacity change from 0 to 2048 [ 1217.906258][T10608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1217.975822][T10548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.984309][T10548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.992957][T10548] bridge_slave_0: entered allmulticast mode [ 1218.004880][T10548] bridge_slave_0: entered promiscuous mode [ 1218.153412][T10524] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1218.257169][T10524] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1218.338396][T10548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.346381][T10548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.357408][T10548] bridge_slave_1: entered allmulticast mode [ 1218.367051][T10548] bridge_slave_1: entered promiscuous mode [ 1218.403460][T10524] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1218.421206][ T9860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.471238][ T9980] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1219.008043][T10524] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1219.080316][T10548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1219.277395][T10548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.778732][T10548] team0: Port device team_slave_0 added [ 1219.845191][T10548] team0: Port device team_slave_1 added [ 1220.373293][T10548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.380812][T10548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.407521][T10548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.580309][T10548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.587841][T10548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.616166][T10548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.548789][T10548] hsr_slave_0: entered promiscuous mode [ 1221.626127][T10548] hsr_slave_1: entered promiscuous mode [ 1221.653688][T10548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1221.661525][T10548] Cannot create hsr debugfs directory [ 1222.444121][T10524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.529125][T10524] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.667877][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.675781][ T6301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.692432][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.700156][ T6301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.785736][T10524] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1222.796631][T10524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1224.921411][T10548] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1225.054250][T10548] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1225.187018][T10548] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1225.345585][T10548] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1225.471403][T10524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.363570][T10524] veth0_vlan: entered promiscuous mode [ 1226.603582][T10524] veth1_vlan: entered promiscuous mode [ 1227.050064][T10548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.093556][T10524] veth0_macvtap: entered promiscuous mode [ 1227.187245][T10524] veth1_macvtap: entered promiscuous mode [ 1227.411366][T10656] loop4: detected capacity change from 0 to 1024 [ 1227.429500][T10548] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.597281][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1227.608230][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.618656][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1227.629603][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.643914][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1227.660201][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.694378][T10524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.729291][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.738385][ T6301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.800749][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.811871][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.822076][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.833493][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.836725][T10656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1227.846067][T10524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.846173][T10524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.852757][T10524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.967772][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.975654][ T6301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.402784][T10524] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.413346][T10524] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.423002][T10524] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.432306][T10524] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.929150][ T9860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1229.413836][ T7036] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1229.512907][ T7036] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1229.712039][ T7036] Bluetooth: hci0: command 0x0406 tx timeout [ 1229.834063][ T9988] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1230.173027][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1230.187938][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1230.304523][ T9988] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1230.316451][ T9988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.327939][ T9988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.340262][ T9988] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1230.354567][ T9988] usb 5-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 1230.364168][ T9988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.798504][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1230.852337][ T9988] usb 5-1: config 0 descriptor?? [ 1231.103798][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1232.267253][T10429] bridge0: port 3(syz_tun) entered disabled state [ 1232.458292][ T9988] thrustmaster 0003:044F:B653.001D: unbalanced delimiter at end of report description [ 1232.509842][ T9988] thrustmaster 0003:044F:B653.001D: parse failed [ 1232.517550][ T9988] thrustmaster 0003:044F:B653.001D: probe with driver thrustmaster failed with error -22 [ 1232.540063][T10429] syz_tun (unregistering): left allmulticast mode [ 1232.546911][T10429] syz_tun (unregistering): left promiscuous mode [ 1232.557289][T10429] bridge0: port 3(syz_tun) entered disabled state [ 1232.852104][ T6489] usb 5-1: USB disconnect, device number 15 [ 1233.289336][ T9897] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1233.351572][ T9897] Bluetooth: hci1: command tx timeout [ 1233.377887][ T4272] bridge_slave_1: left allmulticast mode [ 1233.384015][ T4272] bridge_slave_1: left promiscuous mode [ 1233.390700][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.431731][ T9897] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1233.539602][ T4272] bridge_slave_0: left allmulticast mode [ 1233.545773][ T4272] bridge_slave_0: left promiscuous mode [ 1233.552669][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.568069][ T9897] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1233.622624][ T9897] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1233.676163][ T9897] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1233.689993][ T9897] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1234.391204][ T4272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1234.440303][ T4272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1234.485798][ T4272] bond0 (unregistering): Released all slaves [ 1234.838610][T10548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1235.291478][T10548] veth0_vlan: entered promiscuous mode [ 1235.332664][T10548] veth1_vlan: entered promiscuous mode [ 1235.438580][T10548] veth0_macvtap: entered promiscuous mode [ 1235.462924][T10548] veth1_macvtap: entered promiscuous mode [ 1235.525899][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1235.536793][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.547274][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1235.558217][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.568489][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1235.580930][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.591936][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1235.602737][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.618594][T10548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1235.642878][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.659135][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.669487][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.680401][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.690631][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.701528][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.711964][T10548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.722925][T10548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.742040][T10548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1235.752461][ T9897] Bluetooth: hci1: command tx timeout [ 1235.982819][ T9897] Bluetooth: hci2: command tx timeout [ 1236.174679][T10615] bridge0: port 3(syz_tun) entered disabled state [ 1236.226782][T10615] syz_tun (unregistering): left allmulticast mode [ 1236.234425][T10615] syz_tun (unregistering): left promiscuous mode [ 1236.244565][T10615] bridge0: port 3(syz_tun) entered disabled state [ 1236.360403][T10548] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.371328][T10548] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.382466][T10548] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.391562][T10548] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.505132][ T9980] bridge0: port 3(syz_tun) entered disabled state [ 1236.558024][ T9980] syz_tun (unregistering): left allmulticast mode [ 1236.565289][ T9980] syz_tun (unregistering): left promiscuous mode [ 1236.575728][ T9980] bridge0: port 3(syz_tun) entered disabled state [ 1237.723856][ T4272] hsr_slave_0: left promiscuous mode [ 1237.773555][ T4272] hsr_slave_1: left promiscuous mode [ 1237.795616][ T9897] Bluetooth: hci1: command tx timeout [ 1237.813633][ T4272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1237.876231][ T4272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1238.032615][ T9897] Bluetooth: hci2: command tx timeout [ 1238.535685][ T4272] team0 (unregistering): Port device team_slave_1 removed [ 1238.574561][ T4272] team0 (unregistering): Port device team_slave_0 removed [ 1239.088659][T10667] chnl_net:caif_netlink_parms(): no params data found [ 1239.891127][ T9897] Bluetooth: hci1: command tx timeout [ 1240.112722][ T9897] Bluetooth: hci2: command tx timeout [ 1240.320714][ T4272] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.558575][ T4272] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.644845][T10688] chnl_net:caif_netlink_parms(): no params data found [ 1240.897795][ T4272] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.066722][ T4272] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.323409][T10667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.331355][T10667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.341170][T10667] bridge_slave_0: entered allmulticast mode [ 1241.352991][T10667] bridge_slave_0: entered promiscuous mode [ 1241.584007][T10667] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.592183][T10667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.600080][T10667] bridge_slave_1: entered allmulticast mode [ 1241.610563][T10667] bridge_slave_1: entered promiscuous mode [ 1242.194043][ T9897] Bluetooth: hci2: command tx timeout [ 1242.245523][T10667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1242.345763][T10667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1242.493583][ T4272] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.726803][ T4272] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.030683][ T4272] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.158698][T10667] team0: Port device team_slave_0 added [ 1243.248879][T10667] team0: Port device team_slave_1 added [ 1243.480482][ T4272] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.806466][T10667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1243.815384][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1243.845218][T10667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.867946][T10688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.875843][T10688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.883864][T10688] bridge_slave_0: entered allmulticast mode [ 1243.893525][T10688] bridge_slave_0: entered promiscuous mode [ 1243.940329][ T3389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.949144][ T3389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1243.984871][T10688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.992962][T10688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.002446][T10688] bridge_slave_1: entered allmulticast mode [ 1244.014173][T10688] bridge_slave_1: entered promiscuous mode [ 1244.104189][T10667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1244.111444][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1244.144077][T10667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1244.565110][ T4272] bridge_slave_1: left allmulticast mode [ 1244.573777][ T4272] bridge_slave_1: left promiscuous mode [ 1244.580441][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.704050][ T4272] bridge_slave_0: left allmulticast mode [ 1244.710009][ T4272] bridge_slave_0: left promiscuous mode [ 1244.716956][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.804971][ T4272] bridge_slave_1: left allmulticast mode [ 1244.810915][ T4272] bridge_slave_1: left promiscuous mode [ 1244.817945][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.839665][ T4272] bridge_slave_0: left allmulticast mode [ 1244.849485][ T4272] bridge_slave_0: left promiscuous mode [ 1244.856399][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.438950][T10788] loop4: detected capacity change from 0 to 1024 [ 1245.598995][T10788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1246.055017][ T4272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1246.092826][ T4272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.112623][ T4272] bond0 (unregistering): Released all slaves [ 1246.140901][ T4272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1246.165610][ T4272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.210488][ T4272] bond0 (unregistering): Released all slaves [ 1246.258261][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.267035][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.287130][T10688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1246.502371][T10667] hsr_slave_0: entered promiscuous mode [ 1246.516866][T10667] hsr_slave_1: entered promiscuous mode [ 1246.529968][T10667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1246.538141][T10667] Cannot create hsr debugfs directory [ 1246.625323][T10688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1247.106791][ T9860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.124936][T10688] team0: Port device team_slave_0 added [ 1247.397602][T10688] team0: Port device team_slave_1 added [ 1248.241146][T10688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1248.248652][T10688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1248.275678][T10688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1248.315238][T10688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1248.324880][T10688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1248.352511][T10688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1249.326171][T10688] hsr_slave_0: entered promiscuous mode [ 1249.353696][T10688] hsr_slave_1: entered promiscuous mode [ 1249.373162][T10688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1249.383397][T10688] Cannot create hsr debugfs directory [ 1249.641507][ T3607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.649870][ T3607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.839535][ T4272] hsr_slave_0: left promiscuous mode [ 1249.856193][ T4272] hsr_slave_1: left promiscuous mode [ 1249.875292][ T4272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1249.883343][ T4272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.918896][ T4272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1249.926885][ T4272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1250.012315][ T4272] hsr_slave_0: left promiscuous mode [ 1250.034891][ T4272] hsr_slave_1: left promiscuous mode [ 1250.054403][ T4272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1250.065334][ T4272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1250.109861][ T4272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1250.118283][ T4272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1250.188605][ T4272] veth1_macvtap: left promiscuous mode [ 1250.194805][ T4272] veth0_macvtap: left promiscuous mode [ 1250.200979][ T4272] veth1_vlan: left promiscuous mode [ 1250.206853][ T4272] veth0_vlan: left promiscuous mode [ 1250.219382][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1250.219467][ T29] audit: type=1326 audit(1727445130.900:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10813 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 1250.249260][ T29] audit: type=1326 audit(1727445130.900:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10813 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 1250.273322][ T29] audit: type=1326 audit(1727445130.900:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10813 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 1250.296189][ T29] audit: type=1326 audit(1727445130.910:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10813 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 1250.324740][ T4272] veth1_macvtap: left promiscuous mode [ 1250.330552][ T4272] veth0_macvtap: left promiscuous mode [ 1250.336808][ T4272] veth1_vlan: left promiscuous mode [ 1250.342600][ T4272] veth0_vlan: left promiscuous mode [ 1251.501492][ T4272] team0 (unregistering): Port device team_slave_1 removed [ 1251.536043][ T4272] team0 (unregistering): Port device team_slave_0 removed [ 1252.322276][ T4272] team0 (unregistering): Port device team_slave_1 removed [ 1252.378704][ T4272] team0 (unregistering): Port device team_slave_0 removed [ 1253.366411][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.374770][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.419454][T10667] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1253.476786][T10667] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1253.571542][T10667] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1253.690715][T10667] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1255.504687][T10832] loop2: detected capacity change from 0 to 256 [ 1255.586481][T10832] vfat: Bad value for 'shortname' [ 1256.027321][T10688] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1256.204018][T10688] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1256.261214][T10838] loop3: detected capacity change from 0 to 1024 [ 1256.342750][T10688] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1256.439545][T10667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1256.474568][T10688] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1256.492783][T10838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1256.901213][T10667] 8021q: adding VLAN 0 to HW filter on device team0 [ 1257.048198][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.056087][ T6301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1257.211151][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.219051][ T6301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1257.405160][T10667] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1257.417300][T10667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1257.711466][T10548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1258.669143][T10688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.151233][T10688] 8021q: adding VLAN 0 to HW filter on device team0 [ 1259.286554][ T714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.294632][ T714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1259.394944][T10667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1259.432911][ T714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.440766][ T714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.525998][T10861] loop4: detected capacity change from 0 to 2048 [ 1260.195179][T10861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1260.239577][T10688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1260.448717][T10868] usb usb8: usbfs: process 10868 (syz.2.1127) did not claim interface 0 before use [ 1260.807127][T10667] veth0_vlan: entered promiscuous mode [ 1260.846880][T10667] veth1_vlan: entered promiscuous mode [ 1261.030633][T10667] veth0_macvtap: entered promiscuous mode [ 1261.059354][T10667] veth1_macvtap: entered promiscuous mode [ 1261.245187][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1261.260868][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.273592][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1261.285209][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.295431][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1261.307549][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.323597][T10667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1261.421196][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.435363][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.448042][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.459520][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.472430][T10667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.483952][T10667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.499523][T10667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1261.521601][T10667] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.530862][T10667] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.543720][T10667] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.554810][T10667] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.221312][T10688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.491890][T10688] veth0_vlan: entered promiscuous mode [ 1262.496628][T10877] loop3: detected capacity change from 0 to 4096 [ 1262.545340][T10688] veth1_vlan: entered promiscuous mode [ 1262.638465][T10877] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1262.871257][T10688] veth0_macvtap: entered promiscuous mode [ 1263.055855][ T9860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.109259][T10688] veth1_macvtap: entered promiscuous mode [ 1263.413442][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1263.424395][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.434815][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1263.445605][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.457844][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1263.469018][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.492478][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1263.509168][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.528717][T10688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1263.766896][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.777940][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.792821][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.803709][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.814167][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.825167][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.835574][T10688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.846474][T10688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.862496][T10688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1263.938541][ T9985] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1264.148641][T10688] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.158586][T10688] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.168037][T10688] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.177806][T10688] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.243637][ T9985] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.254378][ T9985] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1264.417645][ T9985] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1264.427259][ T9985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1264.437623][ T9985] usb 3-1: SerialNumber: syz [ 1264.826217][ T9985] usb 3-1: 0:2 : does not exist [ 1265.278807][T10888] loop2: detected capacity change from 0 to 512 [ 1265.382602][T10888] EXT4-fs (loop2): Invalid default hash set in the superblock [ 1266.262505][T10909] loop4: detected capacity change from 0 to 1024 [ 1266.429823][T10909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1267.662224][ T1579] usb 3-1: USB disconnect, device number 19 [ 1267.946403][ T9860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1268.444634][ T29] audit: type=1326 audit(1727445149.130:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 1268.572486][ T29] audit: type=1326 audit(1727445149.160:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 1268.600786][ T29] audit: type=1326 audit(1727445149.160:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 1268.627276][ T29] audit: type=1326 audit(1727445149.180:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=40000003 syscall=234 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 1268.650826][ T29] audit: type=1326 audit(1727445149.180:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.2.1135" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 1269.215225][T10947] loop2: detected capacity change from 0 to 128 [ 1269.267856][ T1564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.276615][ T1564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.456652][ T29] audit: type=1800 audit(1727445150.120:335): pid=10947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1136" name="bus" dev="loop2" ino=1048719 res=0 errno=0 [ 1269.567607][T10514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.576803][T10514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.206590][T10951] loop1: detected capacity change from 0 to 512 [ 1270.654950][T10951] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.1104: casefold flag without casefold feature [ 1270.986646][T10951] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1104: couldn't read orphan inode 15 (err -117) [ 1271.054726][T10951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1272.897387][ T3339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.908757][ T3339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.944831][ T3339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.953061][ T3339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.948452][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 1273.955512][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 1274.322769][T10667] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.274266][T10975] loop4: detected capacity change from 0 to 1024 [ 1276.105677][T10975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1277.650126][ T9860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.493421][T10990] syzkaller0: entered promiscuous mode [ 1279.499216][T10990] syzkaller0: entered allmulticast mode [ 1279.569006][T10993] loop3: detected capacity change from 0 to 256 [ 1280.996607][T11003] loop2: detected capacity change from 0 to 512 [ 1281.329531][T11003] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.1149: casefold flag without casefold feature [ 1281.429330][T11003] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1149: couldn't read orphan inode 15 (err -117) [ 1281.509925][T11003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1281.657682][T11001] binder: 10999:11001 ioctl 4018620d 0 returned -22 [ 1281.749562][T11011] loop0: detected capacity change from 0 to 512 [ 1281.831450][T11011] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1281.899790][T11011] EXT4-fs error (device loop0): __ext4_fill_super:5458: inode #2: comm syz.0.1148: casefold flag without casefold feature [ 1282.002280][T11011] EXT4-fs (loop0): get root inode failed [ 1282.008437][T11011] EXT4-fs (loop0): mount failed [ 1283.153689][T10524] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.115140][ T1821] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1285.351672][ T1821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.364331][ T1821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.374753][ T1821] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 1285.384276][ T1821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.656910][ T1821] usb 3-1: config 0 descriptor?? [ 1286.173979][T11021] loop3: detected capacity change from 0 to 1024 [ 1286.633478][T11032] loop1: detected capacity change from 0 to 256 [ 1286.664624][T11021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1287.682640][ T1821] usbhid 3-1:0.0: can't add hid device: -71 [ 1287.689416][ T1821] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1287.816787][ T1821] usb 3-1: USB disconnect, device number 20 [ 1288.155479][T10548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.525427][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1291.552243][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1291.586119][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1291.603162][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1291.616969][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1291.627508][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1293.158562][T11055] loop1: detected capacity change from 0 to 512 [ 1293.437972][T11055] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.1162: casefold flag without casefold feature [ 1293.565012][T11055] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1162: couldn't read orphan inode 15 (err -117) [ 1293.595025][T11047] chnl_net:caif_netlink_parms(): no params data found [ 1293.758203][T11055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1293.952907][ T51] Bluetooth: hci4: command tx timeout [ 1294.622000][T11066] loop2: detected capacity change from 0 to 512 [ 1294.849310][T11066] EXT4-fs (loop2): 1 truncate cleaned up [ 1294.857628][T11066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1295.088649][T11047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.096730][T11047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.105032][T11047] bridge_slave_0: entered allmulticast mode [ 1295.125520][T11047] bridge_slave_0: entered promiscuous mode [ 1295.212224][T11047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.220059][T11047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.238694][T11047] bridge_slave_1: entered allmulticast mode [ 1295.249138][T11047] bridge_slave_1: entered promiscuous mode [ 1295.502796][ T29] audit: type=1326 audit(1727445176.170:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11065 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 1295.526322][ T29] audit: type=1326 audit(1727445176.180:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11065 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 1295.560736][T10667] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.834529][T11047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1296.015846][T11047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1296.040278][ T51] Bluetooth: hci4: command tx timeout [ 1296.106659][T11073] loop3: detected capacity change from 0 to 512 [ 1296.276673][T11073] EXT4-fs: Ignoring removed nobh option [ 1296.392293][T11073] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1296.409869][T11073] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1167: attempt to clear invalid blocks 2 len 1 [ 1296.425497][T11073] EXT4-fs (loop3): Remounting filesystem read-only [ 1296.435006][T11073] EXT4-fs (loop3): 1 truncate cleaned up [ 1296.445603][T11073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1296.784626][T11047] team0: Port device team_slave_0 added [ 1296.846727][T11047] team0: Port device team_slave_1 added [ 1297.184468][ T9897] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1297.234315][T10548] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.246633][ T9897] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1297.368068][ T9897] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1297.389754][ T9897] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1297.404148][ T9897] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1297.414031][ T9897] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1297.450558][T11047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1297.458037][T11047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1297.490103][T11047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1297.762524][T11047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1297.769848][T11047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1297.802597][T11047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1298.112031][ T9897] Bluetooth: hci4: command tx timeout [ 1298.332510][T11047] hsr_slave_0: entered promiscuous mode [ 1298.350216][T11047] hsr_slave_1: entered promiscuous mode [ 1298.422606][T11047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1298.432901][T11047] Cannot create hsr debugfs directory [ 1299.599127][T11092] binder: 11090:11092 ioctl 4018620d 0 returned -22 [ 1299.905923][T11047] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.032143][ T9897] Bluetooth: hci5: command tx timeout [ 1300.192889][ T9897] Bluetooth: hci4: command tx timeout [ 1300.243882][T11047] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.339296][T11095] loop3: detected capacity change from 0 to 128 [ 1300.745154][T11047] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.049661][T11047] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.773199][T11080] chnl_net:caif_netlink_parms(): no params data found [ 1301.860677][T11047] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1302.035964][T11047] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1302.135699][ T9897] Bluetooth: hci5: command tx timeout [ 1302.147874][T11047] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1302.377089][T11047] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1303.759704][T11047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.821684][T11047] 8021q: adding VLAN 0 to HW filter on device team0 [ 1303.863853][ T3339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.871842][ T3339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.125257][ T3339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.133141][ T3339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1304.192191][ T9897] Bluetooth: hci5: command tx timeout [ 1305.148982][T11080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.164111][T11080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.172325][T11080] bridge_slave_0: entered allmulticast mode [ 1305.181956][T11080] bridge_slave_0: entered promiscuous mode [ 1305.343106][T10524] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1305.664655][T11080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.677162][T11080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.685681][T11080] bridge_slave_1: entered allmulticast mode [ 1305.701613][T11080] bridge_slave_1: entered promiscuous mode [ 1306.283664][ T51] Bluetooth: hci5: command tx timeout [ 1306.407567][T11080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1306.557749][T11080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1306.688122][ T7036] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1307.022309][ T7036] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1307.035057][ T7036] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1307.050852][ T7036] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1307.067511][ T7036] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1307.078236][ T7036] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1308.005217][ T2920] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.148963][T11080] team0: Port device team_slave_0 added [ 1308.410851][ T2920] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.511107][T11080] team0: Port device team_slave_1 added [ 1308.768843][ T2920] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.256848][ T7036] Bluetooth: hci7: command tx timeout [ 1309.490090][ T2920] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.745679][T11080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1309.753554][T11080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.804876][T11080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1309.859850][T11080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1309.871435][T11080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.918526][T11080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1310.466153][ T9897] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1310.550302][ T9897] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1310.598323][ T9897] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1310.724056][T11047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1310.765267][ T9897] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1310.836701][ T9897] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1310.852697][ T9897] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1310.869838][ T2920] bridge_slave_1: left allmulticast mode [ 1310.876282][ T2920] bridge_slave_1: left promiscuous mode [ 1310.883441][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.908073][ T2920] bridge_slave_0: left allmulticast mode [ 1310.918737][ T2920] bridge_slave_0: left promiscuous mode [ 1310.925662][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.322276][ T9897] Bluetooth: hci7: command tx timeout [ 1311.454704][ T7036] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1311.464837][ T7036] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1311.574785][ T7036] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1311.628174][ T7036] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1311.646918][ T7036] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1311.656709][ T7036] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1312.315520][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1312.404240][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1312.449933][ T2920] bond0 (unregistering): Released all slaves [ 1312.500340][T11080] hsr_slave_0: entered promiscuous mode [ 1312.545480][T11080] hsr_slave_1: entered promiscuous mode [ 1312.580092][T11080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1312.588437][T11080] Cannot create hsr debugfs directory [ 1312.677155][T11036] bridge0: port 3(syz_tun) entered disabled state [ 1312.753709][T11036] syz_tun (unregistering): left allmulticast mode [ 1312.760473][T11036] syz_tun (unregistering): left promiscuous mode [ 1312.770641][T11036] bridge0: port 3(syz_tun) entered disabled state [ 1312.859706][T11106] chnl_net:caif_netlink_parms(): no params data found [ 1313.085507][ T9897] Bluetooth: hci2: command tx timeout [ 1313.393101][ T9897] Bluetooth: hci7: command tx timeout [ 1313.802911][ T9897] Bluetooth: hci3: command tx timeout [ 1314.097095][ T2920] hsr_slave_0: left promiscuous mode [ 1314.122761][ T2920] hsr_slave_1: left promiscuous mode [ 1314.163410][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1314.174612][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1314.204996][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1314.213045][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1314.233906][ T2920] veth1_macvtap: left promiscuous mode [ 1314.239818][ T2920] veth0_macvtap: left promiscuous mode [ 1314.246405][ T2920] veth1_vlan: left promiscuous mode [ 1314.252190][ T2920] veth0_vlan: left promiscuous mode [ 1315.222497][ T9897] Bluetooth: hci2: command tx timeout [ 1315.271010][ T2920] team0 (unregistering): Port device team_slave_1 removed [ 1315.414863][ T2920] team0 (unregistering): Port device team_slave_0 removed [ 1315.499994][ T9897] Bluetooth: hci7: command tx timeout [ 1315.935816][ T7036] Bluetooth: hci3: command tx timeout [ 1316.254579][T11047] veth0_vlan: entered promiscuous mode [ 1316.494928][T11080] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.710792][T11047] veth1_vlan: entered promiscuous mode [ 1316.899522][T11080] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.115893][T11080] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.305686][ T9897] Bluetooth: hci2: command tx timeout [ 1317.456571][T11116] chnl_net:caif_netlink_parms(): no params data found [ 1317.620573][T11080] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.783132][T11106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.790969][T11106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.799444][T11106] bridge_slave_0: entered allmulticast mode [ 1317.813434][T11106] bridge_slave_0: entered promiscuous mode [ 1317.899562][T11106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.908653][T11106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.916916][T11106] bridge_slave_1: entered allmulticast mode [ 1317.927020][T11106] bridge_slave_1: entered promiscuous mode [ 1317.965110][ T9897] Bluetooth: hci3: command tx timeout [ 1318.045852][ T2920] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.140233][T11047] veth0_macvtap: entered promiscuous mode [ 1318.396086][ T2920] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.550941][T11106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.611556][T11120] chnl_net:caif_netlink_parms(): no params data found [ 1318.693836][ T2920] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.780598][T11106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.851339][ T2920] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.919751][T11047] veth1_macvtap: entered promiscuous mode [ 1319.302459][T11080] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1319.316429][ T9897] Bluetooth: hci2: command tx timeout [ 1319.381348][T11106] team0: Port device team_slave_0 added [ 1319.521068][T11080] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1319.579220][T11106] team0: Port device team_slave_1 added [ 1319.677002][T11080] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1319.985547][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1319.997193][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.010608][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.024801][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.036620][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.048113][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.053584][ T9897] Bluetooth: hci3: command tx timeout [ 1320.058795][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.075674][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.091669][T11047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1320.101560][T11080] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1320.248398][ T2920] bridge_slave_1: left allmulticast mode [ 1320.254530][ T2920] bridge_slave_1: left promiscuous mode [ 1320.261311][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.324220][ T2920] bridge_slave_0: left allmulticast mode [ 1320.330264][ T2920] bridge_slave_0: left promiscuous mode [ 1320.337984][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.393641][ T2920] bridge_slave_1: left allmulticast mode [ 1320.399595][ T2920] bridge_slave_1: left promiscuous mode [ 1320.408940][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.469078][ T2920] bridge_slave_0: left allmulticast mode [ 1320.475344][ T2920] bridge_slave_0: left promiscuous mode [ 1320.482305][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.503959][ T2920] bridge_slave_1: left allmulticast mode [ 1320.509994][ T2920] bridge_slave_1: left promiscuous mode [ 1320.520387][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.538785][ T2920] bridge_slave_0: left allmulticast mode [ 1320.544980][ T2920] bridge_slave_0: left promiscuous mode [ 1320.552367][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.241655][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1322.294736][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1322.327051][ T2920] bond0 (unregistering): Released all slaves [ 1322.410149][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1322.465157][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1322.497250][ T2920] bond0 (unregistering): Released all slaves [ 1322.530647][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1322.607665][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1322.626383][ T2920] bond0 (unregistering): Released all slaves [ 1322.853617][T11106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1322.860943][T11106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.892014][T11106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.101596][T11106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.110725][T11106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.138241][T11106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.165791][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.178222][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.188567][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.199523][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.209755][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.220610][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.230921][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.242061][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.257704][T11047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.417392][T11116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.431658][T11116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.441613][T11116] bridge_slave_0: entered allmulticast mode [ 1323.455909][T11116] bridge_slave_0: entered promiscuous mode [ 1323.649232][T11106] hsr_slave_0: entered promiscuous mode [ 1323.667533][T11106] hsr_slave_1: entered promiscuous mode [ 1323.685381][T11116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.699281][T11116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.707639][T11116] bridge_slave_1: entered allmulticast mode [ 1323.717407][T11116] bridge_slave_1: entered promiscuous mode [ 1323.838920][T11120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.849823][T11120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.858482][T11120] bridge_slave_0: entered allmulticast mode [ 1323.868169][T11120] bridge_slave_0: entered promiscuous mode [ 1324.011222][T11047] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.020601][T11047] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.031084][T11047] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.040617][T11047] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.154842][T11120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.162887][T11120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.170843][T11120] bridge_slave_1: entered allmulticast mode [ 1324.184228][T11120] bridge_slave_1: entered promiscuous mode [ 1324.270577][T11116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.503572][T11116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.653031][T11120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.844051][T11116] team0: Port device team_slave_0 added [ 1324.872847][T11120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1325.002014][T11116] team0: Port device team_slave_1 added [ 1325.339493][T11120] team0: Port device team_slave_0 added [ 1325.610302][T11120] team0: Port device team_slave_1 added [ 1325.651224][T11116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.658666][T11116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.685494][T11116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.867498][T11116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.874853][T11116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.901385][T11116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1325.971306][T11120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.979916][T11120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1326.006842][T11120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1326.146764][T11120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.155595][T11120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1326.183534][T11120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.482439][ T2920] hsr_slave_0: left promiscuous mode [ 1326.502925][ T2920] hsr_slave_1: left promiscuous mode [ 1326.526714][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.534706][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.577232][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1326.585273][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.660018][ T2920] hsr_slave_0: left promiscuous mode [ 1326.684110][ T2920] hsr_slave_1: left promiscuous mode [ 1326.703521][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.711397][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.725214][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1326.733635][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.778067][ T2920] hsr_slave_0: left promiscuous mode [ 1326.787442][ T2920] hsr_slave_1: left promiscuous mode [ 1326.824096][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.837962][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.850741][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1326.859125][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.909523][ T2920] veth1_macvtap: left promiscuous mode [ 1326.915583][ T2920] veth0_macvtap: left promiscuous mode [ 1326.921549][ T2920] veth1_vlan: left promiscuous mode [ 1326.927376][ T2920] veth0_vlan: left promiscuous mode [ 1326.935185][ T2920] veth1_macvtap: left promiscuous mode [ 1326.941072][ T2920] veth0_macvtap: left promiscuous mode [ 1326.947331][ T2920] veth1_vlan: left promiscuous mode [ 1326.953612][ T2920] veth0_vlan: left promiscuous mode [ 1326.962360][ T2920] veth1_macvtap: left promiscuous mode [ 1326.968233][ T2920] veth0_macvtap: left promiscuous mode [ 1326.974459][ T2920] veth1_vlan: left promiscuous mode [ 1326.980376][ T2920] veth0_vlan: left promiscuous mode [ 1328.579168][ T2920] team0 (unregistering): Port device team_slave_1 removed [ 1328.609209][ T2920] team0 (unregistering): Port device team_slave_0 removed [ 1329.214947][ T2920] team0 (unregistering): Port device team_slave_1 removed [ 1329.322062][ T2920] team0 (unregistering): Port device team_slave_0 removed [ 1329.978769][ T2920] team0 (unregistering): Port device team_slave_1 removed [ 1330.044554][ T2920] team0 (unregistering): Port device team_slave_0 removed [ 1331.159991][T11116] hsr_slave_0: entered promiscuous mode [ 1331.204160][T11116] hsr_slave_1: entered promiscuous mode [ 1331.220674][T11116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1331.228793][T11116] Cannot create hsr debugfs directory [ 1331.369931][T11080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1331.407530][T11120] hsr_slave_0: entered promiscuous mode [ 1331.430456][T11120] hsr_slave_1: entered promiscuous mode [ 1331.454446][T11120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1331.462982][T11120] Cannot create hsr debugfs directory [ 1331.947011][T11106] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1332.003875][T11106] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1332.175316][T11106] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1332.279717][T11080] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.293227][T11106] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1332.450640][T10514] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.458552][T10514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.518745][ T2920] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.705409][ T2920] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.795391][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.803303][ T6301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1332.879989][ T2920] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.043268][ T2920] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.676279][ T2920] bridge_slave_1: left allmulticast mode [ 1333.683308][ T2920] bridge_slave_1: left promiscuous mode [ 1333.690083][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.733302][ T2920] bridge_slave_0: left allmulticast mode [ 1333.739261][ T2920] bridge_slave_0: left promiscuous mode [ 1333.746564][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.207881][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1334.230286][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1334.251933][ T2920] bond0 (unregistering): Released all slaves [ 1334.528759][T10514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.538034][T10514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.774451][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.782933][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.170519][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.178222][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 1335.236826][ T2920] hsr_slave_0: left promiscuous mode [ 1335.248834][ T2920] hsr_slave_1: left promiscuous mode [ 1335.275971][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1335.284297][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1335.333921][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1335.341982][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.411989][ T2920] veth1_macvtap: left promiscuous mode [ 1335.417827][ T2920] veth0_macvtap: left promiscuous mode [ 1335.425080][ T2920] veth1_vlan: left promiscuous mode [ 1335.430763][ T2920] veth0_vlan: left promiscuous mode [ 1336.245011][ T2920] team0 (unregistering): Port device team_slave_1 removed [ 1336.274696][ T2920] team0 (unregistering): Port device team_slave_0 removed [ 1336.792864][T11106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1337.223757][T11106] 8021q: adding VLAN 0 to HW filter on device team0 [ 1337.557318][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.565286][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1337.595758][T11120] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1337.635897][T11116] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1337.705350][T11120] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1337.766502][T11116] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1337.816004][T11120] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1337.891530][T10514] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.899387][T10514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1337.924774][T11116] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1337.982304][T11120] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1338.068890][T11116] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1338.146761][T11080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1338.207737][T11196] veth0_vlan: entered allmulticast mode [ 1339.687411][T11116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1339.731303][T11120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1339.785336][T11116] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.931895][ T2920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.939767][ T2920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1340.075514][ T2920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.083362][ T2920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.112732][T11120] 8021q: adding VLAN 0 to HW filter on device team0 [ 1340.293587][ T2920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.301450][ T2920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1340.473417][ T2920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.481288][ T2920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.741397][T11116] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1340.753535][T11116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1340.968825][T11120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1340.981454][T11120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1341.287541][T11106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.067130][T11106] veth0_vlan: entered promiscuous mode [ 1342.116666][T11080] veth0_vlan: entered promiscuous mode [ 1342.215188][T11106] veth1_vlan: entered promiscuous mode [ 1342.338125][T11080] veth1_vlan: entered promiscuous mode [ 1342.695085][T11106] veth0_macvtap: entered promiscuous mode [ 1342.785161][T11106] veth1_macvtap: entered promiscuous mode [ 1342.932080][T11080] veth0_macvtap: entered promiscuous mode [ 1343.036131][T11080] veth1_macvtap: entered promiscuous mode [ 1343.123640][T11106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.134660][T11106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.150503][T11106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1343.278331][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.289410][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.300016][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.310945][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.326821][T11080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1343.457539][T11106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.468523][T11106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.494283][T11106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1343.539909][T11106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.556193][T11106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.566367][T11106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.575766][T11106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.608691][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.620198][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.630496][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.641457][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.657279][T11080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1343.758084][T11116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1343.950089][T11080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.962124][T11080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.971234][T11080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.980871][T11080] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.139544][T11120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1344.393535][T11116] veth0_vlan: entered promiscuous mode [ 1344.656786][T11116] veth1_vlan: entered promiscuous mode [ 1345.190899][T11120] veth0_vlan: entered promiscuous mode [ 1345.209581][T11116] veth0_macvtap: entered promiscuous mode [ 1345.330873][T11116] veth1_macvtap: entered promiscuous mode [ 1345.380801][T11120] veth1_vlan: entered promiscuous mode [ 1345.665506][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1345.676408][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1345.687150][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1345.698106][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1345.710623][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1345.723056][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1345.739547][T11116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1346.024972][T11120] veth0_macvtap: entered promiscuous mode [ 1346.074830][T11120] veth1_macvtap: entered promiscuous mode [ 1346.140852][T11120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1346.153256][T11120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.163472][T11120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1346.174302][T11120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.184605][T11120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1346.196249][T11120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.207046][T11120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1346.217883][T11120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.233944][T11120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1346.254928][T11120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.265791][T11120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.276956][T11120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.288276][T11120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.298490][T11120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.309390][T11120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.325445][T11120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1346.398004][T11120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.407380][T11120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.416702][T11120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.426046][T11120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.514565][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.525506][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.535793][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.546716][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.557077][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.567998][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.581066][T11116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1346.592132][T11116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1346.607851][T11116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1346.937716][T11116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.948068][T11116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.957481][T11116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.966764][T11116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.094034][ T7036] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1348.105006][ T7036] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1348.124969][ T7036] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1348.141090][ T7036] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1348.218335][ T7036] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1348.244567][ T7036] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1350.132823][T11266] chnl_net:caif_netlink_parms(): no params data found [ 1350.352562][ T7036] Bluetooth: hci0: command tx timeout [ 1352.340062][T11266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.350050][T11266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.358240][T11266] bridge_slave_0: entered allmulticast mode [ 1352.370873][T11266] bridge_slave_0: entered promiscuous mode [ 1352.514647][ T7036] Bluetooth: hci0: command tx timeout [ 1352.664786][ T714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.674420][ T714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.715300][T11266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.723374][T11266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.731441][T11266] bridge_slave_1: entered allmulticast mode [ 1352.741321][T11266] bridge_slave_1: entered promiscuous mode [ 1353.144923][ T714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1353.153664][ T714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1353.363024][T11266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1353.747270][T11266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1354.065380][T11266] team0: Port device team_slave_0 added [ 1354.257149][T11266] team0: Port device team_slave_1 added [ 1354.509020][ T3389] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.574520][ T3607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.582884][ T3607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.652176][ T7036] Bluetooth: hci0: command tx timeout [ 1354.661137][T11266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1354.668544][T11266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1354.695177][T11266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1354.807232][T11266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1354.814630][T11266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1354.844221][T11266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1354.919677][ T3389] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.131371][ T3389] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.248518][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.256965][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.475127][ T3389] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.850198][T11266] hsr_slave_0: entered promiscuous mode [ 1355.910163][T11266] hsr_slave_1: entered promiscuous mode [ 1355.947522][T11266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1355.955540][T11266] Cannot create hsr debugfs directory [ 1356.202270][T10514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.210387][T10514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.350265][ T3389] bridge_slave_1: left allmulticast mode [ 1356.359976][ T3389] bridge_slave_1: left promiscuous mode [ 1356.367007][ T3389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.406674][ T3389] bridge_slave_0: left allmulticast mode [ 1356.414740][ T3389] bridge_slave_0: left promiscuous mode [ 1356.421597][ T3389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.672270][ T7036] Bluetooth: hci0: command tx timeout [ 1357.264116][ T3389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.318991][ T3389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.354599][ T3389] bond0 (unregistering): Released all slaves [ 1357.387027][T11355] loop4: detected capacity change from 0 to 1024 [ 1357.468262][ T3339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.477015][ T3339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.675980][T11355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1358.429283][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.438960][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.748191][T11080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.781069][ T3389] hsr_slave_0: left promiscuous mode [ 1358.801556][ T3389] hsr_slave_1: left promiscuous mode [ 1358.972329][ T3389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1358.980261][ T3389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.006448][ T3389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1359.014685][ T3389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.090241][ T3389] veth1_macvtap: left promiscuous mode [ 1359.096917][ T3389] veth0_macvtap: left promiscuous mode [ 1359.103153][ T3389] veth1_vlan: left promiscuous mode [ 1359.277160][T11365] loop4: detected capacity change from 0 to 512 [ 1359.592914][T11365] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.1179: casefold flag without casefold feature [ 1359.688736][T11365] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1179: couldn't read orphan inode 15 (err -117) [ 1359.709308][T11365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1359.964923][T11373] loop3: detected capacity change from 0 to 512 [ 1360.107084][ T3389] team0 (unregistering): Port device team_slave_1 removed [ 1360.155580][ T3389] team0 (unregistering): Port device team_slave_0 removed [ 1360.241612][T11373] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1360.299793][T11365] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1360.414711][T11373] EXT4-fs error (device loop3): __ext4_fill_super:5458: inode #2: comm syz.3.1180: casefold flag without casefold feature [ 1360.563259][T11373] EXT4-fs (loop3): get root inode failed [ 1360.569253][T11373] EXT4-fs (loop3): mount failed [ 1360.631064][ T3607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.639767][ T3607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1361.345406][T11080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1362.337233][T11266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1362.405081][T11388] binder: BINDER_SET_CONTEXT_MGR already set [ 1362.411338][T11388] binder: 11387:11388 ioctl 4018620d 200001c0 returned -16 [ 1362.454289][T11266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1362.515432][T11266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1362.552663][T11266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1362.742812][T10191] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1362.879161][T11400] loop1: detected capacity change from 0 to 512 [ 1362.967637][T11400] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.1175: casefold flag without casefold feature [ 1362.994007][T11400] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1175: couldn't read orphan inode 15 (err -117) [ 1363.076516][T11404] loop4: detected capacity change from 0 to 512 [ 1363.094691][T11400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1363.134417][T10191] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1363.146523][T10191] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1363.414922][T10191] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1363.426421][T10191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.427618][T11404] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 1363.435203][T10191] usb 4-1: Product: syz [ 1363.435340][T10191] usb 4-1: Manufacturer: syz [ 1363.435470][T10191] usb 4-1: SerialNumber: syz [ 1363.507168][T11404] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a840e01c, mo2=0002] [ 1363.554096][T11389] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1363.568361][T11404] System zones: 1-12 [ 1363.603327][T11404] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1363.610110][T11404] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.1184: Inode bitmap for bg 0 marked uninitialized [ 1363.654745][T11404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1364.094773][T11389] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1364.102640][T11266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1364.108704][T11389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.157673][T11389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.205754][T11411] loop2: detected capacity change from 0 to 128 [ 1364.225299][T10191] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1364.407902][T10191] usb 4-1: USB disconnect, device number 17 [ 1364.485773][T11411] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1364.528143][T11411] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1364.537721][T11266] 8021q: adding VLAN 0 to HW filter on device team0 [ 1364.677542][T10514] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.685637][T10514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1364.801661][T10514] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.809998][T10514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.500590][T11116] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.546433][T11429] loop1: detected capacity change from 0 to 512 [ 1366.607214][T11426] loop3: detected capacity change from 0 to 1024 [ 1366.939629][T11429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1366.942615][T11426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1366.952928][T11429] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1367.444424][T11080] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1367.798077][T11266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1367.942096][ T29] audit: type=1326 audit(1727445248.460:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1367.965079][ T29] audit: type=1326 audit(1727445248.460:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1367.987891][ T29] audit: type=1326 audit(1727445248.470:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1368.011052][ T29] audit: type=1326 audit(1727445248.470:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1368.036459][ T29] audit: type=1326 audit(1727445248.470:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1368.039424][T11266] veth0_vlan: entered promiscuous mode [ 1368.059296][ T29] audit: type=1326 audit(1727445248.470:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1368.087948][ T29] audit: type=1326 audit(1727445248.480:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1368.097643][T11266] veth1_vlan: entered promiscuous mode [ 1368.110508][ T29] audit: type=1326 audit(1727445248.490:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1368.139725][ T29] audit: type=1326 audit(1727445248.490:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1368.162850][ T29] audit: type=1326 audit(1727445248.490:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11442 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 1368.491244][T11266] veth0_macvtap: entered promiscuous mode [ 1368.517652][T11266] veth1_macvtap: entered promiscuous mode [ 1368.582951][T11266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1368.593887][T11266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.604208][T11266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1368.615574][T11266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.625800][T11266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1368.636647][T11266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.648089][T11266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1368.659314][T11266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.675533][T11266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1368.717685][T11266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.728597][T11266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.738830][T11266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.750849][T11266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.762665][T11266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.773889][T11266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.784137][T11266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.795107][T11266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.811279][T11266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.833731][T11266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.843022][T11266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.853490][T11266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.863156][T11266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.313099][T11106] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1370.668814][T11458] syzkaller0: entered promiscuous mode [ 1370.677366][T11458] syzkaller0: entered allmulticast mode [ 1371.302320][T10191] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1371.516137][T10191] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 1371.528269][T10191] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 1371.540264][T10191] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1371.549836][T10191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.709683][T11462] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1372.043547][T11462] ===================================================== [ 1372.051103][T11462] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xbc/0x110 [ 1372.058717][T11462] _copy_to_user+0xbc/0x110 [ 1372.063628][T11462] raw_ioctl+0x3d28/0x5440 [ 1372.068317][T11462] __se_compat_sys_ioctl+0x785/0x1080 [ 1372.074095][T11462] __ia32_compat_sys_ioctl+0x93/0xe0 [ 1372.079633][T11462] ia32_sys_call+0x32a2/0x40d0 [ 1372.084836][T11462] __do_fast_syscall_32+0xb0/0x110 [ 1372.090176][T11462] do_fast_syscall_32+0x38/0x80 [ 1372.095458][T11462] do_SYSENTER_32+0x1f/0x30 [ 1372.100236][T11462] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1372.107464][T11462] [ 1372.109944][T11462] Uninit was created at: [ 1372.114719][T11462] __kmalloc_noprof+0x661/0xf30 [ 1372.119867][T11462] raw_ioctl+0x3bc5/0x5440 [ 1372.131389][T11462] __se_compat_sys_ioctl+0x785/0x1080 [ 1372.139758][T11462] __ia32_compat_sys_ioctl+0x93/0xe0 [ 1372.145467][T11462] ia32_sys_call+0x32a2/0x40d0 [ 1372.150514][T11462] __do_fast_syscall_32+0xb0/0x110 [ 1372.156120][T11462] do_fast_syscall_32+0x38/0x80 [ 1372.161210][T11462] do_SYSENTER_32+0x1f/0x30 [ 1372.166154][T11462] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1372.172963][T11462] [ 1372.175411][T11462] Bytes 0-2 of 3 are uninitialized [ 1372.180680][T11462] Memory access of size 3 starts at ffff88804feea180 [ 1372.187705][T11462] Data copied to user address 00000000f5764550 [ 1372.194483][T11462] [ 1372.196960][T11462] CPU: 1 UID: 0 PID: 11462 Comm: syz.4.1194 Not tainted 6.11.0-syzkaller-10729-g13882369ceb9 #0 [ 1372.207772][T11462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1372.218244][T11462] ===================================================== [ 1372.225744][T11462] Disabling lock debugging due to kernel taint [ 1372.238835][T11462] Kernel panic - not syncing: kmsan.panic set ... [ 1372.245552][T11462] CPU: 1 UID: 0 PID: 11462 Comm: syz.4.1194 Tainted: G B 6.11.0-syzkaller-10729-g13882369ceb9 #0 [ 1372.257737][T11462] Tainted: [B]=BAD_PAGE [ 1372.262073][T11462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1372.272471][T11462] Call Trace: [ 1372.275912][T11462] [ 1372.278988][T11462] dump_stack_lvl+0x216/0x2d0 [ 1372.283907][T11462] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1372.290038][T11462] dump_stack+0x1e/0x30 [ 1372.294433][T11462] panic+0x4e2/0xcf0 [ 1372.298621][T11462] ? kmsan_get_metadata+0x61/0x1c0 [ 1372.304071][T11462] kmsan_report+0x2c7/0x2d0 [ 1372.308883][T11462] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1372.315032][T11462] ? kmsan_internal_check_memory+0x48c/0x560 [ 1372.321310][T11462] ? kmsan_copy_to_user+0xd5/0xf0 [ 1372.326667][T11462] ? _copy_to_user+0xbc/0x110 [ 1372.331611][T11462] ? raw_ioctl+0x3d28/0x5440 [ 1372.336481][T11462] ? __se_compat_sys_ioctl+0x785/0x1080 [ 1372.342338][T11462] ? __ia32_compat_sys_ioctl+0x93/0xe0 [ 1372.348160][T11462] ? ia32_sys_call+0x32a2/0x40d0 [ 1372.353393][T11462] ? __do_fast_syscall_32+0xb0/0x110 [ 1372.358922][T11462] ? do_fast_syscall_32+0x38/0x80 [ 1372.364272][T11462] ? do_SYSENTER_32+0x1f/0x30 [ 1372.369171][T11462] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1372.375980][T11462] ? kmsan_get_metadata+0x13e/0x1c0 [ 1372.381472][T11462] ? kmsan_get_metadata+0x13e/0x1c0 [ 1372.386988][T11462] ? kmsan_get_metadata+0x13e/0x1c0 [ 1372.392557][T11462] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1372.398670][T11462] ? _raw_spin_lock_irqsave+0x35/0xc0 [ 1372.404325][T11462] ? filter_irq_stacks+0x60/0x1a0 [ 1372.409640][T11462] ? kmsan_get_metadata+0x13e/0x1c0 [ 1372.415134][T11462] ? kmsan_get_metadata+0x13e/0x1c0 [ 1372.420618][T11462] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1372.426740][T11462] kmsan_internal_check_memory+0x48c/0x560 [ 1372.432940][T11462] kmsan_copy_to_user+0xd5/0xf0 [ 1372.438075][T11462] ? should_fail_usercopy+0x2e/0x40 [ 1372.443658][T11462] _copy_to_user+0xbc/0x110 [ 1372.448418][T11462] raw_ioctl+0x3d28/0x5440 [ 1372.453116][T11462] ? kmsan_get_metadata+0x13e/0x1c0 [ 1372.458601][T11462] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1372.464753][T11462] ? do_vfs_ioctl+0x14fc/0x3e80 [ 1372.469882][T11462] ? kmsan_get_metadata+0x60/0x1c0 [ 1372.475299][T11462] ? __pfx_raw_ioctl+0x10/0x10 [ 1372.480331][T11462] __se_compat_sys_ioctl+0x785/0x1080 [ 1372.485957][T11462] ? kmsan_get_metadata+0x13e/0x1c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1372.491446][T11462] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1372.498073][T11462] ? kmsan_get_metadata+0x13e/0x1c0 [ 1372.503746][T11462] __ia32_compat_sys_ioctl+0x93/0xe0 [ 1372.509310][T11462] ia32_sys_call+0x32a2/0x40d0 [ 1372.514361][T11462] __do_fast_syscall_32+0xb0/0x110 [ 1372.519711][T11462] ? irqentry_exit+0x16/0x60 [ 1372.524596][T11462] do_fast_syscall_32+0x38/0x80 [ 1372.529686][T11462] do_SYSENTER_32+0x1f/0x30 [ 1372.534422][T11462] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1372.541151][T11462] RIP: 0023:0xf747d579 [ 1372.545405][T11462] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1372.565281][T11462] RSP: 002b:00000000f5764504 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1372.574115][T11462] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0085504 [ 1372.582404][T11462] RDX: 00000000f5764548 RSI: 00000000f746bff4 RDI: 0000000000000003 [ 1372.590586][T11462] RBP: 00000000f746bff4 R08: 0000000000000000 R09: 0000000000000000 [ 1372.598751][T11462] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1372.606930][T11462] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1372.615114][T11462] [ 1372.619682][T11462] Kernel Offset: disabled [ 1372.624107][T11462] Rebooting in 86400 seconds..