last executing test programs: 44.985411461s ago: executing program 3 (id=1731): syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x8, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000300)={{0x0, 0xff}, 'port1\x00'}) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x1, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @multicast1}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socket$inet6(0xa, 0x0, 0x0) 40.600436855s ago: executing program 3 (id=1734): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x0) socketpair$tipc(0x2, 0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000100)) unshare(0x64000600) 39.493714524s ago: executing program 3 (id=1738): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='stack\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="58000000020603000000394802b9e47c49f6cc4b74aba20000000000000000000005000400000000000300020073797a3000000000050001000700000005000500050000001400"], 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xfffe, @loopback}}}, 0x80) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0x40186f40, 0x20000502) read$FUSE(r2, &(0x7f0000003500)={0x2020}, 0xd) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x125f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x324, 0x0, r1}, 0x0, &(0x7f00000000c0)) 38.491616065s ago: executing program 3 (id=1739): r0 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES64=r1, @ANYRES32, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0xb}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000080000000000000000000181100009a6801b2669927e9f7a8d1b1cbf2d018b3fc3b2005f9fbe087bd0f6dbd78b52565d5bfc4a17935ec73fe413f9bf08b9f2d4587dc4b4060043cbfc793c1f54497", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058", @ANYRES32, @ANYRESOCT=r0, @ANYRESOCT, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x8, &(0x7f0000000100)=0xad47e17a14ae4701, 0x112) r8 = syz_pidfd_open(r0, 0x0) setns(r8, 0x0) 37.359475876s ago: executing program 3 (id=1741): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f00002e6000/0x5000)=nil, 0x5000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x2400c040) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r4 = epoll_create(0x5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000001040500000000000000000000000000050001000100000008000440000000000a00020000000000ae"], 0x30}}, 0x0) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x0, 0x2e0) epoll_create1(0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) 34.903366934s ago: executing program 3 (id=1746): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x20000, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="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", 0x10f}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc5144775062cc7225eacd", 0x47}, {&(0x7f0000001bc0)="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", 0x199}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1e) 12.52480242s ago: executing program 1 (id=1790): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfed7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYBLOB="000000000000bbe9b6080000000000007b8af8ff00000000bfa20001000000000703000000ffffffb703000008000000b70400000000952700000003000000950000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c696f636861727365743d63703837342c726f6469722c636865636b3d7374726963740010000000000000756e695f786c6174653d302c757466383d302c636f6465706167653d3835302c6e66733d6e6f7374616c655f726f2c73686f72746e616d651e77696e6e742c73686f72546e616d653d6c6f7765722c73686f72746e616d653d77696e39352c636865636b3d7200000000010000006f6e756d7461696c3d302c73686f72465851c4e0d5f973746e616d653d6d697865642c696f636861727365743d69736f383835392d362c616c6c6f775f7574696d653d30303030303030303030303030303030303030303737372c0032430ca03e60532ef86b0a9222c8599ca7a085d00d3529cc645673c171bc14b4466b7e68b8b2867f1aae1b157a1dda8f5571fd7758e957f51b9b2556454c6b28c48627d143e5bb5299c51286f540eca523b3ece936d6f9ce829669fc12560b21d77af9c9e4de610283486b0a4b54c90d602daee6152d39400c9484877458a5f59e6e5d1de8dd7ab4543873f463b5a7a7efe9fe9979a18cdd709959c4ae9d241e05999532b07d7db3f5d81526273165dcb2eb211ab900fc9644b8064b7319e2cf5d85c2ad776a958259864dd81275f5c2307479"], 0x1, 0x363, &(0x7f0000001a40)="$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") r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x64000600) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 11.039988959s ago: executing program 0 (id=1792): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000200)=0x2, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f00000004c0)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r1}, 0x14}, 0x1, 0x620b}, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r2, 0x80080400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0xc9c0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc903ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="84", 0x10}], 0x3) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_int(r3, 0x10d, 0x8f, &(0x7f0000000000), &(0x7f0000000240)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x0, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11.039432109s ago: executing program 4 (id=1793): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x18, r5, 0x309, 0x2, 0x0, {0x1d}, [@HEADER={0x4}]}, 0x18}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r6) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000780)={&(0x7f00000005c0), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x38, r7, 0x101, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x20000080) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x503100, 0x0) socket$nl_route(0x10, 0x3, 0x0) 11.02811994s ago: executing program 1 (id=1794): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000200)=0x2, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f00000004c0)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r1}, 0x14}, 0x1, 0x620b}, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r2, 0x80080400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0xc9c0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc903ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="84", 0x10}], 0x3) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_int(r3, 0x10d, 0x8f, &(0x7f0000000000), &(0x7f0000000240)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x0, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 9.451877458s ago: executing program 0 (id=1796): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x20000, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="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", 0x110}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc5144775062cc7225eacd", 0x47}, {&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb06b243625a8a9e4ee52e7c2ec4d63241fb00efd1a485a36dfb4a7dd573c6584c4afc55b3ff0a93509fe41aa0e8892c95ccad3e0435071aff78177e946cf231de4f389b695c5f49772b8abb6b88226fd4c2b0c57d47b98f2aa1b2ec38c4a97f3783023f04cdb380dd6a00d2fc63c932a9876863728e1fcb245109713c16375ffc68b041b86f737c41233cf2a05e51699db6a0e3c4b82b9ca613bea89cefd2ace608e361379b1aeefb75d0aa2db26dcddc9365a8c02f49af78aa6b41599fa501f9b96824bed5cff2028bb06f3852e69b3e58b659606b7ff7e282473701c95f1da7e742b76392f90a89c65577415c62e2b495", 0x199}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1e) 9.451184117s ago: executing program 2 (id=1797): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x20000, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="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", 0x110}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc5144775062cc7225eacd", 0x47}, {&(0x7f0000001bc0)="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", 0x199}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1e) 7.783073272s ago: executing program 0 (id=1798): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x20000, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2", 0xee}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc5144775062cc7225eacd", 0x47}, {&(0x7f0000001bc0)="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", 0x199}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1e) 7.782130052s ago: executing program 1 (id=1799): socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r3, @ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x44}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x44b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) r6 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000200)=ANY=[@ANYBLOB="f3cb5698"], 0x2, 0x0) dup3(r6, r1, 0x0) finit_module(r6, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 7.781533512s ago: executing program 2 (id=1800): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x20000, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="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", 0x110}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc5144775062cc7225eacd", 0x47}, {&(0x7f0000001bc0)="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", 0x199}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1e) 7.780063173s ago: executing program 4 (id=1801): syz_mount_image$vfat(0x0, &(0x7f0000000340)='.\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) munlockall() write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0xa) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r6, 0x8008700b, &(0x7f0000002040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="08010000ff0000"], 0x138) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r8) close(r8) 5.966922218s ago: executing program 0 (id=1802): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x56, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac052a0200000000000109022400010000000009040000010300020009210000f60122000009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200108"], 0x0}) syz_usb_control_io(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000100)=""/252, 0xfc) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0xb0, 0x0, 0x0, [{{0x5}, {0x0, 0x0, 0x1, 0x0, '.'}}]}, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x40}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfe00}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x9}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xbc}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1ff}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40811}, 0x88c0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, 0x0) 5.963710409s ago: executing program 1 (id=1803): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in=@rand_addr=0x64010102, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@private, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={0x0, 0x58}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x300, 0x70bd29, 0x5dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) fcntl$setstatus(r3, 0x4, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) unshare(0x22020400) read$FUSE(r4, &(0x7f0000001e80)={0x2020}, 0x2062) accept4$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c, 0x0) finit_module(0xffffffffffffffff, &(0x7f00000002c0)='/dev/ptmx\x00', 0x3) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) socket(0x200000000000011, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904002c11018b75000905836dc6"], 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x4000000, 0x0) 5.962975379s ago: executing program 2 (id=1804): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfed7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYBLOB="000000000000bbe9b6080000000000007b8af8ff00000000bfa20001000000000703000000ffffffb703000008000000b70400000000952700000003000000950000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x363, &(0x7f0000001a40)="$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") r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) unshare(0x64000600) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 5.94694873s ago: executing program 4 (id=1805): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000200)=0x2, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f00000004c0)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r1}, 0x14}, 0x1, 0x620b}, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r2, 0x80080400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0xc9c0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc903ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="84", 0x10}], 0x3) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_int(r3, 0x10d, 0x8f, &(0x7f0000000000), &(0x7f0000000240)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x0, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.070735861s ago: executing program 2 (id=1806): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x20000, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="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", 0x110}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc5144775062cc7225eacd", 0x47}, {&(0x7f0000001bc0)="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", 0x199}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1e) 4.070118992s ago: executing program 4 (id=1807): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b707000008000000850000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000100000000400000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000000bb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) write$P9_RRENAMEAT(r4, &(0x7f00000000c0)={0x7}, 0x7) fcntl$setstatus(r4, 0x4, 0x7c00) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000000)='5', 0xfdef}], 0x1) dup3(r5, r4, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000e50601"], 0x14}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) write(r1, &(0x7f0000000540)="95", 0x1) mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 2.077547682s ago: executing program 0 (id=1808): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000200)=0x2, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f00000004c0)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r1}, 0x14}, 0x1, 0x620b}, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r2, 0x80080400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0xc9c0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc903ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="84", 0x10}], 0x3) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_int(r3, 0x10d, 0x8f, &(0x7f0000000000), &(0x7f0000000240)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x0, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 2.074672992s ago: executing program 1 (id=1809): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x20000, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="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", 0x110}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc5144775062cc7225eacd", 0x47}, {&(0x7f0000001bc0)="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", 0x199}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1e) 2.074265133s ago: executing program 2 (id=1810): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x20000, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="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", 0x110}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc5144775062cc7225eacd", 0x47}, {&(0x7f0000001bc0)="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", 0x199}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1e) 2.073593132s ago: executing program 4 (id=1811): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x20000, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="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", 0xff}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc5144775062cc7225eacd", 0x47}, {&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb06b243625a8a9e4ee52e7c2ec4d63241fb00efd1a485a36dfb4a7dd573c6584c4afc55b3ff0a93509fe41aa0e8892c95ccad3e0435071aff78177e946cf231de4f389b695c5f49772b8abb6b88226fd4c2b0c57d47b98f2aa1b2ec38c4a97f3783023f04cdb380dd6a00d2fc63c932a9876863728e1fcb245109713c16375ffc68b041b86f737c41233cf2a05e51699db6a0e3c4b82b9ca613bea89cefd2ace608e361379b1aeefb75d0aa2db26dcddc9365a8c02f49af78aa6b41599fa501f9b96824bed5cff2028bb06f3852e69b3e58b659606b7ff7e282473701c95f1da7e742b76392f90a89c65577415c62e2b495", 0x199}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1e) 22.253528ms ago: executing program 0 (id=1812): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x80004508, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x27a, &(0x7f0000000540)="$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") r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) utimes(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x208e24b) rmdir(&(0x7f0000000180)='./file0/../file0\x00') syz_usb_control_io$hid(r0, 0x0, 0x0) 21.794528ms ago: executing program 1 (id=1813): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbc, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c200000000000000000086dd602a80c900462f00fe880000000000000000000000000001fe8000"/51], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) close_range(r8, 0xffffffffffffffff, 0x0) 21.482658ms ago: executing program 2 (id=1814): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x20000, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="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", 0x110}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc5144775062cc7225eacd", 0x47}, {&(0x7f0000001bc0)="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", 0x199}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1e) 0s ago: executing program 4 (id=1821): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000240)='./file0/file0\x00', 0x50, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRES16, @ANYRES64, @ANYRES64=0x0, @ANYRES8=0x0], 0x1, 0x71e, &(0x7f0000001cc0)="$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") openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) madvise(&(0x7f00002cf000/0x2000)=nil, 0x2000, 0x64) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x411, &(0x7f0000000500)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@usrjquota}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x5, 0x646, &(0x7f0000000a80)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0xf8, 0x6, 0x9, 0x0, 0x5, 0xc4, 0xa, 0x9, 0x4, 0x6, 0x6, 0x4, 0x0, 0xf8, 0x1, 0x4, 0x6, 0xd2, 0xd, '\x00', 0x9, 0x5ae}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) kernel console output (not intermixed with test programs): ouch 3-1:0.0: Geyser mode initialized. [ 893.215507][ T9001] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38 [ 893.296908][T11483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.303900][T11483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.429213][ T22] usb 5-1: USB disconnect, device number 24 [ 893.454870][T11483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.455602][ T22] ftdi_sio 5-1:0.125: device disconnected [ 893.483903][ T7783] udevd[7783]: Error opening device "/dev/input/event4": Input/output error [ 893.512168][ T7783] udevd[7783]: Unable to EVIOCGABS device "/dev/input/event4" [ 893.535533][T11483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.554058][ T7783] udevd[7783]: Unable to EVIOCGABS device "/dev/input/event4" [ 893.561682][T11483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.628773][T11483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.935129][T11483] device hsr_slave_0 entered promiscuous mode [ 893.944037][T11483] device hsr_slave_1 entered promiscuous mode [ 893.950971][T11483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 893.962668][T11483] Cannot create hsr debugfs directory [ 893.996708][T11485] Bluetooth: hci3: command tx timeout [ 894.032487][T11515] 9pnet_fd: Insufficient options for proto=fd [ 894.592232][ C0] eth0: bad gso: type: 1, size: 1408 [ 894.861636][T11517] loop4: detected capacity change from 0 to 4096 [ 894.887123][T11517] __ntfs_warning: 47 callbacks suppressed [ 894.887140][T11517] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 895.002516][T11483] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.056843][ T3712] usb 3-1: USB disconnect, device number 25 [ 895.689454][ T6569] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 895.939256][T11517] ntfs: (device loop4): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 895.952928][ T3712] appletouch 3-1:0.0: input: appletouch disconnected [ 896.348840][ T3643] Bluetooth: hci3: command tx timeout [ 896.847802][T11517] ntfs: volume version 3.1. [ 896.983535][ T6569] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.007764][T11483] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.048926][ T6569] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.072724][T11517] 9pnet_fd: Insufficient options for proto=fd [ 897.085024][ T6569] usb 4-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 897.103713][ T6569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.129145][ T6569] usb 4-1: config 0 descriptor?? [ 897.339749][T11483] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.902035][T11483] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.963161][ T6569] wacom 0003:056A:0325.0010: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.3-1/input0 [ 898.173556][ T6569] usb 4-1: USB disconnect, device number 25 [ 898.264977][ T3712] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 898.797144][ T3643] Bluetooth: hci3: command tx timeout [ 899.275305][T11553] ip6t_rpfilter: unknown options [ 900.065141][ T3712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.085153][ T3712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.117246][ T3712] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 900.136729][ T3712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.955357][T11485] Bluetooth: hci3: command tx timeout [ 901.362790][T11483] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 901.467555][ T3712] usb 3-1: config 0 descriptor?? [ 901.496963][ T3712] usb 3-1: can't set config #0, error -71 [ 901.503827][ T3712] usb 3-1: USB disconnect, device number 26 [ 901.537694][T11483] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 901.866075][T11575] loop3: detected capacity change from 0 to 1024 [ 903.912715][T11483] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 903.923650][T11483] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 903.941667][T11575] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 905.171891][T10985] EXT4-fs (loop3): unmounting filesystem. [ 905.256616][T11602] loop4: detected capacity change from 0 to 1024 [ 906.082714][T11610] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 906.096782][T11610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 906.106592][T11610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 908.482568][T11483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.717563][T11483] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.188069][T11629] 9pnet_virtio: no channels available for device syz [ 909.238588][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 909.255676][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 909.263877][T11629] overlayfs: overlapping lowerdir path [ 909.310361][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 909.325446][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 909.348693][ T3726] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.355840][ T3726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.400868][T11638] loop3: detected capacity change from 0 to 256 [ 909.506015][T11639] loop2: detected capacity change from 0 to 1024 [ 909.538948][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 910.002784][T11638] FAT-fs (loop3): Directory bread(block 64) failed [ 910.066997][T11638] FAT-fs (loop3): Directory bread(block 65) failed [ 910.278512][T11638] FAT-fs (loop3): Directory bread(block 66) failed [ 910.302949][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 910.315213][T11638] FAT-fs (loop3): Directory bread(block 67) failed [ 910.322734][ T7858] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 910.323001][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 910.347984][T11638] FAT-fs (loop3): Directory bread(block 68) failed [ 910.370306][T11638] FAT-fs (loop3): Directory bread(block 69) failed [ 910.399200][T11638] FAT-fs (loop3): Directory bread(block 70) failed [ 910.410307][T11639] loop2: detected capacity change from 0 to 8 [ 910.432902][T11638] FAT-fs (loop3): Directory bread(block 71) failed [ 910.444201][T11638] FAT-fs (loop3): Directory bread(block 72) failed [ 910.452225][T11638] FAT-fs (loop3): Directory bread(block 73) failed [ 910.528001][ T3726] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.535222][ T3726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.650713][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 910.807870][T11646] device batadv_slave_1 entered promiscuous mode [ 910.893450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 910.959468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 910.993547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 911.023232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 911.226725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 911.512948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 911.584509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 912.321633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 913.549367][T11665] loop3: detected capacity change from 0 to 4096 [ 913.562165][T11665] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 913.583563][T11634] device batadv_slave_1 left promiscuous mode [ 913.608025][T11483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 913.683358][T11483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 913.703429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 913.722470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 913.775353][ T14] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 913.935568][T11665] ntfs: (device loop3): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 914.235021][T11665] ntfs: volume version 3.1. [ 914.547707][T11665] 9pnet_fd: Insufficient options for proto=fd [ 914.795955][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 914.807555][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024 [ 914.819292][ T9259] device hsr_slave_0 left promiscuous mode [ 914.845410][ T9259] device hsr_slave_1 left promiscuous mode [ 914.984083][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.061531][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.141140][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.179138][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.274335][ T9259] device bridge_slave_1 left promiscuous mode [ 915.330151][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.427517][ T9259] device bridge_slave_0 left promiscuous mode [ 915.515472][ T14] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 915.524585][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.544929][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.618744][ T14] usb 1-1: config 0 descriptor?? [ 915.671404][ T9259] device veth1_macvtap left promiscuous mode [ 915.737140][ T9259] device veth0_macvtap left promiscuous mode [ 915.743289][ T9259] device veth1_vlan left promiscuous mode [ 915.784033][ T9259] device veth0_vlan left promiscuous mode [ 915.873594][T11685] loop3: detected capacity change from 0 to 256 [ 915.880404][T11685] FAT-fs (loop3): Unrecognized mount option "18446744073709551615ÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿÿÿÿ18446744073709551615t‹ˆìä;×s™í·›nŒóÎE±sT]&QBÐç‡åÅÅ)A©êÏú Cô ß¾²Û\\nuâÐÕ–Ì\Udèڋõ„ŽNe Ñ&_œ&RÊF:Ü×\~NŠ‘" or missing value [ 916.694925][ T14] appletouch 1-1:0.0: Geyser mode initialized. [ 916.708810][ T14] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input42 [ 916.816105][T11692] loop2: detected capacity change from 0 to 256 [ 916.944105][ T946] usb 1-1: USB disconnect, device number 15 [ 916.951737][T11692] FAT-fs (loop2): Directory bread(block 64) failed [ 916.975514][T11692] FAT-fs (loop2): Directory bread(block 65) failed [ 916.984423][T11692] FAT-fs (loop2): Directory bread(block 66) failed [ 917.007910][ T946] appletouch 1-1:0.0: input: appletouch disconnected [ 917.012523][T11511] udevd[11511]: Error opening device "/dev/input/event4": No such device [ 917.055723][T11511] udevd[11511]: Unable to EVIOCGABS device "/dev/input/event4" [ 917.059630][T11692] FAT-fs (loop2): Directory bread(block 67) failed [ 917.063497][T11511] udevd[11511]: Unable to EVIOCGABS device "/dev/input/event4" [ 917.073983][T11692] FAT-fs (loop2): Directory bread(block 68) failed [ 917.120647][T11692] FAT-fs (loop2): Directory bread(block 69) failed [ 917.148707][T11692] FAT-fs (loop2): Directory bread(block 70) failed [ 917.160453][T11696] loop4: detected capacity change from 0 to 512 [ 917.184984][T11692] FAT-fs (loop2): Directory bread(block 71) failed [ 917.197066][T11692] FAT-fs (loop2): Directory bread(block 72) failed [ 917.209913][T11692] FAT-fs (loop2): Directory bread(block 73) failed [ 918.109736][T11696] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 918.126819][T11696] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 918.746661][T11711] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1530'. [ 918.758322][ T3643] Bluetooth: hci4: command 0x0406 tx timeout [ 918.839267][T11710] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1530: Directory hole found for htree leaf block 0 [ 920.155611][T11057] EXT4-fs (loop4): unmounting filesystem. [ 920.163694][ T9259] team0 (unregistering): Port device team_slave_1 removed [ 920.284384][T11718] loop3: detected capacity change from 0 to 512 [ 920.292988][ T9259] team0 (unregistering): Port device team_slave_0 removed [ 920.328229][T11718] EXT4-fs: Ignoring removed bh option [ 921.070200][T11718] EXT4-fs: Mount option(s) incompatible with ext3 [ 921.160435][ T7858] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 921.190675][ T9259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 921.228477][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.256080][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.263633][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.272234][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.280351][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.288061][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.296038][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.303606][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.313493][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.322798][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.334890][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.342342][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.363356][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.370876][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.378470][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.385970][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.401644][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.413431][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.420936][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.429589][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.437084][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.445506][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.464065][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.474236][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.491640][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.495124][ T3712] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 921.499656][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.514432][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.544811][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.552262][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.575006][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.582443][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.598328][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.606684][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.614095][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.621545][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.629028][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.636484][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.643880][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.651322][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.658770][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.666219][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.673616][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.681089][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.688529][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.695970][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.703883][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.711349][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.718778][ T6980] hid-generic 0000:0000:0003.0011: unknown main item tag 0x0 [ 921.743129][ T6980] hid-generic 0000:0000:0003.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 921.803809][ T9259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 921.862132][T11727] loop3: detected capacity change from 0 to 128 [ 921.871074][ T3712] usb 5-1: config index 0 descriptor too short (expected 65535, got 36) [ 921.884035][ T3712] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 921.906144][ T3712] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 921.924292][ T3712] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 921.934347][ T3712] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 921.950496][ T3712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.032079][ T26] audit: type=1800 audit(1723827808.366:565): pid=11728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1537" name="file0" dev="loop3" ino=1048861 res=0 errno=0 [ 922.103400][T11728] Option 'â`Ý`aìö O-0`žf' to dns_resolver key: bad/missing value [ 922.806907][ C0] eth0: bad gso: type: 1, size: 1408 [ 922.910812][ T3712] usb 5-1: USB disconnect, device number 25 [ 923.869970][T11739] loop4: detected capacity change from 0 to 64 [ 924.080017][ T9259] bond0 (unregistering): Released all slaves [ 924.225413][T11714] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1533'. [ 924.288070][ T41] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 924.454140][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 924.472895][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 924.496984][T11483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.533057][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 924.561618][T11746] loop2: detected capacity change from 0 to 2048 [ 924.573776][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 924.649222][T11746] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 924.673123][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 924.681738][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 924.692105][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 924.700238][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 924.713498][T11483] device veth0_vlan entered promiscuous mode [ 924.855627][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 924.868442][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024 [ 924.883902][ T41] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 924.919581][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.015960][ T41] usb 4-1: config 0 descriptor?? [ 925.328255][T11483] device veth1_vlan entered promiscuous mode [ 925.471264][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 925.526850][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 925.540747][ T41] appletouch 4-1:0.0: Geyser mode initialized. [ 925.546610][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 925.602840][T11483] device veth0_macvtap entered promiscuous mode [ 926.254664][ T41] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input43 [ 926.265851][T11483] device veth1_macvtap entered promiscuous mode [ 926.268306][ T41] usb 4-1: USB disconnect, device number 26 [ 926.328401][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 926.343445][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 926.399156][T11483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.456950][ T7858] udevd[7858]: Error opening device "/dev/input/event4": No such file or directory [ 926.466939][ T7858] udevd[7858]: Unable to EVIOCGABS device "/dev/input/event4" [ 926.474508][ T7858] udevd[7858]: Unable to EVIOCGABS device "/dev/input/event4" [ 926.504808][T11483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.537060][T11483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.549730][T11483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.570519][T11483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.610719][T11483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.645926][T11483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.673430][ T14] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 926.757653][T11483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.905044][ T41] appletouch 4-1:0.0: input: appletouch disconnected [ 926.969929][T11483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 927.188082][T11483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 927.315287][T11483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.385020][T11483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 927.416591][T11483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.419303][T10142] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 927.434752][T11483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 927.434772][T11483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.434787][T11483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 927.470365][T10142] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 927.494771][T11483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.524293][T11483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 927.560235][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 927.604988][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 927.611646][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 927.632471][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 927.652740][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 928.133352][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 928.150141][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.163198][ T14] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 928.175116][ T14] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 928.177436][T11483] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.185368][ T14] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 928.214331][T11483] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.224823][T11483] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.233595][T11483] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.340566][ T3751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.355115][ T14] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 928.368478][ T3751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.378138][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.413125][ T14] usb 1-1: Product: syz [ 928.445995][ T14] usb 1-1: Manufacturer: syz [ 928.448872][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 928.454156][ T14] usb 1-1: SerialNumber: syz [ 928.474903][ T9243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.499803][ T9243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.541813][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 928.825065][ T14] cdc_ncm 1-1:1.0: bind() failure [ 928.845769][ T14] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 928.862867][ T14] cdc_ncm 1-1:1.1: bind() failure [ 928.900699][ T14] usb 1-1: USB disconnect, device number 16 [ 929.798264][T11794] loop3: detected capacity change from 0 to 1024 [ 929.846700][T11794] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 929.874918][ T3682] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 930.122070][ T3643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 930.481115][ T3646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 930.494674][ T3643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 930.520514][ T3643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 930.539759][ T3643] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 930.551452][ T3643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 930.655100][ T3682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.704804][ T3682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 930.781346][ T3682] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 930.824604][ T3682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.864805][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1557'. [ 930.888481][ T3682] usb 2-1: config 0 descriptor?? [ 930.905411][T10985] EXT4-fs (loop3): unmounting filesystem. [ 930.967094][T11803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1557'. [ 931.028712][T11803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1557'. [ 931.061555][T11805] loop3: detected capacity change from 0 to 16 [ 931.091891][T11805] erofs: (device loop3): mounted with root inode @ nid 36. [ 931.212545][T11788] loop4: detected capacity change from 0 to 32768 [ 931.265406][T11788] XFS: ikeep mount option is deprecated. [ 931.287025][T11798] chnl_net:caif_netlink_parms(): no params data found [ 931.297785][T11811] x_tables: ip_tables: socket.2 match: invalid size 8 (kernel) != (user) 568 [ 931.318032][T11811] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1559'. [ 931.337665][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1559'. [ 931.381170][ T3682] appletouch 2-1:0.0: Geyser mode initialized. [ 931.400015][T11788] XFS (loop4): Mounting V5 Filesystem [ 931.415028][ T3682] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input44 [ 931.517113][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.530031][T11788] XFS (loop4): Ending clean mount [ 931.550306][T11788] XFS (loop4): Quotacheck needed: Please wait. [ 931.559382][ T7783] udevd[7783]: Error opening device "/dev/input/event4": Input/output error [ 931.588956][ T7783] udevd[7783]: Unable to EVIOCGABS device "/dev/input/event4" [ 931.608549][ T7783] udevd[7783]: Unable to EVIOCGABS device "/dev/input/event4" [ 931.620528][T11798] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.632007][ T7783] udevd[7783]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 931.676934][T11798] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.694964][T11798] device bridge_slave_0 entered promiscuous mode [ 931.717182][T11788] XFS (loop4): Quotacheck: Done. [ 931.722867][ T3091] udevd[3091]: worker [7783] terminated by signal 6 (Aborted) [ 931.736732][T11829] loop3: detected capacity change from 0 to 8 [ 931.751459][T11798] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.754748][ T3682] usb 2-1: USB disconnect, device number 26 [ 931.758879][ T3091] udevd[3091]: worker [7783] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input44/event4' [ 931.810516][T11798] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.849408][T11798] device bridge_slave_1 entered promiscuous mode [ 931.850047][ T3682] appletouch 2-1:0.0: input: appletouch disconnected [ 932.191421][ T6983] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 932.311018][T11798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.350234][T11798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.377921][T11829] SQUASHFS error: lzo decompression failed, data probably corrupt [ 932.407411][T11829] SQUASHFS error: Failed to read block 0x0: -5 [ 932.453014][T11798] team0: Port device team_slave_0 added [ 932.474029][T11798] team0: Port device team_slave_1 added [ 932.479934][T11829] SQUASHFS error: lzo decompression failed, data probably corrupt [ 932.499653][T11829] SQUASHFS error: Failed to read block 0x0: -5 [ 932.511961][ T26] audit: type=1800 audit(1723827818.856:566): pid=11829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1561" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 932.547241][T11798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.554650][T11798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.558091][T11057] XFS (loop4): Unmounting Filesystem [ 932.591613][T11798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.605612][ T6983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 932.625176][ T6983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024 [ 932.642668][ T6983] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 932.643796][T11798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.664209][T11798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.690525][T11798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.712355][ T6983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.720883][ T3643] Bluetooth: hci2: command tx timeout [ 932.747172][ T6983] usb 1-1: config 0 descriptor?? [ 932.890364][T11798] device hsr_slave_0 entered promiscuous mode [ 932.950193][T11798] device hsr_slave_1 entered promiscuous mode [ 932.970826][T11798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 932.978826][T11798] Cannot create hsr debugfs directory [ 933.215077][ T6983] appletouch 1-1:0.0: Geyser mode initialized. [ 933.222369][ T6983] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input45 [ 933.567688][T11798] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.623363][T11838] loop4: detected capacity change from 0 to 256 [ 933.712410][T11838] FAT-fs (loop4): Directory bread(block 64) failed [ 933.738534][T11838] FAT-fs (loop4): Directory bread(block 65) failed [ 933.763636][T11838] FAT-fs (loop4): Directory bread(block 66) failed [ 933.791568][T11838] FAT-fs (loop4): Directory bread(block 67) failed [ 933.811277][T11838] FAT-fs (loop4): Directory bread(block 68) failed [ 933.835304][T11838] FAT-fs (loop4): Directory bread(block 69) failed [ 933.875311][T11838] FAT-fs (loop4): Directory bread(block 70) failed [ 933.890172][T11838] FAT-fs (loop4): Directory bread(block 71) failed [ 933.895434][T11798] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.925022][T11838] FAT-fs (loop4): Directory bread(block 72) failed [ 933.975049][T11838] FAT-fs (loop4): Directory bread(block 73) failed [ 934.238527][T11798] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.554350][T11798] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.911070][ T3643] Bluetooth: hci2: command tx timeout [ 935.395651][ T6980] usb 1-1: USB disconnect, device number 17 [ 935.527691][ T6980] appletouch 1-1:0.0: input: appletouch disconnected [ 935.626625][T11853] loop3: detected capacity change from 0 to 256 [ 936.123275][T11853] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 936.233349][T11798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 936.335368][T11798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 936.489530][T11798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 936.964910][ T3643] Bluetooth: hci2: command tx timeout [ 937.144951][T11798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 937.594959][T11798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.648322][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 937.655803][ T6980] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 937.695490][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 937.729967][T11798] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.769247][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 937.800068][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 937.821153][ T9232] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.828335][ T9232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.866284][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 937.899936][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 937.925403][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 937.965508][ T9232] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.972632][ T9232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.016675][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 938.058575][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 938.091590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 938.100122][ T6980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.141673][ T6980] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 938.161923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 938.174896][ T3680] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 938.181590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 938.197375][ T6980] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 938.229075][ T6980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.255323][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 938.269768][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 938.285733][ T6980] usb 1-1: config 0 descriptor?? [ 938.295948][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 938.307833][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 938.333369][T11798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 938.350695][T11877] loop4: detected capacity change from 0 to 1024 [ 938.372896][T11798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 938.392659][T11877] hfsplus: extend alloc file! (8192,65536,366) [ 938.403190][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 938.412702][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 938.552645][T11485] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 938.565379][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.566022][T11485] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 938.584826][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.595226][T11485] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 938.607093][ T3680] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 938.616837][T11485] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 938.627350][T11485] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 938.635111][T11485] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 938.658328][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.710925][ T3680] usb 2-1: config 0 descriptor?? [ 938.862842][T11798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 938.880976][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 938.888685][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 938.958715][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 938.975769][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 939.000007][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 939.015629][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 939.035163][T11485] Bluetooth: hci2: command tx timeout [ 939.036716][ T14] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 939.063360][T11798] device veth0_vlan entered promiscuous mode [ 939.070692][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 939.102914][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 939.122910][T11798] device veth1_vlan entered promiscuous mode [ 939.134094][T11880] chnl_net:caif_netlink_parms(): no params data found [ 939.195635][ T3680] appletouch 2-1:0.0: Geyser mode initialized. [ 939.205876][ T3680] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input46 [ 939.254706][ T6980] usbhid 1-1:0.0: can't add hid device: -71 [ 939.261191][ T6980] usbhid: probe of 1-1:0.0 failed with error -71 [ 939.269670][ T6980] usb 1-1: USB disconnect, device number 18 [ 939.308333][ T9259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.320277][T11511] udevd[11511]: Error opening device "/dev/input/event4": Input/output error [ 939.330291][T11511] udevd[11511]: Unable to EVIOCGABS device "/dev/input/event4" [ 939.338416][T11511] udevd[11511]: Unable to EVIOCGABS device "/dev/input/event4" [ 939.351108][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 939.359667][T11511] udevd[11511]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 939.366811][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 939.380326][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 939.389644][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 939.399367][T11798] device veth0_macvtap entered promiscuous mode [ 939.409948][ T3091] udevd[3091]: worker [11511] terminated by signal 6 (Aborted) [ 939.426519][ T3091] udevd[3091]: worker [11511] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input46/event4' [ 939.445090][ T14] usb 5-1: config 0 has an invalid interface number: 185 but max is 0 [ 939.453310][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 939.463548][ T14] usb 5-1: config 0 has no interface number 0 [ 939.469721][ T14] usb 5-1: config 0 interface 185 has no altsetting 0 [ 939.476696][ T14] usb 5-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 939.486147][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.488340][T11798] device veth1_macvtap entered promiscuous mode [ 939.495840][ T14] usb 5-1: config 0 descriptor?? [ 939.545227][ T9259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.559104][ T14] rndis_wlan 5-1:0.185: skipping garbage [ 939.568071][ T14] rndis_wlan 5-1:0.185: skipping garbage [ 939.569276][T11880] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.573725][ T14] usb 5-1: bad CDC descriptors [ 939.581745][T11880] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.594275][T11880] device bridge_slave_0 entered promiscuous mode [ 939.605273][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 939.618469][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 939.629147][ T14] rndis_host 5-1:0.185: skipping garbage [ 939.635002][ T14] rndis_host 5-1:0.185: skipping garbage [ 939.640702][ T14] usb 5-1: bad CDC descriptors [ 939.646684][ T14] option 5-1:0.185: GSM modem (1-port) converter detected [ 939.695727][ T9259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.716608][T11880] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.723733][T11880] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.735098][T11880] device bridge_slave_1 entered promiscuous mode [ 939.760399][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 939.776584][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.787135][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 939.804960][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.815491][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 939.833386][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.856222][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 939.867033][T11877] loop4: detected capacity change from 0 to 256 [ 939.880735][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.891846][ T3625] usb 5-1: USB disconnect, device number 26 [ 939.892716][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 939.901601][ T3625] option 5-1:0.185: device disconnected [ 939.950830][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.259440][T11798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.674153][T11880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.706042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 940.715062][T11485] Bluetooth: hci1: command tx timeout [ 940.734253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 940.793404][T11902] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 940.798953][ T9259] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.831276][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.844839][ T3625] usb 2-1: USB disconnect, device number 27 [ 940.856862][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.868178][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.879263][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.889473][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.900183][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.910375][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.921191][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.932007][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.942647][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.960488][ T3625] appletouch 2-1:0.0: input: appletouch disconnected [ 940.974291][T11798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.998432][T11880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.015221][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 941.028357][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 941.096975][T11798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.130703][T11798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.140861][T11798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.143368][T11907] sctp: [Deprecated]: syz.1.1578 (pid 11907) Use of int in max_burst socket option. [ 941.143368][T11907] Use struct sctp_assoc_value instead [ 941.166780][T11798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.211379][T11906] overlayfs: failed to resolve './file0': -2 [ 941.219834][T11880] team0: Port device team_slave_0 added [ 942.216709][T11880] team0: Port device team_slave_1 added [ 942.266539][T11919] loop1: detected capacity change from 0 to 512 [ 942.360349][T11919] EXT4-fs (loop1): 1 orphan inode deleted [ 942.375788][T11880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.435154][T11880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.483736][T11919] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 942.549727][T11880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.560689][T11919] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 942.567821][T11929] netlink: 'syz.4.1583': attribute type 2 has an invalid length. [ 942.587416][T11880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.604876][T11880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.669467][T11929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'. [ 942.721334][T11880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.875013][T11485] Bluetooth: hci1: command tx timeout [ 943.424424][ C0] eth0: bad gso: type: 1, size: 1408 [ 943.550517][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.577953][T11880] device hsr_slave_0 entered promiscuous mode [ 943.589600][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.600667][T11880] device hsr_slave_1 entered promiscuous mode [ 943.620764][T11880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 943.670896][T11483] EXT4-fs (loop1): unmounting filesystem. [ 944.446545][T11880] Cannot create hsr debugfs directory [ 944.955429][ T3643] Bluetooth: hci1: command tx timeout [ 945.452892][ T946] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 945.505450][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 945.552896][T11961] loop1: detected capacity change from 0 to 128 [ 945.575919][T11961] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 945.588434][T11961] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 945.791162][ T3726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.802728][ T3726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.935481][ T946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.965686][ T946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.018627][ T946] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 946.063045][ T946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.156215][ T946] usb 5-1: config 0 descriptor?? [ 946.470454][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 946.623799][T11969] program syz.1.1588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 946.664644][T11971] loop2: detected capacity change from 0 to 1764 [ 946.669903][ T946] appletouch 5-1:0.0: Geyser mode initialized. [ 946.684577][ T946] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input47 [ 946.689071][T11969] Cannot find add_set index 0 as target [ 946.727964][ T7858] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 946.756016][T11969] loop1: detected capacity change from 0 to 64 [ 946.968192][T11908] udevd[11908]: Error opening device "/dev/input/event4": Input/output error [ 946.985787][T11908] udevd[11908]: Unable to EVIOCGABS device "/dev/input/event4" [ 947.004445][T11908] udevd[11908]: Unable to EVIOCGABS device "/dev/input/event4" [ 947.035260][ T3643] Bluetooth: hci1: command tx timeout [ 947.132611][ T946] usb 5-1: USB disconnect, device number 27 [ 947.183637][ T946] appletouch 5-1:0.0: input: appletouch disconnected [ 948.791599][ T6983] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 948.936790][T11991] loop1: detected capacity change from 0 to 512 [ 949.060683][T11991] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1591: casefold flag without casefold feature [ 949.094216][T11991] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.1591: missing EA_INODE flag [ 949.121384][T11991] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1591: error while reading EA inode 2 err=-117 [ 949.166262][T11991] EXT4-fs (loop1): 1 orphan inode deleted [ 949.172057][T11991] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 949.263501][T11991] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1591: Directory hole found for htree leaf block 0 [ 949.289538][T11991] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.1591: Directory hole found for htree leaf block 0 [ 949.293958][T11998] loop2: detected capacity change from 0 to 128 [ 949.388992][T11998] EXT4-fs (loop2): Test dummy encryption mode enabled [ 949.470873][T11998] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 949.494356][T11998] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038 (0x7fffffff) [ 949.535724][ T6983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 949.547433][ T6983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024 [ 949.560445][ T6983] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 949.569600][ T6983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.580355][ T6983] usb 1-1: config 0 descriptor?? [ 949.600153][T11998] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 949.642297][ T9259] device hsr_slave_0 left promiscuous mode [ 949.675138][ T9259] device hsr_slave_1 left promiscuous mode [ 949.703749][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 949.724991][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.775806][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 949.783312][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.900327][ T9259] device bridge_slave_1 left promiscuous mode [ 949.907094][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.460985][ T6983] appletouch 1-1:0.0: Geyser mode initialized. [ 951.485238][ T6983] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input48 [ 951.535268][ T9259] device bridge_slave_0 left promiscuous mode [ 951.541560][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.558987][T11798] EXT4-fs (loop2): unmounting filesystem. [ 951.611785][T12022] loop4: detected capacity change from 0 to 512 [ 951.701676][ T9259] device veth1_macvtap left promiscuous mode [ 951.723005][ T9259] device veth0_macvtap left promiscuous mode [ 951.729425][T12025] netlink: 'syz.2.1595': attribute type 1 has an invalid length. [ 951.745164][T12022] loop4: detected capacity change from 0 to 128 [ 951.752148][ T9259] device veth1_vlan left promiscuous mode [ 951.762114][T12022] UDF-fs: bad mount option "00000000000000000003" or missing value [ 951.772488][ T3643] Bluetooth: hci2: SCO packet for unknown connection handle 4040 [ 951.772612][ T9259] device veth0_vlan left promiscuous mode [ 951.854264][ T7858] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 952.050325][T12025] Bluetooth: MGMT ver 1.22 [ 952.074479][T12025] loop2: detected capacity change from 0 to 512 [ 952.128483][T12036] loop4: detected capacity change from 0 to 1024 [ 952.162199][T11483] EXT4-fs (loop1): unmounting filesystem. [ 952.165351][T12025] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.1595: iget: bad extended attribute block 1 [ 952.235433][T12025] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1595: couldn't read orphan inode 15 (err -117) [ 952.314184][T12036] hfsplus: found bad thread record in catalog [ 952.365292][T12025] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 952.743222][T11057] hfsplus: bad catalog entry type [ 953.726010][ T9259] team0 (unregistering): Port device team_slave_1 removed [ 953.903017][ T9259] team0 (unregistering): Port device team_slave_0 removed [ 953.975671][ T9259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.028686][ T9259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.616821][ T9259] bond0 (unregistering): Released all slaves [ 954.783231][T11798] EXT4-fs (loop2): unmounting filesystem. [ 954.845416][ T6983] usb 1-1: USB disconnect, device number 19 [ 954.929564][T11880] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 954.976417][ T6983] appletouch 1-1:0.0: input: appletouch disconnected [ 954.986142][T11880] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 955.014045][T11880] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 955.037072][T11880] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 955.076247][T10537] Trying to write to read-only block-device loop4 [ 955.241152][T10537] Trying to write to read-only block-device loop4 [ 955.478618][T10537] Trying to write to read-only block-device loop4 [ 955.660696][T10537] Trying to write to read-only block-device loop4 [ 955.784923][ T9001] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 955.809887][T10537] hfsplus: b-tree write err: -5, ino 4 [ 955.821402][T10537] Trying to write to read-only block-device loop4 [ 955.841164][T10537] Trying to write to read-only block-device loop4 [ 955.871256][T10537] Trying to write to read-only block-device loop4 [ 955.878207][T10537] Trying to write to read-only block-device loop4 [ 955.892925][T11057] Trying to write to read-only block-device loop4 [ 955.902165][T11057] Trying to write to read-only block-device loop4 [ 956.010277][T11880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.059694][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 956.085379][ T5148] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 956.094241][ T9232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 956.116285][T11880] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.175031][ T9001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.186418][ T9001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.204871][ T9001] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 956.220111][ T9001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.254433][T10537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 956.266129][T10537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 956.270726][ T9001] usb 1-1: config 0 descriptor?? [ 956.286439][T10537] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.293558][T10537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.331820][T10537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 956.387823][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 956.406464][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 956.421967][T12073] loop2: detected capacity change from 0 to 512 [ 956.446053][ T3751] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.453167][ T3751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.455261][ T5148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.501761][ T5148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.520750][T10537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 956.542371][ T5148] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 956.556106][T10537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 956.583731][ T5148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.595734][T10537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 956.630392][T12073] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 956.643844][ T5148] usb 2-1: config 0 descriptor?? [ 956.647068][T10537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 956.675961][T12073] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 956.696497][T10537] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 956.737730][T10537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 956.758054][T10537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 956.785059][ T9001] appletouch 1-1:0.0: Geyser mode initialized. [ 956.792520][ T9001] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input49 [ 956.795555][T10537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 956.880948][T10537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 956.935817][T10537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 956.945346][T11974] udevd[11974]: Error opening device "/dev/input/event4": Input/output error [ 956.967614][T11974] udevd[11974]: Unable to EVIOCGABS device "/dev/input/event4" [ 956.976181][T10537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 956.998561][T11974] udevd[11974]: Unable to EVIOCGABS device "/dev/input/event4" [ 957.012468][T11485] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 957.025740][T11485] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 957.038015][T11485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 957.049892][T11485] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 957.057847][T11485] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 957.068966][T11485] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 957.186909][ T5148] dragonrise 0003:0079:0006.0012: item fetching failed at offset 2/5 [ 957.225528][ T5148] dragonrise 0003:0079:0006.0012: parse failed [ 957.231758][ T5148] dragonrise: probe of 0003:0079:0006.0012 failed with error -22 [ 957.415274][T12060] fuse: Bad value for 'fd' [ 957.426862][ T5148] usb 2-1: USB disconnect, device number 28 [ 957.513384][T12082] chnl_net:caif_netlink_parms(): no params data found [ 957.672968][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 957.708638][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 957.808737][T11880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.837580][T12082] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.844704][T12082] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.888143][T12082] device bridge_slave_0 entered promiscuous mode [ 957.933338][T12082] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.947696][T12082] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.968270][T12082] device bridge_slave_1 entered promiscuous mode [ 957.989965][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 958.019124][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 958.084589][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 958.103192][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 958.140400][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 958.165592][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 958.200059][ T22] usb 1-1: USB disconnect, device number 20 [ 958.330172][ T22] appletouch 1-1:0.0: input: appletouch disconnected [ 958.351280][T11880] device veth0_vlan entered promiscuous mode [ 958.369930][T11880] device veth1_vlan entered promiscuous mode [ 958.391434][T12082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.649421][ T46] Bluetooth: hci5: Frame reassembly failed (-84) [ 958.838964][T12082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.147046][T11485] Bluetooth: hci0: command tx timeout [ 959.527132][T12082] team0: Port device team_slave_0 added [ 959.883316][T12120] 9pnet: Could not find request transport: xen [ 960.201344][T12082] team0: Port device team_slave_1 added [ 960.248955][T11798] EXT4-fs (loop2): unmounting filesystem. [ 960.266238][T12125] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1610'. [ 960.302192][T12125] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1610'. [ 960.356798][T12082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.363789][T12082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.399993][T12082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.433427][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 960.440720][T12131] loop2: detected capacity change from 0 to 128 [ 960.468800][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 960.495184][ T26] audit: type=1800 audit(1723827846.836:567): pid=12131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1611" name="file0" dev="loop2" ino=1048880 res=0 errno=0 [ 960.537145][T11880] device veth0_macvtap entered promiscuous mode [ 960.545653][T12082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.552631][T12082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.564854][ T26] audit: type=1804 audit(1723827846.866:568): pid=12131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1611" name="/newroot/7/file0/file0" dev="loop2" ino=1048880 res=1 errno=0 [ 960.603107][T12082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.627353][T11880] device veth1_macvtap entered promiscuous mode [ 960.640365][ T26] audit: type=1804 audit(1723827846.866:569): pid=12131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1611" name="/newroot/7/file0/file0" dev="loop2" ino=1048880 res=1 errno=0 [ 960.662045][T11485] Bluetooth: hci5: command 0xfc11 tx timeout [ 960.669343][ T3643] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 960.846890][T12082] device hsr_slave_0 entered promiscuous mode [ 960.895842][ T41] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 960.896176][T12082] device hsr_slave_1 entered promiscuous mode [ 960.970383][T12082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 960.987402][T12082] Cannot create hsr debugfs directory [ 960.995834][T11880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.022536][T11880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.025859][T12143] loop1: detected capacity change from 0 to 2048 [ 961.054901][T11880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.074812][T11880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.109359][T11880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.121415][T11880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.147875][T11880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.181037][T11880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.192379][T11880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.217324][T11880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.240556][T11880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 961.241369][T12143] loop1: detected capacity change from 0 to 128 [ 961.253080][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 961.271237][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 961.278896][ T3643] Bluetooth: hci0: command tx timeout [ 961.300116][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 961.309424][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 961.315009][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.375142][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.395026][ T41] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 961.404141][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.435458][ T41] usb 1-1: config 0 descriptor?? [ 961.450802][T12149] device bond0 entered promiscuous mode [ 961.464864][T12149] device bond_slave_0 entered promiscuous mode [ 961.471245][T12149] device bond_slave_1 entered promiscuous mode [ 961.553459][T11880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.572345][T11880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.592673][T11880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.619120][T11880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.635911][T11880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.662163][T11880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.683196][T11880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.706306][T11880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.731437][T11880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.763399][T11880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.803773][T11880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.875048][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 961.892174][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 961.912177][ T41] appletouch 1-1:0.0: Geyser mode initialized. [ 961.954990][ T41] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input50 [ 961.995212][T12145] device bond0 left promiscuous mode [ 962.010989][T12145] device bond_slave_0 left promiscuous mode [ 962.061904][T12145] device bond_slave_1 left promiscuous mode [ 962.075494][T11974] udevd[11974]: Error opening device "/dev/input/event4": Input/output error [ 962.108967][T11974] udevd[11974]: Unable to EVIOCGABS device "/dev/input/event4" [ 962.125043][T11974] udevd[11974]: Unable to EVIOCGABS device "/dev/input/event4" [ 962.132695][T11974] udevd[11974]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 962.161691][T11880] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.200902][ T3091] udevd[3091]: worker [11974] terminated by signal 6 (Aborted) [ 962.207791][T11880] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.217550][ T3091] udevd[3091]: worker [11974] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input50/event4' [ 962.244945][T11880] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.275833][T11880] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.523282][ T3747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.564128][ T3747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.633961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 962.787442][ T3747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.803429][ T3747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.851380][T12082] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.931325][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 963.000627][T12082] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.214814][ T3625] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 963.399512][ T3646] Bluetooth: hci0: command tx timeout [ 963.439941][T12082] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.580179][T12082] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.480180][ T946] usb 1-1: USB disconnect, device number 21 [ 964.489224][ T3625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.500990][ T3625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.520106][ T3625] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 964.525888][T12190] loop1: detected capacity change from 0 to 1024 [ 964.529490][ T3625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.545538][ T3625] usb 3-1: config 0 descriptor?? [ 964.625741][ T946] appletouch 1-1:0.0: input: appletouch disconnected [ 965.384897][ T26] audit: type=1800 audit(1723827851.696:570): pid=12194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1620" name="file2" dev="loop1" ino=21 res=0 errno=0 [ 965.435101][ T3646] Bluetooth: hci0: command tx timeout [ 965.450848][ T3625] appletouch 3-1:0.0: Geyser mode initialized. [ 965.475574][ T3625] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input51 [ 965.670594][T11908] udevd[11908]: Error opening device "/dev/input/event4": Input/output error [ 965.690171][T12203] loop1: detected capacity change from 0 to 128 [ 965.702815][T12196] input: syz1 as /devices/virtual/input/input52 [ 965.710520][T11908] udevd[11908]: Unable to EVIOCGABS device "/dev/input/event4" [ 965.770987][T11908] udevd[11908]: Unable to EVIOCGABS device "/dev/input/event4" [ 965.781917][ T26] audit: type=1800 audit(1723827852.126:571): pid=12203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1622" name="bus" dev="loop1" ino=1048886 res=0 errno=0 [ 965.812210][T11908] udevd[11908]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 965.950145][T12082] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 966.761306][ T26] audit: type=1326 audit(1723827853.096:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82107799b9 code=0x7fc00000 [ 966.784198][T12082] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 966.917280][ T26] audit: type=1326 audit(1723827853.096:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82107799b9 code=0x7fc00000 [ 966.940736][ T26] audit: type=1326 audit(1723827853.096:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82107799b9 code=0x7fc00000 [ 966.983537][T12082] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 967.130693][T12217] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1623'. [ 967.142975][T12217] ubi1: attaching mtd0 [ 967.151261][T12216] binder: 12211:12216 ioctl 4b49 0 returned -22 [ 968.506511][ T5148] usb 3-1: USB disconnect, device number 27 [ 968.554695][ T5148] appletouch 3-1:0.0: input: appletouch disconnected [ 968.589900][ T26] audit: type=1326 audit(1723827853.096:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82107799b9 code=0x7fc00000 [ 968.617795][T12082] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 968.636386][T12223] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1627'. [ 969.558497][ T26] audit: type=1326 audit(1723827853.096:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82107799b9 code=0x7fc00000 [ 969.629447][ T26] audit: type=1326 audit(1723827853.096:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82107799b9 code=0x7fc00000 [ 969.652347][ T26] audit: type=1326 audit(1723827853.096:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82107799b9 code=0x7fc00000 [ 969.884810][T12232] usb usb8: usbfs: process 12232 (syz.1.1628) did not claim interface 0 before use [ 970.806158][ T26] audit: type=1326 audit(1723827853.096:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82107799b9 code=0x7fc00000 [ 970.873180][ T26] audit: type=1326 audit(1723827853.096:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82107799b9 code=0x7fc00000 [ 970.901128][ T26] audit: type=1326 audit(1723827853.096:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82107799b9 code=0x7fc00000 [ 970.953576][ T26] audit: type=1326 audit(1723827853.096:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82107799b9 code=0x7fc00000 [ 971.230256][ T26] audit: type=1326 audit(1723827853.096:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82107799b9 code=0x7fc00000 [ 972.115329][ T26] audit: type=1326 audit(1723827853.096:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82107799b9 code=0x7fc00000 [ 972.123952][T12252] loop1: detected capacity change from 0 to 164 [ 972.143140][ T26] audit: type=1326 audit(1723827853.096:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82107799b9 code=0x7fc00000 [ 972.279322][ T26] audit: type=1326 audit(1723827853.096:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82107799b9 code=0x7fc00000 [ 972.402361][ T26] audit: type=1326 audit(1723827853.096:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82107799b9 code=0x7fc00000 [ 973.015884][ T26] audit: type=1326 audit(1723827853.096:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.3.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82107799b9 code=0x7fc00000 [ 973.178277][ T9259] device hsr_slave_0 left promiscuous mode [ 973.186836][ T9259] device hsr_slave_1 left promiscuous mode [ 973.203522][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.224443][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.251036][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.261770][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.271566][ T9259] device bridge_slave_1 left promiscuous mode [ 973.279076][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.288589][ T9259] device bridge_slave_0 left promiscuous mode [ 973.295275][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.945946][ T41] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 973.946768][ T3625] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 974.440840][ T9259] device veth1_macvtap left promiscuous mode [ 974.453039][ T9259] device veth0_macvtap left promiscuous mode [ 974.461606][ T9259] device veth1_vlan left promiscuous mode [ 974.474180][ T9259] device veth0_vlan left promiscuous mode [ 974.494616][T12274] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1640'. [ 974.595049][ T3625] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.606120][ T3625] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.618817][ T3625] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 974.629166][ T3625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.770517][ T3625] usb 4-1: config 0 descriptor?? [ 975.385433][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 975.396876][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024 [ 975.408313][ T41] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 975.454258][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.590765][ T41] usb 1-1: config 0 descriptor?? [ 976.263159][ T41] usb 1-1: can't set config #0, error -71 [ 976.270257][ T41] usb 1-1: USB disconnect, device number 22 [ 976.815505][T12288] netlink: 'syz.0.1643': attribute type 1 has an invalid length. [ 977.168425][T12294] loop2: detected capacity change from 0 to 128 [ 977.198557][T12294] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 977.573089][ T9259] team0 (unregistering): Port device team_slave_1 removed [ 977.655748][ T9259] team0 (unregistering): Port device team_slave_0 removed [ 977.706081][ T9259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 977.761341][ T9259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 977.941836][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 977.941854][ T26] audit: type=1326 audit(1723827864.286:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.0.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d799b9 code=0x7fc00000 [ 978.018495][ T26] audit: type=1326 audit(1723827864.286:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.0.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc625d799b9 code=0x7fc00000 [ 978.059297][ T26] audit: type=1326 audit(1723827864.286:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.0.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d799b9 code=0x7fc00000 [ 978.086796][ T26] audit: type=1326 audit(1723827864.286:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.0.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d799b9 code=0x7fc00000 [ 978.122407][ T26] audit: type=1326 audit(1723827864.286:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.0.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d799b9 code=0x7fc00000 [ 978.145708][ T26] audit: type=1326 audit(1723827864.286:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.0.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d799b9 code=0x7fc00000 [ 978.168545][ T26] audit: type=1326 audit(1723827864.286:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.0.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d799b9 code=0x7fc00000 [ 978.192541][ T26] audit: type=1326 audit(1723827864.286:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.0.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d799b9 code=0x7fc00000 [ 978.215154][ T26] audit: type=1326 audit(1723827864.286:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.0.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d799b9 code=0x7fc00000 [ 978.239257][ T26] audit: type=1326 audit(1723827864.286:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.0.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d799b9 code=0x7fc00000 [ 978.327993][ T946] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 978.575020][ T946] usb 1-1: Using ep0 maxpacket: 16 [ 978.608887][ T9259] bond0 (unregistering): Released all slaves [ 978.695974][ T946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 978.707014][ T946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 978.716870][ T946] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 978.726014][ T946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.744025][T12082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.753493][ T946] usb 1-1: config 0 descriptor?? [ 978.791321][T12082] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.833665][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 978.862883][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 979.117159][ T3625] usbhid 4-1:0.0: can't add hid device: -71 [ 979.123200][ T3625] usbhid: probe of 4-1:0.0 failed with error -71 [ 979.156579][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 981.410606][ T3625] usb 4-1: USB disconnect, device number 27 [ 981.429653][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 981.459816][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.467013][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.593801][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 981.602274][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 981.612448][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 982.496913][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.504110][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.594081][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 982.653818][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 982.671531][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 982.725781][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 982.751518][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 982.772750][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 982.795063][ T946] usbhid 1-1:0.0: can't add hid device: -71 [ 982.807492][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 982.815006][ T5148] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 982.829001][ T946] usbhid: probe of 1-1:0.0 failed with error -71 [ 982.852165][ T946] usb 1-1: USB disconnect, device number 23 [ 982.857430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 982.872645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 982.884288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 982.896690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 982.942391][T12082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 983.144508][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 983.159384][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 983.206972][T12082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.234356][ T3680] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 983.901480][ T5148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 983.913318][ T5148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024 [ 983.924617][ T5148] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 983.944894][ T5148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.974927][ T946] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 984.004319][ T5148] usb 2-1: config 0 descriptor?? [ 984.025080][ T3680] usb 4-1: Using ep0 maxpacket: 16 [ 984.144987][ T3680] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 984.184923][ T3680] usb 4-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 984.214947][ T3680] usb 4-1: config 0 interface 0 has no altsetting 0 [ 984.300460][ T9229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 984.310951][ T9229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 984.328221][T12356] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1657'. [ 984.340513][ T946] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 984.366674][T12082] device veth0_vlan entered promiscuous mode [ 984.381670][ T946] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 984.391195][ T3680] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 984.407051][ T946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.415768][ T9229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 984.424942][ T3680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.432949][ T3680] usb 4-1: Product: syz [ 984.434570][ T9229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 984.443248][ T3680] usb 4-1: Manufacturer: syz [ 984.450717][ T3680] usb 4-1: SerialNumber: syz [ 984.461921][ T3680] usb 4-1: config 0 descriptor?? [ 984.467648][T12340] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 984.468343][ T9229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 984.475576][ T5148] appletouch 2-1:0.0: Geyser mode initialized. [ 984.492653][T12340] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 984.502120][ T5148] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input53 [ 984.535622][ T9229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 984.538073][ T3680] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input54 [ 984.579428][T12082] device veth1_vlan entered promiscuous mode [ 984.669537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 984.698588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 984.746411][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 984.755899][ T99] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 984.831432][T12082] device veth0_macvtap entered promiscuous mode [ 984.856930][T12082] device veth1_macvtap entered promiscuous mode [ 984.935519][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.954805][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.975939][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.994821][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.005039][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.015604][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.026134][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.044997][ T946] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 985.052871][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.066145][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.076993][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.089850][T12082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.099733][ T9229] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 985.109163][ T9229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 985.117849][ T9229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 985.127004][ T9229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 985.138960][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.154490][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.171505][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.182038][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.200556][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.212192][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.228811][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.241484][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.260060][T12082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.274130][T12082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.293971][T12082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.303772][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 985.315084][ T946] usb 3-1: Using ep0 maxpacket: 16 [ 985.321400][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 985.340715][T12082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.350062][T12082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.359252][T12082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.371527][T12082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.384053][ T6983] usb 4-1: USB disconnect, device number 28 [ 985.554020][ T9229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.580953][ T9229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.604933][ T946] usb 3-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 985.630901][ T946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.694153][ T946] usb 3-1: Product: syz [ 985.698983][ T946] usb 3-1: Manufacturer: syz [ 985.704203][ T946] usb 3-1: SerialNumber: syz [ 985.716147][T10537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 985.724375][ T946] usb 3-1: config 0 descriptor?? [ 985.832068][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.963422][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.108661][T10537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 986.383246][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1659'. [ 986.386602][ T946] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 986.392245][T12376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1659'. [ 986.413322][T12376] device gtp0 entered promiscuous mode [ 986.455600][ T946] dvb-usb: bulk message failed: -22 (3/0) [ 986.556376][ T5153] usb 2-1: USB disconnect, device number 29 [ 986.669897][ T946] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle error while loading driver (-22) [ 986.731010][ T946] dvb_usb_dibusb_mc: probe of 3-1:0.0 failed with error -22 [ 986.885470][T12384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1662'. [ 988.828154][ T946] usb 3-1: USB disconnect, device number 28 [ 989.177693][ T5153] appletouch 2-1:0.0: input: appletouch disconnected [ 989.381702][T12396] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 989.466800][T12401] loop2: detected capacity change from 0 to 512 [ 989.526884][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 989.526901][ T26] audit: type=1326 audit(1723827875.826:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d799b9 code=0x7ffc0000 [ 989.610968][T12403] netlink: 'syz.1.1667': attribute type 72 has an invalid length. [ 989.674868][ T26] audit: type=1326 audit(1723827875.826:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d799b9 code=0x7ffc0000 [ 989.706363][T12401] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 989.726091][T12401] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038 (0x7fffffff) [ 990.314460][ T26] audit: type=1326 audit(1723827875.826:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fc625d799b9 code=0x7ffc0000 [ 991.073999][ T26] audit: type=1326 audit(1723827875.826:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d799b9 code=0x7ffc0000 [ 991.132371][T11798] EXT4-fs (loop2): unmounting filesystem. [ 991.200324][ T26] audit: type=1326 audit(1723827875.826:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d799b9 code=0x7ffc0000 [ 991.310505][ T26] audit: type=1326 audit(1723827875.826:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc625d799b9 code=0x7ffc0000 [ 991.498379][ T26] audit: type=1326 audit(1723827875.836:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d799b9 code=0x7ffc0000 [ 991.744956][ T3682] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 992.375333][ T3682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.407750][ T3682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.503016][ T3682] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 992.574500][ T3682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.595628][ T26] audit: type=1326 audit(1723827875.836:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d799b9 code=0x7ffc0000 [ 992.598074][ T3682] usb 5-1: config 0 descriptor?? [ 992.860814][T12441] loop1: detected capacity change from 0 to 512 [ 992.896655][ T26] audit: type=1326 audit(1723827875.836:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc625d799b9 code=0x7ffc0000 [ 992.942596][T12441] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1674: casefold flag without casefold feature [ 992.956094][ T26] audit: type=1326 audit(1723827875.836:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d799b9 code=0x7ffc0000 [ 992.982470][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.000261][T12441] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.1674: casefold flag without casefold feature [ 993.071441][T12441] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.1674: ea_inode with extended attributes [ 993.127920][T12441] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1674: error while reading EA inode 12 err=-117 [ 993.192773][T12441] EXT4-fs (loop1): 1 orphan inode deleted [ 993.200174][T12441] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 993.235510][ T3682] appletouch 5-1:0.0: Geyser mode initialized. [ 993.289457][ T3682] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input56 [ 993.825088][ T41] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 994.023517][T12451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 994.075068][ T41] usb 2-1: Using ep0 maxpacket: 16 [ 994.114496][T12457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.134452][T12448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1677'. [ 994.143963][T12457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.169647][T12362] udevd[12362]: Error opening device "/dev/input/event4": Input/output error [ 994.196079][T12362] udevd[12362]: Unable to EVIOCGABS device "/dev/input/event4" [ 994.209831][T12362] udevd[12362]: Unable to EVIOCGABS device "/dev/input/event4" [ 994.219491][ T41] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 994.235793][ T41] usb 2-1: config 0 has no interface number 0 [ 994.242244][ T41] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 2139, setting to 1024 [ 994.498440][ T41] usb 2-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 994.835285][ T41] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 994.913447][ T41] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 994.942932][ T41] usb 2-1: Product: syz [ 994.951554][ T41] usb 2-1: Manufacturer: syz [ 994.958272][ T41] usb 2-1: SerialNumber: syz [ 994.965930][ T41] usb 2-1: config 0 descriptor?? [ 994.985401][T12441] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 995.012537][ T41] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 995.163400][ T41] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 995.253238][T12441] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1674: Directory hole found for htree leaf block 0 [ 995.274286][T12441] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1674: Directory hole found for htree leaf block 0 [ 995.412613][ T41] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 995.553359][ T41] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 995.675711][ T41] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 995.744133][ T41] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 995.754368][T12469] netlink: 'syz.3.1681': attribute type 72 has an invalid length. [ 995.775617][ T41] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 995.798537][ T41] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 995.815088][ T41] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 995.855669][ T41] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 995.903899][ T41] usb 2-1: USB disconnect, device number 30 [ 995.951280][ T3712] usb 5-1: USB disconnect, device number 28 [ 995.958945][T12366] udevd[12366]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 995.979511][ T41] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 996.016861][ T3712] appletouch 5-1:0.0: input: appletouch disconnected [ 997.148760][ T41] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 997.220014][ T41] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 997.268520][ T41] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 997.300174][ T41] keyspan 2-1:0.107: device disconnected [ 997.444201][T11483] EXT4-fs (loop1): unmounting filesystem. [ 998.152917][T12484] device syzkaller0 entered promiscuous mode [ 998.554903][T12503] loop2: detected capacity change from 0 to 512 [ 998.681084][T12503] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 998.715930][T12503] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff) [ 998.803443][T12503] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.1690: path /29/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 999.128528][T11798] EXT4-fs (loop2): unmounting filesystem. [ 999.523961][T12515] netlink: 'syz.1.1693': attribute type 72 has an invalid length. [ 1001.151048][ T5153] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1001.158863][ T3712] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1001.561477][ T3712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.572789][ T5153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 1001.584703][ T3712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.594685][ T3712] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1001.604818][ T3712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.613531][ T5153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024 [ 1001.635188][ T3712] usb 3-1: config 0 descriptor?? [ 1001.640502][ T5153] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1001.657260][ T5153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.694281][ T5153] usb 2-1: config 0 descriptor?? [ 1002.167290][ T3712] appletouch 3-1:0.0: Geyser mode initialized. [ 1002.174214][ T3712] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input57 [ 1002.188013][ T5153] appletouch 2-1:0.0: Geyser mode initialized. [ 1002.225257][ T5153] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input58 [ 1002.376977][T12359] udevd[12359]: Error opening device "/dev/input/event5": Input/output error [ 1002.421055][T12359] udevd[12359]: Unable to EVIOCGABS device "/dev/input/event5" [ 1002.440804][T12359] udevd[12359]: Unable to EVIOCGABS device "/dev/input/event5" [ 1002.913800][T12544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1698'. [ 1004.238041][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1698'. [ 1004.292995][ T41] usb 2-1: USB disconnect, device number 31 [ 1004.315111][ T5153] usb 3-1: USB disconnect, device number 29 [ 1004.347472][ T41] appletouch 2-1:0.0: input: appletouch disconnected [ 1004.420268][T12547] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1698'. [ 1004.432656][ T5153] appletouch 3-1:0.0: input: appletouch disconnected [ 1004.491989][ C0] eth0: bad gso: type: 1, size: 1408 [ 1004.518345][T12551] loop4: detected capacity change from 0 to 256 [ 1004.576052][ T3646] Bluetooth: hci4: Invalid connection link type handle 0x00c8 [ 1004.605494][T12366] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1006.372731][T12571] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 1009.073569][T12574] loop2: detected capacity change from 0 to 4096 [ 1009.104131][T12574] __ntfs_warning: 40 callbacks suppressed [ 1009.104143][T12574] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1009.200257][T12574] ntfs: (device loop2): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 1009.226089][T12574] ntfs: volume version 3.1. [ 1010.677568][T12595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1709'. [ 1011.594650][T12610] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1012.235158][ T3712] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1012.315590][ T5153] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1012.396899][T12611] loop4: detected capacity change from 0 to 256 [ 1012.478484][T12611] /dev/loop4: Can't open blockdev [ 1012.645701][ T3712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.670830][ T3712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.724880][T11485] Bluetooth: hci1: command 0x0406 tx timeout [ 1012.795560][ T5153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 1012.808203][ T3712] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1012.817737][ T5153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024 [ 1012.829207][T12613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1715'. [ 1012.829333][ T3712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.851393][ T5153] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1012.861479][ T5153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.877366][ T3712] usb 4-1: config 0 descriptor?? [ 1012.898186][ T5153] usb 2-1: config 0 descriptor?? [ 1013.905017][ T3712] appletouch 4-1:0.0: Geyser mode initialized. [ 1013.948635][ T3712] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input59 [ 1014.124945][ T5153] appletouch 2-1:0.0: Geyser mode initialized. [ 1014.131992][T12624] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1718'. [ 1014.143958][ T5153] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input60 [ 1014.240369][T10400] usb 4-1: USB disconnect, device number 29 [ 1014.717444][ T3643] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1014.729711][ T3643] Bluetooth: hci1: Injecting HCI hardware error event [ 1014.742629][ T3643] Bluetooth: hci1: hardware error 0x00 [ 1014.894164][ T5153] usb 2-1: USB disconnect, device number 32 [ 1014.976303][T12362] udevd[12362]: Error opening device "/dev/input/event4": No such device [ 1015.057105][T12362] udevd[12362]: Unable to EVIOCGABS device "/dev/input/event4" [ 1015.085793][T10400] appletouch 4-1:0.0: input: appletouch disconnected [ 1015.318226][ T7858] udevd[7858]: Error opening device "/dev/input/event5": No such device [ 1015.430756][T12362] udevd[12362]: Unable to EVIOCGABS device "/dev/input/event4" [ 1015.598110][ T7858] udevd[7858]: Unable to EVIOCGABS device "/dev/input/event5" [ 1015.673370][T12362] udevd[12362]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1015.684545][ T7858] udevd[7858]: Unable to EVIOCGABS device "/dev/input/event5" [ 1015.695592][ T7858] udevd[7858]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1015.719016][ T5153] appletouch 2-1:0.0: input: appletouch disconnected [ 1016.374295][ T3091] udevd[3091]: worker [12362] terminated by signal 6 (Aborted) [ 1016.424906][ T3091] udevd[3091]: worker [12362] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input59/event4' [ 1016.567388][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1722'. [ 1017.412765][T12658] loop1: detected capacity change from 0 to 512 [ 1017.441501][T12658] EXT4-fs: Ignoring removed i_version option [ 1017.448050][T12658] EXT4-fs: Ignoring removed orlov option [ 1017.454263][T12658] ext2: Unknown parameter 'fowner' [ 1018.061182][ T3643] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1018.503791][T12661] loop4: detected capacity change from 0 to 1024 [ 1018.513371][T12661] /dev/loop4: Can't open blockdev [ 1018.514157][T12656] loop1: detected capacity change from 0 to 16 [ 1018.525244][T12656] erofs: Unknown parameter '€' [ 1018.828420][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1724'. [ 1019.200818][T12667] loop2: detected capacity change from 0 to 512 [ 1020.461458][T12667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1020.505003][T12667] ext4 filesystem being mounted at /38/bus supports timestamps until 2038 (0x7fffffff) [ 1020.537717][T12682] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1732'. [ 1021.272990][T12698] loop4: detected capacity change from 0 to 2048 [ 1023.542108][T12654] block nbd0: shutting down sockets [ 1024.637123][T12366] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1024.837665][T12708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.719686][T11798] EXT4-fs (loop2): unmounting filesystem. [ 1025.757780][T12708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.875511][T12714] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1738'. [ 1025.892094][T12714] ubi1: attaching mtd0 [ 1026.015855][ T22] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1026.715111][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 1026.784920][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024 [ 1026.853460][ T22] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1026.909249][T12717] loop2: detected capacity change from 0 to 4096 [ 1026.945626][T12717] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1027.029982][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.043896][ T22] usb 2-1: config 0 descriptor?? [ 1027.089330][T12723] loop4: detected capacity change from 0 to 512 [ 1027.264295][T12723] /dev/loop4: Can't open blockdev [ 1027.348877][T12717] ntfs: (device loop2): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 1027.525469][ T22] appletouch 2-1:0.0: Geyser mode initialized. [ 1027.800189][ T22] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input61 [ 1028.041176][T12717] ntfs: volume version 3.1. [ 1028.249450][ T22] usb 2-1: USB disconnect, device number 33 [ 1028.355254][T12717] 9pnet_fd: Insufficient options for proto=fd [ 1028.441209][T12736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.570045][T12736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.893865][ T22] appletouch 2-1:0.0: input: appletouch disconnected [ 1030.109045][T12359] udevd[12359]: Error opening device "/dev/input/event4": No such file or directory [ 1030.220607][T12359] udevd[12359]: Unable to EVIOCGABS device "/dev/input/event4" [ 1030.325056][T12359] udevd[12359]: Unable to EVIOCGABS device "/dev/input/event4" [ 1030.332739][T12359] udevd[12359]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1031.264489][T12754] binder: 12749:12754 ioctl c018620c 0 returned -14 [ 1032.602813][ T3091] udevd[3091]: worker [12359] terminated by signal 6 (Aborted) [ 1032.626638][ T3091] udevd[3091]: worker [12359] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input61/event4' [ 1033.401169][T12771] binder: 12761:12771 ioctl c0306201 0 returned -14 [ 1033.953192][ T26] audit: type=1804 audit(1723827920.286:737): pid=12774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1752" name="/newroot/19/bus/bus" dev="overlay" ino=131 res=1 errno=0 [ 1034.005946][T12774] Invalid ELF header magic: != ELF [ 1034.112084][T12781] loop1: detected capacity change from 0 to 1024 [ 1035.040764][T12787] No such timeout policy "syz1" [ 1035.372200][T12793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.412653][T12793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.435884][T12791] loop4: detected capacity change from 0 to 4096 [ 1035.521417][T12791] 9pnet_fd: Insufficient options for proto=fd [ 1035.996945][ T3643] Bluetooth: hci3: command 0x0406 tx timeout [ 1036.688329][ C0] eth0: bad gso: type: 1, size: 1408 [ 1038.251587][ T26] audit: type=1804 audit(1723827924.536:738): pid=12816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1762" name="/newroot/23/bus/bus" dev="overlay" ino=162 res=1 errno=0 [ 1038.985879][T12819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.047178][T12819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.122870][T12827] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1764'. [ 1040.238222][T12828] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1764'. [ 1040.682033][T12839] loop1: detected capacity change from 0 to 256 [ 1041.701153][T12838] loop2: detected capacity change from 0 to 4096 [ 1041.707800][T12843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.724706][T12838] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1041.750804][T12843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.064634][T12838] ntfs: (device loop2): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 1042.122775][T12838] ntfs: volume version 3.1. [ 1042.135107][ T26] audit: type=1326 audit(1723827928.476:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12836 comm="syz.1.1766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2177799b9 code=0x0 [ 1042.160422][T12851] loop4: detected capacity change from 0 to 16 [ 1042.212833][T12851] /dev/loop4: Can't open blockdev [ 1042.221371][T12838] 9pnet_fd: Insufficient options for proto=fd [ 1042.756834][T12857] loop2: detected capacity change from 0 to 16 [ 1042.757209][T12851] loop4: detected capacity change from 0 to 2048 [ 1042.777607][T12857] erofs: (device loop2): mounted with root inode @ nid 36. [ 1042.802080][T12860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.827592][T12860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.257112][T11485] Bluetooth: hci0: command tx timeout [ 1045.333524][T12879] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1775'. [ 1045.346745][T12879] ubi1: attaching mtd0 [ 1047.099441][T12884] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1777'. [ 1047.386657][T12898] loop1: detected capacity change from 0 to 128 [ 1047.436261][T12898] FAT-fs (loop1): Unrecognized mount option "²—¦©ì®" or missing value [ 1047.517210][T12366] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1049.471038][T12918] loop4: detected capacity change from 0 to 4096 [ 1049.576072][T12366] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1049.768192][ T9259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.189951][ T9259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.242928][T12918] 9pnet_fd: Insufficient options for proto=fd [ 1050.308206][ T9259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.354896][ T5151] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1050.381857][ T9259] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.715028][ T5151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 1050.943463][T12932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.332908][ T5151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024 [ 1051.366955][ T5151] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1051.404108][T12932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.412794][ T5151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.067688][ T5151] usb 3-1: config 0 descriptor?? [ 1052.537267][ T5151] appletouch 3-1:0.0: Geyser mode initialized. [ 1052.544239][ T5151] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input62 [ 1052.805125][T12967] loop1: detected capacity change from 0 to 256 [ 1052.852557][ T5151] usb 3-1: USB disconnect, device number 30 [ 1052.907172][T12967] FAT-fs (loop1): Directory bread(block 64) failed [ 1052.913774][T12967] FAT-fs (loop1): Directory bread(block 65) failed [ 1052.926363][T12967] FAT-fs (loop1): Directory bread(block 66) failed [ 1052.933318][T12967] FAT-fs (loop1): Directory bread(block 67) failed [ 1052.945655][T12365] udevd[12365]: Error opening device "/dev/input/event4": Input/output error [ 1053.139633][T12365] udevd[12365]: Unable to EVIOCGABS device "/dev/input/event4" [ 1053.293808][T12967] FAT-fs (loop1): Directory bread(block 68) failed [ 1053.309260][T12365] udevd[12365]: Unable to EVIOCGABS device "/dev/input/event4" [ 1053.334465][T12967] FAT-fs (loop1): Directory bread(block 69) failed [ 1053.373881][T12967] FAT-fs (loop1): Directory bread(block 70) failed [ 1053.443056][T12967] FAT-fs (loop1): Directory bread(block 71) failed [ 1053.473641][T12967] FAT-fs (loop1): Directory bread(block 72) failed [ 1053.491052][ T5151] appletouch 3-1:0.0: input: appletouch disconnected [ 1053.520102][T12967] FAT-fs (loop1): Directory bread(block 73) failed [ 1054.047580][ T9259] device hsr_slave_0 left promiscuous mode [ 1054.064382][ T9259] device hsr_slave_1 left promiscuous mode [ 1054.078439][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.175643][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.261902][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.276512][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.324148][ T9259] device bridge_slave_1 left promiscuous mode [ 1054.347043][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.358002][ T9259] device bridge_slave_0 left promiscuous mode [ 1054.364268][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.399147][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.658155][ T9259] device veth1_macvtap left promiscuous mode [ 1054.727075][ T9259] device veth0_macvtap left promiscuous mode [ 1054.779125][ T9259] device veth1_vlan left promiscuous mode [ 1054.832812][ T9259] device veth0_vlan left promiscuous mode [ 1055.708646][ T9259] team0 (unregistering): Port device team_slave_1 removed [ 1055.807121][ T9259] team0 (unregistering): Port device team_slave_0 removed [ 1056.309008][ T9259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.364688][ T9259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.474990][ T3646] Bluetooth: hci2: command 0x0406 tx timeout [ 1057.004977][ T9259] bond0 (unregistering): Released all slaves [ 1058.002706][ T26] audit: type=1804 audit(1723827944.336:740): pid=13031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1799" name="/newroot/50/bus/bus" dev="overlay" ino=314 res=1 errno=0 [ 1058.004228][T13031] Invalid ELF header magic: != ELF [ 1059.329623][T13057] loop2: detected capacity change from 0 to 256 [ 1059.364498][T13051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.411341][T13051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.424965][T13057] FAT-fs (loop2): Directory bread(block 64) failed [ 1059.472052][T13057] FAT-fs (loop2): Directory bread(block 65) failed [ 1059.499321][T13057] FAT-fs (loop2): Directory bread(block 66) failed [ 1059.540650][T13057] FAT-fs (loop2): Directory bread(block 67) failed [ 1059.579705][T13057] FAT-fs (loop2): Directory bread(block 68) failed [ 1059.599660][T13057] FAT-fs (loop2): Directory bread(block 69) failed [ 1059.630073][T13057] FAT-fs (loop2): Directory bread(block 70) failed [ 1059.649299][ T22] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1059.657136][T13057] FAT-fs (loop2): Directory bread(block 71) failed [ 1059.667202][T13057] FAT-fs (loop2): Directory bread(block 72) failed [ 1059.686174][T13057] FAT-fs (loop2): Directory bread(block 73) failed [ 1060.312421][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 1060.495142][ T22] usb 2-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1060.523068][ T22] usb 2-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1060.582368][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1060.780239][ T22] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1060.800071][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.824907][ T22] usb 2-1: Product: syz [ 1060.829143][ T22] usb 2-1: Manufacturer: syz [ 1060.833769][ T22] usb 2-1: SerialNumber: syz [ 1060.865659][ T22] usb 2-1: config 0 descriptor?? [ 1060.907776][ T22] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input63 [ 1061.754392][ T6980] usb 2-1: USB disconnect, device number 34 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=3 req=1767 state=1 status=67 (errno 9: Bad file descriptor) [ 1065.257507][T13168] loop4: detected capacity change from 0 to 1024 [ 1065.505188][ T5153] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1065.916053][T12366] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1065.955044][ T5153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.988656][ T5153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.133071][ T5153] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1066.172329][ T5153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.217404][ T5153] usb 2-1: config 0 descriptor?? [ 1066.294882][ T22] usb 1-1: USB disconnect, device number 24 [ 1066.934910][ T5153] usb 2-1: can't set config #0, error -71 [ 1066.978847][ T5153] usb 2-1: USB disconnect, device number 35 [ 1067.028827][ T9232] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.130039][ T9232] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.214666][ T9232] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.309590][ T9232] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.720132][ T9232] device hsr_slave_0 left promiscuous mode [ 1068.730088][ T9232] device hsr_slave_1 left promiscuous mode [ 1068.737168][ T9232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.744599][ T9232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.759086][ T9232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1068.766863][ T9232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.774626][ T9232] device bridge_slave_1 left promiscuous mode [ 1068.781751][ T9232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.791240][ T9232] device bridge_slave_0 left promiscuous mode [ 1068.797811][ T9232] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.833375][ T9232] device veth1_macvtap left promiscuous mode [ 1068.839583][ T9232] device veth0_macvtap left promiscuous mode [ 1068.846121][ T9232] device veth1_vlan left promiscuous mode [ 1068.852546][ T9232] device veth0_vlan left promiscuous mode [ 1069.457496][ T9232] team0 (unregistering): Port device team_slave_1 removed [ 1069.507092][ T9232] team0 (unregistering): Port device team_slave_0 removed [ 1069.560417][ T9232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1069.610987][ T9232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.158432][ T9232] bond0 (unregistering): Released all slaves [ 1071.879733][ T9232] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.944393][ T9232] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.016919][ T9232] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.107260][ T9232] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.287995][ T9232] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.377699][ T9232] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.476733][ T9232] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.567454][ T9232] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.756691][ T9232] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.852740][ T9232] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.937857][ T9232] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.003334][ T9232] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0