last executing test programs: 1.892502875s ago: executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) sendmmsg$inet(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3cad"], 0x40}}], 0x2, 0x0) 1.823373875s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x3c, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x3c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x6e000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000280)=0x3, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x44091, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, 0x0, 0x20004004) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 1.655757483s ago: executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8}, 0x8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.627128164s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r2, &(0x7f00000022c0)={0x11, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9101000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB="080004000074"], 0x44}}, 0x0) 1.547314492s ago: executing program 3: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c03, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000200)={0x9}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) 1.540944077s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1a, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000005c0)={0x3}, 0x8}, 0x90) socket$inet6(0xa, 0x0, 0x2ac0000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100), 0x48) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f0000000680), 0x1c) connect$inet6(r1, &(0x7f0000000680), 0x1c) 1.474412511s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564cce0000000100000008db00", 0x20) 1.456496726s ago: executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000009280)=@newtfilter={0x374, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {}, {0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x344, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_CGROUP_EMATCHES={0x2e4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x0, 0x0, 0x0, {{0xf9, 0x8, 0x5}, {0x0, 0x5, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x8000}}}]}, @TCA_EMATCH_TREE_LIST={0x168, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x7}, {0x0, 0x4, 0x2, "16fb8742"}}}, @TCF_EM_IPT={0x98, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x7}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xbb}, @TCA_EM_IPT_MATCH_DATA={0x43, 0x5, "d3484d359f53b02c6451360f2aa61a693e6e3bab8907735249c4dca468c26da7854966db9841cf77330e48e8ac82800f7d284be46fcc1ffcdedb3dcd063de6"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x0, 0x0, 0x0, {{0x0, 0x8, 0x1}, {0x1}}}, @TCF_EM_META={0x54, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x100}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3f, 0x9}, {0x1, 0x0, 0x1}}}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_VAR="bde3f96cb6a08e"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff8}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1db, 0x4}, {0x4, 0x30}}}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{}, {0x2, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x9, 0x1}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7fff, 0x3, 0xfff}, {0x40, 0x7, 0x7, 0x1000}}}, @TCF_EM_IPSET={0x10, 0x0, 0x0, 0x0, {{0x0, 0x8, 0x2d}, {0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff61}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x138, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x2, 0x5}, {0x92, 0xa, 0x0, "0deb7bebf38379f4a435"}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x7, 0x2, 0xe958}, {0x0, 0x2, 0x2, "8cd6"}}}, @TCF_EM_IPT={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0x80, 0x9, 0xff}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x78e7a54e23428e9}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CONTAINER={0xcc, 0x3, 0x0, 0x0, {{0x7, 0x0, 0x1}, "66bed629466e77fb063e0c8c635b6cc8de76290eeb0b41ccd3fd54049cc3045fec488af10245288507db2a9344049773b3ee24ea794c90aa0d42457fa82709adcacf97ddd238d8c542359f9c5244e1a2f7f45aaa7b417dd150aad66c35bbb89c090166160d2bb70d1234f8b6b4e5f7adb8a83ef4c75ea89114671dac685fc211defae2f0b6ae798b63205f81ad5675eddd0e4df58dbb5e10fa2cf81f8bcb5712cac39aa8f98bac2ed939aa999f0adc4f0739247e72bae2315b55084bde3f"}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}]}, @TCA_CGROUP_POLICE={0x14, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}, @TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb0}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x374}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.412941413s ago: executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = syz_io_uring_setup(0x24fc, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x1066, 0x0, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvfrom$inet6(r5, 0x0, 0x1000000, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/80, 0x50}], 0x1}, 0x0) r6 = dup(r0) ioctl$TIOCSTI(r6, 0x5423, &(0x7f0000000080)) 1.38853348s ago: executing program 3: openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a", 0x23}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.370301696s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x10) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000300)=""/165, 0xa5}], 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) 1.332021974s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.273986045s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=r1, @empty}, 0x10) 1.189945536s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) getsockname$packet(r2, &(0x7f00000022c0)={0x11, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9101000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB="080004000074"], 0x44}}, 0x0) 1.160103786s ago: executing program 3: delete_module(&(0x7f0000000000)='nl80211\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000002440)={r2}, 0x8) 1.13506886s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[], 0x70}}, 0x0) 1.114396766s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) 951.217088ms ago: executing program 4: memfd_create(0x0, 0x0) r0 = socket$inet6(0x10, 0x0, 0x0) write$P9_RRENAME(r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) r1 = mq_open(&(0x7f0000000300)='%{C|\xfd\xb9\xbe\xd9\xd2\xa2\x03\x00\x00\x00\x00k\xf8&\xe8\f\xe8c\xbc\xb4\xf0;(0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000009280)=@newtfilter={0x374, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {}, {0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x344, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_CGROUP_EMATCHES={0x2e4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x0, 0x0, 0x0, {{0xf9, 0x8, 0x5}, {0x0, 0x5, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x8000}}}]}, @TCA_EMATCH_TREE_LIST={0x168, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x7}, {0x0, 0x4, 0x2, "16fb8742"}}}, @TCF_EM_IPT={0x98, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x7}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xbb}, @TCA_EM_IPT_MATCH_DATA={0x43, 0x5, "d3484d359f53b02c6451360f2aa61a693e6e3bab8907735249c4dca468c26da7854966db9841cf77330e48e8ac82800f7d284be46fcc1ffcdedb3dcd063de6"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x0, 0x0, 0x0, {{0x0, 0x8, 0x1}, {0x1}}}, @TCF_EM_META={0x54, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x100}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3f, 0x9}, {0x1, 0x0, 0x1}}}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_VAR="bde3f96cb6a08e"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff8}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1db, 0x4}, {0x4, 0x30}}}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{}, {0x2, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x9, 0x1}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7fff, 0x3, 0xfff}, {0x40, 0x7, 0x7, 0x1000}}}, @TCF_EM_IPSET={0x10, 0x0, 0x0, 0x0, {{0x0, 0x8, 0x2d}, {0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff61}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x138, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x2, 0x5}, {0x92, 0xa, 0x0, "0deb7bebf38379f4a435"}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x7, 0x2, 0xe958}, {0x0, 0x2, 0x2, "8cd6"}}}, @TCF_EM_IPT={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0x80, 0x9, 0xff}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x78e7a54e23428e9}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CONTAINER={0xcc, 0x3, 0x0, 0x0, {{0x7, 0x0, 0x1}, "66bed629466e77fb063e0c8c635b6cc8de76290eeb0b41ccd3fd54049cc3045fec488af10245288507db2a9344049773b3ee24ea794c90aa0d42457fa82709adcacf97ddd238d8c542359f9c5244e1a2f7f45aaa7b417dd150aad66c35bbb89c090166160d2bb70d1234f8b6b4e5f7adb8a83ef4c75ea89114671dac685fc211defae2f0b6ae798b63205f81ad5675eddd0e4df58dbb5e10fa2cf81f8bcb5712cac39aa8f98bac2ed939aa999f0adc4f0739247e72bae2315b55084bde3f"}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}]}, @TCA_CGROUP_POLICE={0x14, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}, @TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb0}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x374}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 713.405602ms ago: executing program 2: syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f00000000c0)='./file0\x00', 0x2008410, &(0x7f0000000a00)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c982257856bcdcf2fa02010000001f54fb934570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b76a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731ab1125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404c6576ce7ca99caa49c031703a92fde1ab235728bf933e15c13dd3129ece4f41e5022aaa25badb06004dfbed8857ac81d84c063b8d9f6b4d8a8cb534002a24cd63590e34bccce76800c69b2f9be796b3f0066f08c1681a12bb1468653359ee1522c93c4a4bce2c37caaec0b1a56e0d1069f02cea23520437d3febe9b8622884e17bc29ba41bd38168697445c07ebdb3ae8ba04714c61e30277c041774147a127fdf8a589e11a2c3d90bd6a8dfe50cf4bfd4314600978060f57af1cdc7d4cccd24", @ANYRES16], 0x1, 0x5543, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)='j', 0x1}], 0x1) 547.682913ms ago: executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 501.966733ms ago: executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000), 0x8, 0x0) 492.216436ms ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40086602, &(0x7f0000000540)={'\x00', @dev}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) write$cgroup_pid(r1, &(0x7f0000000340), 0xfdef) 485.937211ms ago: executing program 0: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)='V', 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) write$char_usb(r1, 0x0, 0x5e8b) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x4, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect$uac1(0x6, 0x71, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x5452, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x133, 0x0, 0x1, {0x22, 0x34f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x8, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x6a, 0x4, 0x7f}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4f, 0xff, 0x8, 0x20, 0x81}, 0x5b, &(0x7f0000000240)={0x5, 0xf, 0x5b, 0x2, [@generic={0xd, 0x10, 0xb, "ff04e59429427bf9d38c"}, @generic={0x49, 0x10, 0xb, "19f7500dc0b6491c5280afdafd5c86434a528168a5c1ae118459e1bcf9c5b88bc60e058b8728b93f18243fd756f9f802fc668cf01c39523921530e96458fb29b4a908a2f5971"}]}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 443.493539ms ago: executing program 1: sched_setscheduler(0x0, 0x0, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) 410.450189ms ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000f2ffffff17f8ed0b3d1b016dfbefd1dccda216b4aec943637bceb20000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c40901000000000027000000000000009c32000000000000b5030000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x20) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08000500060000000c0017"], 0xc8}}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) 136.76601ms ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000040)=0x1e6e, 0x4) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10, 0x0}}], 0x1, 0x0) 75.116194ms ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000400)="1c", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x22, 0x0, 0x0) 16.363824ms ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000a5c700000000000000008500000027000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000120009090000000000000000070000030000000000000000000000002e00e800000000000000b77b9d954bc6f5035e720000000020001000000000000000cf6603"], 0x50}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.203' (ED25519) to the list of known hosts. 1970/01/01 00:00:34 fuzzer started 1970/01/01 00:00:34 dialing manager at 10.128.0.169:30028 [ 34.445662][ T6294] cgroup: Unknown subsys name 'net' [ 34.540547][ T6298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 34.675113][ T6294] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:00:34 starting 5 executor processes [ 35.617818][ T6317] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.620512][ T6317] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.623718][ T6320] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.626359][ T6320] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.628931][ T6320] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.631342][ T6320] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.633445][ T6320] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.641164][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.644715][ T6320] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.649245][ T6320] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.652607][ T6320] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.654739][ T6320] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.674278][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.689256][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.693493][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.696442][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.700369][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.704399][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.704955][ T6326] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.708983][ T6326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.713207][ T6326] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 35.716427][ T6326] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 35.718961][ T6326] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 35.721308][ T6317] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 35.723647][ T6326] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 35.723701][ T6317] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 35.729652][ T6317] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 35.729763][ T6320] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 35.748003][ T52] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 35.751695][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 35.837423][ T6315] chnl_net:caif_netlink_parms(): no params data found [ 35.958879][ T6324] chnl_net:caif_netlink_parms(): no params data found [ 35.966902][ T6315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.968752][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.971527][ T6315] bridge_slave_0: entered allmulticast mode [ 35.973668][ T6315] bridge_slave_0: entered promiscuous mode [ 35.977538][ T6315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.981248][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.983178][ T6315] bridge_slave_1: entered allmulticast mode [ 35.985251][ T6315] bridge_slave_1: entered promiscuous mode [ 36.011920][ T6321] chnl_net:caif_netlink_parms(): no params data found [ 36.044643][ T6315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.068140][ T6315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.084020][ T6323] chnl_net:caif_netlink_parms(): no params data found [ 36.087353][ T6324] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.089281][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.091606][ T6324] bridge_slave_0: entered allmulticast mode [ 36.093774][ T6324] bridge_slave_0: entered promiscuous mode [ 36.104077][ T6315] team0: Port device team_slave_0 added [ 36.108022][ T6315] team0: Port device team_slave_1 added [ 36.117456][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.122008][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.123951][ T6324] bridge_slave_1: entered allmulticast mode [ 36.126003][ T6324] bridge_slave_1: entered promiscuous mode [ 36.177210][ T6324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.184643][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.186447][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.193475][ T6315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.197889][ T6321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.200097][ T6321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.202034][ T6321] bridge_slave_0: entered allmulticast mode [ 36.204160][ T6321] bridge_slave_0: entered promiscuous mode [ 36.207541][ T6324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.231160][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.232922][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.240584][ T6315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.243989][ T6321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.245925][ T6321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.247905][ T6321] bridge_slave_1: entered allmulticast mode [ 36.253413][ T6321] bridge_slave_1: entered promiscuous mode [ 36.267006][ T6324] team0: Port device team_slave_0 added [ 36.290893][ T6321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.293379][ T6314] chnl_net:caif_netlink_parms(): no params data found [ 36.298135][ T6321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.301316][ T6324] team0: Port device team_slave_1 added [ 36.330147][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.332098][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.334081][ T6323] bridge_slave_0: entered allmulticast mode [ 36.336154][ T6323] bridge_slave_0: entered promiscuous mode [ 36.350486][ T6321] team0: Port device team_slave_0 added [ 36.359184][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.361940][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.363923][ T6323] bridge_slave_1: entered allmulticast mode [ 36.366027][ T6323] bridge_slave_1: entered promiscuous mode [ 36.372487][ T6321] team0: Port device team_slave_1 added [ 36.422113][ T6315] hsr_slave_0: entered promiscuous mode [ 36.470088][ T6315] hsr_slave_1: entered promiscuous mode [ 36.514648][ T6324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.516463][ T6324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.523084][ T6324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.545565][ T6321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.547450][ T6321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.554928][ T6321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.566981][ T6324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.568831][ T6324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.576046][ T6324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.590211][ T6323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.593345][ T6321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.595167][ T6321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.602698][ T6321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.606118][ T6314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.608150][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.610275][ T6314] bridge_slave_0: entered allmulticast mode [ 36.612399][ T6314] bridge_slave_0: entered promiscuous mode [ 36.670895][ T6324] hsr_slave_0: entered promiscuous mode [ 36.709720][ T6324] hsr_slave_1: entered promiscuous mode [ 36.749461][ T6324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.751865][ T6324] Cannot create hsr debugfs directory [ 36.761338][ T6323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.768568][ T6314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.770640][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.772590][ T6314] bridge_slave_1: entered allmulticast mode [ 36.774527][ T6314] bridge_slave_1: entered promiscuous mode [ 36.790011][ T6314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.819219][ T6314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.823984][ T6323] team0: Port device team_slave_0 added [ 36.864335][ T6314] team0: Port device team_slave_0 added [ 36.866964][ T6323] team0: Port device team_slave_1 added [ 36.871016][ T6314] team0: Port device team_slave_1 added [ 36.941000][ T6321] hsr_slave_0: entered promiscuous mode [ 36.979669][ T6321] hsr_slave_1: entered promiscuous mode [ 37.019533][ T6321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.021590][ T6321] Cannot create hsr debugfs directory [ 37.060313][ T6314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.062413][ T6314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.069098][ T6314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.081211][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.083041][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.090387][ T6323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.095653][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.097543][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.105198][ T6323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.108879][ T6314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.111087][ T6314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.117766][ T6314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.201003][ T6314] hsr_slave_0: entered promiscuous mode [ 37.259794][ T6314] hsr_slave_1: entered promiscuous mode [ 37.299624][ T6314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.301737][ T6314] Cannot create hsr debugfs directory [ 37.381186][ T6323] hsr_slave_0: entered promiscuous mode [ 37.439879][ T6323] hsr_slave_1: entered promiscuous mode [ 37.499504][ T6323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.501642][ T6323] Cannot create hsr debugfs directory [ 37.584276][ T6315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.588115][ T6315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.601660][ T6315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.609734][ T6315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.647083][ T6324] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.651540][ T6324] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.664761][ T6324] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.668355][ T6324] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.680402][ T5864] Bluetooth: hci0: command tx timeout [ 37.680405][ T52] Bluetooth: hci1: command tx timeout [ 37.700600][ T6321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.725197][ T6321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.736151][ T6315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.738506][ T6321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.748826][ T6321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.760717][ T5864] Bluetooth: hci2: command tx timeout [ 37.760926][ T52] Bluetooth: hci3: command tx timeout [ 37.764625][ T6314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.768143][ T6314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.775696][ T6314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.801256][ T6314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.816623][ T6315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.833294][ T6323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.838387][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.840669][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.842236][ T52] Bluetooth: hci4: command tx timeout [ 37.848840][ T6323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.852653][ T6323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.857619][ T6367] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.859568][ T6367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.883523][ T6323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.927435][ T6324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.972365][ T6321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.988990][ T6324] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.994918][ T6321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.005539][ T6314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.021115][ T6315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.024061][ T6367] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.025916][ T6367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.028763][ T6367] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.030763][ T6367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.043597][ T6314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.066180][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.068237][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.071670][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.073562][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.090802][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.092892][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.107950][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.109996][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.158586][ T6323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.162476][ T6315] veth0_vlan: entered promiscuous mode [ 38.167961][ T6315] veth1_vlan: entered promiscuous mode [ 38.201741][ T6321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.209987][ T6323] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.225100][ T6367] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.227080][ T6367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.230162][ T6367] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.232052][ T6367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.245644][ T6315] veth0_macvtap: entered promiscuous mode [ 38.250587][ T6315] veth1_macvtap: entered promiscuous mode [ 38.264403][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.281363][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.286166][ T6315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.288906][ T6315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.295455][ T6315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.298208][ T6315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.321810][ T6324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.406119][ T6314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.409619][ T6324] veth0_vlan: entered promiscuous mode [ 38.414109][ T6324] veth1_vlan: entered promiscuous mode [ 38.455911][ T6323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.465936][ T6321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.481675][ T2093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.483994][ T2093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.495612][ T6324] veth0_macvtap: entered promiscuous mode [ 38.502441][ T6324] veth1_macvtap: entered promiscuous mode [ 38.531382][ T2093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.533717][ T2093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.552425][ T6321] veth0_vlan: entered promiscuous mode [ 38.557041][ T6321] veth1_vlan: entered promiscuous mode [ 38.565366][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.568614][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.575634][ T6324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.592929][ T6321] veth0_macvtap: entered promiscuous mode [ 38.604727][ T6323] veth0_vlan: entered promiscuous mode [ 38.615276][ T6321] veth1_macvtap: entered promiscuous mode [ 38.628129][ T6323] veth1_vlan: entered promiscuous mode [ 38.637072][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.645659][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.651888][ T6324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.656448][ T6314] veth0_vlan: entered promiscuous mode [ 38.670269][ T6397] Zero length message leads to an empty skb [ 38.686580][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.698902][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.701968][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.704618][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.710373][ T6321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.714154][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.717284][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.725364][ T6321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.732064][ T6321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.735745][ T6321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.743826][ T6314] veth1_vlan: entered promiscuous mode [ 38.752089][ T6321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.754493][ T6321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.756918][ T6321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.759236][ T6321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.764619][ T6324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.766989][ T6324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.770570][ T6324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.772686][ T6324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.791909][ T6323] veth0_macvtap: entered promiscuous mode [ 38.794488][ T6314] veth0_macvtap: entered promiscuous mode [ 38.797781][ T6323] veth1_macvtap: entered promiscuous mode [ 38.822401][ T6314] veth1_macvtap: entered promiscuous mode [ 38.872913][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.875810][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.879293][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.885121][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.887662][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.895295][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.905105][ T6314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.924105][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.926196][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.932711][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.935508][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.938127][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.946254][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.949083][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.954831][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.957846][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.961856][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.965489][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.974367][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.977133][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.980764][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.985108][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.987004][ T6405] loop1: detected capacity change from 0 to 512 [ 38.987897][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.004124][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.009051][ T6314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.010255][ T6405] ======================================================= [ 39.010255][ T6405] WARNING: The mand mount option has been deprecated and [ 39.010255][ T6405] and is ignored by this kernel. Remove the mand [ 39.010255][ T6405] option from the mount to silence this warning. [ 39.010255][ T6405] ======================================================= [ 39.024564][ T2005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.025840][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.026572][ T2005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.029247][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.035684][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.035863][ T6405] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.038454][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.050267][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.053523][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.056180][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.058861][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.065889][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.077104][ T6314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.087935][ T6314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.091289][ T6314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.093983][ T6314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.103023][ T6323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.105504][ T6323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.109016][ T6323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.112195][ T6323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.113771][ T6405] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 64: padding at end of block bitmap is not set [ 39.118883][ T2093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.128263][ T2093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.134028][ T6405] Quota error (device loop1): write_blk: dquota write failed [ 39.136431][ T6405] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 39.141719][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.148934][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.158953][ T6405] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz-executor.1: Failed to acquire dquot type 0 [ 39.165658][ T6405] EXT4-fs (loop1): 1 truncate cleaned up [ 39.173008][ T6405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.237228][ T236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.246294][ T6405] Quota error (device loop1): write_blk: dquota write failed [ 39.249124][ T6405] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 39.252723][ T6405] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz-executor.1: Failed to acquire dquot type 0 [ 39.257459][ T236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.285238][ T206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.287990][ T206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.385489][ T236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.392016][ T236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.435485][ T2005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.442863][ T2005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.705583][ T6416] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 39.759623][ T5864] Bluetooth: hci1: command tx timeout [ 39.761847][ T52] Bluetooth: hci0: command tx timeout [ 39.766962][ T6315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.840182][ T52] Bluetooth: hci2: command tx timeout [ 39.842227][ T5864] Bluetooth: hci3: command tx timeout [ 39.920037][ T5864] Bluetooth: hci4: command tx timeout [ 39.964621][ T6433] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 40.126061][ T6440] loop3: detected capacity change from 0 to 2048 [ 40.150783][ T6440] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 40.154495][ T6440] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 40.173027][ T6440] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 40.456996][ T6455] pim6reg1: entered promiscuous mode [ 40.469818][ T6455] pim6reg1: entered allmulticast mode [ 40.861641][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.914885][ T6461] loop2: detected capacity change from 0 to 40427 [ 40.923054][ T6461] F2FS-fs (loop2): Invalid segment count (0) [ 40.926130][ T6461] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 40.933507][ T6461] F2FS-fs (loop2): invalid crc value [ 40.938068][ T6461] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.992481][ T6461] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 40.994512][ T6461] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 41.051496][ T6323] syz-executor.2: attempt to access beyond end of device [ 41.051496][ T6323] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 41.069877][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 41.071311][ T6323] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 41.076404][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 41.087029][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 41.096475][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 41.099586][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.109719][ T8] usb 1-1: config 0 descriptor?? [ 41.113970][ T6465] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 41.124024][ T8] hub 1-1:0.0: USB hub found [ 41.185046][ T6490] loop1: detected capacity change from 0 to 1024 [ 41.270672][ T206] hfsplus: b-tree write err: -5, ino 4 [ 41.278518][ T6484] loop4: detected capacity change from 0 to 32768 [ 41.306408][ T6484] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6484) [ 41.322123][ T8] hub 1-1:0.0: 2 ports detected [ 41.338091][ T6484] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 41.343868][ T6484] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 41.346686][ T6484] BTRFS info (device loop4): using free-space-tree [ 41.519030][ T6494] loop2: detected capacity change from 0 to 32768 [ 41.577070][ T6512] loop1: detected capacity change from 0 to 1024 [ 41.626527][ T6494] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 41.627048][ T2117] hfsplus: b-tree write err: -5, ino 4 [ 41.631187][ T6494] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 41.690752][ T6494] bcachefs (loop2): alloc_read... done [ 41.692544][ T6494] bcachefs (loop2): stripes_read... done [ 41.694056][ T6494] bcachefs (loop2): snapshots_read... done [ 41.699049][ T6494] bcachefs (loop2): journal_replay... done [ 41.700910][ T6494] bcachefs (loop2): resume_logged_ops... done [ 41.707182][ T6494] bcachefs (loop2): going read-write [ 41.732128][ T6494] bcachefs (loop2): done starting filesystem [ 41.743035][ T6314] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 41.798690][ T6323] bcachefs (loop2): shutting down [ 41.801653][ T6323] bcachefs (loop2): going read-only [ 41.808260][ T6323] bcachefs (loop2): finished waiting for writes to stop [ 41.839639][ T52] Bluetooth: hci0: command tx timeout [ 41.841627][ T52] Bluetooth: hci1: command tx timeout [ 41.857613][ T6323] bcachefs (loop2): flushing journal and stopping allocators, journal seq 8 [ 41.873600][ T6323] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 9 [ 41.878021][ T6323] bcachefs (loop2): shutdown complete, journal seq 10 [ 41.883497][ T6323] bcachefs (loop2): marking filesystem clean [ 41.919941][ T5864] Bluetooth: hci2: command tx timeout [ 41.921517][ T52] Bluetooth: hci3: command tx timeout [ 41.935328][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.935414][ T6323] bcachefs (loop2): shutdown complete [ 41.938653][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.999805][ T52] Bluetooth: hci4: command tx timeout [ 42.301888][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 42.832394][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 42.836171][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 42.838795][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 42.842325][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 42.844931][ T5864] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 42.847097][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 43.046922][ T6560] chnl_net:caif_netlink_parms(): no params data found [ 43.083096][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.085090][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.087075][ T6560] bridge_slave_0: entered allmulticast mode [ 43.091891][ T6560] bridge_slave_0: entered promiscuous mode [ 43.095359][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.097448][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.100035][ T6560] bridge_slave_1: entered allmulticast mode [ 43.102485][ T6560] bridge_slave_1: entered promiscuous mode [ 43.139740][ T6364] usb 1-1: USB disconnect, device number 2 [ 43.144617][ T6365] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 43.154847][ T6560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.163001][ T6560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.185241][ T6560] team0: Port device team_slave_0 added [ 43.188519][ T6560] team0: Port device team_slave_1 added [ 43.224637][ T6586] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 43.236350][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.238425][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.251749][ T6560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.255955][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.257944][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.268948][ T6560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.332965][ T6560] hsr_slave_0: entered promiscuous mode [ 43.382496][ T6560] hsr_slave_1: entered promiscuous mode [ 43.419556][ T6560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.421798][ T6560] Cannot create hsr debugfs directory [ 43.602951][ T6560] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.833361][ T6618] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 43.924629][ T52] Bluetooth: hci1: command tx timeout [ 43.926338][ T52] Bluetooth: hci0: command tx timeout [ 43.947146][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 44.001678][ T5864] Bluetooth: hci3: command tx timeout [ 44.003154][ T5864] Bluetooth: hci2: command tx timeout [ 44.040836][ T6636] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 44.437737][ T6644] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 44.441861][ T6644] hsr0: entered promiscuous mode [ 44.454609][ T6644] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 44.457726][ T6644] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 44.479294][ T6644] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 44.483081][ T6644] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 44.602139][ T6560] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.743137][ T6560] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.879607][ T52] Bluetooth: hci5: command tx timeout [ 44.902537][ T6560] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.687135][ T6703] futex_wake_op: syz-executor.3 tries to shift op by -1; fix this program [ 46.959533][ T52] Bluetooth: hci5: command tx timeout [ 46.979867][ T206] bridge_slave_1: left allmulticast mode [ 46.981811][ T206] bridge_slave_1: left promiscuous mode [ 46.984354][ T206] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.008885][ T206] bridge_slave_0: left allmulticast mode [ 47.012878][ T206] bridge_slave_0: left promiscuous mode [ 47.014422][ T206] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.078278][ T6719] loop4: detected capacity change from 0 to 2048 [ 47.322775][ T6719] loop4: unable to read partition table [ 47.328668][ T6719] loop4: partition table beyond EOD, truncated [ 47.331339][ T6719] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 47.558674][ T5905] loop4: unable to read partition table [ 47.565372][ T5905] loop4: partition table beyond EOD, truncated [ 47.646535][ T6532] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 47.781315][ T6731] loop1: detected capacity change from 0 to 32768 [ 47.785014][ T6731] XFS: attr2 mount option is deprecated. [ 47.826498][ T6731] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 47.899751][ T6731] XFS (loop1): Ending clean mount [ 47.920729][ T6731] XFS (loop1): Quotacheck needed: Please wait. [ 47.944702][ T6364] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x8 [ 47.952498][ T6364] XFS (loop1): Unmount and run xfs_repair [ 47.956716][ T6364] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 47.958846][ T6364] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 47.963601][ T6364] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 47.966943][ T6364] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 47.978949][ T6364] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 47.983741][ T6364] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 47.986829][ T6364] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 47.989275][ T6364] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 47.992341][ T6364] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 47.995129][ T2093] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x8 len 8 error 74 [ 48.016484][ T6731] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 48.043113][ T6731] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x8 [ 48.046704][ T6731] XFS (loop1): Unmount and run xfs_repair [ 48.055618][ T6731] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 48.058456][ T6731] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 48.061356][ T6731] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 48.064043][ T6731] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 48.073233][ T6731] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 48.075651][ T6731] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 48.083141][ T6731] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 48.085820][ T6731] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 48.089122][ T6731] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 48.095426][ T6731] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x8 len 8 error 74 [ 48.106027][ T6731] XFS (loop1): page discard on page 00000000a2fc2219, inode 0x42b, pos 0. [ 48.238467][ T6315] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 48.309869][ T6315] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 49.039458][ T52] Bluetooth: hci5: command tx timeout [ 49.195170][ T6763] usb usb8: usbfs: interface 0 claimed by hub while 'syz-executor.0' sets config #0 [ 49.213444][ T206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.234319][ T206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.291168][ T6766] loop0: detected capacity change from 0 to 128 [ 49.292235][ T206] bond0 (unregistering): Released all slaves [ 49.363616][ T6743] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.366757][ T6743] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.371287][ T6743] bridge0: entered promiscuous mode [ 49.552699][ T6774] syz-executor.3: attempt to access beyond end of device [ 49.552699][ T6774] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 49.569295][ T6774] FAT-fs (loop7): unable to read boot sector [ 49.736185][ T6783] loop4: detected capacity change from 0 to 256 [ 49.803107][ T6783] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 50.470899][ T6560] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.077916][ T6777] loop1: detected capacity change from 0 to 32768 [ 51.120913][ T6560] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.123095][ T52] Bluetooth: hci5: command tx timeout [ 51.134588][ T6777] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 51.221373][ T6777] XFS (loop1): Ending clean mount [ 51.225525][ T6560] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.244664][ T6560] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.308229][ T6315] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 51.434450][ T6811] loop0: detected capacity change from 0 to 16 [ 51.489253][ T6811] erofs: (device loop0): mounted with root inode @ nid 36. [ 51.526435][ T6811] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 51.534493][ T6811] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[46, 4050] out[1851] [ 51.550308][ T6811] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 51.577217][ T206] hsr_slave_0: left promiscuous mode [ 51.609981][ T206] hsr_slave_1: left promiscuous mode [ 51.777018][ T6819] loop0: detected capacity change from 0 to 256 [ 51.799825][ T206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.802428][ T206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.806424][ T206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.806952][ T6819] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 51.808620][ T206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.527647][ T206] veth1_macvtap: left promiscuous mode [ 52.530148][ T206] veth0_macvtap: left promiscuous mode [ 52.531926][ T206] veth1_vlan: left promiscuous mode [ 52.533557][ T206] veth0_vlan: left promiscuous mode [ 52.585260][ T6825] process 'syz-executor.3' launched '/dev/fd/4' with NULL argv: empty string added [ 52.621815][ T6828] loop3: detected capacity change from 0 to 512 [ 52.646087][ T6828] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.858740][ T30] audit: type=1326 audit(52.840:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6831 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9085d0e8 code=0x7ffc0000 [ 52.866689][ T30] audit: type=1326 audit(52.840:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6831 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9085d0e8 code=0x7ffc0000 [ 52.873329][ T30] audit: type=1326 audit(52.850:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6831 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9085d0e8 code=0x7ffc0000 [ 52.880954][ T30] audit: type=1326 audit(52.850:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6831 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9085d0e8 code=0x7ffc0000 [ 52.886806][ T30] audit: type=1326 audit(52.850:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6831 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9085d0e8 code=0x7ffc0000 [ 52.899781][ T30] audit: type=1326 audit(52.850:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6831 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9085d0e8 code=0x7ffc0000 [ 52.905435][ T30] audit: type=1326 audit(52.850:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6831 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9085d0e8 code=0x7ffc0000 [ 52.911696][ T30] audit: type=1326 audit(52.850:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6831 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9085d0e8 code=0x7ffc0000 [ 52.917449][ T30] audit: type=1326 audit(52.860:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6831 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9085d0e8 code=0x7ffc0000 [ 52.923580][ T30] audit: type=1326 audit(52.860:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6831 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9085d0e8 code=0x7ffc0000 [ 54.365189][ T206] team0 (unregistering): Port device team_slave_1 removed [ 54.554720][ T206] team0 (unregistering): Port device team_slave_0 removed [ 56.774607][ T6560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.840804][ T6560] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.863142][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.864961][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.868307][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.870329][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.924912][ T6846] loop4: detected capacity change from 0 to 512 [ 56.932801][ T6560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.000058][ T6532] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 57.055781][ T6560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.101580][ T6560] veth0_vlan: entered promiscuous mode [ 57.107009][ T6560] veth1_vlan: entered promiscuous mode [ 57.168090][ T6560] veth0_macvtap: entered promiscuous mode [ 57.175691][ T6560] veth1_macvtap: entered promiscuous mode [ 57.194960][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.209230][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.212690][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.215516][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.218156][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.221374][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.223921][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.226709][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.232235][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.268986][ T6862] 9pnet_fd: Insufficient options for proto=fd [ 57.290509][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.293289][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.295743][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.298310][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.310005][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.312870][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.315566][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.318278][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.328008][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.335550][ T6560] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.337880][ T6560] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.341712][ T6560] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.344098][ T6560] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.427204][ T6867] loop3: detected capacity change from 0 to 256 [ 57.453228][ T6867] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 57.602169][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.608218][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.621248][ T236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.623316][ T236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.680468][ T6363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.868746][ T6873] EXT4-fs warning (device nvme0n1p2): verify_group_input:137: Cannot add at group 42467369 (only 8 groups) [ 57.968570][ T6888] dccp_flush_write_queue: CCID did not manage to send all packets [ 58.002479][ T6894] loop0: detected capacity change from 0 to 128 [ 58.031873][ T6875] loop3: detected capacity change from 0 to 32768 [ 58.038044][ T6875] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6875) [ 58.046430][ T6875] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 58.053366][ T6875] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 58.058149][ T6875] BTRFS info (device loop3): using free-space-tree [ 58.089576][ T6532] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 58.117914][ T6875] BTRFS info (device loop3): rebuilding free space tree [ 58.211228][ T6324] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 58.364204][ T6926] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 58.457854][ T206] tipc: Subscription rejected, illegal request [ 58.477532][ T6931] netem: unknown loss type 0 [ 58.482773][ T6931] netem: change failed [ 58.705820][ T6942] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 58.721294][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.305843][ T7000] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.321883][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 59.321897][ T30] audit: type=1326 audit(59.310:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6996 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fe5d0e8 code=0x0 [ 59.379697][ T7012] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 59.443650][ T7017] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 59.519719][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.542697][ T7021] ipvlan0: entered allmulticast mode [ 59.543982][ T7021] veth0_vlan: entered allmulticast mode [ 59.666616][ T7029] loop4: detected capacity change from 0 to 512 [ 59.673047][ T7029] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 59.684953][ T7029] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.701711][ T7029] EXT4-fs (loop4): 1 truncate cleaned up [ 59.710105][ T7029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.757067][ T7029] evm: overlay not supported [ 59.770047][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.208119][ T6314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.371690][ T7050] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 60.478067][ T7037] loop2: detected capacity change from 0 to 40427 [ 60.481010][ T7037] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 60.483085][ T7037] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 60.502686][ T7037] F2FS-fs (loop2): Found nat_bits in checkpoint [ 60.519718][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 60.535501][ T7037] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 60.538586][ T7037] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 60.559656][ T6365] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 60.587842][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.596590][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.599251][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.603794][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.606619][ T5864] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.608783][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.645691][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.709517][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.752995][ T6365] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 60.758742][ T6365] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.761719][ T6365] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 60.764581][ T6365] usb 1-1: config 0 interface 0 has no altsetting 0 [ 60.781012][ T6365] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.783398][ T6365] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 60.786441][ T6365] usb 1-1: config 0 interface 0 has no altsetting 0 [ 60.799651][ T7067] ------------[ cut here ]------------ [ 60.800636][ T6365] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.801164][ T7067] WARNING: CPU: 1 PID: 7067 at include/linux/skbuff.h:2738 skb_ensure_writable+0x26c/0x3a8 [ 60.803575][ T6365] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 60.806074][ T7067] Modules linked in: [ 60.809180][ T6365] usb 1-1: config 0 interface 0 has no altsetting 0 [ 60.810030][ T7067] CPU: 1 PID: 7067 Comm: syz-executor.1 Tainted: G W 6.10.0-rc3-syzkaller-gac2193b4b460 #0 [ 60.810050][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 60.810058][ T7067] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 60.810072][ T7067] pc : skb_ensure_writable+0x26c/0x3a8 [ 60.810087][ T7067] lr : skb_ensure_writable+0x26c/0x3a8 [ 60.810097][ T7067] sp : ffff80009fff76d0 [ 60.810102][ T7067] x29: ffff80009fff76d0 x28: 0000000000000001 x27: ffff80009fff7770 [ 60.810123][ T7067] x26: 0000000000000000 [ 60.824634][ T6365] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.826104][ T7067] x25: ffff80009fff7770 [ 60.827270][ T6365] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 60.829576][ T7067] x24: 1ffff00013483606 [ 60.829594][ T7067] x23: 1ffff00013ffef1c x22: dfff800000000000 x21: dfff800000000000 [ 60.829613][ T7067] x20: 00000000c7a50000 x19: ffff0000e5ca4780 [ 60.832834][ T6365] usb 1-1: config 0 interface 0 has no altsetting 0 [ 60.833608][ T7067] x18: 0000000000000000 [ 60.837114][ T6365] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.838438][ T7067] [ 60.838447][ T7067] x17: 0000000000000000 x16: ffff800080559a14 x15: 0000000000000003 [ 60.846762][ T7067] x14: ffff80008f1a0558 x13: dfff800000000000 x12: 0000000000000003 [ 60.848561][ T6365] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 1970/01/01 00:01:00 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 60.848992][ T7067] x11: 0000000000040000 x10: 000000000000049b x9 : ffff8000a25af000 [ 60.854015][ T7067] x8 : 000000000000049c x7 : ffff80008044d968 x6 : 0000000000000000 [ 60.856186][ T7067] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 [ 60.858293][ T7067] x2 : ffff0000d57fbc80 x1 : 00000000c7a50000 x0 : 0000000000000000 [ 60.860505][ T7067] Call trace: [ 60.861395][ T7067] skb_ensure_writable+0x26c/0x3a8 [ 60.862776][ T7067] bpf_skb_pull_data+0x80/0x210 [ 60.863018][ T6365] usb 1-1: config 0 interface 0 has no altsetting 0 [ 60.864122][ T7067] bpf_prog_9679780dc515ac13+0x54/0x98 [ 60.867233][ T7067] bpf_test_run+0x374/0x890 [ 60.868369][ T7067] bpf_prog_test_run_skb+0x8d4/0x1090 [ 60.869814][ T7067] bpf_prog_test_run+0x2dc/0x364 [ 60.871226][ T7067] __sys_bpf+0x314/0x5f0 [ 60.872368][ T7067] __arm64_sys_bpf+0x80/0x98 [ 60.873746][ T7067] invoke_syscall+0x98/0x2b8 [ 60.874986][ T7067] el0_svc_common+0x130/0x23c [ 60.876246][ T7067] do_el0_svc+0x48/0x58 [ 60.877420][ T7067] el0_svc+0x54/0x168 [ 60.878482][ T7067] el0t_64_sync_handler+0x84/0xfc [ 60.879823][ T7067] el0t_64_sync+0x190/0x194 [ 60.881025][ T7067] irq event stamp: 275 [ 60.882117][ T7067] hardirqs last enabled at (273): [] seqcount_lockdep_reader_access+0x80/0x104 [ 60.884896][ T7067] hardirqs last disabled at (275): [] el1_dbg+0x24/0x80 [ 60.887176][ T7067] softirqs last enabled at (254): [] local_bh_enable+0x10/0x34 [ 60.889693][ T7067] softirqs last disabled at (274): [] local_bh_disable+0x10/0x34 [ 60.892070][ T7067] ---[ end trace 0000000000000000 ]--- [ 60.910516][ T6363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.985395][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.143252][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0