last executing test programs: 6m58.541248648s ago: executing program 1 (id=93): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 6m57.299337543s ago: executing program 1 (id=99): r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$evdev(0x0, 0x40, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x10000055}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6m56.856978807s ago: executing program 1 (id=103): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000280)="c2", 0x1, 0x41, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000600)="a852c7ff07701d2293", 0xfffffffffffffd37, 0x805, 0x0, 0x0) 6m55.388217926s ago: executing program 1 (id=109): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf) 6m54.842182869s ago: executing program 1 (id=116): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x90646, 0x50703}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 6m54.161150596s ago: executing program 1 (id=121): r0 = syz_mount_image$fuse(0x0, 0x0, 0x3800080, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x290d010, 0x0) renameat(r0, 0x0, r0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 6m52.991495643s ago: executing program 32 (id=121): r0 = syz_mount_image$fuse(0x0, 0x0, 0x3800080, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x290d010, 0x0) renameat(r0, 0x0, r0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 6m26.935399914s ago: executing program 4 (id=207): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 6m22.991889663s ago: executing program 4 (id=213): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(0x3) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r1, 0xa) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000300)="12345678000001000000000100000001000000010101000000000001", 0xffb6, 0x4008000, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) 6m22.316918372s ago: executing program 4 (id=214): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) dup3(r0, r4, 0x80000) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 6m21.030037377s ago: executing program 4 (id=220): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0), 0x3, 0x45c, &(0x7f0000000940)="$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") syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) fdatasync(r0) 6m19.010040537s ago: executing program 4 (id=228): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7000002, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfffe, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 6m14.486705709s ago: executing program 4 (id=234): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$unix(r2, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20000000}}], 0x1, 0x4018080) 6m11.275447309s ago: executing program 33 (id=234): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$unix(r2, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20000000}}], 0x1, 0x4018080) 6m9.344591642s ago: executing program 3 (id=247): signalfd(0xffffffffffffffff, 0x0, 0x0) unshare(0xa000200) r0 = semget$private(0x0, 0x4000, 0x0) semtimedop(r0, &(0x7f0000000200)=[{0x91fab96db41338bf, 0x0, 0x1000}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x0) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x8000000) 6m8.235383938s ago: executing program 3 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 6m6.666040947s ago: executing program 3 (id=254): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x80049370, 0x0) 6m5.650459218s ago: executing program 3 (id=258): ioperm(0x6, 0x9, 0x824) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') 6m3.861156773s ago: executing program 3 (id=264): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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") r0 = getpid() arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x4) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6m2.105972646s ago: executing program 3 (id=270): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0xd2e, @empty, 0x1}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) 5m45.352309528s ago: executing program 34 (id=270): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0xd2e, @empty, 0x1}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) 5m45.282486828s ago: executing program 2 (id=302): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x991c}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x8}}]}}]}, 0x4c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001340)={{r1}, r2, 0x4, @inherit={0x80, &(0x7f0000000380)={0x0, 0x7, 0xee7, 0x8001, {0x16, 0x1000, 0x4, 0x2, 0x3081}, [0x7fff, 0xb, 0x0, 0x448c, 0xa, 0x2, 0x6]}}, @name="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"}) madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x9) 5m29.612545135s ago: executing program 2 (id=323): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$rxrpc(0x21, 0x2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) recvmmsg(r0, 0x0, 0x0, 0x10002, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r1, 0x5) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 5m23.665078244s ago: executing program 2 (id=315): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x4f64, 0xc000, 0x4, 0x4040c1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x11f0, 0xe912, 0x16, 0x0, 0xfffffffffffffff9) 5m18.720051923s ago: executing program 2 (id=320): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind(r1, &(0x7f0000000000)=@in={0x2, 0x573, @empty}, 0x10) listen(r1, 0x5) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='cifs\x00', 0x0, &(0x7f0000000400)='unc=\\127.0.0.1\\share,ip=127.0.0.1,port=1395,vers=3.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/fs/cifs/DebugData\x00', 0x0, 0x0) read(r2, &(0x7f0000000080)=""/104, 0x68) 5m16.566980747s ago: executing program 2 (id=329): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) mount(&(0x7f0000000340)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x900000, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) mount$overlay(0x0, &(0x7f0000000180)='mtd0\x00', &(0x7f00000001c0), 0x2, &(0x7f0000000600)={[{@xino_off}, {@index_on}, {@redirect_dir_follow}, {@metacopy_on}, {@xino_off}], [{@subj_role}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) 5m14.777919898s ago: executing program 2 (id=334): syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) dup(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040844}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 4m57.194989152s ago: executing program 35 (id=334): syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) dup(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040844}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 4m49.529340972s ago: executing program 5 (id=368): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 4m45.65079391s ago: executing program 5 (id=372): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x2, 0x0, 0x0, 0x3a}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x100008251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 4m43.524459686s ago: executing program 5 (id=376): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000770000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=':', 0x1}], 0x1}, 0x40095) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet6(r1, &(0x7f0000000400)="f7", 0x1, 0x845, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) 4m39.446591956s ago: executing program 5 (id=380): select(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbb0, &(0x7f00000017c0)="$eJzs3M1vVFUbAPDn3k6/aF9a3rx5FWJiE4MajUOhBBNW4NqoiSxcUtspaTp82NbENiwK7tWFMS5IDH+CiXvZuDJxgQvFv4AYiSG6ARZj7nyUkekMpczMhfL7JWfuOXNm7vM8c2HuucncBvDMmsoe0oj9EXE6iZioP59GxFC1NxKxUXvd3dsX57KWRKXy/p9JJBFx5/bFuca+kvp2rD4YiYjrbyXx309b466srS/Nlsul5fr40OrZC4dW1tbfWDw7e6Z0pnTu6MybR2eOzcx0sdabFz78+oWf33n58tXPpt/9au+PSZyI8fpccx3dMhVTm59JZrC+LUTEbLeD5WSgXk9znUkhx4QAAOgobVrD/T8mYiDuL94m4odfck0OAAAA6IrKQEQFAAAA2OUS1/8AAACwyzV+B3Dn9sW5Rsv3Fwn9detkREzW6m/c31ybKcRGdTtSvW93z19JNN/WmtTe9timskjf/VTKWvToPuRONi5FxPNbHf+kWv9k9S7u1vrTiJjuQvypB8ZPU/0nuhA/7/oBeDZdO1k7kbWe/9LN9U9scf4rbHHu2om8z3+N9d/dlvXf/foH2qz/3ttmjAP3Xrvebq55/ffB57/NZ/Gz7WMV9QhuXYo4UNiq/mSz/qRN/ae3GWNs7uaVdnNZ/Vm9jdbv+itXIw5WV3Ot9Tcknf4+0aGFxXJpuva4xf7XjnWO33z8s5bFb1wL9EN2/PfEzo7/hW3GmHzuj/3t5h5ef/r7UHKq2huqP/PJ7Orq8uGIoeTt1uePdM6l8ZrGPrL6X32p8///rerPvhM26p9D9q/nUn2bjS8/EHPs4JFvd15/b2X1z+/w+H+xzRjffH/lo3ZzedcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNMhjYjxSNLiZj9Ni8WIsYj4X+xJy+dXVl9fOP/xuflsLmIyBtOFxXJpOiImauMkGx+u9u+PjzwwnomIfRHx5cRodVycO1+ez7t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANo1FxHgkaTEi0oj4eyJNi8W8swIAAAC6bjLvBAAAAICec/0PAAAAu1/L9X/hX6ORfuYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArrTvxWs3kojYOD5abZmh+txgrpkBvZbu+J2VSlcTAfpuIO8EgNwUmvqVinM6PEtc4wPJQ+ZH2s4Mdz0XAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5cr+y/diOJiI3jo9WWGarPDeaaGdBrad4JALkZ6DSZ9C8PoP8KeScA5MY1PlBb6t+r1LTOj7R95/AjRGm/FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeDuPVlqTFiEir/TQtFiP+ExGTMZgsLJZL0xGxNyJ+nRgczsaH804aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArltZW1+aLZdLyzo77dw7FfEEpKHzZHVGo+chhntZRd7fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5GFlbX1ptlwuLa/knQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQt5W19aXZcrm03MNO3jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCffwIAAP//ZLcP0g==") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f00000014c0)) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") truncate(&(0x7f0000000080)='./file2\x00', 0x6000) 4m35.27786635s ago: executing program 5 (id=384): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x18102, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 4m30.09652586s ago: executing program 5 (id=391): socket(0x400000000010, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="fffffffffffffff6b702040001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 4m25.645192665s ago: executing program 36 (id=391): socket(0x400000000010, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="fffffffffffffff6b702040001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 4m8.88573464s ago: executing program 8 (id=416): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0x58}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@setlink={0x34, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 4m6.015724542s ago: executing program 8 (id=421): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) 4m4.2078956s ago: executing program 8 (id=424): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x5}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0xd, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="14045200d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = dup2(r1, r0) dup3(r2, r4, 0x80000) read$FUSE(r4, &(0x7f0000001000)={0x2020}, 0x47b) 4m3.156892951s ago: executing program 8 (id=427): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_delvlan={0x24, 0x71, 0x425, 0x5070bd28, 0x7f, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x63, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040010) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000021c0)={@multicast, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, '\'*s', 0x44, 0x2f, 0x1, @local, @remote, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x3, 0x3, 0x0, 0x1, 0x4, 0x16}, 0x1, {0x40}}}, {0x8, 0x22eb, 0x3, {{0x4, 0x2, 0x5, 0x3, 0x1, 0x0, 0x7, 0x5}, 0x2, {0x4d, 0x84f, 0x2, 0x6, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 4m1.594146933s ago: executing program 8 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 3m58.555699468s ago: executing program 8 (id=432): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e3, 0xc) r2 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r3, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) pread64(r1, &(0x7f0000000240)=""/4, 0x4, 0x4) 3m42.250750876s ago: executing program 37 (id=432): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e3, 0xc) r2 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r3, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) pread64(r1, &(0x7f0000000240)=""/4, 0x4, 0x4) 24.950649015s ago: executing program 7 (id=645): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) 22.555753983s ago: executing program 7 (id=647): pipe2$9p(&(0x7f0000001900), 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 21.279994616s ago: executing program 7 (id=649): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000b000000090000000000000700000000002e0061000008005f2e"], 0x0, 0x2f, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.985065661s ago: executing program 7 (id=651): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, 0x0, 0x0) io_uring_setup(0x1045, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 13.777531176s ago: executing program 0 (id=656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1000, 0x1, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x20000) read$FUSE(r3, &(0x7f00000025c0)={0x2020}, 0x2020) 11.008048985s ago: executing program 0 (id=657): r0 = socket$unix(0x1, 0x1, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1fa) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0028010}) 9.745481599s ago: executing program 0 (id=658): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r2, &(0x7f0000004400)=[{{&(0x7f0000002080)={0xa, 0x4e1f, 0x2, @rand_addr=' \x01\x00', 0xd1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)="d5", 0x1}], 0x1}}], 0x1, 0x20002845) dup2(r2, r1) listen(r1, 0x5) accept(r1, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x34, 0x2, 0x3, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3b}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44051}, 0x40000) 8.827257485s ago: executing program 6 (id=660): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, 0x2c) r3 = syz_usb_connect$midi(0x3, 0x8b, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100300000020410e6130400001020301090279000101ff3097090400000301033007063f0200a40f0724010900070011240300040506040508b005130603810809050408"], &(0x7f00000009c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0xfd, 0x3, 0x8, 0x40, 0x1}, 0x125, &(0x7f00000005c0)={0x5, 0xf, 0x125, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x4, 0xb}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "31c35ab27b123d6061a61bcec31b3ac2"}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x4, 0xf00, 0x200, [0x6f, 0xc0cf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0xe0, 0x24, 0x4000, 0x5}, @generic={0xe0, 0x10, 0x3, "af3b544d60ea612f33a7c92c9ef581115fa11a79925efa55ca7fed694659029b555f428ab061028a20c21da2c59486a18b4715552c16b5a339bdeabbf95f6e50eb5332157f413e7ac1c3677b4f94b538d03b05c0f4be46abaf54f12d7ddad2bac7b8e8b7ffab306e338e82c14d0a9f1e0b27af1ffd0e2737b8570533234d782d1b097123046e9794d145cedc138accc24fc339cbfed1181d266b2410e2ada9b518b8df97b8789af3db968c97cc4ffeb24bb3ab677913d46ea6231d831e818cb797b5211bbace16c3845d621845f38d275cf9ef50676693b30023b2fc0f"}]}, 0x5, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x444}}, {0x98, &(0x7f0000000740)=@string={0x98, 0x3, "4651071ce13d71bef3abe989a4223b6d47ee766001e0cc0b08b0a7730008b3274a26434e56231f793ef4bc9b197be2b62ef7ce998c81d6c31683721213e1b6ca44517544b13aa85d0384a5d992c1ea726bb2983cf94d5e07cd8c495367c3fc4bdf47e0fefe2f27d9511084e505bf4f6096837efee4e478d781d0e2fa028bb5dc41ce1a7620577029803740c0bcc6d926fb07af25a1b0"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0xc0fa}}, {0xf4, &(0x7f00000008c0)=@string={0xf4, 0x3, "4d4f45e66912c75f7b1c75319248799ddb8125207338c02f2f38ab29bfd278ebad1a615c723a66d92cd9d3ece14ec7dc2b40322d3e5b6b656eacd43fb653cddd140fd9cf6fc097f292ff09afafad107fcb909ec1ad08e6001265f45c12ec8c595c43e17b9d34008798e636629ae0bd9ea13e76cee9a5512350c841bc11e489fb585d540b2d7275be2cb812180c4b38af5c434f898c64d146f0207e943e4cab9cda65893723ea5c8d60860aa7c1bc84bc7a590c7fe079ca711ec86346be2452ea3537f4df8d5eda42b3f9a73bc068bfe441ad31bb4c5addc32d412d3e5a0fc295e06a2cc4780d8970b56e68ee9963fdf65e5b"}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000ac0)={0x14, &(0x7f0000000a40)={0x0, 0x4, 0x2c, {0x2c, 0x2, "249d55cec227cb61b50f8818ccc57c60f0db35ccce13b1477760248c27a74475e3ad03be004755d294e4"}}, &(0x7f0000000a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f00)={0x44, &(0x7f0000000c00)={0x20, 0x16, 0xd8, "826de5932c2af37de1eac2e479421a7a63d3d7eb5fa1c7708491db52c1a8c28e0c11c6557359b7fabb9d584e66a619f580c5e99c83fb85c2f6577817d1db2c8869b6c1fb0f5f3121b77249745fbd0f303372e56ac8636605b2a0727e725403385c5aa25cced5824445287e4d28a64e7663d8d82d729e7c0ca935fe3d432acb5c1c056ebf64d75c9124b90c8c5b903316defa1ea0483d048129e0c69e3ffed8ee1cbf66ef0c1aff413f31609c138dd8b1bc58f4a70eb7ecfca67310152692b037081083556788dc3f195036b01625439b399ad6e3b4788708"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x8b}, &(0x7f0000000dc0)={0x20, 0x80, 0x1c, {0xff81, 0x0, 0x6, 0x6, 0x3, 0x1, 0xb, 0x5, 0xfb0, 0x1, 0xaf5c, 0x1}}, &(0x7f0000000e00)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000e40)={0x20, 0x83, 0x2}, &(0x7f0000000e80)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000ec0)={0x20, 0x89, 0x2}}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000100)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) 8.666358482s ago: executing program 0 (id=661): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) close(0x3) 7.416293844s ago: executing program 6 (id=662): socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) 7.22619834s ago: executing program 7 (id=663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001040), 0x109540, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) dup(0xffffffffffffffff) 6.665993638s ago: executing program 6 (id=664): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000000}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x112}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x2007721, 0x16, 0x0, 0x0) 4.177933582s ago: executing program 7 (id=665): r0 = openat$dir(0xffffff9c, &(0x7f0000000140)='./cfg\x00', 0xc2, 0x86) mkdirat(r0, &(0x7f00000001c0)='my_debugfs/asoc/dais\x00', 0x2e) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='my_debugfs/asoc/dais\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/22, 0x16}], 0x1, 0x89, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./cfg/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000400007012bad700000000000027c00000400fc800c00038008000600", @ANYRES32=0x0, @ANYBLOB="9cef0afbf846b9934085d3cac8aed81a42a6a789b1ada9c3bd139a45b72a57f8d007918525d1ed911df25f64283b084349bd9b449d4a4d3f"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) write(r2, &(0x7f0000000340)="3078303230300aa617244f", 0xb) syz_io_uring_setup(0x66d9, &(0x7f0000000380)={0x0, 0x5034, 0x1000, 0x0, 0x2be}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) 3.793171689s ago: executing program 0 (id=666): r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r0, 0x0, 0x1, 0x2000402) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000007912180000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000080)={{0x20eb4, 0x3}, {0x20eb4, 0x3}, 0x3, 0x5}) lseek(r0, 0x200, 0x4) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0xc, 0x0, 0x0, 0x5}, {0x6, 0x8}]}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000800)={&(0x7f0000000740)=""/171, 0xab}) faccessat2(r2, &(0x7f0000000040)='./file0\x00', 0xa4, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000240)={{{@in=@private, @in=@private}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) 3.150553298s ago: executing program 6 (id=667): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 1.634693452s ago: executing program 6 (id=668): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) socket$netlink(0x10, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x50044, &(0x7f0000000000)={0x11, 0x3, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 769.030696ms ago: executing program 0 (id=669): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x2400c000) r3 = socket(0x10, 0x80002, 0x0) r4 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000140), 0x0, r4) syz_open_dev$mouse(0x0, 0x0, 0x2) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 0s ago: executing program 6 (id=670): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) syz_open_dev$sndctrl(&(0x7f0000000d40), 0x2, 0x800) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x5, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000040)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) kernel console output (not intermixed with test programs): ndisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 121.285439][ T6149] block device autoloading is deprecated and will be removed. [ 121.401407][ T5753] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.553605][ T5753] usb 4-1: Using ep0 maxpacket: 16 [ 121.564330][ T5753] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.564414][ T5753] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 121.597812][ T5753] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.608177][ T5753] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.635103][ T5753] usb 4-1: string descriptor 0 read error: -22 [ 121.641848][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.667412][ T5753] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 121.682060][ T5753] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 122.058957][ T5753] usb 4-1: 2:1 : can't get High Capability descriptor [ 122.481033][ T5753] usb 4-1: USB disconnect, device number 3 [ 124.010119][ T506] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.323407][ T506] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.596464][ T506] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.782335][ T506] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.497723][ T506] bridge_slave_1: left allmulticast mode [ 125.497800][ T506] bridge_slave_1: left promiscuous mode [ 125.504516][ T506] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.638930][ T506] bridge_slave_0: left allmulticast mode [ 125.639001][ T506] bridge_slave_0: left promiscuous mode [ 125.678930][ T506] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.814862][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.825340][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.830853][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.844500][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.852279][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.887668][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.129'. [ 125.916298][ T30] audit: type=1804 audit(1788045643.541:28): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.128" name="/newroot/22/file1" dev="tmpfs" ino=135 res=1 errno=0 [ 126.885759][ T506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.947246][ T506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.993298][ T506] bond0 (unregistering): Released all slaves [ 127.082407][ T6228] veth0_vlan: entered allmulticast mode [ 127.880860][ T5621] Bluetooth: hci0: command tx timeout [ 129.961267][ T5621] Bluetooth: hci0: command tx timeout [ 131.115570][ T506] hsr_slave_0: left promiscuous mode [ 131.133428][ T506] hsr_slave_1: left promiscuous mode [ 131.139956][ T506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.157040][ T506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.183198][ T506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.191191][ T506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.239968][ T506] veth1_macvtap: left promiscuous mode [ 131.246902][ T506] veth0_macvtap: left promiscuous mode [ 131.252639][ T506] veth1_vlan: left promiscuous mode [ 131.258977][ T506] veth0_vlan: left promiscuous mode [ 131.684890][ T30] audit: type=1804 audit(1788045649.311:29): pid=6293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.145" name="/newroot/20/file0" dev="tmpfs" ino=122 res=1 errno=0 [ 132.040883][ T5621] Bluetooth: hci0: command tx timeout [ 132.125248][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.125369][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.590643][ T6311] loop2: detected capacity change from 0 to 1024 [ 132.655502][ T6311] hfsplus: failed to load extents file [ 132.864289][ T506] team0 (unregistering): Port device team_slave_1 removed [ 133.575888][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 134.121246][ T5621] Bluetooth: hci0: command tx timeout [ 134.667175][ T506] IPVS: stop unused estimator thread 0... [ 135.792844][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.800425][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.810480][ T6220] bridge_slave_0: entered allmulticast mode [ 135.827950][ T6220] bridge_slave_0: entered promiscuous mode [ 135.849167][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.849923][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.850102][ T6220] bridge_slave_1: entered allmulticast mode [ 135.869154][ T6220] bridge_slave_1: entered promiscuous mode [ 136.156026][ T6220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.184748][ T6220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.466945][ T6220] team0: Port device team_slave_0 added [ 136.497056][ T6220] team0: Port device team_slave_1 added [ 136.654913][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 136.687234][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 136.701620][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 136.708559][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 136.716745][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 136.727564][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 136.735588][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 136.742497][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 136.751125][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 136.759470][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 136.825146][ T6389] loop2: detected capacity change from 0 to 128 [ 137.092297][ T6389] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.108456][ T6389] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.624408][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.624456][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.624502][ T6220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.634237][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 137.635944][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.635964][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.636008][ T6220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.738446][ T5620] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.100561][ T6220] hsr_slave_0: entered promiscuous mode [ 138.105539][ T6220] hsr_slave_1: entered promiscuous mode [ 138.108002][ T6220] debugfs: 'hsr0' already exists in 'hsr' [ 138.108030][ T6220] Cannot create hsr debugfs directory [ 140.986275][ T6449] loop0: detected capacity change from 0 to 1024 [ 141.039494][ T6220] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 141.067418][ T6449] hfsplus: failed to load extents file [ 141.661543][ C1] net_ratelimit: 1044 callbacks suppressed [ 141.661618][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 141.664089][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 141.665512][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 141.667453][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 141.670156][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 141.674832][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 141.677538][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 141.678227][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 141.679200][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 141.680494][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 142.038630][ T6220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 142.046613][ T6220] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 142.118738][ T6220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.529556][ T6220] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 142.552575][ T6220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.556818][ T6220] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 142.615371][ T6220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.626914][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 143.248006][ T6220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.359494][ T6220] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.408182][ T533] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.408326][ T533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.471335][ T533] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.471480][ T533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.446051][ T25] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 145.612271][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 145.613918][ T25] usb 3-1: not running at top speed; connect to a high speed hub [ 145.613961][ T25] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 145.623302][ T25] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 145.623344][ T25] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 145.623381][ T25] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 145.623416][ T25] usb 3-1: config 14 has no interface number 0 [ 145.623447][ T25] usb 3-1: config 14 has no interface number 1 [ 145.623526][ T25] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 145.623571][ T25] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 145.623647][ T25] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.623696][ T25] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 145.623745][ T25] usb 3-1: config 14 interface 57 has no altsetting 0 [ 145.623780][ T25] usb 3-1: config 14 interface 228 has no altsetting 0 [ 145.663525][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.663568][ T25] usb 3-1: Product: syz [ 145.663594][ T25] usb 3-1: Manufacturer: syz [ 145.663620][ T25] usb 3-1: SerialNumber: syz [ 146.344815][ T25] legousbtower 3-1:14.57: interrupt endpoints not found [ 146.740383][ T25] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 146.809218][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 146.818298][ T25] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 148.739244][ T6220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.586664][ T5745] usb 3-1: USB disconnect, device number 2 [ 149.759503][ T5745] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 150.420421][ T6569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.433259][ T6569] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.456952][ T6569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.599049][ T6569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.614640][ T6569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.645616][ T6569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.658201][ T6569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.685049][ T6569] veth1_vlan: left promiscuous mode [ 150.692526][ T6569] veth0_vlan: left promiscuous mode [ 150.699968][ T6569] veth0_vlan: entered promiscuous mode [ 150.709774][ T6569] veth1_vlan: entered promiscuous mode [ 150.723032][ T6569] veth1_macvtap: left promiscuous mode [ 150.730169][ T6569] veth0_macvtap: left promiscuous mode [ 150.737384][ T6569] veth0_macvtap: entered promiscuous mode [ 150.744795][ T6569] veth1_macvtap: entered promiscuous mode [ 150.762571][ T6569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.771390][ T6569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.781082][ T6569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.789810][ T6569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 151.271477][ T533] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.271623][ T533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.337797][ T533] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.338105][ T533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.003765][ T492] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.029923][ T492] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.063152][ T3378] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.535226][ T3378] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.411111][ T6615] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 6609, magic 66 != 6b] [ 156.430675][ T6220] veth0_vlan: entered promiscuous mode [ 156.476867][ T6220] veth1_vlan: entered promiscuous mode [ 156.654832][ T6220] veth0_macvtap: entered promiscuous mode [ 156.700281][ T6220] veth1_macvtap: entered promiscuous mode [ 156.794801][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.948701][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.156945][ T6620] input: syz0 as /devices/virtual/input/input7 [ 157.314196][ T6499] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.324672][ T554] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.324732][ T554] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.324794][ T554] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.469302][ T6626] loop4: detected capacity change from 0 to 512 [ 157.497028][ T6626] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 157.497070][ T6626] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 157.586227][ T6626] EXT4-fs (loop4): 1 truncate cleaned up [ 157.653619][ T6626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.913022][ T6630] loop0: detected capacity change from 0 to 64 [ 158.119463][ T6499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.130514][ T6499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.486469][ T533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.486521][ T533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.690698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 163.342009][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.609056][ T5760] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 163.780754][ T5760] usb 6-1: Using ep0 maxpacket: 8 [ 163.789171][ T554] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.802209][ T5760] usb 6-1: unable to get BOS descriptor or descriptor too short [ 163.802282][ T5760] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 163.824245][ T5760] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 163.824301][ T5760] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 163.824343][ T5760] usb 6-1: config 4 has no interface number 0 [ 163.879380][ T5760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.879443][ T5760] usb 6-1: Product: syz [ 163.879503][ T5760] usb 6-1: Manufacturer: syz [ 163.879538][ T5760] usb 6-1: SerialNumber: syz [ 164.467660][ T6666] loop2: detected capacity change from 0 to 256 [ 165.317525][ T6666] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 165.770028][ T5760] uvcvideo 6-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 165.770181][ T5760] uvcvideo 6-1:4.147: No valid video chain found. [ 165.776420][ T5760] usb 6-1: USB disconnect, device number 3 [ 166.004330][ T6666] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff) [ 166.092542][ T554] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.492855][ T554] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.757355][ T554] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.006626][ T6687] loop5: detected capacity change from 0 to 512 [ 167.111951][ T6687] EXT4-fs (loop5): 1 truncate cleaned up [ 167.179223][ T6687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.890387][ T5618] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.939909][ T554] bridge_slave_1: left allmulticast mode [ 167.947311][ T554] bridge_slave_1: left promiscuous mode [ 167.947572][ T554] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.077137][ T554] bridge_slave_0: left allmulticast mode [ 168.084883][ T554] bridge_slave_0: left promiscuous mode [ 168.085159][ T554] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.105119][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.114906][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.116588][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.130245][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.133396][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.525821][ T6709] loop6: detected capacity change from 0 to 512 [ 168.657369][ T6712] netlink: 64 bytes leftover after parsing attributes in process `syz.5.244'. [ 169.322875][ T6722] net_ratelimit: 47 callbacks suppressed [ 169.323007][ T6722] ip_tables: iptables: counters copy to user failed while replacing table [ 169.518513][ T6725] binder: 6724:6725 ioctl c0306201 200000000080 returned -14 [ 169.574176][ T6725] binder: 6724:6725 ioctl c0306201 2000000003c0 returned -14 [ 169.691729][ T554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.756699][ T554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.768878][ T554] bond0 (unregistering): Released all slaves [ 170.148843][ T6713] syzkaller1: entered promiscuous mode [ 170.148896][ T6713] syzkaller1: entered allmulticast mode [ 170.171101][ T6722] lo: entered allmulticast mode [ 170.750930][ T5627] Bluetooth: hci1: command tx timeout [ 171.180762][ T6736] loop2: detected capacity change from 0 to 128 [ 171.243675][ T6736] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 171.265014][ T6736] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.882633][ T6746] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 172.250170][ T5620] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.628332][ T6760] netlink: 28 bytes leftover after parsing attributes in process `syz.6.259'. [ 172.633524][ T554] hsr_slave_0: left promiscuous mode [ 172.652302][ T554] hsr_slave_1: left promiscuous mode [ 172.666260][ T554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.666400][ T554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.693558][ T554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.693722][ T554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.761062][ T5627] Bluetooth: hci1: command tx timeout [ 172.813558][ T6763] netlink: 28 bytes leftover after parsing attributes in process `syz.6.259'. [ 172.826008][ T554] veth1_macvtap: left promiscuous mode [ 172.838130][ T554] veth0_macvtap: left promiscuous mode [ 172.844306][ T554] veth1_vlan: left promiscuous mode [ 172.849716][ T554] veth0_vlan: left promiscuous mode [ 173.240122][ T6771] loop0: detected capacity change from 0 to 512 [ 173.274206][ T6771] EXT4-fs (loop0): Test dummy encryption mode enabled [ 173.281197][ T6771] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 173.380235][ T6771] EXT4-fs (loop0): 1 truncate cleaned up [ 173.438273][ T6771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.344978][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.382046][ T6788] loop3: detected capacity change from 0 to 512 [ 174.448200][ T6788] EXT4-fs (loop3): Test dummy encryption mode enabled [ 174.448251][ T6788] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 174.528125][ T6788] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.264: bad orphan inode 131083 [ 174.528347][ T6788] loop3: lost filesystem error report for type 5 error -117 [ 174.539599][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 174.539631][ C1] EXT4-fs (loop3): initial error at time 1788045692: ext4_orphan_get:1429 [ 174.539669][ C1] EXT4-fs (loop3): last error at time 1788045692: ext4_orphan_get:1429 [ 174.666346][ T6788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.767692][ T6794] loop0: detected capacity change from 0 to 128 [ 174.824928][ T6794] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 174.843004][ T6794] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.843111][ T5627] Bluetooth: hci1: command tx timeout [ 175.287775][ T554] team0 (unregistering): Port device team_slave_1 removed [ 175.713986][ T5619] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.272081][ T5627] Bluetooth: hci1: command tx timeout [ 178.188365][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 178.583848][ T554] IPVS: stop unused estimator thread 0... [ 182.318537][ T554] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.393057][ T44] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 182.570374][ T44] usb 1-1: unable to get BOS descriptor or descriptor too short [ 182.580394][ T44] usb 1-1: not running at top speed; connect to a high speed hub [ 182.580461][ T44] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 182.605405][ T44] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 182.605470][ T44] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 182.605526][ T44] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 182.605568][ T44] usb 1-1: config 14 has no interface number 0 [ 182.605605][ T44] usb 1-1: config 14 has no interface number 1 [ 182.605690][ T44] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 182.605741][ T44] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 182.605794][ T44] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.605849][ T44] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 182.605904][ T44] usb 1-1: config 14 interface 57 has no altsetting 0 [ 182.605944][ T44] usb 1-1: config 14 interface 228 has no altsetting 0 [ 182.738128][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.738194][ T44] usb 1-1: Product: syz [ 182.738241][ T44] usb 1-1: Manufacturer: syz [ 182.738275][ T44] usb 1-1: SerialNumber: syz [ 183.352674][ T44] legousbtower 1-1:14.57: interrupt endpoints not found [ 183.360724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 183.449568][ T554] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.782850][ T44] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 183.895757][ T44] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 183.970694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 184.255148][ T554] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.482196][ T5760] usb 1-1: USB disconnect, device number 2 [ 184.483069][ C1] usb 1-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 184.612477][ T5760] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 184.687942][ T6700] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.701709][ T6700] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.709143][ T6700] bridge_slave_0: entered allmulticast mode [ 184.728306][ T6700] bridge_slave_0: entered promiscuous mode [ 184.772500][ T6700] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.783667][ T6700] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.783850][ T6700] bridge_slave_1: entered allmulticast mode [ 184.811144][ T6700] bridge_slave_1: entered promiscuous mode [ 185.034326][ T554] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.357910][ T6700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.385229][ T6700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.607416][ T6700] team0: Port device team_slave_0 added [ 185.664898][ T6700] team0: Port device team_slave_1 added [ 186.029477][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.040582][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.068045][ T6700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.109359][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.118401][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.118491][ T6700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.222590][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 186.601408][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.292'. [ 187.126165][ T6927] Invalid ELF header magic: != ELF [ 187.146135][ T6700] hsr_slave_0: entered promiscuous mode [ 187.179917][ T6700] hsr_slave_1: entered promiscuous mode [ 187.191881][ T6700] debugfs: 'hsr0' already exists in 'hsr' [ 187.192010][ T6700] Cannot create hsr debugfs directory [ 190.213567][ T554] bridge_slave_1: left allmulticast mode [ 190.213698][ T554] bridge_slave_1: left promiscuous mode [ 190.214363][ T554] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.401013][ T554] bridge_slave_0: left allmulticast mode [ 190.401143][ T554] bridge_slave_0: left promiscuous mode [ 190.402387][ T554] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.616240][ T6935] fuse: fd is not a fuse device [ 190.627281][ T6934] loop5: detected capacity change from 0 to 256 [ 190.644693][ T6934] exfat: Deprecated parameter 'namecase' [ 190.651700][ T6934] exfat: Deprecated parameter 'utf8' [ 190.716048][ T6934] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 190.929812][ T6934] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 191.239539][ T6946] netlink: 'syz.6.299': attribute type 1 has an invalid length. [ 191.354338][ T6949] netlink: 'syz.6.299': attribute type 10 has an invalid length. [ 191.363618][ T6949] netlink: 40 bytes leftover after parsing attributes in process `syz.6.299'. [ 191.929973][ T554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.946573][ T554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.960154][ T554] bond0 (unregistering): Released all slaves [ 192.132954][ T6949] dummy0: entered promiscuous mode [ 192.302714][ T6492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.844891][ T6963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.304'. [ 192.882656][ T554] hsr_slave_0: left promiscuous mode [ 192.902665][ T554] hsr_slave_1: left promiscuous mode [ 192.903687][ T554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.903736][ T554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.947840][ T554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.949426][ T554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.973476][ T6968] loop5: detected capacity change from 0 to 128 [ 193.013889][ T554] veth1_macvtap: left promiscuous mode [ 193.019692][ T554] veth0_macvtap: left promiscuous mode [ 193.027041][ T554] veth1_vlan: left promiscuous mode [ 193.079519][ T6968] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.100238][ T6968] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.396004][ T5618] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.541207][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.549508][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.558748][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.567810][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.567883][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.575469][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.579508][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.025036][ T6991] ip_tables: iptables: counters copy to user failed while replacing table [ 194.112373][ T554] team0 (unregistering): Port device team_slave_1 removed [ 194.163157][ T554] team0 (unregistering): Port device team_slave_0 removed [ 194.650307][ T6963] ip6gre1: entered promiscuous mode [ 194.657134][ T6963] ip6gre1: entered allmulticast mode [ 194.671681][ T6969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.304'. [ 195.643033][ T5621] Bluetooth: hci2: command tx timeout [ 195.907610][ T6992] smpboot: CPU 1 is now offline [ 196.099930][ T6700] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 196.156762][ T6700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 196.173625][ T6700] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 196.249162][ T6700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.285201][ T6700] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 196.344970][ T6700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 196.364109][ T6700] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 196.428804][ T6700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 197.723833][ T5621] Bluetooth: hci2: command tx timeout [ 198.036347][ T6700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.179119][ T6700] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.232367][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.232566][ T6498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.309318][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.309513][ T492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.429006][ T6977] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.429226][ T6977] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.429518][ T6977] bridge_slave_0: entered allmulticast mode [ 199.472349][ T6977] bridge_slave_0: entered promiscuous mode [ 199.516127][ T6977] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.526198][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.537982][ T6977] bridge_slave_1: entered allmulticast mode [ 199.552793][ T6977] bridge_slave_1: entered promiscuous mode [ 199.802076][ T5621] Bluetooth: hci2: command tx timeout [ 199.840049][ T6977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.880464][ T6977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.168205][ T6977] team0: Port device team_slave_0 added [ 200.198747][ T6977] team0: Port device team_slave_1 added [ 200.671766][ T6977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.679576][ T6977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.708981][ T6977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.750177][ T6977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.758233][ T6977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.791289][ T6977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.119681][ T6977] hsr_slave_0: entered promiscuous mode [ 201.144947][ T6977] hsr_slave_1: entered promiscuous mode [ 201.159787][ T6977] debugfs: 'hsr0' already exists in 'hsr' [ 201.159856][ T6977] Cannot create hsr debugfs directory [ 201.881504][ T5621] Bluetooth: hci2: command tx timeout [ 202.933148][ T6700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.998554][ T6977] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 203.053607][ T6977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 203.064128][ T6977] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 203.126662][ T6977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 203.137197][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 203.165216][ T6977] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 203.200387][ T6977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 203.215684][ T6977] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 203.265552][ T6977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 204.082321][ T6977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.245945][ T6977] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.320132][ T554] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.320323][ T554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.409755][ T6497] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.409947][ T6497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.064384][ T6700] veth0_vlan: entered promiscuous mode [ 206.197597][ T6700] veth1_vlan: entered promiscuous mode [ 206.534430][ T6700] veth0_macvtap: entered promiscuous mode [ 206.587445][ T6700] veth1_macvtap: entered promiscuous mode [ 206.725339][ T6700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.804505][ T6700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.961311][ T272] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.962551][ T272] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.962685][ T272] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.962787][ T272] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.629842][ T272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.629931][ T272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.922356][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.922431][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.906084][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 212.158549][ T5635] Bluetooth: hci5: command 0x0406 tx timeout [ 212.158674][ T5635] Bluetooth: hci4: command 0x0406 tx timeout [ 212.158770][ T5635] Bluetooth: hci3: command 0x0406 tx timeout [ 212.609082][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807fa97000: rx timeout, send abort [ 213.109327][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807fa97c00: rx timeout, send abort [ 213.118638][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807fa97000: abort rx timeout. Force session deactivation [ 213.609420][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807fa97c00: abort rx timeout. Force session deactivation [ 213.729320][ T6977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.013380][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.314'. [ 218.013478][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.314'. [ 220.034668][ T7159] CIFS: Attempting to mount //127.0.0.1/share [ 220.707743][ T7159] CIFS: VFS: cifs_mount failed w/return code = -112 [ 222.488901][ T6977] veth0_vlan: entered promiscuous mode [ 222.658971][ T6977] veth1_vlan: entered promiscuous mode [ 223.131248][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.330'. [ 223.310259][ T6977] veth0_macvtap: entered promiscuous mode [ 223.329061][ T7191] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 223.537615][ T6977] veth1_macvtap: entered promiscuous mode [ 223.804028][ T6977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.986937][ T6977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.123853][ T59] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.137774][ T59] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.314622][ T272] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.331235][ T272] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.671462][ T7210] mmap: syz.7.336 (7210): VmData 43757568 exceed data ulimit 128. Update limits or use boot option ignore_rlimit_data. [ 225.820980][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.821053][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.317512][ T5277] 8021q: adding VLAN 0 to HW filter on device eth9 [ 226.396085][ T6498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.396177][ T6498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.953394][ T7293] tipc: Started in network mode [ 241.953466][ T7293] tipc: Node identity 1000001, cluster identity 4369 [ 241.967984][ T7293] tipc: Node number set to 16777217 [ 242.363523][ T7301] tipc: New replicast peer: 127.0.0.1 [ 242.643909][ T7301] tipc: Enabled bearer , priority 10 [ 242.700601][ T5277] 8021q: adding VLAN 0 to HW filter on device eth10 [ 243.526768][ T5621] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 243.555561][ T5621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 243.568469][ T5621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 243.592984][ T5621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 243.601712][ T5621] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.785994][ T7308] netlink: 'syz.6.359': attribute type 1 has an invalid length. [ 245.058818][ T7308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.722680][ T5621] Bluetooth: hci6: command tx timeout [ 245.908096][ T7312] bond1: (slave geneve2): making interface the new active one [ 246.006498][ T7312] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 246.265535][ T7333] loop5: detected capacity change from 0 to 256 [ 246.626180][ T7333] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 246.952542][ T30] audit: type=1800 audit(1788045764.571:30): pid=7333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.363" name="file2" dev="loop5" ino=1048634 res=0 errno=0 [ 247.808102][ T5621] Bluetooth: hci6: command tx timeout [ 249.235448][ T5818] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 249.454388][ T5818] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 249.488130][ T5818] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.488260][ T5818] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 249.488333][ T5818] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 249.488395][ T5818] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 249.488462][ T5818] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 249.619768][ T5818] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 249.619867][ T5818] usb 9-1: Product: syz [ 249.619937][ T5818] usb 9-1: Manufacturer: syz [ 249.619996][ T5818] usb 9-1: SerialNumber: syz [ 249.683336][ T5818] usb 9-1: config 0 descriptor?? [ 249.884540][ T5627] Bluetooth: hci6: command tx timeout [ 250.563805][ T5818] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 250.564341][ T5818] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 252.005193][ T5621] Bluetooth: hci0: command 0x0406 tx timeout [ 252.005408][ T5621] Bluetooth: hci6: command tx timeout [ 252.364796][ T6649] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.870688][ T9] usb 9-1: USB disconnect, device number 2 [ 253.325816][ T6649] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.907034][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 254.047382][ T6649] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.098729][ T9] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 254.124513][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.124647][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.275592][ T9] usb 9-1: config 0 descriptor?? [ 254.356593][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 255.017505][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.025563][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.089464][ T6649] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.193322][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 255.233065][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 255.273050][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 255.309062][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 255.391662][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 255.452581][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 255.477487][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 255.518482][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 255.783580][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 255.794137][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 255.808846][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 255.832540][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 255.845907][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 255.863180][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 255.876975][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 256.071198][ T9] pwc: Registered as video103. [ 256.200431][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input8 [ 256.626198][ T9] usb 9-1: USB disconnect, device number 3 [ 259.428638][ T5277] 8021q: adding VLAN 0 to HW filter on device eth11 [ 259.807982][ T6649] bridge_slave_1: left allmulticast mode [ 259.819840][ T6649] bridge_slave_1: left promiscuous mode [ 259.820230][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.947973][ T6649] bridge_slave_0: left allmulticast mode [ 259.994370][ T6649] bridge_slave_0: left promiscuous mode [ 259.994817][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.475933][ T7431] loop8: detected capacity change from 0 to 1024 [ 260.742542][ T7430] loop5: detected capacity change from 0 to 4096 [ 260.884468][ T7430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.890267][ T7431] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.720011][ T7443] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 262.513487][ T7450] jffs2: notice: (7450) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 262.875936][ T6977] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.895276][ T5618] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 262.946725][ T5618] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 263.390348][ T6649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.474934][ T6649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.533192][ T6649] bond0 (unregistering): Released all slaves [ 271.616845][ T6649] hsr_slave_0: left promiscuous mode [ 271.634402][ T6649] hsr_slave_1: left promiscuous mode [ 271.635955][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.636042][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.679274][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.679367][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.845658][ T6649] veth1_macvtap: left promiscuous mode [ 271.866140][ T6649] veth0_macvtap: left promiscuous mode [ 271.903869][ T6649] veth1_vlan: left promiscuous mode [ 271.915688][ T6649] veth0_vlan: left promiscuous mode [ 278.867109][ T7503] Cannot find add_set index 0 as target [ 279.017135][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.034893][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.047644][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.081332][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.096172][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.161017][ T5626] Bluetooth: hci3: command tx timeout [ 281.193325][ T7526] loop0: detected capacity change from 0 to 256 [ 281.379939][ T6649] team0 (unregistering): Port device team_slave_1 removed [ 281.413822][ T7526] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 281.715622][ T6649] team0 (unregistering): Port device team_slave_0 removed [ 281.753641][ T7526] exFAT-fs (loop0): start_clu is invalid cluster(0x0) [ 283.242045][ T5626] Bluetooth: hci3: command tx timeout [ 285.321032][ T5626] Bluetooth: hci3: command tx timeout [ 286.352337][ T5277] 8021q: adding VLAN 0 to HW filter on device eth12 [ 287.401049][ T5626] Bluetooth: hci3: command tx timeout [ 289.037231][ T7569] netlink: 'syz.7.415': attribute type 4 has an invalid length. [ 289.974894][ T7578] batman_adv: batadv0: Adding interface: veth0 [ 289.986716][ T7578] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.014774][ T7578] batman_adv: batadv0: Interface activated: veth0 [ 290.255168][ T7576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.255259][ T7576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.527829][ T7576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.527904][ T7576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.578000][ T7576] batman_adv: batadv0: Interface deactivated: veth0 [ 290.588162][ T7576] batman_adv: batadv0: Removing interface: veth0 [ 291.034806][ T7305] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.035025][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.035326][ T7305] bridge_slave_0: entered allmulticast mode [ 291.085633][ T7305] bridge_slave_0: entered promiscuous mode [ 291.134495][ T7305] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.134718][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.135007][ T7305] bridge_slave_1: entered allmulticast mode [ 291.203956][ T7305] bridge_slave_1: entered promiscuous mode [ 291.665171][ T7593] fuse: fd is not a fuse device [ 291.715705][ T7305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.796293][ T7305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.496561][ T7305] team0: Port device team_slave_0 added [ 292.598313][ T7305] team0: Port device team_slave_1 added [ 292.930945][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 293.240326][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.256144][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.257562][ T7305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.496992][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.511324][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.540228][ T7305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.463366][ T7305] hsr_slave_0: entered promiscuous mode [ 294.485710][ T7305] hsr_slave_1: entered promiscuous mode [ 294.502780][ T7305] debugfs: 'hsr0' already exists in 'hsr' [ 294.502849][ T7305] Cannot create hsr debugfs directory [ 295.636809][ T7621] bridge0: port 3(syz_tun) entered blocking state [ 295.676962][ T7621] bridge0: port 3(syz_tun) entered disabled state [ 295.713305][ T7621] syz_tun: entered allmulticast mode [ 295.778906][ T7621] syz_tun: entered promiscuous mode [ 295.809339][ T7621] bridge0: port 3(syz_tun) entered blocking state [ 295.810029][ T7621] bridge0: port 3(syz_tun) entered forwarding state [ 296.811313][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13 [ 300.643782][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 302.639349][ T7640] vlan2: entered promiscuous mode [ 302.639450][ T7640] hsr0: entered promiscuous mode [ 302.710094][ T7640] vlan2: entered allmulticast mode [ 302.710233][ T7640] hsr0: entered allmulticast mode [ 302.710301][ T7640] hsr_slave_0: entered allmulticast mode [ 302.710370][ T7640] hsr_slave_1: entered allmulticast mode [ 303.366994][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 303.378365][ T9] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 303.393437][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 303.393560][ T9] usb 1-1: can't read configurations, error -71 [ 303.878340][ T7655] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 304.156891][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 304.169153][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 304.179423][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 304.206171][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 304.220255][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.785497][ T7506] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.785727][ T7506] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.786029][ T7506] bridge_slave_0: entered allmulticast mode [ 305.850414][ T7506] bridge_slave_0: entered promiscuous mode [ 305.898818][ T7506] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.913000][ T7506] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.922515][ T7506] bridge_slave_1: entered allmulticast mode [ 305.967177][ T30] audit: type=1326 audit(1788045823.591:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.7.438" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed0d79e159 code=0x0 [ 306.007652][ T7506] bridge_slave_1: entered promiscuous mode [ 306.075944][ T30] audit: type=1326 audit(1788045823.701:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.7.438" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0d79e159 code=0x7ffc0000 [ 306.106013][ T30] audit: type=1326 audit(1788045823.731:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.7.438" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0d79e159 code=0x7ffc0000 [ 306.189550][ T30] audit: type=1326 audit(1788045823.811:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.7.438" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed0d75e98e code=0x7ffc0000 [ 306.269938][ T30] audit: type=1326 audit(1788045823.891:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.7.438" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed0d75e98e code=0x7ffc0000 [ 306.298415][ T5627] Bluetooth: hci5: command tx timeout [ 306.515473][ T30] audit: type=1326 audit(1788045824.141:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.7.438" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fed0d79e159 code=0x7ffc0000 [ 306.515605][ T30] audit: type=1326 audit(1788045824.141:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.7.438" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fed0d79e159 code=0x7ffc0000 [ 306.798227][ T7506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.906345][ T7506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.682134][ T7506] team0: Port device team_slave_0 added [ 307.747841][ T7506] team0: Port device team_slave_1 added [ 308.362942][ T5627] Bluetooth: hci5: command tx timeout [ 308.477734][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.488167][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.488263][ T7506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.639098][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.639167][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.639253][ T7506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.629858][ T7506] hsr_slave_0: entered promiscuous mode [ 309.665132][ T7506] hsr_slave_1: entered promiscuous mode [ 309.696542][ T7506] debugfs: 'hsr0' already exists in 'hsr' [ 309.711361][ T7506] Cannot create hsr debugfs directory [ 309.791719][ T988] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 309.968173][ T988] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 309.984132][ T988] usb 9-1: config 0 has no interfaces? [ 310.048489][ T988] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.048594][ T988] usb 9-1: Product: syz [ 310.048679][ T988] usb 9-1: Manufacturer: syz [ 310.048722][ T988] usb 9-1: SerialNumber: syz [ 310.276501][ T988] usb 9-1: config 0 descriptor?? [ 310.441907][ T5627] Bluetooth: hci5: command tx timeout [ 311.679180][ T5277] 8021q: adding VLAN 0 to HW filter on device eth14 [ 312.776241][ T5627] Bluetooth: hci5: command tx timeout [ 315.979150][ T988] usb 9-1: USB disconnect, device number 4 [ 316.460688][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.468090][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.028323][ T5621] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 318.045566][ T5621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 318.055453][ T5621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 318.073220][ T5621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 318.092987][ T5621] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 318.521282][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 320.023101][ T6977] bridge0: port 3(syz_tun) entered disabled state [ 320.211143][ T5626] Bluetooth: hci6: command tx timeout [ 320.338248][ T6977] syz_tun (unregistering): left allmulticast mode [ 320.349493][ T6977] syz_tun (unregistering): left promiscuous mode [ 320.358129][ T6977] bridge0: port 3(syz_tun) entered disabled state [ 322.281947][ T5626] Bluetooth: hci6: command tx timeout [ 323.564452][ T7760] faux_driver vgem: [drm] Unknown color mode 55359; guessing buffer size. [ 323.824051][ T7765] fuse: fd is not a fuse device [ 324.362157][ T5626] Bluetooth: hci6: command tx timeout [ 325.156152][ T6647] bridge_slave_1: left allmulticast mode [ 325.156249][ T6647] bridge_slave_1: left promiscuous mode [ 325.156634][ T6647] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.199526][ T6647] bridge_slave_0: left allmulticast mode [ 325.199629][ T6647] bridge_slave_0: left promiscuous mode [ 325.220334][ T6647] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.443206][ T5626] Bluetooth: hci6: command tx timeout [ 326.457967][ T6647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.525919][ T6647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.567745][ T6647] bond0 (unregistering): Released all slaves [ 328.784984][ T6647] hsr_slave_0: left promiscuous mode [ 328.818642][ T6647] hsr_slave_1: left promiscuous mode [ 328.820211][ T6647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.906688][ T6647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.491780][ T6647] team0 (unregistering): Port device team_slave_1 removed [ 335.684654][ T6647] team0 (unregistering): Port device team_slave_0 removed [ 335.943116][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.956903][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.969752][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.984788][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.994261][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.522482][ T5277] 8021q: adding VLAN 0 to HW filter on device eth15 [ 338.051081][ T5626] Bluetooth: hci2: command tx timeout [ 340.361188][ T5626] Bluetooth: hci2: command tx timeout [ 341.207348][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.6.470'. [ 341.577997][ T7835] 8021q: adding VLAN 0 to HW filter on device bond2 [ 341.885737][ T7839] bond2: (slave ip6erspan0): making interface the new active one [ 341.916564][ T7839] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 342.442517][ T5626] Bluetooth: hci2: command tx timeout [ 343.117393][ T7658] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.117619][ T7658] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.117887][ T7658] bridge_slave_0: entered allmulticast mode [ 343.169486][ T7658] bridge_slave_0: entered promiscuous mode [ 344.437823][ T6647] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.521472][ T5626] Bluetooth: hci2: command tx timeout [ 344.720189][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.476'. [ 344.752112][ T7658] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.762875][ T7658] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.763043][ T7658] bridge_slave_1: entered allmulticast mode [ 344.817579][ T7658] bridge_slave_1: entered promiscuous mode [ 346.159868][ T6647] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.357390][ T7658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.835923][ T7658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.150298][ T7880] netlink: 'syz.6.478': attribute type 10 has an invalid length. [ 347.856018][ T6647] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.969626][ T7878] bridge0: port 3(netdevsim0) entered blocking state [ 347.969824][ T7878] bridge0: port 3(netdevsim0) entered disabled state [ 347.970159][ T7878] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 348.120063][ T7878] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 348.193983][ T7878] bridge0: port 3(netdevsim0) entered blocking state [ 348.194156][ T7878] bridge0: port 3(netdevsim0) entered forwarding state [ 348.399989][ T7880] bridge0: port 3(netdevsim0) entered disabled state [ 348.400306][ T7880] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.404798][ T7880] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.554621][ T7880] bridge0: port 3(netdevsim0) entered blocking state [ 348.554840][ T7880] bridge0: port 3(netdevsim0) entered forwarding state [ 348.555305][ T7880] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.555498][ T7880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.555894][ T7880] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.556099][ T7880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.714007][ T7880] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 348.978875][ T7658] team0: Port device team_slave_0 added [ 349.289329][ T6647] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.592438][ T7658] team0: Port device team_slave_1 added [ 350.003438][ T7893] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.150083][ T7894] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 350.226455][ T7658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.238716][ T7658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.238775][ T7658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.415611][ T7658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.444042][ T7658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.475956][ T7658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.567644][ T7896] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 351.059160][ T5277] 8021q: adding VLAN 0 to HW filter on device eth16 [ 352.083212][ T7658] hsr_slave_0: entered promiscuous mode [ 352.088373][ T7658] hsr_slave_1: entered promiscuous mode [ 352.113821][ T7658] debugfs: 'hsr0' already exists in 'hsr' [ 352.113893][ T7658] Cannot create hsr debugfs directory [ 352.266035][ T7329] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 352.450138][ T7329] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 352.467701][ T7329] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 352.467790][ T7329] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 352.467887][ T7329] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 352.467988][ T7329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.616619][ T7908] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 352.616906][ T7908] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 352.696587][ T7329] pl2303 1-1:1.0: pl2303 converter detected [ 352.738364][ T7329] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 353.478556][ T6647] bridge_slave_1: left allmulticast mode [ 353.487989][ T6647] bridge_slave_1: left promiscuous mode [ 353.494931][ T6647] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.545461][ T6647] bridge_slave_0: left allmulticast mode [ 353.554441][ T6647] bridge_slave_0: left promiscuous mode [ 353.565621][ T6647] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.241411][ T7922] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -110 [ 354.243450][ T7922] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 355.688853][ T7907] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 355.932036][ T7907] pl2303 ttyUSB0: error sending break = -32 [ 355.943966][ T9] usb 1-1: USB disconnect, device number 5 [ 358.232421][ T9] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 358.251792][ T9] pl2303 1-1:1.0: device disconnected [ 359.186264][ T6647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.253497][ T6647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.291574][ T6647] bond0 (unregistering): Released all slaves [ 359.341021][ T7938] ieee802154 phy0 wpan0: encryption failed: -22 [ 360.515212][ T7727] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.515440][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.515768][ T7727] bridge_slave_0: entered allmulticast mode [ 360.578247][ T7727] bridge_slave_0: entered promiscuous mode [ 360.928192][ T7727] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.928397][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.928724][ T7727] bridge_slave_1: entered allmulticast mode [ 360.998947][ T7727] bridge_slave_1: entered promiscuous mode [ 362.966131][ T7727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.782137][ T6647] hsr_slave_0: left promiscuous mode [ 363.803219][ T6647] hsr_slave_1: left promiscuous mode [ 363.998614][ T6647] veth1_macvtap: left promiscuous mode [ 364.017015][ T6647] veth0_macvtap: left promiscuous mode [ 364.017142][ T6647] veth1_vlan: left promiscuous mode [ 364.017222][ T6647] veth0_vlan: left promiscuous mode [ 364.468236][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.486414][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.495336][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.516592][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.529904][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.602713][ T5626] Bluetooth: hci3: command tx timeout [ 366.849382][ T6647] team0 (unregistering): Port device team_slave_1 removed [ 366.975519][ T6647] team0 (unregistering): Port device team_slave_0 removed [ 368.030486][ T7727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.682024][ T5626] Bluetooth: hci3: command tx timeout [ 368.902661][ T7727] team0: Port device team_slave_0 added [ 369.208435][ T7727] team0: Port device team_slave_1 added [ 370.218733][ T7811] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.218985][ T7811] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.219282][ T7811] bridge_slave_0: entered allmulticast mode [ 370.260576][ T7811] bridge_slave_0: entered promiscuous mode [ 370.379387][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.388555][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.420896][ T7727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.442468][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.442503][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.442571][ T7727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.645214][ T7811] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.645416][ T7811] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.645735][ T7811] bridge_slave_1: entered allmulticast mode [ 370.679366][ T7811] bridge_slave_1: entered promiscuous mode [ 370.760918][ T5626] Bluetooth: hci3: command tx timeout [ 371.850067][ T7811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.895643][ T7811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.038449][ T8027] fuse: fd is not a fuse device [ 372.164952][ T7727] hsr_slave_0: entered promiscuous mode [ 372.187164][ T7727] hsr_slave_1: entered promiscuous mode [ 372.206310][ T7727] debugfs: 'hsr0' already exists in 'hsr' [ 372.213174][ T7727] Cannot create hsr debugfs directory [ 372.840940][ T5626] Bluetooth: hci3: command tx timeout [ 373.354203][ T7811] team0: Port device team_slave_0 added [ 373.398396][ T7811] team0: Port device team_slave_1 added [ 374.013250][ T8039] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 374.025801][ T8039] overlayfs: failed to set xattr on upper [ 374.051648][ T8039] overlayfs: ...falling back to redirect_dir=nofollow. [ 374.060647][ T8039] overlayfs: ...falling back to index=off. [ 374.087441][ T8039] overlayfs: ...falling back to uuid=null. [ 374.087666][ T8039] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 374.158181][ T8041] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 374.158255][ T8041] overlayfs: failed to set xattr on upper [ 374.158314][ T8041] overlayfs: ...falling back to redirect_dir=nofollow. [ 374.158346][ T8041] overlayfs: ...falling back to index=off. [ 374.158377][ T8041] overlayfs: ...falling back to uuid=null. [ 374.158515][ T8041] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 374.158668][ T8041] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 374.354741][ T7811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.354828][ T7811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.354928][ T7811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.396379][ T7811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.396398][ T7811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.396431][ T7811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.506064][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.7.509'. [ 375.635013][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.7.509'. [ 375.894512][ T7811] hsr_slave_0: entered promiscuous mode [ 375.916016][ T7811] hsr_slave_1: entered promiscuous mode [ 375.941251][ T7811] debugfs: 'hsr0' already exists in 'hsr' [ 375.941338][ T7811] Cannot create hsr debugfs directory [ 376.483648][ T8061] netlink: 'syz.6.511': attribute type 1 has an invalid length. [ 377.504519][ T8061] bond3: entered allmulticast mode [ 377.669714][ T8062] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 377.691034][ T8062] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 377.746321][ T8062] bond3: (slave vti0): making interface the new active one [ 377.759427][ T8062] vti0: entered allmulticast mode [ 377.767165][ T8062] bond3: (slave vti0): Enslaving as an active interface with an up link [ 377.895131][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.902409][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.159091][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.179395][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.202398][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.233402][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.243039][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.359340][ T8063] bond3 (unregistering): (slave vti0): Releasing backup interface [ 378.371092][ T8063] vti0: left allmulticast mode [ 378.468808][ T8063] bond3 (unregistering): Released all slaves [ 380.362738][ T5626] Bluetooth: hci5: command tx timeout [ 380.894348][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.7.516'. [ 381.047741][ T8092] netlink: 'syz.7.516': attribute type 10 has an invalid length. [ 381.066082][ T8092] netlink: 40 bytes leftover after parsing attributes in process `syz.7.516'. [ 381.627351][ T6647] bridge_slave_1: left allmulticast mode [ 381.627446][ T6647] bridge_slave_1: left promiscuous mode [ 381.627843][ T6647] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.760369][ T6647] bridge_slave_0: left allmulticast mode [ 381.760464][ T6647] bridge_slave_0: left promiscuous mode [ 381.760959][ T6647] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.860374][ T6647] bridge_slave_1: left allmulticast mode [ 381.860468][ T6647] bridge_slave_1: left promiscuous mode [ 381.880428][ T6647] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.926700][ T6647] bridge_slave_0: left allmulticast mode [ 381.935020][ T6647] bridge_slave_0: left promiscuous mode [ 381.942631][ T6647] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.442516][ T5626] Bluetooth: hci5: command tx timeout [ 382.534306][ T6647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.562154][ T6647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.584732][ T6647] bond0 (unregistering): Released all slaves [ 383.218195][ T6647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.259935][ T6647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.271572][ T6647] bond0 (unregistering): Released all slaves [ 383.363616][ T8091] bridge1: port 1(dummy0) entered blocking state [ 383.363847][ T8091] bridge1: port 1(dummy0) entered disabled state [ 383.371964][ T8091] dummy0: entered allmulticast mode [ 383.373601][ T8091] dummy0: entered promiscuous mode [ 383.374553][ T8091] bridge1: port 1(dummy0) entered blocking state [ 383.374653][ T8091] bridge1: port 1(dummy0) entered forwarding state [ 383.496728][ T8092] dummy0: left allmulticast mode [ 383.513860][ T8092] bridge1: port 1(dummy0) entered disabled state [ 384.380237][ T6647] hsr_slave_0: left promiscuous mode [ 384.395976][ T6647] hsr_slave_1: left promiscuous mode [ 384.397488][ T6647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.426943][ T6647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.521250][ T5626] Bluetooth: hci5: command tx timeout [ 384.542391][ T6647] hsr_slave_0: left promiscuous mode [ 384.554603][ T6647] hsr_slave_1: left promiscuous mode [ 384.574989][ T6647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.595761][ T6647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.998674][ T8110] netlink: 'syz.6.521': attribute type 1 has an invalid length. [ 386.019805][ T6647] team0 (unregistering): Port device team_slave_1 removed [ 386.117033][ T6647] team0 (unregistering): Port device team_slave_0 removed [ 386.603235][ T5626] Bluetooth: hci5: command tx timeout [ 388.056335][ T6647] team0 (unregistering): Port device team_slave_1 removed [ 388.153002][ T6647] team0 (unregistering): Port device team_slave_0 removed [ 388.673384][ T8116] loop7: detected capacity change from 0 to 32768 [ 389.643928][ T8110] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 394.302826][ T30] audit: type=1804 audit(1788045911.931:38): pid=8147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.526" name="bus" dev="ramfs" ino=20237 res=1 errno=0 [ 394.549644][ T30] audit: type=1804 audit(1788045912.171:39): pid=8149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.526" name="bus" dev="ramfs" ino=20237 res=1 errno=0 [ 395.936133][ T5621] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 395.951136][ T5621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 395.964449][ T5621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 395.989181][ T5621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 396.005576][ T5621] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 396.222828][ T533] bridge_slave_1: left allmulticast mode [ 396.222926][ T533] bridge_slave_1: left promiscuous mode [ 396.223329][ T533] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.317173][ T533] bridge_slave_0: left allmulticast mode [ 396.348169][ T533] bridge_slave_0: left promiscuous mode [ 396.348591][ T533] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.569012][ T30] audit: type=1326 audit(1788045914.191:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.7.529" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0d79e159 code=0x7ffc0000 [ 396.638373][ T30] audit: type=1326 audit(1788045914.261:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.7.529" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0d79e159 code=0x7ffc0000 [ 396.713707][ T30] audit: type=1326 audit(1788045914.331:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.7.529" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fed0d79e159 code=0x7ffc0000 [ 396.713838][ T30] audit: type=1326 audit(1788045914.331:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.7.529" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0d79e159 code=0x7ffc0000 [ 396.713972][ T30] audit: type=1326 audit(1788045914.341:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.7.529" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0d79e159 code=0x7ffc0000 [ 396.863394][ T30] audit: type=1326 audit(1788045914.481:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.7.529" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fed0d79e159 code=0x7ffc0000 [ 396.962629][ T30] audit: type=1326 audit(1788045914.581:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.7.529" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0d79e159 code=0x7ffc0000 [ 396.962760][ T30] audit: type=1326 audit(1788045914.581:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.7.529" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0d79e159 code=0x7ffc0000 [ 397.626068][ T533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.714117][ T533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.764835][ T533] bond0 (unregistering): Released all slaves [ 397.857676][ T7977] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.857879][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.858200][ T7977] bridge_slave_0: entered allmulticast mode [ 397.903000][ T7977] bridge_slave_0: entered promiscuous mode [ 397.974300][ T7977] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.006813][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.007136][ T7977] bridge_slave_1: entered allmulticast mode [ 398.042190][ T7977] bridge_slave_1: entered promiscuous mode [ 398.122346][ T5626] Bluetooth: hci6: command tx timeout [ 398.816237][ T533] hsr_slave_0: left promiscuous mode [ 398.864702][ T533] hsr_slave_1: left promiscuous mode [ 398.866364][ T533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.910224][ T533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.204791][ T5626] Bluetooth: hci6: command tx timeout [ 400.355104][ T533] team0 (unregistering): Port device team_slave_1 removed [ 400.466948][ T533] team0 (unregistering): Port device team_slave_0 removed [ 401.587705][ T8176] bond0: (slave bridge0): Releasing backup interface [ 401.626237][ T8176] bridge0: port 3(netdevsim0) entered disabled state [ 401.627479][ T8176] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.627911][ T8176] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.728713][ T8176] bridge_slave_0: left allmulticast mode [ 401.728807][ T8176] bridge_slave_0: left promiscuous mode [ 401.746797][ T8176] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.777694][ T8176] bridge_slave_1: left allmulticast mode [ 401.791927][ T8176] bridge_slave_1: left promiscuous mode [ 401.803661][ T8176] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.836258][ T8176] bond0: (slave bond_slave_0): Releasing backup interface [ 401.920173][ T8176] bond0: (slave bond_slave_1): Releasing backup interface [ 402.022840][ T8176] team0: Port device team_slave_0 removed [ 402.084052][ T8176] team0: Port device team_slave_1 removed [ 402.098637][ T8176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.098742][ T8176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.139272][ T8176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.151632][ T8176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.187646][ T8176] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 402.282793][ T5626] Bluetooth: hci6: command tx timeout [ 403.290317][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 403.290381][ T30] audit: type=1326 audit(1788045920.911:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.0.535" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f748df9e159 code=0x0 [ 403.422639][ T7977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.469006][ T7977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.079825][ T7977] team0: Port device team_slave_0 added [ 404.175086][ T7977] team0: Port device team_slave_1 added [ 404.371270][ T5626] Bluetooth: hci6: command tx timeout [ 404.716940][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.729470][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.760029][ T7977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.761862][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.761879][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.761914][ T7977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.035590][ T492] bridge_slave_1: left allmulticast mode [ 405.035692][ T492] bridge_slave_1: left promiscuous mode [ 405.036096][ T492] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.089310][ T492] bridge_slave_0: left allmulticast mode [ 405.098504][ T492] bridge_slave_0: left promiscuous mode [ 405.098934][ T492] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.422121][ T492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.484156][ T492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.526165][ T492] bond0 (unregistering): Released all slaves [ 407.364292][ T492] hsr_slave_0: left promiscuous mode [ 407.398957][ T492] hsr_slave_1: left promiscuous mode [ 407.400495][ T492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.456339][ T492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.570381][ T492] team0 (unregistering): Port device team_slave_1 removed [ 410.689061][ T492] team0 (unregistering): Port device team_slave_0 removed [ 411.564163][ T8234] warning: `syz.0.540' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 411.700113][ T7977] hsr_slave_0: entered promiscuous mode [ 411.716542][ T7977] hsr_slave_1: entered promiscuous mode [ 411.734534][ T7977] debugfs: 'hsr0' already exists in 'hsr' [ 411.741275][ T7977] Cannot create hsr debugfs directory [ 411.929798][ T8240] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 412.685354][ T988] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 412.844017][ T988] usb 1-1: Using ep0 maxpacket: 16 [ 412.851001][ T988] usb 1-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 412.870098][ T988] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 412.870202][ T988] usb 1-1: config 0 interface 0 has no altsetting 0 [ 412.870308][ T988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.974831][ T988] usb 1-1: config 0 descriptor?? [ 413.951451][ T8073] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.951675][ T8073] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.951940][ T8073] bridge_slave_0: entered allmulticast mode [ 414.013217][ T8073] bridge_slave_0: entered promiscuous mode [ 414.050022][ T8073] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.050244][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.050549][ T8073] bridge_slave_1: entered allmulticast mode [ 414.105260][ T8073] bridge_slave_1: entered promiscuous mode [ 414.114181][ T988] smartjoyplus 0003:6666:8802.0001: hidraw0: USB HID v10.01 Device [HID 6666:8802] on usb-dummy_hcd.0-1/input0 [ 414.200357][ T988] usb 1-1: USB disconnect, device number 6 [ 415.453217][ T8073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.708128][ T8271] fido_id[8271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 416.767393][ T8073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.010689][ T8073] team0: Port device team_slave_0 added [ 419.346279][ T8073] team0: Port device team_slave_1 added [ 420.120270][ T8073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.128208][ T8073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.128246][ T8073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.129951][ T8073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.129968][ T8073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.130001][ T8073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.146160][ T8073] hsr_slave_0: entered promiscuous mode [ 423.148010][ T8073] hsr_slave_1: entered promiscuous mode [ 423.188212][ T8073] debugfs: 'hsr0' already exists in 'hsr' [ 423.198567][ T8073] Cannot create hsr debugfs directory [ 424.985390][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 424.996143][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 425.009803][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 425.026609][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 425.039652][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 425.817066][ T8161] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.827728][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.840137][ T8161] bridge_slave_0: entered allmulticast mode [ 425.876615][ T8161] bridge_slave_0: entered promiscuous mode [ 426.175636][ T8161] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.175854][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.176573][ T8161] bridge_slave_1: entered allmulticast mode [ 426.249761][ T8161] bridge_slave_1: entered promiscuous mode [ 426.858920][ T8161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.081369][ T5621] Bluetooth: hci2: command tx timeout [ 427.288730][ T8161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.750239][ T8332] jffs2: notice: (8332) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 427.991957][ T8161] team0: Port device team_slave_0 added [ 428.035954][ T8161] team0: Port device team_slave_1 added [ 429.165243][ T5621] Bluetooth: hci2: command tx timeout [ 429.594688][ T8345] netlink: 'syz.7.563': attribute type 1 has an invalid length. [ 429.843719][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.854218][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.854281][ T8161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.387469][ T8345] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.662148][ T8352] bond1: (slave geneve2): making interface the new active one [ 430.738574][ T8352] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 430.778957][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.779023][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.779108][ T8161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.959180][ T13] bridge_slave_1: left allmulticast mode [ 430.959275][ T13] bridge_slave_1: left promiscuous mode [ 430.959769][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.042147][ T13] bridge_slave_0: left allmulticast mode [ 431.042225][ T13] bridge_slave_0: left promiscuous mode [ 431.042619][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.241887][ T5621] Bluetooth: hci2: command tx timeout [ 433.326868][ T5621] Bluetooth: hci2: command tx timeout [ 433.743826][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.886417][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.246246][ T13] bond0 (unregistering): Released all slaves [ 437.970277][ T13] hsr_slave_0: left promiscuous mode [ 438.035938][ T13] hsr_slave_1: left promiscuous mode [ 438.037576][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.073592][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.331655][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.338784][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.411915][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 439.429744][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 439.441082][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 439.452475][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 439.465751][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 439.690314][ T8407] loop7: detected capacity change from 0 to 512 [ 439.770929][ T8407] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 439.826995][ T8407] EXT4-fs error (device loop7): ext4_free_branches:1020: inode #11: comm syz.7.573: invalid indirect mapped block 9 (level 0) [ 439.827232][ T8407] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 439.830965][ C0] EXT4-fs (loop7): initial error at time 1788045957: ext4_free_branches:1020: inode 11 [ 439.832638][ C0] EXT4-fs (loop7): last error at time 1788045957: ext4_free_branches:1020: inode 11 [ 439.973119][ T8407] EXT4-fs (loop7): 1 truncate cleaned up [ 439.991953][ T8407] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.256991][ T8407] netlink: 'syz.7.573': attribute type 16 has an invalid length. [ 440.257066][ T8407] netlink: 'syz.7.573': attribute type 17 has an invalid length. [ 441.317461][ T13] team0 (unregistering): Port device team_slave_1 removed [ 441.388377][ T13] team0 (unregistering): Port device team_slave_0 removed [ 441.563583][ T5621] Bluetooth: hci3: command tx timeout [ 442.571957][ T8407] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 443.140341][ T6700] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.645432][ T5621] Bluetooth: hci3: command tx timeout [ 443.955276][ T8161] hsr_slave_0: entered promiscuous mode [ 443.985318][ T8161] hsr_slave_1: entered promiscuous mode [ 444.005990][ T8161] debugfs: 'hsr0' already exists in 'hsr' [ 444.006061][ T8161] Cannot create hsr debugfs directory [ 444.489048][ T8430] bond1: entered promiscuous mode [ 444.500217][ T8430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.835929][ T8434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.860187][ T8434] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 444.880528][ T8434] bond1: (slave ip6gre2): Error -95 calling set_mac_address [ 445.721714][ T5621] Bluetooth: hci3: command tx timeout [ 447.806931][ T5621] Bluetooth: hci3: command tx timeout [ 459.231121][ T988] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 459.411429][ T988] usb 1-1: Using ep0 maxpacket: 8 [ 459.438593][ T988] usb 1-1: unable to get BOS descriptor or descriptor too short [ 459.438725][ T988] usb 1-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 459.438821][ T988] usb 1-1: too many configurations: 141, using maximum allowed: 8 [ 459.498107][ T988] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.498226][ T988] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 459.529417][ T988] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.529547][ T988] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 459.563566][ T988] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.563700][ T988] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 459.625899][ T988] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.626031][ T988] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 459.677448][ T988] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.677570][ T988] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 459.725775][ T988] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.725971][ T988] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 459.765355][ T988] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.765484][ T988] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 459.810377][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 459.854994][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 459.870740][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 459.897023][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 459.910435][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 459.923537][ T988] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.923664][ T988] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 460.056087][ T988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.056186][ T988] usb 1-1: Product: syz [ 460.056256][ T988] usb 1-1: Manufacturer: syz [ 460.056316][ T988] usb 1-1: SerialNumber: syz [ 460.372770][ T12] bridge_slave_1: left allmulticast mode [ 460.372894][ T12] bridge_slave_1: left promiscuous mode [ 460.373389][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.495101][ T12] bridge_slave_0: left allmulticast mode [ 460.495221][ T12] bridge_slave_0: left promiscuous mode [ 460.495714][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.759252][ T988] usb 1-1: USB disconnect, device number 7 [ 462.040946][ T5621] Bluetooth: hci5: command tx timeout [ 462.103828][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.227264][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.300409][ T12] bond0 (unregistering): Released all slaves [ 462.406307][ T30] audit: type=1326 audit(1788045980.031:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.7.587" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed0d79e159 code=0x0 [ 462.886742][ T8513] netlink: 'syz.6.590': attribute type 2 has an invalid length. [ 463.301305][ T12] hsr_slave_0: left promiscuous mode [ 463.315787][ T12] hsr_slave_1: left promiscuous mode [ 463.317298][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.345567][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.123342][ T5621] Bluetooth: hci5: command tx timeout [ 464.445499][ T12] team0 (unregistering): Port device team_slave_1 removed [ 464.520509][ T12] team0 (unregistering): Port device team_slave_0 removed [ 465.693933][ T8528] netlink: 'syz.7.593': attribute type 11 has an invalid length. [ 465.923024][ T8314] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.965449][ T8314] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.965778][ T8314] bridge_slave_0: entered allmulticast mode [ 465.995794][ T8314] bridge_slave_0: entered promiscuous mode [ 466.201749][ T5621] Bluetooth: hci5: command tx timeout [ 467.298559][ T8314] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.298786][ T8314] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.299089][ T8314] bridge_slave_1: entered allmulticast mode [ 467.335167][ T8314] bridge_slave_1: entered promiscuous mode [ 468.202618][ T8314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.282031][ T5621] Bluetooth: hci5: command tx timeout [ 468.376695][ T8314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.668050][ T12] bridge_slave_1: left allmulticast mode [ 468.668146][ T12] bridge_slave_1: left promiscuous mode [ 468.668565][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.777361][ T12] bridge_slave_0: left allmulticast mode [ 468.797934][ T12] bridge_slave_0: left promiscuous mode [ 468.798359][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.565787][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.611592][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.690406][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.600'. [ 469.782746][ T12] bond0 (unregistering): Released all slaves [ 470.065406][ T12] hsr_slave_0: left promiscuous mode [ 470.085733][ T12] hsr_slave_1: left promiscuous mode [ 470.087274][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.106019][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.493613][ T8563] loop7: detected capacity change from 0 to 256 [ 470.713091][ T8563] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 471.453307][ T12] team0 (unregistering): Port device team_slave_1 removed [ 471.524937][ T12] team0 (unregistering): Port device team_slave_0 removed [ 472.582462][ T8314] team0: Port device team_slave_0 added [ 472.730155][ T8314] team0: Port device team_slave_1 added [ 473.334082][ T8314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.334152][ T8314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.334224][ T8314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.672522][ T8314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.672591][ T8314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.672663][ T8314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.015514][ T988] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 474.191956][ T988] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 474.208590][ T988] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.230150][ T988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.230258][ T988] usb 1-1: Product: syz [ 474.230381][ T988] usb 1-1: Manufacturer: syz [ 474.230441][ T988] usb 1-1: SerialNumber: syz [ 474.326334][ T988] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 474.425723][ T30] audit: type=1326 audit(1788045992.051:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.7.605" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0d79e159 code=0x7ffc0000 [ 474.469888][ T30] audit: type=1326 audit(1788045992.091:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.7.605" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0d79e159 code=0x7ffc0000 [ 474.507151][ T30] audit: type=1326 audit(1788045992.131:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.7.605" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0d79e159 code=0x7ffc0000 [ 474.507307][ T30] audit: type=1326 audit(1788045992.131:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.7.605" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0d79e159 code=0x7ffc0000 [ 474.589950][ T30] audit: type=1326 audit(1788045992.211:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.7.605" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fed0d79e159 code=0x7ffc0000 [ 474.665425][ T30] audit: type=1326 audit(1788045992.291:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.7.605" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed0d75e98e code=0x7ffc0000 [ 474.712292][ T30] audit: type=1326 audit(1788045992.321:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.7.605" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed0d75e98e code=0x7ffc0000 [ 474.741749][ T30] audit: type=1326 audit(1788045992.361:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.7.605" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed0d75e98e code=0x7ffc0000 [ 474.790081][ T30] audit: type=1326 audit(1788045992.411:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.7.605" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed0d75e98e code=0x7ffc0000 [ 474.832382][ T30] audit: type=1326 audit(1788045992.451:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.7.605" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed0d75e98e code=0x7ffc0000 [ 474.874109][ T988] gspca_mr97310a: reg write [21] error -110 [ 474.874301][ T988] mr97310a 1-1:1.0: probe with driver mr97310a failed with error -110 [ 475.127070][ T8314] hsr_slave_0: entered promiscuous mode [ 475.142776][ T8314] hsr_slave_1: entered promiscuous mode [ 475.144054][ T8314] debugfs: 'hsr0' already exists in 'hsr' [ 475.144145][ T8314] Cannot create hsr debugfs directory [ 475.660447][ T8588] xt_HMARK: spi-set and port-set can't be combined [ 475.850050][ T8403] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.850255][ T8403] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.850550][ T8403] bridge_slave_0: entered allmulticast mode [ 475.909461][ T8403] bridge_slave_0: entered promiscuous mode [ 476.007320][ T8403] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.016461][ T8403] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.016757][ T8403] bridge_slave_1: entered allmulticast mode [ 476.057980][ T8403] bridge_slave_1: entered promiscuous mode [ 476.732788][ T8595] fuse: Bad value for 'fd' [ 477.299881][ T8403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.337905][ T8403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.378837][ T7329] usb 1-1: USB disconnect, device number 8 [ 478.170300][ T8403] team0: Port device team_slave_0 added [ 478.524564][ T8403] team0: Port device team_slave_1 added [ 479.954934][ T8403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.965443][ T8403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.997584][ T8403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.000917][ T8403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.000966][ T8403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.001035][ T8403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.651571][ T8629] xt_CT: You must specify a L4 protocol and not use inversions on it [ 482.007541][ T8403] hsr_slave_0: entered promiscuous mode [ 482.009422][ T8403] hsr_slave_1: entered promiscuous mode [ 482.042648][ T8403] debugfs: 'hsr0' already exists in 'hsr' [ 482.054306][ T8403] Cannot create hsr debugfs directory [ 482.708046][ T8634] input: syz1 as /devices/virtual/input/input9 [ 484.014744][ T8495] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.024800][ T8495] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.035781][ T8495] bridge_slave_0: entered allmulticast mode [ 484.076347][ T8495] bridge_slave_0: entered promiscuous mode [ 484.318651][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.318934][ T8495] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.319229][ T8495] bridge_slave_1: entered allmulticast mode [ 484.364100][ T8495] bridge_slave_1: entered promiscuous mode [ 486.684346][ T8495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.866018][ T8495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.084582][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 487.103817][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 487.114434][ T5626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 487.143012][ T5626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 487.154018][ T5626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 487.782689][ T8495] team0: Port device team_slave_0 added [ 487.878675][ T8495] team0: Port device team_slave_1 added [ 488.345896][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.360154][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.398745][ T8495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.451466][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.451535][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.493315][ T8495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.950381][ T5626] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 488.951562][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.951610][ T5626] Tainted: [L]=SOFTLOCKUP [ 488.951621][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 488.951641][ T5626] Workqueue: hci0 hci_rx_work [ 488.951674][ T5626] Call Trace: [ 488.951684][ T5626] [ 488.951696][ T5626] dump_stack_lvl+0x100/0x190 [ 488.951742][ T5626] sysfs_warn_dup.cold+0x1c/0x28 [ 488.951787][ T5626] sysfs_create_dir_ns+0x24b/0x2b0 [ 488.951839][ T5626] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 488.951886][ T5626] ? find_held_lock+0x2b/0x80 [ 488.951923][ T5626] ? kobject_add_internal+0x25f/0x930 [ 488.951970][ T5626] ? kobject_add_internal+0x25f/0x930 [ 488.952019][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.952055][ T5626] ? do_raw_spin_unlock+0x145/0x1e0 [ 488.952091][ T5626] kobject_add_internal+0x2c8/0x930 [ 488.952145][ T5626] kobject_add+0x16a/0x1e0 [ 488.952191][ T5626] ? __pfx_kobject_add+0x10/0x10 [ 488.952236][ T5626] ? class_to_subsys+0x10f/0x150 [ 488.952278][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.952315][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.952350][ T5626] ? kobject_put+0xb9/0x640 [ 488.952391][ T5626] ? _raw_spin_unlock+0x28/0x50 [ 488.952432][ T5626] device_add+0x294/0x1970 [ 488.952471][ T5626] ? __pfx_dev_set_name+0x10/0x10 [ 488.952515][ T5626] ? __pfx_device_add+0x10/0x10 [ 488.952553][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.952588][ T5626] ? mgmt_send_event_skb+0x2fb/0x460 [ 488.952633][ T5626] hci_conn_add_sysfs+0x1a3/0x260 [ 488.952674][ T5626] le_conn_complete_evt+0x122f/0x2130 [ 488.952720][ T5626] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 488.952752][ T5626] ? hci_event_packet+0x186/0xcd0 [ 488.952781][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.952826][ T5626] hci_le_conn_complete_evt+0x23c/0x3a0 [ 488.952861][ T5626] ? skb_pull_data+0x15f/0x1e0 [ 488.952906][ T5626] hci_le_meta_evt+0x34a/0x5f0 [ 488.952942][ T5626] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 488.952981][ T5626] hci_event_packet+0x51c/0xcd0 [ 488.953014][ T5626] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 488.953050][ T5626] ? __pfx_hci_event_packet+0x10/0x10 [ 488.953089][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.953124][ T5626] ? lockdep_hardirqs_on+0x7d/0x110 [ 488.953161][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.953203][ T5626] hci_rx_work+0x451/0xfc0 [ 488.953241][ T5626] process_one_work+0xac7/0x1b10 [ 488.953298][ T5626] ? __pfx_process_one_work+0x10/0x10 [ 488.953341][ T5626] ? lock_acquire+0x1d1/0x380 [ 488.953398][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.953439][ T5626] worker_thread+0x5ef/0xe50 [ 488.953494][ T5626] ? kthread+0x13a/0x450 [ 488.953528][ T5626] ? __pfx_worker_thread+0x10/0x10 [ 488.953568][ T5626] kthread+0x373/0x450 [ 488.953604][ T5626] ? __pfx_kthread+0x10/0x10 [ 488.953643][ T5626] ret_from_fork+0x730/0xd60 [ 488.953674][ T5626] ? __pfx_ret_from_fork+0x10/0x10 [ 488.953704][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 488.953743][ T5626] ? __switch_to+0x800/0x10f0 [ 488.953779][ T5626] ? __switch_to_asm+0x39/0x70 [ 488.953806][ T5626] ? __pfx_kthread+0x10/0x10 [ 488.953845][ T5626] ret_from_fork_asm+0x1a/0x30 [ 488.953891][ T5626] [ 488.965846][ T5626] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 488.965940][ T5626] Bluetooth: hci0: failed to register connection device [ 489.242647][ T5626] Bluetooth: hci6: command tx timeout [ 490.458318][ T8674] fuse: fd is not a fuse device [ 491.320862][ T5626] Bluetooth: hci6: command tx timeout [ 493.403562][ T5626] Bluetooth: hci6: command tx timeout [ 494.632376][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 494.632456][ T30] audit: type=1800 audit(1788046012.251:81): pid=8669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.624" name="bus" dev="ramfs" ino=22574 res=0 errno=0 [ 494.679947][ T8495] hsr_slave_0: entered promiscuous mode [ 494.727027][ T8495] hsr_slave_1: entered promiscuous mode [ 494.760000][ T8495] debugfs: 'hsr0' already exists in 'hsr' [ 494.760088][ T8495] Cannot create hsr debugfs directory [ 495.482850][ T5626] Bluetooth: hci6: command tx timeout [ 496.897582][ T8403] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 497.016660][ T8403] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 497.037285][ T8403] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 497.152338][ T8403] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 498.907896][ T8403] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 499.013407][ T8403] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 500.770851][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.778039][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.289321][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 501.330049][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 501.346166][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 501.365843][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 501.378032][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 503.544281][ T5626] Bluetooth: hci2: command tx timeout [ 504.747105][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805822d400: rx timeout, send abort [ 505.238941][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805822dc00: rx timeout, send abort [ 505.248655][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805822d400: abort rx timeout. Force session deactivation [ 505.561312][ T5626] Bluetooth: hci2: command tx timeout [ 505.690990][ T12] bridge_slave_1: left allmulticast mode [ 505.691086][ T12] bridge_slave_1: left promiscuous mode [ 505.691484][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.739029][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805822dc00: abort rx timeout. Force session deactivation [ 505.791679][ T12] bridge_slave_0: left allmulticast mode [ 505.791775][ T12] bridge_slave_0: left promiscuous mode [ 505.792141][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.642416][ T5626] Bluetooth: hci2: command tx timeout [ 509.721897][ T5621] Bluetooth: hci2: command tx timeout [ 510.195640][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.256498][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.309904][ T12] bond0 (unregistering): Released all slaves [ 511.764912][ T8770] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 511.803880][ T8767] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 513.241510][ T12] hsr_slave_0: left promiscuous mode [ 513.309443][ T12] hsr_slave_1: left promiscuous mode [ 513.356959][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.380165][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.727531][ T12] team0 (unregistering): Port device team_slave_1 removed [ 515.983855][ T12] team0 (unregistering): Port device team_slave_0 removed [ 517.749325][ T8794] input: syz1 as /devices/virtual/input/input10 [ 519.138397][ T8808] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 519.323010][ T6647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.837505][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 520.854248][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 520.865843][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 520.880095][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 520.893537][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 521.910485][ T8822] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.910952][ T8822] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.864688][ T8822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.926550][ T8822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.002672][ T5621] Bluetooth: hci3: command tx timeout [ 524.449433][ T6591] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.712830][ T516] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.714436][ T516] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.726657][ T42] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.264819][ T5621] Bluetooth: hci3: command tx timeout [ 527.323106][ T5621] Bluetooth: hci3: command tx timeout [ 527.657654][ T8855] file system registered [ 528.229277][ T5619] ffs_data_put(): freeing [ 528.767603][ T8863] fuse: fd is not a fuse device [ 529.403977][ T5621] Bluetooth: hci3: command tx timeout [ 529.646099][ T6498] IPVS: starting estimator thread 0... [ 529.741535][ T8872] IPVS: using max 30 ests per chain, 72000 per kthread [ 531.002836][ T8653] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.003062][ T8653] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.003357][ T8653] bridge_slave_0: entered allmulticast mode [ 531.055012][ T8653] bridge_slave_0: entered promiscuous mode [ 531.103309][ T8653] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.103534][ T8653] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.103832][ T8653] bridge_slave_1: entered allmulticast mode [ 531.146037][ T8653] bridge_slave_1: entered promiscuous mode [ 534.115132][ T8653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.673422][ T8653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.206158][ T30] audit: type=1326 audit(1788046052.831:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8896 comm="syz.0.666" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f748df9e159 code=0x0 [ 535.456139][ T8653] team0: Port device team_slave_0 added [ 535.788973][ T8653] team0: Port device team_slave_1 added [ 535.954397][ T8902] netlink: 140 bytes leftover after parsing attributes in process `syz.6.667'. [ 536.583925][ T8653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.591890][ T8653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.622564][ T8653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.762577][ T12] bridge_slave_1: left allmulticast mode [ 536.762674][ T12] bridge_slave_1: left promiscuous mode [ 536.763159][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.819264][ T12] bridge_slave_0: left allmulticast mode [ 536.819361][ T12] bridge_slave_0: left promiscuous mode [ 536.830811][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.901404][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'. [ 538.029733][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.087033][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.107880][ T12] bond0 (unregistering): Released all slaves [ 538.363603][ T8653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.363673][ T8653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.363745][ T8653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.588135][ T8919] bridge_slave_1: left allmulticast mode [ 538.588214][ T8919] bridge_slave_1: left promiscuous mode [ 538.588635][ T8919] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.670652][ T8919] bridge_slave_0: left allmulticast mode [ 538.702639][ T8919] bridge_slave_0: left promiscuous mode [ 538.703099][ T8919] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.703368][ T8919] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] SMP KASAN NOPTI [ 538.727935][ T8919] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127] [ 538.737212][ T8919] CPU: 0 UID: 0 PID: 8919 Comm: syz.0.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.748000][ T8919] Tainted: [L]=SOFTLOCKUP [ 538.752304][ T8919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 538.762348][ T8919] RIP: 0010:br_del_frame+0x106/0x1a0 [ 538.767649][ T8919] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 87 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 65 18 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 76 49 89 1c 24 48 85 db 74 24 e8 06 7d 6b f7 48 8d [ 538.787266][ T8919] RSP: 0018:ffffc9000363f288 EFLAGS: 00010216 [ 538.793326][ T8919] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000f819000 [ 538.801287][ T8919] RDX: 1bd5a00000000024 RSI: ffffffff8aa0489f RDI: ffffffff914702b8 [ 538.809249][ T8919] RBP: ffffffff914702a0 R08: 0000000057b0216d R09: 000000000000002c [ 538.817224][ T8919] R10: 0000000000000200 R11: 0000000000000001 R12: dead000000000122 [ 538.825184][ T8919] R13: ffff88807fe76000 R14: 000000000000001c R15: ffff88807fe76000 [ 538.833147][ T8919] FS: 00007f748ee7a6c0(0000) GS:ffff888123b61000(0000) knlGS:0000000000000000 [ 538.842086][ T8919] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 538.848659][ T8919] CR2: 00007f5bcaa5d7d0 CR3: 0000000063a02000 CR4: 0000000000350ef0 [ 538.856622][ T8919] Call Trace: [ 538.859887][ T8919] [ 538.862808][ T8919] mep_delete_implementation+0x292/0x340 [ 538.868465][ T8919] br_cfm_port_del+0x14f/0x1e0 [ 538.873243][ T8919] del_nbp+0x168/0xd50 [ 538.877318][ T8919] br_dev_delete+0x96/0x1c0 [ 538.881833][ T8919] rtnl_dellink+0x463/0xb40 [ 538.886340][ T8919] ? __pfx_br_dev_delete+0x10/0x10 [ 538.891449][ T8919] ? __lock_acquire+0x4c5/0x1ec0 [ 538.896402][ T8919] ? __pfx_rtnl_dellink+0x10/0x10 [ 538.901423][ T8919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 538.907089][ T8919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 538.912719][ T8919] ? __lock_acquire+0x4c5/0x1ec0 [ 538.917672][ T8919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 538.923301][ T8919] ? stack_depot_save_flags+0x27/0x9f0 [ 538.928761][ T8919] ? stack_trace_save+0x8e/0xc0 [ 538.933622][ T8919] ? __pfx_stack_trace_save+0x10/0x10 [ 538.939037][ T8919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 538.944669][ T8919] ? lock_acquire+0x1d1/0x380 [ 538.949355][ T8919] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 538.954466][ T8919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 538.960096][ T8919] ? find_held_lock+0x2b/0x80 [ 538.964777][ T8919] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 538.969889][ T8919] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 538.974999][ T8919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 538.980634][ T8919] ? __pfx_rtnl_dellink+0x10/0x10 [ 538.985682][ T8919] rtnetlink_rcv_msg+0x95e/0xe90 [ 538.990627][ T8919] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 538.996090][ T8919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.001721][ T8919] ? __lock_acquire+0x4c5/0x1ec0 [ 539.006681][ T8919] ? __netlink_lookup+0xa9/0x900 [ 539.011634][ T8919] netlink_rcv_skb+0x159/0x420 [ 539.016412][ T8919] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 539.021873][ T8919] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 539.027160][ T8919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.032791][ T8919] ? netlink_deliver_tap+0x1ae/0xcc0 [ 539.038088][ T8919] ? netlink_unicast+0x484/0x850 [ 539.043021][ T8919] netlink_unicast+0x585/0x850 [ 539.047780][ T8919] ? __pfx_netlink_unicast+0x10/0x10 [ 539.053064][ T8919] netlink_sendmsg+0x8b0/0xda0 [ 539.057825][ T8919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.063106][ T8919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.068739][ T8919] ? apparmor_socket_sendmsg+0x165/0x280 [ 539.074461][ T8919] sock_write_iter+0x53a/0x5b0 [ 539.079230][ T8919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.084533][ T8919] ? __pfx_sock_write_iter+0x10/0x10 [ 539.089828][ T8919] ? rw_verify_area+0x411/0x6d0 [ 539.094700][ T8919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.100334][ T8919] ? rw_verify_area+0xce/0x6d0 [ 539.105098][ T8919] vfs_write+0x6af/0x1050 [ 539.109435][ T8919] ? __pfx_sock_write_iter+0x10/0x10 [ 539.114736][ T8919] ? __pfx_vfs_write+0x10/0x10 [ 539.119506][ T8919] ? find_held_lock+0x2b/0x80 [ 539.124202][ T8919] ksys_write+0x1f8/0x250 [ 539.128534][ T8919] ? __pfx_ksys_write+0x10/0x10 [ 539.133385][ T8919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.139025][ T8919] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.144666][ T8919] do_syscall_64+0x123/0x790 [ 539.149288][ T8919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.155208][ T8919] RIP: 0033:0x7f748df9e159 [ 539.159623][ T8919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.179238][ T8919] RSP: 002b:00007f748ee7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 539.187659][ T8919] RAX: ffffffffffffffda RBX: 00007f748e226090 RCX: 00007f748df9e159 [ 539.195631][ T8919] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 539.203594][ T8919] RBP: 00007f748e035024 R08: 0000000000000000 R09: 0000000000000000 [ 539.211561][ T8919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.219527][ T8919] R13: 00007f748e226128 R14: 00007f748e226090 R15: 00007fffe58e2488 [ 539.227509][ T8919] [ 539.230516][ T8919] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 539.268238][ T8919] ---[ end trace 0000000000000000 ]--- [ 539.707373][ T8919] RIP: 0010:br_del_frame+0x106/0x1a0 [ 539.714908][ T8919] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 87 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 65 18 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 76 49 89 1c 24 48 85 db 74 24 e8 06 7d 6b f7 48 8d [ 539.737807][ T8919] RSP: 0018:ffffc9000363f288 EFLAGS: 00010216 [ 539.744654][ T8919] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000f819000 [ 539.753668][ T8919] RDX: 1bd5a00000000024 RSI: ffffffff8aa0489f RDI: ffffffff914702b8 [ 539.764542][ T8919] RBP: ffffffff914702a0 R08: 0000000057b0216d R09: 000000000000002c [ 539.774958][ T8919] R10: 0000000000000200 R11: 0000000000000001 R12: dead000000000122 [ 539.784009][ T8919] R13: ffff88807fe76000 R14: 000000000000001c R15: ffff88807fe76000 [ 539.793162][ T8919] FS: 00007f748ee7a6c0(0000) GS:ffff888123b61000(0000) knlGS:0000000000000000 [ 539.803878][ T8919] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 539.813135][ T8919] CR2: 00007f055a3b5010 CR3: 0000000063a02000 CR4: 0000000000350ef0 [ 539.823757][ T8919] Kernel panic - not syncing: Fatal exception [ 539.829861][ T8919] Kernel Offset: disabled [ 539.834175][ T8919] Rebooting in 86400 seconds..