last executing test programs: 25m7.730024125s ago: executing program 32 (id=1658): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) setns(0xc9, 0x0) memfd_create(0x0, 0xb) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) write(r3, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 22m47.227496653s ago: executing program 33 (id=2003): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x31, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 17m27.865533612s ago: executing program 34 (id=2966): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000000)={[{@errors_remount}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@user_xattr}]}, 0xfe, 0x468, &(0x7f0000001200)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) 15m44.52376044s ago: executing program 3 (id=3129): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0xc040400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10) 15m42.059108059s ago: executing program 3 (id=3131): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x800000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) write$nbd(0xffffffffffffffff, 0x0, 0x8d) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x20, 0x0, &(0x7f0000000500)=[@request_death, @decrefs={0x40046307, 0x3}, @decrefs], 0x0, 0x0, 0x0}) 15m39.201495573s ago: executing program 3 (id=3133): read(0xffffffffffffffff, &(0x7f0000000100)=""/194, 0xc2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) r6 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e26, @rand_addr=0xfffffc13}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) 15m31.791269823s ago: executing program 3 (id=3145): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x800000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$nbd(0xffffffffffffffff, 0x0, 0x8d) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x20, 0x0, &(0x7f0000000500)=[@request_death, @decrefs={0x40046307, 0x3}, @decrefs], 0x0, 0x0, 0x0}) 15m20.126591906s ago: executing program 3 (id=3165): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x2, 0x5001) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) 15m16.368681371s ago: executing program 3 (id=3167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x280, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x370, 0x3a8, 0x3a8, 0x370, 0x3a8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x238, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'vxcan1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@time={{0x38}, {0x400, 0x101, 0x20000ea0, 0x9ab3, 0xfffffffd, 0x5, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@ipv6={@empty, @private1, [0xffffff00, 0xff, 0x0, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'pimreg0\x00', 'bridge0\x00', {0xff}, {}, 0x33, 0xa, 0x0, 0x4d}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x62ff, 0x7fff, 0x6, '\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 14m59.490082243s ago: executing program 35 (id=3167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x280, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x370, 0x3a8, 0x3a8, 0x370, 0x3a8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x238, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'vxcan1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@time={{0x38}, {0x400, 0x101, 0x20000ea0, 0x9ab3, 0xfffffffd, 0x5, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@ipv6={@empty, @private1, [0xffffff00, 0xff, 0x0, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'pimreg0\x00', 'bridge0\x00', {0xff}, {}, 0x33, 0xa, 0x0, 0x4d}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x62ff, 0x7fff, 0x6, '\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 14m50.420187685s ago: executing program 7 (id=3205): r0 = io_uring_setup(0x5ab7, &(0x7f0000000180)={0x0, 0xe14c, 0x0, 0x3, 0x299}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 14m40.572222451s ago: executing program 7 (id=3213): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$msr(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', 0x0, 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') 14m38.092528944s ago: executing program 7 (id=3216): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0xfffffffffffffce6}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x3c}}, 0x0) 14m35.060840489s ago: executing program 7 (id=3220): read(0xffffffffffffffff, &(0x7f0000000100)=""/194, 0xc2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) r6 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='freezer.self_freezing\x00', 0x0, 0x0) readv(r7, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e26, @rand_addr=0xfffffc13}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) 14m33.135213313s ago: executing program 7 (id=3221): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1c, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) 14m32.503968485s ago: executing program 2 (id=3224): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(0x0, 0x20) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 14m32.228206276s ago: executing program 2 (id=3225): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x9) prlimit64(r0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x8) r2 = semget$private(0x0, 0x3, 0x204) semctl$GETNCNT(r2, 0x1, 0xe, &(0x7f0000000400)=""/225) pwritev2(r1, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) 14m30.469905163s ago: executing program 2 (id=3227): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x400007, 0x2) readlinkat(r0, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00', &(0x7f0000000080)=""/203, 0xcb) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000002100)='usbip-vudc.0', 0xc) 14m30.120615353s ago: executing program 2 (id=3229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) unshare(0x60600) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000031", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff000000000000000000000000000000000000000094d737935f67e99e03000000000000005ec0deb896c9af205b2a02208ee859de606a2ad31aae51dab15e14d0eaa30c5c2a400bd9f5b2544782b8a4085cbccf9eb3948958755ac7cf8e06ac9af521e66eecf3f35f8493212e288237ce86efa701e875d4e01897540870c373b23be7ea05ac83b71832216b6b6e8726335bde78bae770db75610dc523eb17f68a71a420730400000000000000013ae26f73dfddbe75fbe3f1a3f7f6f33112eab95b50"], 0x50) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x20000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000400)={0xc, 0x1, 'client0\x00', 0x80000006, "806f4d6f46c25bba", "a5420e5e596dc5e139386e0c8ccca1cbb32a3c8ec930eaa190e15f55e9073fa6", 0x3, 0x3}) 14m28.525247252s ago: executing program 2 (id=3232): read(0xffffffffffffffff, &(0x7f0000000100)=""/194, 0xc2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) r6 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000180)={0x2, 0x3, 0x40}) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000480)='freezer.self_freezing\x00', 0x0, 0x0) readv(r8, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e26, @rand_addr=0xfffffc13}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) 14m21.66900844s ago: executing program 7 (id=3240): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8076, &(0x7f00000000c0), 0x0, 0x4e2, &(0x7f0000000c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102400, 0x19000) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2000003) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480), 0x0, 0x0, 0x1) 14m21.467354827s ago: executing program 2 (id=3242): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24008005}, 0x1008c) socket$nl_netfilter(0x10, 0x3, 0xc) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00') r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x803, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) r2 = fsopen(&(0x7f0000000340)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nodiscard}, {@abort}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x129, 0x2000000000800001, 0x622, 0x2, 0x7, 0x8, 0xfffffffffffffffd, 0xe}) 14m5.39599786s ago: executing program 36 (id=3240): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8076, &(0x7f00000000c0), 0x0, 0x4e2, &(0x7f0000000c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102400, 0x19000) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2000003) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480), 0x0, 0x0, 0x1) 14m5.119939166s ago: executing program 37 (id=3242): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24008005}, 0x1008c) socket$nl_netfilter(0x10, 0x3, 0xc) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00') r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x803, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) r2 = fsopen(&(0x7f0000000340)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nodiscard}, {@abort}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x129, 0x2000000000800001, 0x622, 0x2, 0x7, 0x8, 0xfffffffffffffffd, 0xe}) 3m30.592231931s ago: executing program 0 (id=4236): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x8003, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=r1, @ANYBLOB="48002f8008000100030000000c0002000203aa8aaaaaaaaa3000038024000380060001000200000006000300a1aa0000060001000000e9ff0700020001000000080001"], 0x64}}, 0x0) 3m26.083577223s ago: executing program 0 (id=4246): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100000008"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000002100)='usbip-vudc.0', 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m25.729705977s ago: executing program 0 (id=4247): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x2, @val=@netkit={@void, @value=r1}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 3m25.25308472s ago: executing program 0 (id=4249): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x121f, &(0x7f0000001840)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_clone(0x288100, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 3m22.797724152s ago: executing program 0 (id=4253): syz_emit_ethernet(0x66, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x500, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x8000000}}}}}}, 0x0) 3m20.796298526s ago: executing program 0 (id=4260): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='AC', 0x2) symlinkat(0x0, 0xffffffffffffff9c, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x133e9ce0ab984f07}, 0x200000d4) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmmsg(r1, 0x0, 0x0, 0x10102, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x22000004) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r2 = open(&(0x7f0000000040)='.\x00', 0x511082, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) 3m20.272192374s ago: executing program 38 (id=4260): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='AC', 0x2) symlinkat(0x0, 0xffffffffffffff9c, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x133e9ce0ab984f07}, 0x200000d4) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmmsg(r1, 0x0, 0x0, 0x10102, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x22000004) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r2 = open(&(0x7f0000000040)='.\x00', 0x511082, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) 3.284609494s ago: executing program 1 (id=5035): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 3.111893144s ago: executing program 6 (id=5037): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 2.921125284s ago: executing program 1 (id=5041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) 2.819017151s ago: executing program 4 (id=5042): socketpair(0x1d, 0x3, 0x1, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r2, &(0x7f0000000940)='naa.6', 0x5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x2e8, 0x40000, 0x198, 0x2e8, 0x198, 0x3b0, 0x358, 0x358, 0x3b0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x0, 'vcan0\x00', 'wg1\x00', {}, {}, 0x2f}, 0x0, 0x2c8, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x0, 'team_slave_1\x00', 'wlan0\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x6}, {0x2, 0x2, 0x2}, 0x2, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a8) 2.80909828s ago: executing program 8 (id=5043): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e80300"], 0x48}}, 0x0) r1 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={@private2, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x2, 0x2, 0x500, 0x9, 0x211, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x80800) getsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, &(0x7f0000000440), &(0x7f0000000480)=0x4) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006a0)={&(0x7f00000007a0)=ANY=[@ANYBLOB], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001a0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000001800010606000000000000000a000000030001000000000008000f00e803000008000400", @ANYRES32=r5], 0x2c}}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000800)=0x1, 0x4) sendmsg$inet6(r3, &(0x7f0000000200)={&(0x7f0000000300)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000500)}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="2400000000000000290000003200000020010000000000000000000000000001", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x0) 2.641012503s ago: executing program 6 (id=5046): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) pwritev2(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="22e94dfe4cb8239538963819a97b", 0xe}, {&(0x7f00000002c0)="5f7d9d5e77", 0x5}], 0x2, 0x4, 0xffffff84, 0x1) 2.638602258s ago: executing program 1 (id=5047): socket$kcm(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2b7010000001f91cdfa02e0864c", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.700667444s ago: executing program 4 (id=5048): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.65868762s ago: executing program 9 (id=5049): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000060000000f00000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 1.575110499s ago: executing program 5 (id=5050): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.574632186s ago: executing program 8 (id=5051): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000033d3850000008600000018110000", @ANYRES32=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.552421403s ago: executing program 1 (id=5052): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x28101) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./virtfs_dir\x00', 0x777) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 1.529627116s ago: executing program 6 (id=5053): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 1.325729912s ago: executing program 5 (id=5054): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'veth0_vlan\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r1], 0x7c}}, 0x0) 1.325280352s ago: executing program 9 (id=5055): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="340000001a000100000000000100000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) 1.324303484s ago: executing program 8 (id=5056): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0x8, 0x8}, {0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x1}}]}}]}, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000090500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000) 1.26835626s ago: executing program 4 (id=5057): connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) write(r1, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r0, &(0x7f0000000780)=""/221, 0xfdef) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 1.254855799s ago: executing program 1 (id=5058): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c088, &(0x7f0000000040)={0xa, 0x1, 0x40c9, @local}, 0x1c) 1.120089461s ago: executing program 6 (id=5059): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x1425c1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.047552263s ago: executing program 8 (id=5060): socketpair(0x1d, 0x3, 0x1, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r2, &(0x7f0000000940)='naa.6', 0x5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x2e8, 0x40000, 0x198, 0x2e8, 0x198, 0x3b0, 0x358, 0x358, 0x3b0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x0, 'vcan0\x00', 'wg1\x00', {}, {}, 0x2f}, 0x0, 0x2c8, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x0, 'team_slave_1\x00', 'wlan0\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x6}, {0x2, 0x2, 0x2}, 0x2, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a8) 1.047366424s ago: executing program 5 (id=5061): setns(0xc9, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.04167019s ago: executing program 9 (id=5062): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa86dd6000000000000101fe800000000000000000000000000018fe80000030fb"], 0x0) 974.829993ms ago: executing program 1 (id=5063): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') renameat(r2, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file1\x00') 850.658878ms ago: executing program 8 (id=5064): socket$kcm(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2b7010000001f91cdfa02e0864c", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 775.886729ms ago: executing program 6 (id=5065): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x23}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socket$packet(0x11, 0x2, 0x300) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0xa0, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x65d00}, [@IFLA_PORT_SELF={0x38, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "cfbde2b9521a3fc5ac6f35af7c065d9e"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, @IFLA_PHYS_SWITCH_ID={0x12, 0x24, "db83d7f0e31627a8a07686906033"}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}, @IFLA_TARGET_NETNSID={0x8}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_GROUP={0x8, 0x1b, 0x2}, @IFLA_MASTER={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20004081}, 0x4054) socket$nl_netfilter(0x10, 0x3, 0xc) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="747275738b65642e"], 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c8) 774.975893ms ago: executing program 5 (id=5066): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 743.694031ms ago: executing program 4 (id=5067): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x10000000, {0x2}, [@NHA_OIF={0x8}]}, 0x20}}, 0x40) 665.666702ms ago: executing program 9 (id=5068): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000060000000f00000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 591.766082ms ago: executing program 8 (id=5069): fsopen(&(0x7f0000000000)='proc\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x4, 0x901) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 534.035124ms ago: executing program 4 (id=5070): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 496.982892ms ago: executing program 5 (id=5071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x20004804) 387.883672ms ago: executing program 9 (id=5072): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x88000, 0x0) 227.417683ms ago: executing program 5 (id=5073): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0003}]}) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) 217.267214ms ago: executing program 4 (id=5074): socket(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 38.725518ms ago: executing program 9 (id=5075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xc8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) 0s ago: executing program 6 (id=5076): socketpair(0x1d, 0x3, 0x1, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r2, &(0x7f0000000940)='naa.6', 0x5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x2e8, 0x40000, 0x198, 0x2e8, 0x198, 0x3b0, 0x358, 0x358, 0x3b0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x0, 'vcan0\x00', 'wg1\x00', {}, {}, 0x2f}, 0x0, 0x2c8, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x0, 'team_slave_1\x00', 'wlan0\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x6}, {0x2, 0x2, 0x2}, 0x2, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a8) kernel console output (not intermixed with test programs): batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1399.646808][T18404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1400.022512][T18404] hsr_slave_0: entered promiscuous mode [ 1400.064380][T18404] hsr_slave_1: entered promiscuous mode [ 1400.088207][T18404] debugfs: 'hsr0' already exists in 'hsr' [ 1400.148859][T18404] Cannot create hsr debugfs directory [ 1408.743312][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1413.167723][ T5801] bridge_slave_1: left allmulticast mode [ 1413.184197][ T5801] bridge_slave_1: left promiscuous mode [ 1413.202072][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.237788][ T5801] bridge_slave_0: left allmulticast mode [ 1413.257843][ T5801] bridge_slave_0: left promiscuous mode [ 1413.276456][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.715815][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1413.741357][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1413.766031][ T5801] bond0 (unregistering): Released all slaves [ 1414.183362][T18510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.200153][T18510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.218190][T18510] bridge_slave_0: entered allmulticast mode [ 1414.227319][T18510] bridge_slave_0: entered promiscuous mode [ 1414.249786][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1414.732485][T18510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.740870][T18510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.749669][T18510] bridge_slave_1: entered allmulticast mode [ 1414.761239][T18510] bridge_slave_1: entered promiscuous mode [ 1415.407542][T18510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1415.440604][ T5801] hsr_slave_0: left promiscuous mode [ 1415.447324][ T5801] hsr_slave_1: left promiscuous mode [ 1415.455014][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.465081][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.726027][ T5801] team0 (unregistering): Port device team_slave_1 removed [ 1415.747839][ T5801] team0 (unregistering): Port device team_slave_0 removed [ 1416.088367][T18510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1424.585131][T18510] team0: Port device team_slave_0 added [ 1424.618790][T18404] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1424.640941][T18404] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1424.683636][T18510] team0: Port device team_slave_1 added [ 1424.915554][T18404] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1424.954448][T18404] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1424.978920][T18404] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1425.028291][T18404] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1425.071866][T18510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1425.083948][T18510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.114724][T18510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1425.222201][T18712] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3831'. [ 1425.259792][T18404] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1425.284604][T18404] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1425.308268][T18510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1425.319376][T18510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.397705][T18510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1425.671766][T18725] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3832'. [ 1425.688632][T18510] hsr_slave_0: entered promiscuous mode [ 1425.704152][T18510] hsr_slave_1: entered promiscuous mode [ 1425.710959][T18510] debugfs: 'hsr0' already exists in 'hsr' [ 1425.717116][T18510] Cannot create hsr debugfs directory [ 1427.303179][T18404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1428.585004][T18404] 8021q: adding VLAN 0 to HW filter on device team0 [ 1428.624765][T15562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.632008][T15562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1428.681654][T15562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.688905][T15562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1429.059323][T18766] loop8: detected capacity change from 0 to 128 [ 1429.117719][T18766] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1429.149208][T18766] ext4 filesystem being mounted at /176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1429.461000][T14734] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1429.647693][T18773] loop8: detected capacity change from 0 to 256 [ 1429.999521][T18510] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1430.049925][T18510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1430.086178][T18510] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1430.142911][T18510] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1430.170637][T18510] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1430.224658][T18510] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1430.264119][T18510] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1430.307020][T18510] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1431.916579][T14919] Bluetooth: hci1: command 0x2016 tx timeout [ 1433.475289][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.489209][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1434.178920][T14299] Bluetooth: hci1: command 0x2016 tx timeout [ 1434.198752][T18820] loop0: detected capacity change from 0 to 512 [ 1434.243778][T18820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1434.345718][T18820] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1434.410102][T18510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1434.517048][T18510] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.584940][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.592223][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.714128][T16766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1434.739366][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.746633][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1434.994420][T18840] loop0: detected capacity change from 0 to 256 [ 1436.405251][T18404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1437.048467][T14299] Bluetooth: hci4: command 0x0406 tx timeout [ 1438.603298][T15239] Bluetooth: hci0: command 0x2016 tx timeout [ 1439.292491][T14919] Bluetooth: hci4: command 0x0406 tx timeout [ 1440.081821][ T30] audit: type=1326 audit(1786862257.758:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18891 comm="syz.0.3866" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b9e0d9 code=0x7ffc0000 [ 1440.211956][ T30] audit: type=1326 audit(1786862257.758:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18891 comm="syz.0.3866" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b9e0d9 code=0x7ffc0000 [ 1440.303744][T14919] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1440.321298][T14919] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1440.347941][T14919] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1440.361001][T14919] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1440.375585][T14919] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1440.393054][ T30] audit: type=1326 audit(1786862257.758:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18891 comm="syz.0.3866" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b9e0d9 code=0x7ffc0000 [ 1440.626508][ T30] audit: type=1326 audit(1786862257.758:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18891 comm="syz.0.3866" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b9e0d9 code=0x7ffc0000 [ 1440.773889][ T30] audit: type=1326 audit(1786862257.758:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18891 comm="syz.0.3866" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6584b9e0d9 code=0x7ffc0000 [ 1440.812232][T14919] Bluetooth: hci0: command 0x2016 tx timeout [ 1440.848054][T18510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1440.896017][ T30] audit: type=1326 audit(1786862257.758:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18891 comm="syz.0.3866" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b9e0d9 code=0x7ffc0000 [ 1441.008426][ T30] audit: type=1326 audit(1786862257.758:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18891 comm="syz.0.3866" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b9e0d9 code=0x7ffc0000 [ 1441.143479][ T30] audit: type=1326 audit(1786862257.758:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18891 comm="syz.0.3866" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b9e0d9 code=0x7ffc0000 [ 1441.171941][ T30] audit: type=1326 audit(1786862257.758:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18891 comm="syz.0.3866" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f6584b9e0d9 code=0x7ffc0000 [ 1441.199778][ T30] audit: type=1326 audit(1786862257.758:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18891 comm="syz.0.3866" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b9e0d9 code=0x7ffc0000 [ 1443.611400][T15239] Bluetooth: hci5: command tx timeout [ 1445.472621][T18973] loop8: detected capacity change from 0 to 256 [ 1445.604923][ T5801] bridge_slave_1: left allmulticast mode [ 1445.631901][ T5801] bridge_slave_1: left promiscuous mode [ 1445.646004][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.941900][T15239] Bluetooth: hci5: command tx timeout [ 1446.042902][ T5801] bridge_slave_0: left allmulticast mode [ 1446.055299][ T5801] bridge_slave_0: left promiscuous mode [ 1446.067697][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.353217][T18979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3888'. [ 1448.049148][T14919] Bluetooth: hci1: command 0x2016 tx timeout [ 1448.165557][T15239] Bluetooth: hci5: command tx timeout [ 1448.226900][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1448.253409][T18990] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3893'. [ 1448.266006][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1448.298183][ T5801] bond0 (unregistering): Released all slaves [ 1448.344932][T18510] veth0_vlan: entered promiscuous mode [ 1448.501547][T18510] veth1_vlan: entered promiscuous mode [ 1448.577422][ T5801] hsr_slave_0: left promiscuous mode [ 1448.610500][ T5801] hsr_slave_1: left promiscuous mode [ 1448.650586][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1448.697913][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1449.372277][ T5801] team0 (unregistering): Port device team_slave_1 removed [ 1449.426154][T19005] loop0: detected capacity change from 0 to 512 [ 1449.433378][ T5801] team0 (unregistering): Port device team_slave_0 removed [ 1449.446666][T19005] EXT4-fs: Ignoring removed bh option [ 1449.490412][T19005] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1449.537611][T19005] EXT4-fs (loop0): 1 truncate cleaned up [ 1449.561841][T19005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1449.821635][T16766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1450.251239][T15239] Bluetooth: hci1: command 0x2016 tx timeout [ 1450.467541][T14919] Bluetooth: hci5: command tx timeout [ 1453.223429][T19035] netlink: 1624 bytes leftover after parsing attributes in process `syz.8.3904'. [ 1453.553216][T15239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1453.574754][T15239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1453.585951][T15239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1453.598016][T15239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1453.613969][T15239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1453.925742][T19056] 9p: Bad value for 'rfdno' [ 1454.517042][T18906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.575437][T18906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.828073][T18906] bridge_slave_0: entered allmulticast mode [ 1454.898412][T18906] bridge_slave_0: entered promiscuous mode [ 1456.062606][T14919] Bluetooth: hci2: command tx timeout [ 1456.902017][T18906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.923452][T18906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.945949][T18906] bridge_slave_1: entered allmulticast mode [ 1456.965858][T18906] bridge_slave_1: entered promiscuous mode [ 1457.434161][T18906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1457.471991][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1457.527365][T18906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1457.806024][T19092] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.3919'. [ 1457.976578][T18906] team0: Port device team_slave_0 added [ 1458.031099][T18906] team0: Port device team_slave_1 added [ 1458.257552][T14919] Bluetooth: hci2: command tx timeout [ 1459.596190][T18906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1459.791308][T18906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1459.897298][T18906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1459.928102][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3923'. [ 1459.948986][T18906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1459.974531][T18906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1460.057882][T18906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1460.481301][T14919] Bluetooth: hci2: command tx timeout [ 1460.567452][ T5801] bridge_slave_1: left allmulticast mode [ 1460.597826][ T5801] bridge_slave_1: left promiscuous mode [ 1460.860979][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.913928][ T5801] bridge_slave_0: left allmulticast mode [ 1460.933453][ T5801] bridge_slave_0: left promiscuous mode [ 1460.965746][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.829727][T19124] Need at least one configuration in g1. [ 1461.863987][T19124] udc usbip-vudc.0: failed to start g1: -22 [ 1461.897407][T19124] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 1462.127256][T19124] UDC core: g1: couldn't find an available UDC or it's busy [ 1462.263337][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1462.343597][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1462.404169][ T5801] bond0 (unregistering): Released all slaves [ 1462.757517][T14919] Bluetooth: hci2: command tx timeout [ 1463.098381][T19142] binder: 19139:19142 ioctl 4018620d 0 returned -22 [ 1465.068817][ T5801] hsr_slave_0: left promiscuous mode [ 1465.120588][T19148] 9p: Bad value for 'rfdno' [ 1465.131259][ T5801] hsr_slave_1: left promiscuous mode [ 1465.145645][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1465.197429][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1465.349271][ T5801] veth1_vlan: left promiscuous mode [ 1465.373055][ T5801] veth0_vlan: left promiscuous mode [ 1467.011952][ T5801] team0 (unregistering): Port device team_slave_1 removed [ 1467.120805][ T5801] team0 (unregistering): Port device team_slave_0 removed [ 1467.930257][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1467.979438][T19173] IPVS: Error connecting to the multicast addr [ 1468.475384][T18906] hsr_slave_0: entered promiscuous mode [ 1468.512569][T18906] hsr_slave_1: entered promiscuous mode [ 1468.529623][T18906] debugfs: 'hsr0' already exists in 'hsr' [ 1468.554306][T18906] Cannot create hsr debugfs directory [ 1474.994120][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3953'. [ 1476.220522][T19217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3953'. [ 1480.537054][T19043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.567953][T19043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.610307][T19043] bridge_slave_0: entered allmulticast mode [ 1480.659545][T19043] bridge_slave_0: entered promiscuous mode [ 1480.704421][T19043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.749191][T19043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.782856][T19043] bridge_slave_1: entered allmulticast mode [ 1480.837469][T19043] bridge_slave_1: entered promiscuous mode [ 1481.128468][T19043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1481.187314][T19043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1481.827346][T19043] team0: Port device team_slave_0 added [ 1481.876399][T19043] team0: Port device team_slave_1 added [ 1482.088337][T19043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1482.120003][T19043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.243880][T19043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1482.306862][T19043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1482.345979][T19043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.452788][T19043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.530185][T19249] loop0: detected capacity change from 0 to 256 [ 1483.259371][T19043] hsr_slave_0: entered promiscuous mode [ 1483.291081][T19043] hsr_slave_1: entered promiscuous mode [ 1483.322152][T19043] debugfs: 'hsr0' already exists in 'hsr' [ 1483.344909][T19043] Cannot create hsr debugfs directory [ 1485.301472][T18906] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1485.319475][T18906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1485.397720][T18906] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1485.442659][T18906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1485.463396][T18906] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1485.486176][T18906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1485.522738][T18906] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1485.552442][T18906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1488.050161][T19303] loop0: detected capacity change from 0 to 512 [ 1488.068826][T19303] EXT4-fs: Ignoring removed oldalloc option [ 1489.323426][T19303] EXT4-fs: Invalid want_extra_isize 8 [ 1490.050112][T18906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1491.594633][T18906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1491.649764][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 1491.656971][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1491.789245][ T9878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1491.796459][ T9878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1492.356997][T19329] loop0: detected capacity change from 0 to 256 [ 1492.462958][T19043] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1492.528181][T19043] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1492.663324][T19043] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1492.697330][T19043] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1492.722151][T19043] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1492.765665][T19043] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1492.808995][T19043] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1492.835871][T19043] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1493.288121][T19043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1493.380096][T19043] 8021q: adding VLAN 0 to HW filter on device team0 [ 1494.630003][T15562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.637224][T15562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1494.788147][T14919] Bluetooth: hci0: command 0x2016 tx timeout [ 1494.951599][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.958827][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1496.180266][T18906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1497.535028][T15239] Bluetooth: hci0: command 0x2016 tx timeout [ 1498.212460][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1498.220107][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1502.700532][T18906] veth0_vlan: entered promiscuous mode [ 1502.769074][T18906] veth1_vlan: entered promiscuous mode [ 1502.975785][T18906] veth0_macvtap: entered promiscuous mode [ 1503.039025][T18906] veth1_macvtap: entered promiscuous mode [ 1503.281143][T18906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1503.358212][T18906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1503.420893][T19043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1503.565167][T13278] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.635191][ T111] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.747368][ T5801] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.808178][ T5801] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.247957][T15239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1507.260484][T15239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1507.270409][T15239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1507.292759][T15239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1507.301237][T15239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1507.920855][T19043] veth0_vlan: entered promiscuous mode [ 1508.063773][T19043] veth1_vlan: entered promiscuous mode [ 1509.905412][T15239] Bluetooth: hci6: command tx timeout [ 1510.832564][T19043] veth0_macvtap: entered promiscuous mode [ 1511.098478][T19486] loop0: detected capacity change from 0 to 256 [ 1511.292787][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.661744][T14919] Bluetooth: hci6: command tx timeout [ 1513.122003][T19043] veth1_macvtap: entered promiscuous mode [ 1513.506747][T15239] Bluetooth: hci0: command 0x2016 tx timeout [ 1513.520060][T19043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1513.895071][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.277832][T19043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1514.773670][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.874953][T15239] Bluetooth: hci6: command tx timeout [ 1515.533480][ T111] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.624347][T13278] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.730518][T15239] Bluetooth: hci0: command 0x2016 tx timeout [ 1516.205889][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.014133][T13278] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.098925][T13278] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.099352][T14919] Bluetooth: hci6: command tx timeout [ 1520.556370][T15239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1520.569812][T15239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1520.580800][T15239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1520.594851][T15239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1520.606534][T15239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1520.886573][T19545] loop0: detected capacity change from 0 to 512 [ 1521.052028][T19545] EXT4-fs (loop0): 1 truncate cleaned up [ 1521.112315][T19545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1522.919033][T15239] Bluetooth: hci5: command tx timeout [ 1523.097924][ T12] bridge_slave_1: left allmulticast mode [ 1523.106827][T16766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1523.172804][ T12] bridge_slave_1: left promiscuous mode [ 1523.238897][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.441692][T19566] loop8: detected capacity change from 0 to 512 [ 1523.484159][ T12] bridge_slave_0: left allmulticast mode [ 1523.533062][T19566] EXT4-fs: Ignoring removed oldalloc option [ 1523.558705][ T12] bridge_slave_0: left promiscuous mode [ 1523.610409][T19566] EXT4-fs: Invalid want_extra_isize 8 [ 1523.631512][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.319714][T15239] Bluetooth: hci5: command tx timeout [ 1527.381174][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1527.521576][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1527.540685][T15239] Bluetooth: hci5: command tx timeout [ 1527.606492][T19582] loop8: detected capacity change from 0 to 256 [ 1527.646590][ T12] bond0 (unregistering): Released all slaves [ 1528.315547][T19587] binder: 19586:19587 ioctl c0306201 0 returned -14 [ 1528.632684][ T12] hsr_slave_0: left promiscuous mode [ 1528.706739][ T12] hsr_slave_1: left promiscuous mode [ 1528.773313][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1528.849656][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1528.964260][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1529.038811][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.208336][ T12] veth1_macvtap: left promiscuous mode [ 1529.252451][ T12] veth0_macvtap: left promiscuous mode [ 1529.308517][ T12] veth1_vlan: left promiscuous mode [ 1529.363643][ T12] veth0_vlan: left promiscuous mode [ 1529.756558][T14919] Bluetooth: hci5: command tx timeout [ 1530.098753][T14919] Bluetooth: hci1: command 0x2016 tx timeout [ 1532.322493][T15239] Bluetooth: hci1: command 0x2016 tx timeout [ 1534.370375][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1534.515391][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1536.800731][T19459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.867463][T19459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.980230][T19459] bridge_slave_0: entered allmulticast mode [ 1537.041893][T19459] bridge_slave_0: entered promiscuous mode [ 1537.108496][T19459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.172662][T19459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.229851][T19459] bridge_slave_1: entered allmulticast mode [ 1537.306006][T19459] bridge_slave_1: entered promiscuous mode [ 1537.694695][T19459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1537.838528][T19459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1538.227837][T19459] team0: Port device team_slave_0 added [ 1538.825144][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.275421][T19459] team0: Port device team_slave_1 added [ 1540.700704][T19459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1540.763319][T19459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1540.908618][T19459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1541.003963][T19459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1542.193451][T19459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1542.411952][T19459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1542.658897][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.847634][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.020948][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1545.300684][T19459] hsr_slave_0: entered promiscuous mode [ 1545.354774][T19459] hsr_slave_1: entered promiscuous mode [ 1545.384373][T19459] debugfs: 'hsr0' already exists in 'hsr' [ 1545.413512][T19459] Cannot create hsr debugfs directory [ 1545.714972][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.911145][ T12] bridge_slave_1: left allmulticast mode [ 1549.939208][ T12] bridge_slave_1: left promiscuous mode [ 1549.990252][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.066267][ T12] bridge_slave_0: left allmulticast mode [ 1550.108823][ T12] bridge_slave_0: left promiscuous mode [ 1550.144653][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.260239][T15239] Bluetooth: hci4: command 0x0406 tx timeout [ 1552.790648][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1552.879728][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1552.947211][ T12] bond0 (unregistering): Released all slaves [ 1553.515689][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1553.649501][ T12] hsr_slave_0: left promiscuous mode [ 1553.733456][ T12] hsr_slave_1: left promiscuous mode [ 1553.778955][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1553.848435][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1553.920397][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1553.979804][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.129645][ T12] veth1_macvtap: left promiscuous mode [ 1554.165694][ T12] veth0_macvtap: left promiscuous mode [ 1554.211610][ T12] veth1_vlan: left promiscuous mode [ 1554.258896][ T12] veth0_vlan: left promiscuous mode [ 1554.473393][T14919] Bluetooth: hci4: command 0x0406 tx timeout [ 1555.322029][T19699] loop8: detected capacity change from 0 to 512 [ 1555.401092][T19699] EXT4-fs (loop8): 1 truncate cleaned up [ 1555.469425][T19699] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1555.792102][T14734] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1557.210768][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1557.240913][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1563.901316][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1563.909511][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1564.033902][T19541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.080316][T19541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.120844][T19541] bridge_slave_0: entered allmulticast mode [ 1564.173712][T19541] bridge_slave_0: entered promiscuous mode [ 1564.235940][T19541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.299838][T19541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.351100][T19541] bridge_slave_1: entered allmulticast mode [ 1564.425808][T19541] bridge_slave_1: entered promiscuous mode [ 1566.242457][T19541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1566.457373][T19541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1568.486238][T19541] team0: Port device team_slave_0 added [ 1568.546561][T19541] team0: Port device team_slave_1 added [ 1569.053051][T19541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1569.099330][T19541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.214731][T19541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1569.292839][T19541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1569.335288][T19541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.515261][T19541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1572.203398][T19541] hsr_slave_0: entered promiscuous mode [ 1572.244592][T19541] hsr_slave_1: entered promiscuous mode [ 1572.292740][T19541] debugfs: 'hsr0' already exists in 'hsr' [ 1572.337331][T19541] Cannot create hsr debugfs directory [ 1573.295087][T15239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1573.311276][T15239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1573.320916][T15239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1573.341181][T15239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1573.349864][T15239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1574.849759][T19755] loop0: detected capacity change from 0 to 512 [ 1574.949476][T19755] EXT4-fs (loop0): 1 truncate cleaned up [ 1575.035067][T19755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1575.331595][T16766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.599303][T15239] Bluetooth: hci2: command tx timeout [ 1578.216353][T15239] Bluetooth: hci2: command tx timeout [ 1580.112712][T19541] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1580.406352][T15239] Bluetooth: hci2: command tx timeout [ 1580.413751][T19541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1581.993015][T19541] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1582.109237][T19541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1582.612360][T15239] Bluetooth: hci2: command tx timeout [ 1582.731528][T15911] bridge_slave_1: left allmulticast mode [ 1582.768867][T15911] bridge_slave_1: left promiscuous mode [ 1582.815613][T15911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.919182][T15911] bridge_slave_0: left allmulticast mode [ 1582.968542][T15911] bridge_slave_0: left promiscuous mode [ 1583.010404][T15911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.167768][T15911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1587.350629][T15911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1587.477937][T14919] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1587.494762][T14919] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1587.501055][T15911] bond0 (unregistering): Released all slaves [ 1587.515132][T14919] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1587.537770][T14919] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1587.551802][T14919] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1588.624516][T15911] hsr_slave_0: left promiscuous mode [ 1588.681831][T15911] hsr_slave_1: left promiscuous mode [ 1588.712622][T15911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1588.787749][T15911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1589.256129][T19821] loop0: detected capacity change from 0 to 512 [ 1589.348046][T19821] EXT4-fs (loop0): 1 truncate cleaned up [ 1589.493950][T19821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1589.794835][T14919] Bluetooth: hci6: command tx timeout [ 1589.843641][T16766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1590.062461][T15911] team0 (unregistering): Port device team_slave_1 removed [ 1590.228810][T15911] team0 (unregistering): Port device team_slave_0 removed [ 1591.958665][T19849] loop8: detected capacity change from 0 to 1024 [ 1592.018617][T14919] Bluetooth: hci6: command tx timeout [ 1592.162432][T19849] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1592.622380][T14734] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1594.242108][T14919] Bluetooth: hci6: command tx timeout [ 1597.682908][T14919] Bluetooth: hci6: command tx timeout [ 1598.882224][T19746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.951673][T19746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.023062][T19746] bridge_slave_0: entered allmulticast mode [ 1599.095348][T19746] bridge_slave_0: entered promiscuous mode [ 1599.141644][T19913] loop8: detected capacity change from 0 to 256 [ 1599.268242][T19746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1599.324090][T19746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.367436][T19746] bridge_slave_1: entered allmulticast mode [ 1599.429672][T19746] bridge_slave_1: entered promiscuous mode [ 1600.157972][T19746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1600.378246][ T5267] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1600.461243][T19746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.562676][T19746] team0: Port device team_slave_0 added [ 1601.597394][T15239] Bluetooth: hci1: command 0x2016 tx timeout [ 1601.642704][T19746] team0: Port device team_slave_1 added [ 1602.009275][T19928] hub 8-0:1.0: USB hub found [ 1602.014667][T19928] hub 8-0:1.0: 1 port detected [ 1604.078673][T15239] Bluetooth: hci1: command 0x2016 tx timeout [ 1604.316368][T19746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1604.323617][T19746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1604.379801][T19746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1604.429919][T19746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1604.463574][T19746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1604.558601][T19746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1605.287338][T15911] bridge_slave_1: left allmulticast mode [ 1605.327050][T15911] bridge_slave_1: left promiscuous mode [ 1605.353911][T15911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.406882][T15911] bridge_slave_0: left allmulticast mode [ 1605.461574][T15911] bridge_slave_0: left promiscuous mode [ 1605.489511][T15911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.347824][T15911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1607.422569][T15911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1607.507529][T15911] bond0 (unregistering): Released all slaves [ 1607.750298][T19746] hsr_slave_0: entered promiscuous mode [ 1607.797539][T19746] hsr_slave_1: entered promiscuous mode [ 1607.830760][T19746] debugfs: 'hsr0' already exists in 'hsr' [ 1607.869313][T19746] Cannot create hsr debugfs directory [ 1608.295346][T15911] hsr_slave_0: left promiscuous mode [ 1608.369772][T15911] hsr_slave_1: left promiscuous mode [ 1608.398494][T15911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1608.462972][T15911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1608.589790][T19954] hub 8-0:1.0: USB hub found [ 1608.594771][T19954] hub 8-0:1.0: 1 port detected [ 1609.803539][T15911] team0 (unregistering): Port device team_slave_1 removed [ 1610.016925][T15911] team0 (unregistering): Port device team_slave_0 removed [ 1618.437587][T19806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1618.471137][T19806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.502258][T19806] bridge_slave_0: entered allmulticast mode [ 1618.551617][T19806] bridge_slave_0: entered promiscuous mode [ 1618.664071][T19806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.706526][T19806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.754783][T19806] bridge_slave_1: entered allmulticast mode [ 1618.795917][T19806] bridge_slave_1: entered promiscuous mode [ 1619.504659][T19806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1619.599110][T19806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1619.963161][T19806] team0: Port device team_slave_0 added [ 1620.016814][T19806] team0: Port device team_slave_1 added [ 1620.255446][T19806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1620.305461][T19806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1620.455877][T19806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1620.506899][T20024] syz_tun: entered allmulticast mode [ 1620.533346][T19806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1620.579954][T19806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1620.710726][T19806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1620.780591][T20024] tipc: Started in network mode [ 1620.792842][T20024] tipc: Node identity ac1414aa, cluster identity 4711 [ 1620.876976][T20024] tipc: Enabled bearer , priority 10 [ 1622.521860][T20023] syz_tun: left allmulticast mode [ 1622.651593][ T43] tipc: Node number set to 2886997162 [ 1622.867516][T19806] hsr_slave_0: entered promiscuous mode [ 1622.900860][T19806] hsr_slave_1: entered promiscuous mode [ 1622.942436][T19806] debugfs: 'hsr0' already exists in 'hsr' [ 1623.189010][T19806] Cannot create hsr debugfs directory [ 1624.298973][T20049] ip_tables: iptables: counters copy to user failed while replacing table [ 1624.509645][T19746] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1624.592225][T19746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1624.636486][T19746] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1624.741563][T19746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1625.110727][T19746] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1625.227341][T19746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1625.276564][T19746] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1625.368655][T19746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1627.505125][ T5267] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1627.824533][T19746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1628.622471][T19746] 8021q: adding VLAN 0 to HW filter on device team0 [ 1629.161094][T15562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.168341][T15562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1629.423469][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.430672][ T5801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1629.568338][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1629.574894][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1630.289108][T20106] loop0: detected capacity change from 0 to 512 [ 1630.345281][T20106] EXT4-fs: Ignoring removed oldalloc option [ 1630.463510][T20106] EXT4-fs: Invalid want_extra_isize 8 [ 1635.148207][T19806] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1635.337414][T19806] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1635.453140][T19806] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1635.603237][T19806] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1635.713258][T19806] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1637.245797][T19806] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1637.364448][T19806] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1637.570879][T19806] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1638.992484][T19806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1639.283724][T19806] 8021q: adding VLAN 0 to HW filter on device team0 [ 1639.485573][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.492746][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1639.767503][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.774684][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1640.289225][T15239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1640.306505][T15239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1640.317878][T15239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1640.334180][T15239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1640.342542][T15239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1642.563893][T15239] Bluetooth: hci5: command tx timeout [ 1644.788145][T15239] Bluetooth: hci5: command tx timeout [ 1645.742055][T20201] loop8: detected capacity change from 0 to 512 [ 1645.852891][T20201] EXT4-fs: Ignoring removed oldalloc option [ 1645.974410][T20201] EXT4-fs: Invalid want_extra_isize 8 [ 1647.013150][T15239] Bluetooth: hci5: command tx timeout [ 1649.234791][T15239] Bluetooth: hci5: command tx timeout [ 1650.422282][ T48] bridge_slave_1: left allmulticast mode [ 1650.478366][ T48] bridge_slave_1: left promiscuous mode [ 1650.536345][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.759173][ T48] bridge_slave_0: left allmulticast mode [ 1650.822713][ T48] bridge_slave_0: left promiscuous mode [ 1650.891324][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.369090][T20238] loop8: detected capacity change from 0 to 128 [ 1651.443852][T20238] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1651.556727][T20238] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1651.929477][T14919] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1651.949172][T14919] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1651.959610][T14919] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1651.978914][T14919] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1651.989811][T14919] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1652.721957][T20250] loop8: detected capacity change from 0 to 512 [ 1652.764233][T20250] EXT4-fs: Ignoring removed oldalloc option [ 1652.824528][T20250] EXT4-fs: Invalid want_extra_isize 8 [ 1653.205130][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1653.335463][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1653.499417][ T48] bond0 (unregistering): Released all slaves [ 1653.707921][T20258] loop8: detected capacity change from 0 to 1024 [ 1653.834547][T20258] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1654.024948][T14734] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1655.368000][T15239] Bluetooth: hci2: command tx timeout [ 1655.793518][ T48] hsr_slave_0: left promiscuous mode [ 1655.859796][ T48] hsr_slave_1: left promiscuous mode [ 1655.891286][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1655.955529][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1656.079019][T20276] hub 8-0:1.0: USB hub found [ 1656.112552][T20276] hub 8-0:1.0: 1 port detected [ 1657.488830][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1657.530495][T15239] Bluetooth: hci2: command tx timeout [ 1657.557617][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1658.233711][T20287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4174'. [ 1660.524063][T15239] Bluetooth: hci2: command tx timeout [ 1661.451101][T20314] loop8: detected capacity change from 0 to 1024 [ 1661.458548][T20317] loop0: detected capacity change from 0 to 512 [ 1661.560747][T20314] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1661.582794][T20317] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1661.672795][T20317] EXT4-fs (loop0): 1 truncate cleaned up [ 1661.692042][T20317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1661.910838][T14734] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1662.087137][T16766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1662.758904][T15239] Bluetooth: hci2: command tx timeout [ 1662.890925][T20162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.931784][T20162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.965083][T20162] bridge_slave_0: entered allmulticast mode [ 1663.021734][T20162] bridge_slave_0: entered promiscuous mode [ 1665.131049][T20162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1665.144904][T20162] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.169878][T20162] bridge_slave_1: entered allmulticast mode [ 1665.209630][T20162] bridge_slave_1: entered promiscuous mode [ 1666.617146][T20367] loop0: detected capacity change from 0 to 1024 [ 1666.708728][T20367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1666.803085][T16766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1666.870162][T20376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4197'. [ 1667.116611][T20162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1667.170827][T20382] loop8: detected capacity change from 0 to 512 [ 1667.215272][T20382] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1667.283607][T20162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1667.341515][T20382] EXT4-fs (loop8): 1 truncate cleaned up [ 1667.392967][T20382] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1667.702259][T14734] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1667.782898][T20395] loop0: detected capacity change from 0 to 2048 [ 1667.882847][T20395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1667.976541][T20162] team0: Port device team_slave_0 added [ 1668.036858][T20399] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1668.077199][T20403] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1669.926766][T20162] team0: Port device team_slave_1 added [ 1670.613603][T16766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1670.857363][T20162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1670.905195][T20162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.052619][T20162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1671.209644][T20162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1671.246412][T20162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.348135][T20162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1672.018281][T20443] loop8: detected capacity change from 0 to 512 [ 1672.030115][T20443] EXT4-fs: Ignoring removed oldalloc option [ 1672.097750][T20443] EXT4-fs: Invalid want_extra_isize 8 [ 1672.384585][T20162] hsr_slave_0: entered promiscuous mode [ 1672.431596][T20162] hsr_slave_1: entered promiscuous mode [ 1672.458562][T20162] debugfs: 'hsr0' already exists in 'hsr' [ 1672.475207][T20162] Cannot create hsr debugfs directory [ 1673.090825][ T48] bridge_slave_1: left allmulticast mode [ 1673.106820][ T48] bridge_slave_1: left promiscuous mode [ 1673.135216][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.192991][ T48] bridge_slave_0: left allmulticast mode [ 1673.206996][ T48] bridge_slave_0: left promiscuous mode [ 1673.229707][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.396882][T20466] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4221'. [ 1675.481212][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1675.542882][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1675.574741][ T48] bond0 (unregistering): Released all slaves [ 1676.001204][ T48] hsr_slave_0: left promiscuous mode [ 1676.027816][ T48] hsr_slave_1: left promiscuous mode [ 1676.057364][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1676.092818][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1676.999758][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1677.131492][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1678.505221][T20489] tipc: Enabling of bearer rejected, failed to enable media [ 1681.977577][T20242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.023849][T20242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.071692][T20242] bridge_slave_0: entered allmulticast mode [ 1682.122645][T20242] bridge_slave_0: entered promiscuous mode [ 1682.185097][T20513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4237'. [ 1682.267447][T20513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4237'. [ 1682.371488][T20242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.402105][T20242] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.445834][T20242] bridge_slave_1: entered allmulticast mode [ 1682.491728][T20242] bridge_slave_1: entered promiscuous mode [ 1682.871324][T20242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1682.962928][T20242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1683.575983][T20242] team0: Port device team_slave_0 added [ 1683.626103][T20242] team0: Port device team_slave_1 added [ 1684.273082][T20242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1684.309745][T20242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1684.397226][T20242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1684.449752][T20242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1684.501615][T20242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1684.655933][T20242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1684.988134][T20242] hsr_slave_0: entered promiscuous mode [ 1685.030742][T20242] hsr_slave_1: entered promiscuous mode [ 1685.057438][T20242] debugfs: 'hsr0' already exists in 'hsr' [ 1685.080801][T20242] Cannot create hsr debugfs directory [ 1685.558445][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1685.895058][T20556] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1685.925149][T20556] udc usbip-vudc.0: failed to start g1: -19 [ 1685.944799][T20556] UDC core: g1: couldn't find an available UDC or it's busy [ 1687.217672][T20565] loop0: detected capacity change from 0 to 8192 [ 1687.270143][T20565] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1688.961683][T20582] netlink: 'syz.1.4252': attribute type 10 has an invalid length. [ 1689.074799][T20582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1689.131490][T20582] team0: Port device bond0 added [ 1691.798971][T14919] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1691.811428][T14919] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1691.819572][T14919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1691.830454][T14919] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1691.839145][T14919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1692.002167][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.346585][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.609825][T20644] loop8: detected capacity change from 0 to 512 [ 1692.755754][T20644] FAT-fs (loop8): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 1692.912555][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.430826][T14919] Bluetooth: hci0: command tx timeout [ 1694.459760][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.171570][T15239] Bluetooth: hci4: command 0x0406 tx timeout [ 1695.250363][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1695.257043][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1695.806080][T20682] loop8: detected capacity change from 0 to 512 [ 1696.369023][ T48] bridge_slave_1: left allmulticast mode [ 1696.399155][ T48] bridge_slave_1: left promiscuous mode [ 1696.419258][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.430448][T20695] loop8: detected capacity change from 0 to 512 [ 1696.461716][ T48] bridge_slave_0: left allmulticast mode [ 1696.469283][T20695] FAT-fs (loop8): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 1696.505939][ T48] bridge_slave_0: left promiscuous mode [ 1696.528109][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.615817][T14919] Bluetooth: hci0: command tx timeout [ 1697.270720][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1697.315853][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1697.348990][ T48] bond0 (unregistering): Released all slaves [ 1697.385467][T14919] Bluetooth: hci4: command 0x0406 tx timeout [ 1698.897536][T15239] Bluetooth: hci0: command tx timeout [ 1699.101764][T20242] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1699.122529][T20242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1699.197682][T20242] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1699.237554][T20242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1699.367940][T20242] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1699.404011][T20242] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1699.428428][T20242] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1699.453400][T20242] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1699.596286][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1699.667831][ T48] hsr_slave_0: left promiscuous mode [ 1699.678150][ T48] hsr_slave_1: left promiscuous mode [ 1699.692152][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1699.710710][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1699.729308][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1699.747815][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1699.797363][ T48] veth1_macvtap: left promiscuous mode [ 1699.804804][ T48] veth0_macvtap: left promiscuous mode [ 1699.811561][ T48] veth1_vlan: left promiscuous mode [ 1699.820780][ T48] veth0_vlan: left promiscuous mode [ 1700.438739][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1700.461497][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1700.846034][T20750] loop8: detected capacity change from 0 to 512 [ 1700.859167][T20750] EXT4-fs: Ignoring removed oldalloc option [ 1700.884569][T20750] EXT4-fs: Invalid want_extra_isize 8 [ 1701.017778][T20162] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1701.049526][T20162] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1701.063007][T15239] Bluetooth: hci0: command tx timeout [ 1701.083889][T20162] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1701.122408][T20162] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1701.183154][T20162] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1701.237180][T20162] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1701.268682][T20162] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1701.307946][T20162] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1701.606456][T20763] netlink: 'syz.8.4301': attribute type 2 has an invalid length. [ 1703.437497][T20622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1703.469441][T20622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.495533][T20622] bridge_slave_0: entered allmulticast mode [ 1703.514801][T20622] bridge_slave_0: entered promiscuous mode [ 1703.553250][T20622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.571513][T20622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.588505][T20622] bridge_slave_1: entered allmulticast mode [ 1703.609444][T20622] bridge_slave_1: entered promiscuous mode [ 1703.717685][T20622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1703.750604][T20622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1703.778631][T20242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1703.848185][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1703.887913][T20622] team0: Port device team_slave_0 added [ 1703.897924][T20622] team0: Port device team_slave_1 added [ 1703.935196][T20622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1703.942316][T20622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1703.968561][T20622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1703.982885][T20622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1703.989842][T20622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1704.016540][T20622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1704.080905][T20242] 8021q: adding VLAN 0 to HW filter on device team0 [ 1704.097934][T20622] hsr_slave_0: entered promiscuous mode [ 1704.104974][T20622] hsr_slave_1: entered promiscuous mode [ 1704.112338][T20622] debugfs: 'hsr0' already exists in 'hsr' [ 1704.118093][T20622] Cannot create hsr debugfs directory [ 1704.153305][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.160459][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1704.314526][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.321756][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1705.021051][T14299] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1705.032457][T14299] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1705.047209][T14299] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1705.065055][T14299] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1705.075822][T14299] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1707.070643][T20845] loop8: detected capacity change from 0 to 512 [ 1707.081237][T20845] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1707.108250][ T5267] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1707.134417][T20845] EXT4-fs (loop8): 1 truncate cleaned up [ 1707.140612][T14299] Bluetooth: hci4: command 0x0406 tx timeout [ 1707.171685][T20845] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1707.290303][T14734] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1707.306015][T14919] Bluetooth: hci5: command tx timeout [ 1707.980118][ T33] bridge_slave_1: left allmulticast mode [ 1708.008739][ T33] bridge_slave_1: left promiscuous mode [ 1708.027702][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.067756][ T33] bridge_slave_0: left allmulticast mode [ 1708.092655][ T33] bridge_slave_0: left promiscuous mode [ 1708.116467][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.494328][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1708.543661][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1708.575197][ T33] bond0 (unregistering): Released all slaves [ 1708.835861][T20880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1708.937345][ T33] hsr_slave_0: left promiscuous mode [ 1708.951278][ T33] hsr_slave_1: left promiscuous mode [ 1708.964673][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1708.982339][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1709.358839][T14919] Bluetooth: hci4: command 0x0406 tx timeout [ 1709.383574][ T33] team0 (unregistering): Port device team_slave_1 removed [ 1709.418932][ T33] team0 (unregistering): Port device team_slave_0 removed [ 1709.533550][T14299] Bluetooth: hci5: command tx timeout [ 1711.762904][T14299] Bluetooth: hci5: command tx timeout [ 1712.590925][T20924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4330'. [ 1712.604297][T20622] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1712.648267][T20622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1712.899112][T20622] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1712.932468][T20622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1713.062347][T20622] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1713.156741][T20622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1713.229987][T20242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1713.338946][T20622] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1713.408967][T20622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1713.716620][ T5267] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1713.988868][T14299] Bluetooth: hci5: command tx timeout [ 1714.114403][T20830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.142402][T20830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1714.176452][T20830] bridge_slave_0: entered allmulticast mode [ 1715.225453][T20830] bridge_slave_0: entered promiscuous mode [ 1715.337109][T20830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.346612][T20830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.452670][T20830] bridge_slave_1: entered allmulticast mode [ 1715.462417][T20830] bridge_slave_1: entered promiscuous mode [ 1718.249683][T20830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1718.368274][T20830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1718.643921][T20830] team0: Port device team_slave_0 added [ 1718.700347][T20830] team0: Port device team_slave_1 added [ 1718.889162][T20830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1718.925405][T20830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1719.032384][T20830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1719.100679][T20830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1719.107653][T20830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1719.205946][T20830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1719.314401][T20622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1719.616671][T14919] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1719.631301][T14919] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1719.653319][T14919] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1719.667668][T14919] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1719.676748][T14919] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1719.721480][T20830] hsr_slave_0: entered promiscuous mode [ 1719.770033][T20830] hsr_slave_1: entered promiscuous mode [ 1719.818138][T20830] debugfs: 'hsr0' already exists in 'hsr' [ 1719.861343][T20830] Cannot create hsr debugfs directory [ 1719.925727][T20622] 8021q: adding VLAN 0 to HW filter on device team0 [ 1720.447583][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.454815][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1720.647461][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.654736][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1720.773786][T20996] loop8: detected capacity change from 0 to 4096 [ 1720.863585][T20996] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1721.180996][T14734] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1721.223088][T21009] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4339'. [ 1721.308472][T21009] C: renamed from veth1_to_team (while UP) [ 1721.931485][T14299] Bluetooth: hci2: command tx timeout [ 1722.927132][ T111] bridge_slave_1: left allmulticast mode [ 1722.954053][ T111] bridge_slave_1: left promiscuous mode [ 1722.973623][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1723.034028][ T111] bridge_slave_0: left allmulticast mode [ 1723.056949][ T111] bridge_slave_0: left promiscuous mode [ 1723.072786][ T111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1724.155273][T14299] Bluetooth: hci2: command tx timeout [ 1724.730049][ T111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1724.759203][ T111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1724.789844][ T111] bond0 (unregistering): Released all slaves [ 1725.087026][T21047] syzkaller0: entered promiscuous mode [ 1725.103481][T21047] syzkaller0: entered allmulticast mode [ 1726.392088][T14299] Bluetooth: hci2: command tx timeout [ 1728.613324][T14299] Bluetooth: hci2: command tx timeout [ 1730.404241][ T111] hsr_slave_0: left promiscuous mode [ 1730.433141][ T111] hsr_slave_1: left promiscuous mode [ 1730.463761][ T111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1730.504915][ T111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1730.972332][T21117] hub 8-0:1.0: USB hub found [ 1731.003200][T21117] hub 8-0:1.0: 1 port detected [ 1731.774347][ T111] team0 (unregistering): Port device team_slave_1 removed [ 1731.897164][ T111] team0 (unregistering): Port device team_slave_0 removed [ 1734.083788][T20830] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1734.147024][T20830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1734.200976][T20830] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1734.287969][T20830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1734.331557][T20830] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1734.390509][T20830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1734.569869][T20830] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1734.636805][T20830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1734.981738][T20977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1735.007570][T20977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.044422][T20977] bridge_slave_0: entered allmulticast mode [ 1735.079877][T20977] bridge_slave_0: entered promiscuous mode [ 1735.141595][T20622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1735.183342][T20977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1735.227873][T20977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.287653][T20977] bridge_slave_1: entered allmulticast mode [ 1735.333850][T20977] bridge_slave_1: entered promiscuous mode [ 1735.649532][T21170] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1735.709996][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1735.710023][ T30] audit: type=1800 audit(1786862790.287:159): pid=21175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4372" name="bus" dev="tmpfs" ino=4969 res=0 errno=0 [ 1735.710188][T21170] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1735.975837][T20977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1736.189624][T20977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1736.437028][T21187] xt_hashlimit: size too large, truncated to 1048576 [ 1736.539120][T20977] team0: Port device team_slave_0 added [ 1736.629880][T20977] team0: Port device team_slave_1 added [ 1736.884026][T20977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1736.923679][T20977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.059535][T20977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1737.165302][T20977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1737.206716][T20977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.314434][T20977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1737.745715][T20977] hsr_slave_0: entered promiscuous mode [ 1737.757729][T20977] hsr_slave_1: entered promiscuous mode [ 1737.788400][T20977] debugfs: 'hsr0' already exists in 'hsr' [ 1737.807275][T20977] Cannot create hsr debugfs directory [ 1738.559752][T20622] veth0_vlan: entered promiscuous mode [ 1738.590833][T20830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1738.949163][T20622] veth1_vlan: entered promiscuous mode [ 1739.010644][T20830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1739.097305][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.104487][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1739.225879][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.233098][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1739.411278][T20622] veth0_macvtap: entered promiscuous mode [ 1739.477761][T19336] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1739.485989][T19336] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1739.494309][T20622] veth1_macvtap: entered promiscuous mode [ 1739.511272][T19336] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1739.528431][T19336] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1739.546916][T19336] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1739.563839][T19336] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1739.571467][T19336] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 1739.631584][T19336] hid-generic 0000:0000:0001.0005: hidraw0: HID v0.10 Device [syz0] on syz1 [ 1739.700121][T20622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1741.142252][T21237] fido_id[21237]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1741.231072][T20622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1741.657812][ T9878] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.784683][T20977] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1741.813668][T20977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1741.840498][T20977] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1741.892549][T20977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1741.962764][T20977] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1744.316298][T20977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1744.428839][T20977] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1744.532886][T20977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1744.574854][ T33] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.606992][ T33] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.670464][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.613656][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1745.624210][T21289] bridge_slave_1: left allmulticast mode [ 1745.644821][T21289] bridge_slave_1: left promiscuous mode [ 1745.660728][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1745.663077][T21289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.005518][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1746.042564][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1746.093635][T21306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4402'. [ 1746.315161][T20977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1746.458520][T20977] 8021q: adding VLAN 0 to HW filter on device team0 [ 1746.660604][T21313] loop8: detected capacity change from 0 to 2048 [ 1747.873567][T21313] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1747.887711][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 1747.894873][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1748.029838][T15562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.037018][T15562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1748.086327][T21309] udevd[21309]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 1748.190290][T21328] loop5: detected capacity change from 0 to 256 [ 1748.215892][T14734] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1748.236382][T21328] FAT-fs (loop5): bogus logical sector size 2302 [ 1748.300491][T21328] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1748.579417][T20830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1748.749296][T21339] loop5: detected capacity change from 0 to 512 [ 1748.811277][T21339] EXT4-fs warning (device loop5): dx_probe:800: inode #2: comm syz.5.4410: Unrecognised inode hash code 255 [ 1748.839036][T21339] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.4410: Corrupt directory, running e2fsck is recommended [ 1749.044971][T21339] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 1749.092317][T21339] EXT4-fs error (device loop5): ext4_iget_extra_inode:5179: inode #15: comm syz.5.4410: corrupted in-inode xattr: invalid ea_ino [ 1749.156495][T21339] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1749.157064][T21339] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.4410: couldn't read orphan inode 15 (err -117) [ 1749.166356][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1749.166390][ C1] EXT4-fs (loop5): initial error at time 1786862802: ext4_iget_extra_inode:5179: inode 15 [ 1749.166452][ C1] EXT4-fs (loop5): last error at time 1786862802: ext4_iget_extra_inode:5179: inode 15 [ 1749.325075][T21339] loop5: lost filesystem error report for type 5 error -117 [ 1749.331710][T21339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1749.407695][T21339] EXT4-fs error (device loop5): __ext4_remount:6844: comm syz.5.4410: Abort forced by user [ 1749.439757][T21339] EXT4-fs (loop5): Remounting filesystem read-only [ 1749.461631][T21339] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 1749.490248][T21339] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 1749.703354][T20622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1750.020794][T21373] loop5: detected capacity change from 0 to 512 [ 1750.058097][T21373] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1750.092226][T20830] veth0_vlan: entered promiscuous mode [ 1750.126600][T21373] EXT4-fs (loop5): 1 truncate cleaned up [ 1750.180229][T20830] veth1_vlan: entered promiscuous mode [ 1750.186891][T21373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1750.302817][T21373] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.4417: bg 0: block 312: padding at end of block bitmap is not set [ 1750.408399][T20830] veth0_macvtap: entered promiscuous mode [ 1750.474070][T20830] veth1_macvtap: entered promiscuous mode [ 1750.519703][T20622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1750.544589][T20830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1750.632906][T20977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1750.684112][T20830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1750.775143][T15562] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.820249][T15562] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.161199][ T33] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.727323][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.180516][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1752.235821][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1752.533122][T13278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1752.570156][T13278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1752.682810][T21418] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4412'. [ 1754.950433][T20977] veth0_vlan: entered promiscuous mode [ 1755.027595][T20977] veth1_vlan: entered promiscuous mode [ 1756.917085][T20977] veth0_macvtap: entered promiscuous mode [ 1757.002393][T20977] veth1_macvtap: entered promiscuous mode [ 1757.217967][T20977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1757.352221][T20977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1757.488670][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.544743][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.896850][T15911] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.013225][ T48] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.903604][T15911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1759.967010][T15911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.271346][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.309435][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.934816][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1760.944296][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1762.392145][T21493] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3191'. [ 1762.478034][T21493] loop9: detected capacity change from 0 to 128 [ 1763.057092][T21500] xt_hashlimit: size too large, truncated to 1048576 [ 1763.860366][T21512] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4457'. [ 1767.518261][T14919] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1767.532282][T14919] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1767.546872][T14919] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1767.559721][T14919] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1767.568653][T14919] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1768.275218][T21541] loop9: detected capacity change from 0 to 512 [ 1768.325217][T21541] EXT4-fs: Ignoring removed orlov option [ 1768.374921][T21541] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 1768.867901][T21551] device-mapper: ioctl: Invalid ioctl structure: name ¸, dev f801 [ 1769.186748][T21556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4467'. [ 1769.247203][T21556] loop5: detected capacity change from 0 to 128 [ 1769.835584][T14919] Bluetooth: hci3: command tx timeout [ 1772.529466][T14919] Bluetooth: hci3: command tx timeout [ 1773.521294][T21603] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4481'. [ 1774.608495][T21629] loop5: detected capacity change from 0 to 128 [ 1774.699764][T14919] Bluetooth: hci3: command tx timeout [ 1774.703974][T21629] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1774.783841][T21629] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1775.482370][T20622] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1776.924338][T14919] Bluetooth: hci3: command tx timeout [ 1778.148187][T21530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1778.161435][T21661] loop5: detected capacity change from 0 to 2048 [ 1778.201526][T21530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1778.480641][T21530] bridge_slave_0: entered allmulticast mode [ 1778.571256][T21661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1778.584362][T21530] bridge_slave_0: entered promiscuous mode [ 1778.661912][T21530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1778.746009][T21530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.820334][T21530] bridge_slave_1: entered allmulticast mode [ 1778.938004][T21530] bridge_slave_1: entered promiscuous mode [ 1779.168530][T21669] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1779.188321][T21673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4499'. [ 1779.321440][T21673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4499'. [ 1779.412048][T21674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4499'. [ 1779.494188][T21674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4499'. [ 1779.565472][T20622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1779.595051][T21530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1779.732193][T21530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1780.261737][T21530] team0: Port device team_slave_0 added [ 1780.363485][T21530] team0: Port device team_slave_1 added [ 1780.865772][T21530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1780.971998][T21530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.189506][T21530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1781.305570][T21530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1781.368403][T21530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1781.567567][T21530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1784.505075][T21694] kexec: Could not allocate control_code_buffer [ 1784.517694][T21530] hsr_slave_0: entered promiscuous mode [ 1784.555063][T21530] hsr_slave_1: entered promiscuous mode [ 1784.611040][T21530] debugfs: 'hsr0' already exists in 'hsr' [ 1784.652028][T21530] Cannot create hsr debugfs directory [ 1786.853791][T21530] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.847092][T21530] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.057993][T21764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4520'. [ 1790.448031][T21530] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.149725][T21530] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.976601][T21783] binder: 21777:21783 ioctl 400c620e 200000000200 returned -22 [ 1793.425074][T21530] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1793.553085][T21530] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1793.596947][T21530] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1793.668408][T21530] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1793.715274][T21530] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1793.829451][T21530] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1793.903853][T21530] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1795.216574][T21530] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1796.524392][T21827] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4539'. [ 1796.693554][T21530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1797.005444][T21530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1797.133954][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.141156][ T5801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1797.274733][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.281888][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1802.452643][T21862] program syz.5.4549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1803.171535][T21877] loop5: detected capacity change from 0 to 128 [ 1803.461439][T21877] FAT-fs (loop5): data area starts beyond volume (33 > 0) [ 1803.468794][T21877] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1803.576237][T21877] ip6erspan0: entered allmulticast mode [ 1805.051811][T21892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4558'. [ 1807.146554][T21530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1809.637937][T21955] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4572'. [ 1810.178626][T21530] veth0_vlan: entered promiscuous mode [ 1810.252206][T21530] veth1_vlan: entered promiscuous mode [ 1810.390926][T21530] veth0_macvtap: entered promiscuous mode [ 1810.465700][T21530] veth1_macvtap: entered promiscuous mode [ 1810.545685][T21530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1810.596239][T21530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1810.652812][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.700914][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.846716][ T8200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.858698][T21988] loop9: detected capacity change from 0 to 2048 [ 1811.168010][T15820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.787854][T21988] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1812.012870][T21309] udevd[21309]: inotify_add_watch(7, /dev/loop9, 10) failed: No such file or directory [ 1812.110622][ T9878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1812.166149][ T9878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1812.170707][T20977] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1812.470923][ T8200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1812.522507][ T8200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1812.728724][T22011] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4588'. [ 1812.987618][ T5338] IPVS: starting estimator thread 0... [ 1813.111067][T22023] IPVS: using max 32 ests per chain, 76800 per kthread [ 1814.885237][T15239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1814.902345][T15239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1814.912543][T15239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1814.931270][T15239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1814.942521][T15239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1815.482590][T22081] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4612'. [ 1817.190591][T14919] Bluetooth: hci5: command 0x2016 tx timeout [ 1817.191553][T15239] Bluetooth: hci4: command tx timeout [ 1818.033428][T22089] loop4: detected capacity change from 0 to 2048 [ 1818.167355][T22089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1818.391167][T21309] udevd[21309]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 1818.504270][T21309] udevd[21309]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 1818.549442][T21530] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1818.685446][T22115] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4620'. [ 1819.429978][T14299] Bluetooth: hci5: command 0x2016 tx timeout [ 1819.430744][T15239] Bluetooth: hci4: command tx timeout [ 1819.799410][ T13] bridge_slave_0: left allmulticast mode [ 1819.839815][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.909666][T15239] Bluetooth: hci4: command tx timeout [ 1822.841266][ T13] team0: Port device bond0 removed [ 1822.903171][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1822.955793][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1823.007890][ T13] bond0 (unregistering): Released all slaves [ 1823.356703][ T13] tipc: Left network mode [ 1823.453660][T15239] Bluetooth: hci0: command 0x0406 tx timeout [ 1824.143757][T14299] Bluetooth: hci4: command tx timeout [ 1826.230476][ T13] hsr_slave_0: left promiscuous mode [ 1826.301999][T22199] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4644'. [ 1826.330939][ T13] hsr_slave_1: left promiscuous mode [ 1826.384319][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1826.458525][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1826.619622][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1826.630125][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1827.629386][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1827.726197][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1828.949673][T22230] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4653'. [ 1828.989538][T22233] program syz.9.4654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1831.319126][ T13] IPVS: stop unused estimator thread 0... [ 1831.457773][T22061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1831.470679][T22061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1831.481117][T22061] bridge_slave_0: entered allmulticast mode [ 1831.490354][T22061] bridge_slave_0: entered promiscuous mode [ 1831.509729][T22061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1831.519443][T22061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1831.534305][T22061] bridge_slave_1: entered allmulticast mode [ 1831.560091][T22061] bridge_slave_1: entered promiscuous mode [ 1831.727787][T22264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4661'. [ 1831.925187][T22061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1831.972533][T22061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1832.415151][T22061] team0: Port device team_slave_0 added [ 1832.495044][T22061] team0: Port device team_slave_1 added [ 1832.510672][T22283] loop5: detected capacity change from 0 to 512 [ 1832.545520][T22283] EXT4-fs: Ignoring removed oldalloc option [ 1832.585846][T22283] EXT4-fs: Invalid want_extra_isize 8 [ 1832.714827][T22061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1832.801978][T22061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1832.838574][T22291] binder: 22285:22291 ioctl 400c620e 200000000200 returned -22 [ 1833.225716][T22061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1833.578397][T22061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1833.616124][T22061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1833.644886][T22061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1833.966116][T22061] hsr_slave_0: entered promiscuous mode [ 1833.991138][T22061] hsr_slave_1: entered promiscuous mode [ 1834.004477][T22061] debugfs: 'hsr0' already exists in 'hsr' [ 1834.021869][T22061] Cannot create hsr debugfs directory [ 1834.408002][T22315] batadv0: entered promiscuous mode [ 1834.430806][T22315] macsec1: entered promiscuous mode [ 1834.449683][T22315] macsec1: entered allmulticast mode [ 1834.479851][T22315] batadv0: entered allmulticast mode [ 1834.518589][T22315] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1834.624933][T22324] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4680'. [ 1834.714801][ T30] audit: type=1326 audit(1786862882.901:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.9.4659" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98ef9e0d9 code=0x7ffc0000 [ 1834.767188][T22328] netlink: 14 bytes leftover after parsing attributes in process `syz.9.4659'. [ 1834.833707][ T30] audit: type=1326 audit(1786862882.901:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.9.4659" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98ef9e0d9 code=0x7ffc0000 [ 1834.955527][ T30] audit: type=1326 audit(1786862882.938:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.9.4659" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98ef9e0d9 code=0x7ffc0000 [ 1835.029304][T22328] bond0 (unregistering): Released all slaves [ 1835.046008][ T30] audit: type=1326 audit(1786862882.938:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.9.4659" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98ef9e0d9 code=0x7ffc0000 [ 1835.046070][T22341] loop5: detected capacity change from 0 to 512 [ 1835.147663][ T30] audit: type=1326 audit(1786862882.947:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.9.4659" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd98ef9e0d9 code=0x7ffc0000 [ 1835.196906][T22341] EXT4-fs: Ignoring removed oldalloc option [ 1835.259788][ T30] audit: type=1326 audit(1786862882.947:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.9.4659" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98ef9e0d9 code=0x7ffc0000 [ 1835.310993][T22341] EXT4-fs: Invalid want_extra_isize 8 [ 1835.347919][ T30] audit: type=1326 audit(1786862882.947:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.9.4659" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98ef9e0d9 code=0x7ffc0000 [ 1835.457132][ T30] audit: type=1326 audit(1786862882.947:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.9.4659" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98ef9e0d9 code=0x7ffc0000 [ 1835.560779][ T30] audit: type=1326 audit(1786862882.947:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.9.4659" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98ef9e0d9 code=0x7ffc0000 [ 1835.660116][ T30] audit: type=1326 audit(1786862882.947:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.9.4659" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd98ef9e0d9 code=0x7ffc0000 [ 1836.108505][T22361] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4691'. [ 1836.164260][T22363] netlink: 448 bytes leftover after parsing attributes in process `syz.6.4691'. [ 1836.256690][T22361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1836.284916][T22361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1836.312750][T22361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1836.334464][T22361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1836.361067][T22369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4694'. [ 1837.804096][T22061] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1837.840288][T22061] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1837.915256][T22061] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1837.955496][T22061] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1838.071067][T22061] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1838.361521][T22061] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1838.392859][T22061] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1839.085846][T22425] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4715'. [ 1839.466160][T22061] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1839.784170][T14919] Bluetooth: hci5: command 0x2016 tx timeout [ 1840.921131][T22061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1841.002288][T22061] 8021q: adding VLAN 0 to HW filter on device team0 [ 1841.069235][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1841.076444][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1841.130795][T13278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1841.138010][T13278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1843.016784][T22492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4735'. [ 1843.105888][ T1996] IPVS: starting estimator thread 0... [ 1843.171892][ T30] kauditd_printk_skb: 281 callbacks suppressed [ 1843.171931][ T30] audit: type=1326 audit(1786862890.805:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22499 comm="syz.8.4737" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d9e0d9 code=0x7ffc0000 [ 1843.210078][T22500] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4737'. [ 1843.237693][T22498] IPVS: using max 24 ests per chain, 57600 per kthread [ 1843.332370][ T30] audit: type=1326 audit(1786862890.805:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22499 comm="syz.8.4737" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d9e0d9 code=0x7ffc0000 [ 1843.464027][ T30] audit: type=1326 audit(1786862890.851:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22499 comm="syz.8.4737" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d9e0d9 code=0x7ffc0000 [ 1843.605349][ T30] audit: type=1326 audit(1786862890.851:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22499 comm="syz.8.4737" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d9e0d9 code=0x7ffc0000 [ 1843.754223][ T30] audit: type=1326 audit(1786862890.851:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22499 comm="syz.8.4737" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9755d9e0d9 code=0x7ffc0000 [ 1843.867304][ T30] audit: type=1326 audit(1786862890.851:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22499 comm="syz.8.4737" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d9e0d9 code=0x7ffc0000 [ 1843.990419][ T30] audit: type=1326 audit(1786862890.851:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22499 comm="syz.8.4737" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d9e0d9 code=0x7ffc0000 [ 1844.115742][ T30] audit: type=1326 audit(1786862890.851:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22499 comm="syz.8.4737" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d9e0d9 code=0x7ffc0000 [ 1844.245650][ T30] audit: type=1326 audit(1786862890.851:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22499 comm="syz.8.4737" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9755d9e0d9 code=0x7ffc0000 [ 1845.663457][ T30] audit: type=1326 audit(1786862890.908:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22499 comm="syz.8.4737" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d9e0d9 code=0x7ffc0000 [ 1846.742127][T22061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1846.830631][T22557] program syz.8.4753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1846.918438][T22061] veth0_vlan: entered promiscuous mode [ 1846.972477][T22061] veth1_vlan: entered promiscuous mode [ 1847.149331][T22061] veth0_macvtap: entered promiscuous mode [ 1847.207363][T22061] veth1_macvtap: entered promiscuous mode [ 1847.315721][T22061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1847.361992][T22061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1847.439886][T15911] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.478818][T15911] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.545536][T15911] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.595494][T22576] loop5: detected capacity change from 0 to 2048 [ 1847.604372][ T33] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.717982][T22576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1847.905081][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1847.941286][T21309] udevd[21309]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 1847.944227][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1848.050576][T20622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1848.054905][T21309] udevd[21309]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 1848.129021][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1848.172060][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1848.297460][T22600] program syz.5.4767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1850.508869][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1850.508894][ T30] audit: type=1800 audit(1786862897.680:498): pid=22615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4600" name="nexus" dev="configfs" ino=66310 res=0 errno=0 [ 1850.687729][T22620] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4772'. [ 1850.734974][T15239] Bluetooth: hci2: command 0x0406 tx timeout [ 1850.753227][T22621] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4748'. [ 1850.949659][T22626] binder: 22622:22626 ioctl 400c620e 200000000200 returned -22 [ 1851.805094][ T30] audit: type=1800 audit(1786862898.887:499): pid=22631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4777" name="nexus" dev="configfs" ino=67061 res=0 errno=0 [ 1851.810769][T22631] Missing 'naa.' prefix [ 1852.406658][T22652] program syz.5.4784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1855.179933][T22678] FAULT_INJECTION: forcing a failure. [ 1855.179933][T22678] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1855.198093][T22678] CPU: 1 UID: 0 PID: 22678 Comm: syz.8.4794 Tainted: G L syzkaller #0 PREEMPT(full) [ 1855.198158][T22678] Tainted: [L]=SOFTLOCKUP [ 1855.198171][T22678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1855.198192][T22678] Call Trace: [ 1855.198204][T22678] [ 1855.198217][T22678] dump_stack_lvl+0x100/0x190 [ 1855.198267][T22678] should_fail_ex.cold+0x5/0xa [ 1855.198302][T22678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1855.198354][T22678] get_futex_key+0x1d2/0x14f0 [ 1855.198411][T22678] ? __pfx_get_futex_key+0x10/0x10 [ 1855.198454][T22678] ? __pfx___resched_curr+0x10/0x10 [ 1855.198503][T22678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1855.198547][T22678] ? wakeup_preempt_fair+0x640/0x1060 [ 1855.198596][T22678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1855.198642][T22678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1855.198685][T22678] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 1855.198741][T22678] futex_wait_setup+0x91/0x540 [ 1855.198791][T22678] __futex_wait+0x19f/0x300 [ 1855.198829][T22678] ? __pfx___futex_wait+0x10/0x10 [ 1855.198861][T22678] ? __pfx_try_to_wake_up+0x10/0x10 [ 1855.198909][T22678] ? futex_hash+0x311/0x400 [ 1855.198959][T22678] ? __pfx_futex_wake_mark+0x10/0x10 [ 1855.199027][T22678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1855.199072][T22678] ? find_held_lock+0x2b/0x80 [ 1855.199134][T22678] ? futex_wake+0x4ea/0x5e0 [ 1855.199195][T22678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1855.199249][T22678] futex_wait+0xe6/0x370 [ 1855.199285][T22678] ? __pfx_futex_wait+0x10/0x10 [ 1855.199330][T22678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1855.199374][T22678] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1855.199431][T22678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1855.199475][T22678] ? find_held_lock+0x2b/0x80 [ 1855.199529][T22678] ? ksys_write+0x190/0x250 [ 1855.199577][T22678] ? ksys_write+0x190/0x250 [ 1855.199630][T22678] do_futex+0x265/0x440 [ 1855.199684][T22678] ? __pfx_do_futex+0x10/0x10 [ 1855.199738][T22678] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1855.199798][T22678] __x64_sys_futex+0x34f/0x4d0 [ 1855.199853][T22678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1855.199897][T22678] ? fput+0x79/0x100 [ 1855.199929][T22678] ? __pfx___x64_sys_futex+0x10/0x10 [ 1855.199979][T22678] ? ksys_write+0x1ac/0x250 [ 1855.200027][T22678] ? __pfx_ksys_write+0x10/0x10 [ 1855.200080][T22678] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1855.200139][T22678] do_syscall_64+0x115/0x870 [ 1855.200194][T22678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1855.200232][T22678] RIP: 0033:0x7f9755d9e0d9 [ 1855.200261][T22678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1855.200295][T22678] RSP: 002b:00007f9756c050e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1855.200330][T22678] RAX: ffffffffffffffda RBX: 00007f9756025fa8 RCX: 00007f9755d9e0d9 [ 1855.200355][T22678] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9756025fa8 [ 1855.200378][T22678] RBP: 00007f9756025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1855.200401][T22678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1855.200422][T22678] R13: 00007f9756026038 R14: 00007fff88a087d0 R15: 00007fff88a088b8 [ 1855.200471][T22678] [ 1855.614848][T22682] Missing 'naa.' prefix [ 1855.707307][ T30] audit: type=1800 audit(1786862902.450:500): pid=22682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4795" name="nexus" dev="configfs" ino=66422 res=0 errno=0 [ 1856.234246][T22695] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.4798'. [ 1856.818823][T22716] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4807'. [ 1856.855351][T22716] netlink: 448 bytes leftover after parsing attributes in process `syz.9.4807'. [ 1856.912158][T22716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1856.939404][T22716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1856.982382][T22716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1857.004625][T22716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1857.078332][ T30] audit: type=1800 audit(1786862903.816:501): pid=22726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4809" name="nexus" dev="configfs" ino=67169 res=0 errno=0 [ 1857.101111][T22726] Missing 'naa.' prefix [ 1857.339508][T22731] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4812'. [ 1857.428155][T22736] tipc: Started in network mode [ 1857.436677][T22736] tipc: Node identity cafc11e250c8, cluster identity 4711 [ 1857.446132][T22736] tipc: Enabled bearer , priority 0 [ 1857.461989][T22736] syzkaller0: entered promiscuous mode [ 1857.477541][T22736] syzkaller0: entered allmulticast mode [ 1857.527136][T22735] tipc: Resetting bearer [ 1857.642268][T22735] tipc: Disabling bearer [ 1857.928922][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4822'. [ 1858.297571][T22771] ip6erspan0: entered allmulticast mode [ 1859.095603][ T30] audit: type=1800 audit(1786862904.845:502): pid=22768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4825" name="nexus" dev="configfs" ino=66551 res=0 errno=0 [ 1859.238744][ T30] audit: type=1800 audit(1786862905.724:503): pid=22772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4826" name="nexus" dev="configfs" ino=66551 res=0 errno=0 [ 1859.359635][T22779] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4829'. [ 1859.394986][T22779] netlink: 448 bytes leftover after parsing attributes in process `syz.6.4829'. [ 1860.601396][ T30] audit: type=1800 audit(1786862907.118:504): pid=22830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4845" name="nexus" dev="configfs" ino=67301 res=0 errno=0 [ 1860.624531][T22830] Missing 'naa.' prefix [ 1860.963339][T22844] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1860.988198][T22844] udc usbip-vudc.0: failed to start g1: -19 [ 1861.001967][T22844] UDC core: g1: couldn't find an available UDC or it's busy [ 1861.268873][T22855] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4853'. [ 1861.332886][T22857] netlink: 448 bytes leftover after parsing attributes in process `syz.6.4853'. [ 1862.135527][ T30] audit: type=1800 audit(1786862908.549:505): pid=22881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4860" name="nexus" dev="configfs" ino=67388 res=0 errno=0 [ 1862.164887][T22881] Missing 'naa.' prefix [ 1862.431464][T22889] netlink: 'syz.9.4863': attribute type 1 has an invalid length. [ 1862.492471][T22889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1862.701804][T22889] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1862.940837][T22911] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4871'. [ 1862.967558][T22911] netlink: 448 bytes leftover after parsing attributes in process `syz.5.4871'. [ 1862.990468][T22908] loop1: detected capacity change from 0 to 4096 [ 1863.002482][T22911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1863.041123][T22911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1863.079030][T22908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1863.138694][T22911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1863.195896][T22911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1863.242580][ T30] audit: type=1800 audit(1786862909.588:506): pid=22908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4869" name="dev" dev="loop1" ino=18 res=0 errno=0 [ 1863.395847][T22924] vcan1: entered promiscuous mode [ 1863.418010][T22924] vcan1: entered allmulticast mode [ 1863.443009][T22061] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1864.336338][T22965] netlink: 996 bytes leftover after parsing attributes in process `syz.9.4889'. [ 1864.512311][T22975] 9p: Bad value for 'rfdno' [ 1870.167730][T23026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4908'. [ 1870.511550][T23043] 9pnet_fd: Insufficient options for proto=fd [ 1874.983469][T23105] binder: 23100:23105 ioctl 400c620e 200000000200 returned -22 [ 1876.451569][T23129] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4943'. [ 1876.491781][T23129] netlink: 448 bytes leftover after parsing attributes in process `syz.9.4943'. [ 1876.926771][T23143] binder: 23139:23143 ioctl 400c620e 200000000200 returned -22 [ 1877.978514][T23155] loop1: detected capacity change from 0 to 1024 [ 1878.112085][T23155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1878.182484][T23168] netlink: 'syz.9.4954': attribute type 1 has an invalid length. [ 1878.238522][T23168] netlink: 'syz.9.4954': attribute type 2 has an invalid length. [ 1878.384598][T22061] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1878.621560][T23179] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4958'. [ 1878.811624][T23187] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4962'. [ 1878.851783][T23187] netlink: 448 bytes leftover after parsing attributes in process `syz.4.4962'. [ 1878.952579][T23187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1878.969804][T23195] binder: 23186:23195 ioctl 400c620e 200000000200 returned -22 [ 1879.192658][T23187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1879.749863][T23187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1879.767352][T23187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1880.455421][T23230] hub 8-0:1.0: USB hub found [ 1880.462301][T23230] hub 8-0:1.0: 1 port detected [ 1881.417461][T23234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4978'. [ 1881.531447][T23246] binder: 23236:23246 ioctl 400c620e 200000000200 returned -22 [ 1882.779607][T23265] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4990'. [ 1882.806536][T23265] netlink: 448 bytes leftover after parsing attributes in process `syz.6.4990'. [ 1883.210236][T23286] hub 8-0:1.0: USB hub found [ 1883.216802][T23286] hub 8-0:1.0: 1 port detected [ 1883.913739][T23284] program syz.1.4997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1884.253948][T23296] tipc: Failed to remove unknown binding: 66,0,0/0:3758452546/3758452547 [ 1884.668564][T23318] pim6reg: entered allmulticast mode [ 1884.707801][T23322] pim6reg: left allmulticast mode [ 1884.982161][T23333] hub 8-0:1.0: USB hub found [ 1884.988900][T23333] hub 8-0:1.0: 1 port detected [ 1885.844980][T23342] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5015'. [ 1885.901985][T23342] netlink: 448 bytes leftover after parsing attributes in process `syz.8.5015'. [ 1885.970765][T23342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1886.010552][T23342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1886.150149][T23351] tipc: Failed to remove unknown binding: 66,0,0/0:1496956700/1496956701 [ 1886.197370][T23342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1886.217893][T23342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1886.233760][T23355] tipc: Failed to remove unknown binding: 66,0,0/0:1496956700/1496956701 [ 1886.310388][T23342] batadv0 (unregistering): left allmulticast mode [ 1886.864944][T23377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5028'. [ 1886.875339][T23377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5028'. [ 1887.761427][T23380] binder: 23372:23380 ioctl 400c620e 200000000200 returned -22 [ 1887.796448][T23382] hub 8-0:1.0: USB hub found [ 1887.805974][T23382] hub 8-0:1.0: 1 port detected [ 1888.733035][T23399] tipc: Failed to remove unknown binding: 66,0,0/0:1022696214/1022696215 [ 1888.787291][T23399] tipc: Failed to remove unknown binding: 66,0,0/0:1022696214/1022696215 [ 1888.852821][T23408] 9p: Bad value for 'rfdno' [ 1889.176699][ T30] audit: type=1800 audit(1786862933.852:507): pid=23415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5042" name="nexus" dev="configfs" ino=68465 res=0 errno=0 [ 1889.351361][T23427] hub 8-0:1.0: USB hub found [ 1889.358424][T23427] hub 8-0:1.0: 1 port detected [ 1890.115188][ T30] audit: type=1800 audit(1786862934.722:508): pid=23430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5046" name="nexus" dev="configfs" ino=68480 res=0 errno=0 [ 1890.137545][T23430] Missing 'naa.' prefix [ 1890.492635][T23446] tipc: Failed to remove unknown binding: 66,0,0/0:1586424597/1586424598 [ 1890.521081][T23446] tipc: Failed to remove unknown binding: 66,0,0/0:1586424597/1586424598 [ 1890.894591][T23468] 9p: Bad value for 'rfdno' [ 1891.737781][ T30] audit: type=1326 audit(1786862936.237:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23495 comm="syz.5.5073" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9e59e0d9 code=0x7ffc0000 [ 1891.853242][ T30] audit: type=1326 audit(1786862936.237:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23495 comm="syz.5.5073" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9e59e0d9 code=0x7ffc0000 [ 1891.975322][T23498] [ 1891.977689][T23498] ====================================================== [ 1891.984698][T23498] WARNING: possible circular locking dependency detected [ 1891.991707][T23498] syzkaller #0 Tainted: G L [ 1891.997674][T23498] ------------------------------------------------------ [ 1892.004682][T23498] syz.4.5074/23498 is trying to acquire lock: [ 1892.010732][T23498] ffff888022f65568 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 1892.022337][T23498] [ 1892.022337][T23498] but task is already holding lock: [ 1892.029690][T23498] ffff888022f66660 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 1892.038698][T23498] [ 1892.038698][T23498] which lock already depends on the new lock. [ 1892.038698][T23498] [ 1892.049085][T23498] [ 1892.049085][T23498] the existing dependency chain (in reverse order) is: [ 1892.058085][T23498] [ 1892.058085][T23498] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1892.065849][T23498] lock_acquire+0x1b9/0x370 [ 1892.070883][T23498] lock_sock_nested+0x41/0xf0 [ 1892.076091][T23498] smc_listen_out+0xf2/0x4b0 [ 1892.081219][T23498] smc_listen_work+0x767/0x50e0 [ 1892.086598][T23498] process_one_work+0xa23/0x1940 [ 1892.092060][T23498] worker_thread+0x5ef/0xe50 [ 1892.097172][T23498] kthread+0x370/0x450 [ 1892.101756][T23498] ret_from_fork+0x72b/0xd50 [ 1892.106881][T23498] ret_from_fork_asm+0x1a/0x30 [ 1892.112182][T23498] [ 1892.112182][T23498] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1892.122366][T23498] check_prev_add+0xeb/0xe60 [ 1892.127483][T23498] __lock_acquire+0x136c/0x1a40 [ 1892.132857][T23498] lock_acquire+0x1b9/0x370 [ 1892.137884][T23498] __flush_work+0x4de/0xcb0 [ 1892.142918][T23498] cancel_work_sync+0xd1/0xf0 [ 1892.148134][T23498] smc_clcsock_release+0x5f/0xe0 [ 1892.153604][T23498] __smc_release+0x5c2/0x880 [ 1892.158722][T23498] smc_close_non_accepted+0xda/0x200 [ 1892.164537][T23498] smc_close_active+0x4ff/0x1070 [ 1892.170004][T23498] __smc_release+0x634/0x880 [ 1892.175121][T23498] smc_release+0x1fc/0x620 [ 1892.180063][T23498] __sock_release+0xb3/0x260 [ 1892.185197][T23498] sock_close+0x1c/0x30 [ 1892.189894][T23498] __fput+0x3ff/0xb50 [ 1892.194398][T23498] task_work_run+0x150/0x240 [ 1892.199509][T23498] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1892.205413][T23498] do_syscall_64+0x666/0x870 [ 1892.210536][T23498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1892.216953][T23498] [ 1892.216953][T23498] other info that might help us debug this: [ 1892.216953][T23498] [ 1892.227175][T23498] Possible unsafe locking scenario: [ 1892.227175][T23498] [ 1892.234617][T23498] CPU0 CPU1 [ 1892.239974][T23498] ---- ---- [ 1892.245324][T23498] lock(sk_lock-AF_SMC/1); [ 1892.249842][T23498] lock((work_completion)(&new_smc->smc_listen_work)); [ 1892.259300][T23498] lock(sk_lock-AF_SMC/1); [ 1892.266337][T23498] lock((work_completion)(&new_smc->smc_listen_work)); [ 1892.273306][T23498] [ 1892.273306][T23498] *** DEADLOCK *** [ 1892.273306][T23498] [ 1892.281446][T23498] 3 locks held by syz.4.5074/23498: [ 1892.286634][T23498] #0: ffff8880764f8dc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1892.297238][T23498] #1: ffff888022f66660 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 1892.306692][T23498] #2: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 1892.315880][T23498] [ 1892.315880][T23498] stack backtrace: [ 1892.321764][T23498] CPU: 1 UID: 0 PID: 23498 Comm: syz.4.5074 Tainted: G L syzkaller #0 PREEMPT(full) [ 1892.321812][T23498] Tainted: [L]=SOFTLOCKUP [ 1892.321824][T23498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1892.321844][T23498] Call Trace: [ 1892.321854][T23498] [ 1892.321866][T23498] dump_stack_lvl+0x100/0x190 [ 1892.321906][T23498] print_circular_bug.cold+0x178/0x1c7 [ 1892.321962][T23498] check_noncircular+0x146/0x160 [ 1892.322003][T23498] check_prev_add+0xeb/0xe60 [ 1892.322041][T23498] __lock_acquire+0x136c/0x1a40 [ 1892.322087][T23498] lock_acquire+0x1b9/0x370 [ 1892.322123][T23498] ? __flush_work+0x4ca/0xcb0 [ 1892.322159][T23498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.322204][T23498] ? mark_held_locks+0x40/0x70 [ 1892.322241][T23498] ? __flush_work+0x4ca/0xcb0 [ 1892.322275][T23498] __flush_work+0x4de/0xcb0 [ 1892.322307][T23498] ? __flush_work+0x4ca/0xcb0 [ 1892.322344][T23498] ? __pfx___flush_work+0x10/0x10 [ 1892.322381][T23498] ? __lock_acquire+0x49f/0x1a40 [ 1892.322418][T23498] ? __pfx_wq_barrier_func+0x10/0x10 [ 1892.322470][T23498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.322510][T23498] ? __pfx___might_resched+0x10/0x10 [ 1892.322547][T23498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.322590][T23498] cancel_work_sync+0xd1/0xf0 [ 1892.322632][T23498] smc_clcsock_release+0x5f/0xe0 [ 1892.322673][T23498] __smc_release+0x5c2/0x880 [ 1892.322707][T23498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.322749][T23498] ? __pfx_sock_def_readable+0x10/0x10 [ 1892.322794][T23498] smc_close_non_accepted+0xda/0x200 [ 1892.322835][T23498] smc_close_active+0x4ff/0x1070 [ 1892.322877][T23498] __smc_release+0x634/0x880 [ 1892.322910][T23498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.322952][T23498] smc_release+0x1fc/0x620 [ 1892.322989][T23498] __sock_release+0xb3/0x260 [ 1892.323038][T23498] ? __pfx_sock_close+0x10/0x10 [ 1892.323086][T23498] sock_close+0x1c/0x30 [ 1892.323132][T23498] __fput+0x3ff/0xb50 [ 1892.323170][T23498] task_work_run+0x150/0x240 [ 1892.323204][T23498] ? __pfx_task_work_run+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1892.323235][T23498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.323277][T23498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.323320][T23498] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1892.323361][T23498] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.323400][T23498] ? rcu_is_watching+0x12/0xc0 [ 1892.323450][T23498] do_syscall_64+0x666/0x870 [ 1892.323495][T23498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1892.323529][T23498] RIP: 0033:0x7fd6acb9e0d9 [ 1892.323554][T23498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1892.323586][T23498] RSP: 002b:00007ffcba419d98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1892.323617][T23498] RAX: 0000000000000000 RBX: 00007fd6ace27da0 RCX: 00007fd6acb9e0d9 [ 1892.323639][T23498] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1892.323659][T23498] RBP: 00007fd6ace27da0 R08: 00007fd6ace26038 R09: 0000000000000000 [ 1892.323679][T23498] R10: 00000000003ffd7c R11: 0000000000000246 R12: 00000000001b556e [ 1892.323701][T23498] R13: 00007fd6ace25fac R14: 00000000001b5275 R15: 00007ffcba419ea0 [ 1892.323734][T23498] [ 1892.395745][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1892.456542][ T30] audit: type=1326 audit(1786862936.275:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23495 comm="syz.5.5073" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9e59e0d9 code=0x7ffc0000 [ 1892.484886][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1892.490463][ T30] audit: type=1326 audit(1786862936.275:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23495 comm="syz.5.5073" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9e59e0d9 code=0x7ffc0000 [ 1892.841218][ T30] audit: type=1326 audit(1786862936.275:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23495 comm="syz.5.5073" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3e9e59e0d9 code=0x7ffc0000 [ 1892.886843][ T30] audit: type=1326 audit(1786862936.275:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23495 comm="syz.5.5073" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9e59e0d9 code=0x7ffc0000 [ 1893.081700][ T30] audit: type=1326 audit(1786862936.275:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23495 comm="syz.5.5073" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9e59e0d9 code=0x7ffc0000 [ 1893.117774][ T30] audit: type=1326 audit(1786862936.275:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23495 comm="syz.5.5073" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9e59e0d9 code=0x7ffc0000 [ 1893.543053][T22100] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.682672][T22100] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.873491][T22100] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.976021][T22100] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1894.237369][T22100] bridge_slave_1: left allmulticast mode [ 1894.246000][T22100] bridge_slave_1: left promiscuous mode [ 1894.251743][T22100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1894.269873][T22100] bridge_slave_0: left allmulticast mode [ 1894.275670][T22100] bridge_slave_0: left promiscuous mode [ 1894.281397][T22100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1894.417894][T22100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1894.440680][T22100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1894.469633][T22100] bond0 (unregistering): Released all slaves [ 1894.697598][T22100] hsr_slave_0: left promiscuous mode [ 1894.713948][T22100] hsr_slave_1: left promiscuous mode [ 1894.726166][T22100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1894.739078][T22100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1894.747857][T22100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1894.755482][T22100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1894.768433][T22100] veth1_macvtap: left promiscuous mode [ 1894.773941][T22100] veth0_macvtap: left promiscuous mode [ 1894.780162][T22100] veth1_vlan: left promiscuous mode [ 1894.785460][T22100] veth0_vlan: left promiscuous mode [ 1894.951840][T22100] team0 (unregistering): Port device team_slave_1 removed [ 1894.965756][T22100] team0 (unregistering): Port device team_slave_0 removed [ 1895.322759][T22100] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.397192][T22100] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.456760][T22100] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.527012][T22100] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.656880][T22100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.734211][T22100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.767274][T22100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.821220][T22100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.944598][T22100] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.030305][T22100] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.118225][T22100] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.220846][T22100] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.330422][T22100] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.378976][T22100] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.430725][T22100] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.493455][T22100] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.593849][T22100] bridge_slave_1: left allmulticast mode [ 1896.608995][T22100] bridge_slave_1: left promiscuous mode [ 1896.614718][T22100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1896.623698][T22100] bridge_slave_0: left allmulticast mode [ 1896.629513][T22100] bridge_slave_0: left promiscuous mode [ 1896.635223][T22100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1896.648296][T22100] bridge_slave_1: left allmulticast mode [ 1896.653962][T22100] bridge_slave_1: left promiscuous mode [ 1896.663623][T22100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1896.674560][T22100] bridge_slave_0: left allmulticast mode [ 1896.685762][T22100] bridge_slave_0: left promiscuous mode [ 1896.695123][T22100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1896.710078][T22100] bridge_slave_1: left allmulticast mode [ 1896.715915][T22100] bridge_slave_1: left promiscuous mode [ 1896.721619][T22100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1896.731034][T22100] bridge_slave_0: left allmulticast mode [ 1896.742790][T22100] bridge_slave_0: left promiscuous mode [ 1896.749495][T22100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1896.763135][T22100] bridge_slave_1: left allmulticast mode [ 1896.768941][T22100] bridge_slave_1: left promiscuous mode [ 1896.774645][T22100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1896.785574][T22100] bridge_slave_0: left allmulticast mode [ 1896.797579][T22100] bridge_slave_0: left promiscuous mode [ 1896.803270][T22100] bridge0: port 1(bridge_slave_0) entered disabled state [ 1896.965186][T22100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1896.975444][T22100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1896.985195][T22100] bond0 (unregistering): Released all slaves [ 1897.031257][T22100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1897.042356][T22100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1897.055592][T22100] bond0 (unregistering): Released all slaves [ 1897.094196][T22100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1897.106293][T22100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1897.119106][T22100] bond0 (unregistering): Released all slaves [ 1897.128815][T22100] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1897.138784][T22100] bond1 (unregistering): Released all slaves [ 1897.189375][T22100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1897.200055][T22100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1897.209924][T22100] bond0 (unregistering): Released all slaves [ 1897.232677][ T5267] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1897.344859][T22100] tipc: Left network mode [ 1897.694658][ T5267] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1897.959831][T22100] hsr_slave_0: left promiscuous mode [ 1897.965867][T22100] hsr_slave_1: left promiscuous mode [ 1897.976268][T22100] hsr_slave_0: left promiscuous mode [ 1897.982524][T22100] hsr_slave_1: left promiscuous mode [ 1897.997854][T22100] hsr_slave_0: left promiscuous mode [ 1898.003742][T22100] hsr_slave_1: left promiscuous mode [ 1898.012768][T22100] hsr_slave_0: left promiscuous mode [ 1898.019062][T22100] hsr_slave_1: left promiscuous mode [ 1898.043817][T22100] veth1_macvtap: left promiscuous mode [ 1898.050363][T22100] veth0_macvtap: left promiscuous mode [ 1898.055967][T22100] veth1_vlan: left promiscuous mode [ 1898.061544][T22100] veth0_vlan: left promiscuous mode [ 1898.068105][T22100] veth1_macvtap: left promiscuous mode [ 1898.073686][T22100] veth0_macvtap: left promiscuous mode [ 1898.079247][T22100] veth1_vlan: left promiscuous mode [ 1898.085017][T22100] veth0_vlan: left promiscuous mode [ 1898.091536][T22100] veth1_macvtap: left promiscuous mode [ 1898.097056][T22100] veth0_macvtap: left promiscuous mode [ 1898.103290][T22100] veth1_vlan: left promiscuous mode [ 1898.108578][T22100] veth0_vlan: left promiscuous mode [ 1898.115904][T22100] veth1_macvtap: left promiscuous mode [ 1898.121418][T22100] veth0_macvtap: left promiscuous mode [ 1898.127694][T22100] veth1_vlan: left promiscuous mode [ 1898.132966][T22100] veth0_vlan: left promiscuous mode [ 1898.379092][T22100] team0 (unregistering): Port device team_slave_1 removed [ 1898.397720][T22100] team0 (unregistering): Port device team_slave_0 removed [ 1898.536530][T22100] team0 (unregistering): Port device team_slave_1 removed [ 1898.552563][T22100] team0 (unregistering): Port device team_slave_0 removed [ 1898.675212][T22100] team0 (unregistering): Port device team_slave_1 removed [ 1898.687014][T22100] team0 (unregistering): Port device team_slave_0 removed [ 1898.821037][T22100] team0 (unregistering): Port device team_slave_1 removed [ 1898.834307][T22100] team0 (unregistering): Port device team_slave_0 removed [ 1898.898194][ T5267] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1899.470531][ T5267] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1899.639459][T22100] IPVS: stop unused estimator thread 0...