last executing test programs: 9m23.049076806s ago: executing program 32 (id=881): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2m26.272845376s ago: executing program 33 (id=2334): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='0', 0x1) 1m51.172539958s ago: executing program 4 (id=2475): socket(0x11, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) pipe(&(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, 0x0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x64, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x201}}}}}}}, 0x0) 1m50.858099326s ago: executing program 4 (id=2479): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) setrlimit(0x2, &(0x7f0000000180)={0x3ff, 0x8}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r3, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) sync() acct(&(0x7f0000000000)='./bus\x00') socket(0x2b, 0x1, 0x1) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x3, 0x2, 0x1, {0x3, 0x5, 0x7, 0xdb2}}) 1m47.935351035s ago: executing program 4 (id=2485): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x40880) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYBLOB], 0x140}}, 0x20000844) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast2, 0x72}}, 0x1, 0x2, [{{0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e20, 0x1ff, @private0}}]}, 0x190) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4c241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$igmp6(0xa, 0x3, 0x2) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="000022f0ffffffffffff0180c200000e8100350008004500001c000000000011907800000000e0000001000017c10008907809ed9adb4ebee6cd871a4f51ff0a2b646b9dca724d5f"], 0x32) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a09058103", @ANYBLOB="b54812"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xe, 0xc100) 1m43.755945456s ago: executing program 6 (id=2503): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0xc00) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sendfile(r2, r0, 0x0, 0xc00) close(r2) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sendfile(r3, r0, 0x0, 0xc00) close(r3) sendfile(0xffffffffffffffff, r0, 0x0, 0xc00) unlinkat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) 1m43.495808102s ago: executing program 4 (id=2504): mount(0x0, 0x0, 0x0, 0x8c0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xf) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x75d, &(0x7f0000001040)="$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") syz_open_dev$sndctrl(0x0, 0x0, 0x8801) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b408f8ff0002000000b700f5ffffffffff9400c200000000009500001200000000000000000002000000000000000000"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) unshare(0x2a020480) 1m42.420343501s ago: executing program 6 (id=2508): socket(0x11, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) pipe(&(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, 0x0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x64, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x201}}}}}}}, 0x0) 1m42.365742741s ago: executing program 4 (id=2509): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) 1m41.565302984s ago: executing program 6 (id=2510): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r6, 0x0, 0x0) sendto$packet(r8, 0x0, 0x0, 0x4004010, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f0000000240)={{0x2, 0x4e22, @broadcast}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x30, {0x2, 0x4e23, @broadcast}, 'wg1\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 1m41.394801424s ago: executing program 4 (id=2511): mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0xc00) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) close(r2) openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x42, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r3, r0, 0x0, 0x20000) sendfile(r3, r0, 0x0, 0x20000) 1m41.308990865s ago: executing program 7 (id=2513): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000000440)=""/84, 0x54}], 0x3}, 0x9}], 0x3, 0x0, 0x0) 1m40.804117542s ago: executing program 7 (id=2514): socket(0x11, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x64, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x201}}}}}}}, 0x0) 1m40.058479213s ago: executing program 7 (id=2516): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r4, 0xfffffffffffffff5, 0x1) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0xe}, {0xffbd, 0xff46, [0x0, 0xd, 0x8e, 0x9, 0x5]}}}}, 0x1b) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x68, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x88, 0xa, "315dcd4542a9187f"}]}}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 1m39.002032595s ago: executing program 7 (id=2518): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$eJzs2s9rHGUYB/Bn0tbGlHQj/qIF8UUP6mVocvbQIC2IAUW7QhWkUzPRZcfdsLMsrIjJqV79EzyLR2+C9OglF/8CD14klxx7EEe6u5pG4iGI3ZJ+Ppd94N0vzzPMy8t7mP3Xv/6su1XnW8UwFrIsFq7GbtzLYiUW4i+78dorN3964b2bH7y1vrFx7d2Urq/fWF1LKV188ccPv/jupbvDC+9/f/GH87G38tH+wdqve8/tXdr/48annTp16tTrD1ORbvf7w+J2VabNTt3NU3qnKou6TJ1eXQ6OrG9V/e3tcSp6m8tL24OyrlPRG6duOU7DfhoOxqn4pOj0Up7naXkp+C/a395rmjhozt2Kpmme/CYu3I3lX6IV2VMpe/pq9uyt7Pnd7NJB07TmPSr/C+//8fbAob4YUX01ao/a09/p+vpWdKKKMq5EK36P+9tkZlpff3Pj2pU0sRJ3qp1ZfmfUPnM0vxqtWDk+vzrNp7hT/fbEtO3OqH0+liLORczya9GKZ47Prx3mJ/3PTPovxqsvP9A/j1b8/HH0o4rNuJ89zH+5mtIbb2+ko/NfnvwPAOC0ydPfjr2/5fm/rU/zJ7gf/uN+dTYun53vsxNRjz/vFlVVDhRVOVh8NMY4DUVENtlg2WyjzXsexQmLuR5LPCSHL33ekwAAAAAAAAAAAHASD+Nzwnk/IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj7MwAA//+3Ycw+") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) inotify_init() syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0xe}, {0xffbd, 0xff46, [0x0, 0xd, 0x8e, 0x9, 0x5]}}}}, 0x1b) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001"], 0x1f0}}, 0x0) 1m38.867745955s ago: executing program 6 (id=2519): bind$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={0x1e, @none={0x0, 0x2}}, 0x14) 1m38.630814365s ago: executing program 6 (id=2520): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0xc00) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sendfile(r2, r0, 0x0, 0xc00) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x42, 0x1ff) sendfile(r3, r0, 0x0, 0xc00) close(r3) sendfile(0xffffffffffffffff, r0, 0x0, 0xc00) unlinkat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) 1m37.982880936s ago: executing program 6 (id=2521): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) setrlimit(0x2, &(0x7f0000000180)={0x3ff, 0x8}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r3, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) sync() acct(&(0x7f0000000000)='./bus\x00') socket(0x2b, 0x1, 0x1) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x3, 0x2, 0x1, {0x3, 0x5, 0x7, 0xdb2}}) 1m37.823508967s ago: executing program 7 (id=2523): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) 1m36.669462612s ago: executing program 7 (id=2525): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1802, 0x142}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r2}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m30.945938595s ago: executing program 34 (id=2495): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@chain) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) syz_emit_ethernet(0x3c, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb, 0x0, 0x0, [0x0, 0x0]}}}}}}}, 0x0) 1m26.356824708s ago: executing program 35 (id=2511): mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0xc00) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) close(r2) openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x42, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r3, r0, 0x0, 0x20000) sendfile(r3, r0, 0x0, 0x20000) 1m21.832930649s ago: executing program 36 (id=2521): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) setrlimit(0x2, &(0x7f0000000180)={0x3ff, 0x8}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r3, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) sync() acct(&(0x7f0000000000)='./bus\x00') socket(0x2b, 0x1, 0x1) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x3, 0x2, 0x1, {0x3, 0x5, 0x7, 0xdb2}}) 1m21.553048585s ago: executing program 37 (id=2525): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1802, 0x142}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r2}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m5.539516877s ago: executing program 8 (id=2600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1m4.751802684s ago: executing program 8 (id=2603): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m1.51556737s ago: executing program 8 (id=2608): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677eef7536f8115edae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0xe}, {0xffbd, 0xff46, [0x0, 0xd, 0x8e, 0x9, 0x5]}}}}, 0x1b) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001"], 0x1f0}}, 0x0) 1m0.856758615s ago: executing program 8 (id=2611): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180), 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='77', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='512', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='255', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) write(r6, &(0x7f00000004c0)='1', 0x1) close(r6) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff) fallocate(r8, 0x0, 0x0, 0x100000) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) write(0xffffffffffffffff, &(0x7f00000005c0)='3', 0x1) 1m0.627632978s ago: executing program 8 (id=2613): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x9, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0xb04f, 0x0, 0x2}], 0x1}) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64], 0x3, 0x232, &(0x7f0000000500)="$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") io_uring_enter(0xffffffffffffffff, 0x2004, 0xfffffffd, 0x9, 0x0, 0x0) 59.53090622s ago: executing program 8 (id=2615): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e03000000000000040000000c0000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) setrlimit(0x2, &(0x7f0000000180)={0x3ff, 0x8}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r3, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) sync() acct(&(0x7f0000000000)='./bus\x00') socket(0x2b, 0x1, 0x1) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x3, 0x2, 0x1, {0x3, 0x5, 0x7, 0xdb2}}) 43.985485565s ago: executing program 38 (id=2615): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e03000000000000040000000c0000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) setrlimit(0x2, &(0x7f0000000180)={0x3ff, 0x8}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r3, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) sync() acct(&(0x7f0000000000)='./bus\x00') socket(0x2b, 0x1, 0x1) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x3, 0x2, 0x1, {0x3, 0x5, 0x7, 0xdb2}}) 36.078829477s ago: executing program 5 (id=2659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, 0x0, 0x4000100) 34.891214552s ago: executing program 5 (id=2662): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000009c0)={'gre0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x7, 0x700, 0x3, 0xd, {{0x18, 0x4, 0x3, 0x15, 0x60, 0x68, 0x0, 0xfa, 0x29, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x10, 0x0, [{0x2, 0xa, "d4c8bc2582f75639"}]}, @cipso={0x86, 0x10, 0x3, [{0x2, 0x4, "cb24"}, {0x2, 0x2}, {0x2, 0x2}, {0x1, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x11, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1, 0x10a6}, {@local, 0x5}, {@empty, 0x4}, {@local}]}]}}}}}) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x6c, 0x30, 0xb, 0x70bd2d, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000003, 0x1, 0x8, 0x0, 0x400}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_ACTION={0x6, 0x3, 0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 34.605279417s ago: executing program 5 (id=2665): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@chain) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) pread64(r1, &(0x7f0000000300)=""/216, 0xd8, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 32.596993946s ago: executing program 5 (id=2669): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="7105b808030000"], 0xbb) 30.30236753s ago: executing program 5 (id=2676): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendto$packet(r7, 0x0, 0x0, 0x4004010, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 28.230673907s ago: executing program 5 (id=2681): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e03000000000000040000000c0000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) setrlimit(0x2, &(0x7f0000000180)={0x3ff, 0x8}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r3, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) sync() acct(&(0x7f0000000000)='./bus\x00') socket(0x2b, 0x1, 0x1) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x3, 0x2, 0x1, {0x3, 0x5, 0x7, 0xdb2}}) 26.921347953s ago: executing program 9 (id=2685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x6, 0x8, 0x5, 0x101, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='1\n', 0x2) syz_emit_ethernet(0x8e, &(0x7f0000000600)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x1236, 0x4000, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x6c, 0x0, @opaque='\x00'/100}}}}}, 0x0) 25.700838644s ago: executing program 9 (id=2687): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0xc00) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) sendfile(r2, r0, 0x0, 0xc00) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x42, 0x1ff) sendfile(r3, r0, 0x0, 0xc00) close(r3) openat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/f4\x00', 0x42, 0x1ff) sendfile(0xffffffffffffffff, r0, 0x0, 0xc00) close(0xffffffffffffffff) unlinkat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/f4\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r4, r0, 0x0, 0x20000) sendfile(r4, r0, 0x0, 0x20000) sendfile(r4, r0, 0x0, 0x20000) 25.262469719s ago: executing program 9 (id=2689): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='77', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='512', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='255', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) write(r6, &(0x7f00000004c0)='1', 0x1) close(r6) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff) fallocate(r8, 0x0, 0x0, 0x100000) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) write(0xffffffffffffffff, &(0x7f00000005c0)='3', 0x1) 24.023739912s ago: executing program 9 (id=2692): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000600)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@min_batch_time}]}, 0x3, 0x57b, &(0x7f0000000d80)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x4a) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000540)='wg2\x00', 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4014, &(0x7f00000000c0), 0x1, 0x3f9, &(0x7f0000000900)="$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") linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0xa, 0x28000000}, 0x0) 22.672764186s ago: executing program 9 (id=2696): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x273, 0x100, 0x2, 0x11f}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, 0x0, 0x0, &(0x7f0000000480)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xd000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r5 = syz_open_pts(r4, 0xa0200) r6 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0x0, 0xee00, 0xee00) tkill(r6, 0xf) dup3(r5, r4, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x0, 0x20000000, 0x800, 0x0, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e22}, 0x0, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 21.217980917s ago: executing program 9 (id=2699): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e03000000000000040000000c0000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) setrlimit(0x2, &(0x7f0000000180)={0x3ff, 0x8}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r3, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) sync() acct(&(0x7f0000000000)='./bus\x00') socket(0x2b, 0x1, 0x1) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x3, 0x2, 0x1, {0x3, 0x5, 0x7, 0xdb2}}) 12.913038071s ago: executing program 39 (id=2681): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e03000000000000040000000c0000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) setrlimit(0x2, &(0x7f0000000180)={0x3ff, 0x8}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r3, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) sync() acct(&(0x7f0000000000)='./bus\x00') socket(0x2b, 0x1, 0x1) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x3, 0x2, 0x1, {0x3, 0x5, 0x7, 0xdb2}}) 6.123619835s ago: executing program 40 (id=2699): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e03000000000000040000000c0000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) setrlimit(0x2, &(0x7f0000000180)={0x3ff, 0x8}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r3, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) sync() acct(&(0x7f0000000000)='./bus\x00') socket(0x2b, 0x1, 0x1) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x3, 0x2, 0x1, {0x3, 0x5, 0x7, 0xdb2}}) 3.088125533s ago: executing program 1 (id=2772): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64c42, 0x389b0d52417bb201) waitid$P_PIDFD(0x3, r0, 0x0, 0x4, 0x0) 2.848179799s ago: executing program 1 (id=2773): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl(r0, 0x3b8e, &(0x7f00000002c0)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000080)=[{0x6, 0xc0, 0x0, 0x6}]}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000000)=0xa92, 0x4) sendto$inet(r3, 0x0, 0x0, 0x804, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0x8a}], 0x1, 0x22, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r2, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) fcntl$dupfd(r5, 0x0, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSIGACCEPT(r6, 0x5607, 0x4) ioctl$VT_ACTIVATE(r6, 0x5606, 0x4) ioctl$TIOCMBIC(r6, 0x5417, 0x0) 2.499282595s ago: executing program 0 (id=2775): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r0, 0x0, 0xff70) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 2.062981374s ago: executing program 3 (id=2778): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x3}}}}}}}, 0x0) 1.887677913s ago: executing program 3 (id=2780): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) 1.731452451s ago: executing program 3 (id=2781): r0 = msgget$private(0x0, 0x240) msgctl$IPC_STAT(r0, 0x2, 0x0) 1.71624316s ago: executing program 1 (id=2782): semget(0x2, 0x4, 0x39c) 1.510708953s ago: executing program 3 (id=2783): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x140040c5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000005280), 0x400018e, 0x10040, 0x0) 1.510543292s ago: executing program 1 (id=2784): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x6160}], 0x1, 0x0, 0x0, 0x0) unshare(0x400) signalfd4(r0, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) 1.274021252s ago: executing program 2 (id=2785): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x20, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) 1.122339888s ago: executing program 0 (id=2786): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = getegid() setgid(r0) lstat(0x0, 0x0) 1.002257444s ago: executing program 2 (id=2787): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x11, 0x2, 0x0) close(0x3) r1 = socket(0x11, 0x80803, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) setsockopt(r0, 0x107, 0xd, 0x0, 0x0) 826.635561ms ago: executing program 2 (id=2788): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000080)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x86, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}], 0x20, 0x80}}], 0x1, 0x4040801) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x77}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x4583c57b, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) 784.039498ms ago: executing program 0 (id=2789): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x40844) setns(0xc9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 667.105232ms ago: executing program 3 (id=2790): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1, 0x300}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) 622.529567ms ago: executing program 3 (id=2791): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 544.836961ms ago: executing program 0 (id=2792): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/component_size\x00', 0xc2002, 0x0) write(r0, &(0x7f00000000c0)="03ee6fec", 0x4) 495.615693ms ago: executing program 2 (id=2793): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 472.065476ms ago: executing program 1 (id=2794): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000002000), 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x1, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 388.69109ms ago: executing program 0 (id=2795): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1, 0x0, 0x500}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) 310.980773ms ago: executing program 2 (id=2796): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 226.73845ms ago: executing program 0 (id=2797): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000002100), 0x0) 98.830838ms ago: executing program 1 (id=2798): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x6e, &(0x7f0000001540)=""/110}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0xc5}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 0s ago: executing program 2 (id=2799): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000140)={r1}, &(0x7f0000000780)={'enc=', 'raw', ' hash=', {'sha384-arm\x00'}}, 0x0, 0x0) kernel console output (not intermixed with test programs): 0xF has invalid maxpacket 1025, setting to 1024 [ 785.783499][T10293] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 785.825833][T14638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.856675][T10293] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 785.892360][T14638] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 785.924250][T10293] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 785.948728][T14646] jffs2: notice: (14646) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 786.000029][T10293] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 786.093940][T10293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.531659][T14627] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 786.813099][T14627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.847350][T14627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.847537][ T5632] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.904380][T14655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 787.623901][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 787.632218][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 787.643072][ T24] usb 3-1: USB disconnect, device number 47 [ 788.769446][T14658] Process accounting resumed [ 788.799094][T14666] jffs2: notice: (14666) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 790.294998][T14688] loop1: detected capacity change from 0 to 128 [ 790.623419][T14693] loop2: detected capacity change from 0 to 128 [ 790.892217][T14695] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5631] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[14695] [ 791.069934][T14697] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5636] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[14697] [ 791.636731][T11669] Bluetooth: hci5: link tx timeout [ 791.675034][T11669] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 792.184169][T14701] loop0: detected capacity change from 0 to 128 [ 792.506853][T14705] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5623] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[14705] [ 792.540937][T14705] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 792.551114][T14705] FAT-fs (loop0): Filesystem has been set read-only [ 793.561625][ T5776] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 793.765197][T11669] Bluetooth: hci5: command 0x0406 tx timeout [ 794.159407][ T5776] usb 3-1: Using ep0 maxpacket: 8 [ 794.306293][ T5776] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 794.316794][ T5776] usb 3-1: config 179 has no interface number 0 [ 794.324002][ T5776] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 794.335961][ T5776] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 794.349867][ T5776] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 794.363688][ T5776] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 794.375499][ T5776] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 794.389054][ T5776] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 794.399097][ T5776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.422803][T14707] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 794.601328][T14721] loop4: detected capacity change from 0 to 1024 [ 794.618039][T14721] EXT4-fs: Ignoring removed orlov option [ 795.265224][T14721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 796.172255][T14707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.233469][T14707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.332794][ T5799] usb 3-1: USB disconnect, device number 48 [ 796.338829][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 796.338868][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 796.550554][ T5632] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.720265][T14743] jffs2: notice: (14743) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 799.807973][T14772] No source specified [ 800.332600][T14787] jffs2: notice: (14787) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 800.530437][T14791] loop0: detected capacity change from 0 to 128 [ 800.848485][T14795] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5623] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[14795] [ 801.005790][ T5752] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 801.716441][ T5752] usb 7-1: Using ep0 maxpacket: 8 [ 802.043769][ T5752] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 802.171542][ T5752] usb 7-1: config 179 has no interface number 0 [ 802.195554][ T5752] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 802.222817][ T5752] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 802.236541][T14800] jffs2: notice: (14800) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 802.271320][ T5752] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 802.309334][ T5752] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 802.343273][ T5752] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 802.393438][ T5752] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 802.436136][ T5752] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.462640][T14793] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 802.629696][T14807] PKCS7: Unknown OID: [4] (bad) [ 802.647696][T14807] PKCS7: Only support pkcs7_signedData type [ 802.793875][ T5752] usb 7-1: USB disconnect, device number 28 [ 802.793938][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 802.808306][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 802.880622][T14815] No source specified [ 802.953791][T14813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2265'. [ 803.068182][T14816] loop3: detected capacity change from 0 to 1024 [ 803.075413][T14816] EXT4-fs: Ignoring removed orlov option [ 803.193613][T14822] loop2: detected capacity change from 0 to 256 [ 803.286162][T14816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.076840][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.709325][T14835] jffs2: notice: (14835) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 806.991196][ T30] audit: type=1800 audit(1785930580.842:573): pid=14843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2276" name="zoned" dev="configfs" ino=32294 res=0 errno=0 [ 808.139205][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.153938][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.309483][T14853] jffs2: notice: (14853) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 808.858667][T14853] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 809.513562][ T30] audit: type=1800 audit(1785930580.872:574): pid=14843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2276" name="zone_nr_conv" dev="configfs" ino=32298 res=0 errno=0 [ 810.563166][T14862] loop2: detected capacity change from 0 to 2048 [ 810.614842][T14862] EXT4-fs: Ignoring removed i_version option [ 810.691018][ T30] audit: type=1800 audit(1785930580.882:575): pid=14843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2276" name="power" dev="configfs" ino=32299 res=0 errno=0 [ 810.711340][ T30] audit: type=1800 audit(1785930580.882:576): pid=14843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2276" name="power" dev="configfs" ino=32300 res=0 errno=0 [ 810.800200][T14847] kAFS: unable to lookup cell 'ÿ' [ 810.899228][T14862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 810.963036][T14862] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 810.981439][T14872] netlink: 'syz.3.2284': attribute type 1 has an invalid length. [ 811.646528][T14872] bond5: entered promiscuous mode [ 811.658801][T14872] 8021q: adding VLAN 0 to HW filter on device bond5 [ 811.810486][T14876] bond5: (slave bridge5): making interface the new active one [ 811.859433][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.886893][T14876] bridge5: entered promiscuous mode [ 811.978453][T14883] PKCS7: Unknown OID: [4] (bad) [ 811.995312][T14876] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 812.080010][T14883] PKCS7: Only support pkcs7_signedData type [ 812.304435][T14887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2285'. [ 812.405877][ T5799] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 812.497362][T14894] jffs2: notice: (14894) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 812.567808][ T5799] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.606240][ T5799] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 812.637592][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.220600][T14900] loop1: detected capacity change from 0 to 2048 [ 813.301291][T14900] EXT4-fs: Ignoring removed i_version option [ 813.438207][T14900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.476112][T14906] netlink: 'syz.0.2293': attribute type 1 has an invalid length. [ 813.520847][T14900] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 813.555019][T14908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2293'. [ 813.564352][T14908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2293'. [ 813.573331][T14908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2293'. [ 814.088406][T14906] bond6: entered promiscuous mode [ 814.098905][T14906] 8021q: adding VLAN 0 to HW filter on device bond6 [ 814.187863][T14915] bond6: (slave bridge6): making interface the new active one [ 814.232704][T14915] bridge6: entered promiscuous mode [ 814.274990][T14919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 814.298540][ T5631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.310481][T14915] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 815.156912][T14921] jffs2: notice: (14921) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 815.362642][ T5799] usb 3-1: USB disconnect, device number 49 [ 815.582166][T14932] loop1: detected capacity change from 0 to 1024 [ 815.598483][T14932] EXT4-fs: Ignoring removed orlov option [ 815.839755][T14923] Process accounting resumed [ 815.890975][T14932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 816.591766][T14939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 817.129678][T14949] jffs2: notice: (14949) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 817.268569][ T5631] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.590255][T14954] netlink: 'syz.3.2306': attribute type 1 has an invalid length. [ 817.646600][T14957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2306'. [ 817.661120][T14937] Process accounting resumed [ 817.723269][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2306'. [ 817.847669][T14963] loop4: detected capacity change from 0 to 128 [ 817.945397][T14957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2306'. [ 819.024628][T14965] loop0: detected capacity change from 0 to 256 [ 821.298298][T14954] bond6: entered promiscuous mode [ 821.500160][T14954] 8021q: adding VLAN 0 to HW filter on device bond6 [ 821.746902][T14959] bond6: (slave bridge6): making interface the new active one [ 821.754832][T14959] bridge6: entered promiscuous mode [ 821.763441][T14959] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 821.967912][T14983] loop0: detected capacity change from 0 to 128 [ 822.106906][T14987] loop1: detected capacity change from 0 to 128 [ 822.373734][T14992] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5623] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[14992] [ 822.404459][T14992] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 822.414629][T14992] FAT-fs (loop0): Filesystem has been set read-only [ 822.698655][T14993] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5631] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[14993] [ 822.740654][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 823.089676][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 823.134657][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 823.163111][T14996] loop4: detected capacity change from 0 to 2048 [ 823.165579][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.255493][T14996] EXT4-fs: Ignoring removed i_version option [ 823.842720][T14996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.876424][T14996] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 824.500489][T15016] loop3: detected capacity change from 0 to 128 [ 824.914343][T15019] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5622] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[15019] [ 824.948867][T15019] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 824.960168][T15019] FAT-fs (loop3): Filesystem has been set read-only [ 825.667852][ T5632] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.184753][T10293] usb 3-1: USB disconnect, device number 50 [ 827.716716][T10293] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 828.105269][T10293] usb 4-1: Using ep0 maxpacket: 8 [ 828.176002][T10293] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 828.232424][T10293] usb 4-1: config 179 has no interface number 0 [ 828.295138][T10293] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 828.346865][T10293] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 828.377116][T10293] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 828.400713][T10293] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 828.425912][T10293] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 828.475228][T10293] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 828.502662][T10293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.548795][T15036] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 828.835265][ T186] usb 4-1: USB disconnect, device number 36 [ 828.835331][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 828.849600][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 829.139037][T15058] PKCS7: Unknown OID: [4] (bad) [ 829.144049][T15058] PKCS7: Only support pkcs7_signedData type [ 829.285896][T15062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2333'. [ 829.455446][T15062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2333'. [ 829.667328][T15070] loop3: detected capacity change from 0 to 4096 [ 829.707768][T15070] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 829.719862][T15070] EXT4-fs (loop3): Test dummy encryption mode enabled [ 829.740496][T15070] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 829.929911][T15081] loop4: detected capacity change from 0 to 2048 [ 829.989558][T15081] EXT4-fs: Ignoring removed i_version option [ 830.132648][T15081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 830.154911][T10293] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 830.171539][T15081] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 830.253390][T15088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2341'. [ 830.347858][T10293] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 830.450794][T10293] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 830.547955][T10293] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.028345][T15094] loop0: detected capacity change from 0 to 2048 [ 831.076370][T15094] EXT4-fs: Ignoring removed i_version option [ 831.513335][T15094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.608168][T15094] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 831.772648][ T5632] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.963740][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.973978][ T5752] usb 7-1: USB disconnect, device number 29 [ 834.512102][T15123] loop0: detected capacity change from 0 to 2048 [ 834.555295][ T5799] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 834.587185][T15123] EXT4-fs: Ignoring removed i_version option [ 834.610050][T15126] loop3: detected capacity change from 0 to 1024 [ 834.622379][T15126] EXT4-fs: Ignoring removed orlov option [ 834.879083][T15126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 834.934916][T15123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 835.071751][T15123] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 835.730786][T15135] kAFS: unable to lookup cell 'ÿ' [ 836.006412][ T5799] usb 7-1: Using ep0 maxpacket: 8 [ 836.054458][ T5799] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 836.066842][ T5799] usb 7-1: config 179 has no interface number 0 [ 836.079934][ T5799] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 836.112164][ T5799] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 836.144764][ T5799] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 836.174265][ T5799] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 836.193074][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.228739][ T5799] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 836.275214][ T5799] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 836.287331][ T5799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.306459][T15120] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 836.495116][T15142] loop4: detected capacity change from 0 to 1024 [ 836.504762][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.515804][T15142] EXT4-fs: Ignoring removed orlov option [ 836.850701][T15142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 836.920168][T15120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.081995][T15120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.360115][ T24] usb 7-1: USB disconnect, device number 30 [ 837.360175][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 837.374699][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 837.426421][T15151] PKCS7: Unknown OID: [4] (bad) [ 837.463612][T15151] PKCS7: Only support pkcs7_signedData type [ 837.475715][ T5632] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.620909][T15161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2355'. [ 837.652242][T15155] loop0: detected capacity change from 0 to 2048 [ 838.219298][T15161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2355'. [ 838.894943][ T24] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 839.284660][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.307774][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 839.348316][ T24] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 839.391177][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.559772][T15179] loop0: detected capacity change from 0 to 2048 [ 839.584303][ T30] audit: type=1800 audit(1785930613.432:577): pid=15182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2365" name="ipv4_address" dev="configfs" ino=33109 res=0 errno=0 [ 839.586478][T15179] EXT4-fs: Ignoring removed i_version option [ 839.648229][ T30] audit: type=1800 audit(1785930613.472:578): pid=15182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2365" name="ipv4_port" dev="configfs" ino=33110 res=0 errno=0 [ 839.676409][ T30] audit: type=1800 audit(1785930613.482:579): pid=15182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2365" name="num" dev="configfs" ino=33111 res=0 errno=0 [ 840.235913][T15179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 840.309873][T15179] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 840.355548][T15194] siw: device registration error -23 [ 840.951917][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.682413][ T10] usb 7-1: USB disconnect, device number 31 [ 843.482362][T15222] MTD: Couldn't look up './dev/mtdblock0': -2 [ 844.724967][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 844.739690][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 844.748066][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 844.758547][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 844.767260][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 844.842781][T15233] loop0: detected capacity change from 0 to 2048 [ 844.997186][T15233] EXT4-fs: Ignoring removed i_version option [ 845.668488][T15233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 845.696477][T15233] ext4 filesystem being mounted at /440/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 846.811963][T11669] Bluetooth: hci3: command tx timeout [ 846.813171][T15259] loop4: detected capacity change from 0 to 2048 [ 846.860185][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.884670][T15259] EXT4-fs: Ignoring removed i_version option [ 847.001632][T15259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 847.126984][T15259] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 847.128627][T15272] kAFS: unable to lookup cell 'ÿ' [ 848.597303][T15281] loop3: detected capacity change from 0 to 2048 [ 848.680384][T15281] EXT4-fs: Ignoring removed i_version option [ 848.729757][ T5632] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.759863][T15281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.906760][T11669] Bluetooth: hci3: command tx timeout [ 848.960691][T15281] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 850.878764][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.967298][T11669] Bluetooth: hci3: command tx timeout [ 852.651676][T15325] loop0: detected capacity change from 0 to 128 [ 852.736820][T15325] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 852.809482][T15325] ext4 filesystem being mounted at /446/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 853.046675][T11669] Bluetooth: hci3: command tx timeout [ 853.397312][T15325] EXT4-fs warning (device loop0): __ext4_ioctl:1564: Setting inode version is not supported with metadata_csum enabled. [ 853.981632][ T5623] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 854.409032][T15346] loop0: detected capacity change from 0 to 2048 [ 854.434086][T15346] EXT4-fs: Ignoring removed i_version option [ 854.458562][T15346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 854.501451][T15346] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 855.065341][T15234] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.262712][T15234] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.288139][T15234] bridge_slave_0: entered allmulticast mode [ 855.325983][T15234] bridge_slave_0: entered promiscuous mode [ 855.912483][T15234] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.956874][T15356] loop4: detected capacity change from 0 to 2048 [ 855.976052][T15234] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.989064][T15356] EXT4-fs: Ignoring removed i_version option [ 856.000680][T15234] bridge_slave_1: entered allmulticast mode [ 856.022326][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.041188][T15234] bridge_slave_1: entered promiscuous mode [ 856.151436][T15356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 856.163875][T15356] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 856.811577][T15234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.875121][T15234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.132031][T15368] siw: device registration error -23 [ 857.307459][ T5632] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.802168][T15234] team0: Port device team_slave_0 added [ 857.843675][T15234] team0: Port device team_slave_1 added [ 858.177130][T15234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.215652][T15234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.281123][T15234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.304049][T15234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.356094][T15234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.409343][T15388] loop0: detected capacity change from 0 to 128 [ 858.492148][T15234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.836466][T15392] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5623] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[15392] [ 859.464473][T11669] Bluetooth: hci1: link tx timeout [ 859.476163][T11669] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 859.788004][T15234] hsr_slave_0: entered promiscuous mode [ 859.822252][T15234] hsr_slave_1: entered promiscuous mode [ 859.839291][ T30] audit: type=1800 audit(1785930633.692:580): pid=15396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2425" name="zoned" dev="configfs" ino=34013 res=0 errno=0 [ 859.867461][T15234] debugfs: 'hsr0' already exists in 'hsr' [ 859.886717][T15234] Cannot create hsr debugfs directory [ 859.924022][ T30] audit: type=1800 audit(1785930633.692:581): pid=15396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2425" name="zone_nr_conv" dev="configfs" ino=34014 res=0 errno=0 [ 860.193040][ T30] audit: type=1800 audit(1785930633.732:582): pid=15396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2425" name="power" dev="configfs" ino=34015 res=0 errno=0 [ 861.294436][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 861.474657][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 861.547075][T11669] Bluetooth: hci1: command 0x0406 tx timeout [ 861.874990][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 861.892005][ T10] usb 4-1: config 179 has no interface number 0 [ 862.359541][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 862.425334][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 862.504510][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 862.575646][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 862.646445][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 862.720249][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 862.761633][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.797982][T15413] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 862.827756][T15234] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 862.973135][T15438] Bluetooth: MGMT ver 1.23 [ 863.253406][T15234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 863.308343][T15413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.381766][T15234] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 863.433405][T15413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.749550][T15234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 863.800530][ T5752] usb 4-1: USB disconnect, device number 37 [ 863.800555][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 863.811235][T15234] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 863.814802][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 864.008667][T15234] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 864.095122][T15234] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 864.154102][T15234] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 865.280922][T15457] loop4: detected capacity change from 0 to 256 [ 868.313127][T15234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.399236][T15234] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.438357][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.445499][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.522715][T12969] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.529874][T12969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.227642][T15483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 869.368372][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.374878][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.355035][T15483] Process accounting resumed [ 870.438235][T15497] loop2: detected capacity change from 0 to 128 [ 870.931292][T15506] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5636] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[15506] [ 871.033571][ T5629] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 872.594468][ T186] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 872.656695][T15524] loop0: detected capacity change from 0 to 256 [ 875.043776][ T186] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 875.139933][ T186] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 875.202902][ T186] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 875.247182][ T186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.289651][ T186] usb 3-1: can't set config #1, error -71 [ 875.310263][ T186] usb 3-1: USB disconnect, device number 51 [ 875.509332][T15536] loop3: detected capacity change from 0 to 2048 [ 875.548484][T15536] EXT4-fs: Ignoring removed i_version option [ 875.627476][T15536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 875.653939][T15536] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 876.378990][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.970830][T15565] kAFS: unable to lookup cell 'ÿ' [ 877.038929][T15234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.260742][T15577] jffs2: notice: (15577) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 879.611753][ T30] audit: type=1800 audit(1785930653.462:583): pid=15597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2477" name="ipv4_address" dev="configfs" ino=34505 res=0 errno=0 [ 879.625793][T15598] jffs2: notice: (15598) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 879.720730][T15597] loop0: detected capacity change from 0 to 2048 [ 879.730683][ T30] audit: type=1800 audit(1785930653.482:584): pid=15597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2477" name="ipv4_port" dev="configfs" ino=34506 res=0 errno=0 [ 879.758231][T15605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 879.832944][ T30] audit: type=1800 audit(1785930653.482:585): pid=15597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2477" name="num" dev="configfs" ino=34507 res=0 errno=0 [ 879.897679][ T30] audit: type=1800 audit(1785930653.482:586): pid=15597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2477" name="local" dev="configfs" ino=34508 res=0 errno=0 [ 880.127359][ T30] audit: type=1800 audit(1785930653.482:587): pid=15597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2477" name="block_bytes" dev="configfs" ino=34509 res=0 errno=0 [ 880.365558][T15234] veth0_vlan: entered promiscuous mode [ 880.408253][T15607] loop3: detected capacity change from 0 to 2048 [ 880.518977][ T30] audit: type=1800 audit(1785930653.502:588): pid=15597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2477" name="blocks" dev="configfs" ino=34510 res=0 errno=0 [ 880.627965][T15607] EXT4-fs: Ignoring removed i_version option [ 880.798963][T15234] veth1_vlan: entered promiscuous mode [ 880.814398][ T30] audit: type=1800 audit(1785930653.502:589): pid=15597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2477" name="start_block" dev="configfs" ino=34511 res=0 errno=0 [ 880.891564][T15234] veth0_macvtap: entered promiscuous mode [ 880.929339][T15234] veth1_macvtap: entered promiscuous mode [ 880.951876][T15234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.963559][T15234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.097808][T15607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 881.866068][T15607] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 882.001229][ T9637] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.045529][T15617] loop0: detected capacity change from 0 to 2048 [ 882.073794][ T9637] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.499915][T15605] Process accounting resumed [ 882.508674][T15617] EXT4-fs: Ignoring removed i_version option [ 882.623274][T15617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 882.681622][T10217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.717686][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.735868][T10217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.755540][T15617] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 882.837732][T15635] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2485'. [ 882.862790][T10217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.874297][ T1019] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.913753][T10217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.936301][ T1019] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.991179][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.694047][T15643] jffs2: notice: (15643) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 884.215543][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 884.428687][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 884.472661][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 885.039579][ T30] audit: type=1800 audit(1785930658.892:590): pid=15666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2492" name="ipv4_address" dev="configfs" ino=35060 res=0 errno=0 [ 885.065672][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 885.071633][T15663] siw: device registration error -23 [ 885.091885][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 885.109577][ T24] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 885.140347][ T30] audit: type=1800 audit(1785930658.912:591): pid=15666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2492" name="ipv4_port" dev="configfs" ino=35062 res=0 errno=0 [ 885.161150][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.218205][ T24] usb 5-1: config 0 descriptor?? [ 885.254313][ T30] audit: type=1800 audit(1785930658.952:592): pid=15666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2492" name="num" dev="configfs" ino=35064 res=0 errno=0 [ 885.325987][ T30] audit: type=1800 audit(1785930658.962:593): pid=15666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2492" name="local" dev="configfs" ino=35065 res=0 errno=0 [ 885.364945][ T24] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input40 [ 885.470055][T15670] MTD: Couldn't look up './dev/mtdblock0': -2 [ 885.525344][ T30] audit: type=1800 audit(1785930658.962:594): pid=15666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2492" name="block_bytes" dev="configfs" ino=35066 res=0 errno=0 [ 885.595642][ T30] audit: type=1800 audit(1785930659.082:595): pid=15666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2492" name="blocks" dev="configfs" ino=34724 res=0 errno=0 [ 885.706653][ T30] audit: type=1800 audit(1785930659.092:596): pid=15666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2492" name="start_block" dev="configfs" ino=34730 res=0 errno=0 [ 885.724670][ T186] usb 5-1: USB disconnect, device number 46 [ 885.727518][ C1] pxrc 5-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 885.801952][ T4975] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 885.843575][T15678] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2499'. [ 885.890724][T15676] loop7: detected capacity change from 0 to 2048 [ 885.911037][T15676] EXT4-fs: Ignoring removed i_version option [ 885.980155][T15676] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 886.025402][T15684] jffs2: notice: (15684) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 886.083046][T15676] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 886.761402][T15694] loop3: detected capacity change from 0 to 128 [ 887.058364][T15696] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5622] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[15696] [ 887.784340][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 887.861936][T15698] jffs2: notice: (15698) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 887.882563][T15234] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.976911][T15701] loop4: detected capacity change from 0 to 2048 [ 887.984293][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 888.000287][T15701] EXT4-fs: Ignoring removed i_version option [ 888.009663][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 888.033996][T15701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 888.046865][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 888.064971][T15701] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 888.109883][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 888.185736][ T5632] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.216755][ T10] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 888.265523][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.427681][ T10] usb 1-1: config 0 descriptor?? [ 888.817157][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input41 [ 889.080661][ T10] usb 1-1: USB disconnect, device number 46 [ 889.493891][ T30] audit: type=1800 audit(1785930663.342:597): pid=15724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2512" name="ipv4_address" dev="configfs" ino=35129 res=0 errno=0 [ 889.535976][ T30] audit: type=1800 audit(1785930663.342:598): pid=15724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2512" name="ipv4_port" dev="configfs" ino=35130 res=0 errno=0 [ 889.562296][ T30] audit: type=1800 audit(1785930663.342:599): pid=15724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2512" name="num" dev="configfs" ino=35131 res=0 errno=0 [ 889.569996][T15724] loop0: detected capacity change from 0 to 2048 [ 890.411311][T15732] jffs2: notice: (15732) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 890.502652][T15737] loop7: detected capacity change from 0 to 128 [ 890.826340][T15740] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[15234] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[15740] [ 890.861512][T15740] FAT-fs (loop7): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 890.871646][T15740] FAT-fs (loop7): Filesystem has been set read-only [ 891.658061][T15744] loop7: detected capacity change from 0 to 128 [ 891.902251][T15749] jffs2: notice: (15749) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 892.034484][T15753] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[15234] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[15753] [ 892.727116][T15756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 894.525290][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 894.525311][ T30] audit: type=1800 audit(1785930668.372:604): pid=15771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2527" name="ipv4_address" dev="configfs" ino=35183 res=0 errno=0 [ 894.544776][T15771] loop0: detected capacity change from 0 to 2048 [ 894.572533][ T30] audit: type=1800 audit(1785930668.382:605): pid=15771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2527" name="ipv4_port" dev="configfs" ino=35184 res=0 errno=0 [ 894.613685][ T30] audit: type=1800 audit(1785930668.382:606): pid=15771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2527" name="num" dev="configfs" ino=35185 res=0 errno=0 [ 894.656510][ T30] audit: type=1800 audit(1785930668.382:607): pid=15771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2527" name="local" dev="configfs" ino=35186 res=0 errno=0 [ 894.680347][ T30] audit: type=1800 audit(1785930668.382:608): pid=15771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2527" name="block_bytes" dev="configfs" ino=35187 res=0 errno=0 [ 894.703018][ T30] audit: type=1800 audit(1785930668.382:609): pid=15771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2527" name="blocks" dev="configfs" ino=35188 res=0 errno=0 [ 894.723973][ T30] audit: type=1800 audit(1785930668.382:610): pid=15771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2527" name="start_block" dev="configfs" ino=35189 res=0 errno=0 [ 894.735744][T15773] jffs2: notice: (15773) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 895.073261][T15780] loop3: detected capacity change from 0 to 1024 [ 895.087513][T15780] EXT4-fs: Ignoring removed orlov option [ 895.175750][T15780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.284336][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.614448][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 895.750418][T15787] jffs2: notice: (15787) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 895.796243][ T10] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 895.807318][ T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 895.816723][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.466657][T15793] loop0: detected capacity change from 0 to 128 [ 896.774871][T15795] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5623] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[15795] [ 896.805666][ T5629] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 898.410725][ T803] usb 4-1: USB disconnect, device number 38 [ 899.635168][ T30] audit: type=1800 audit(1785930673.492:611): pid=15816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2542" name="ipv4_port" dev="configfs" ino=35974 res=0 errno=0 [ 899.664540][ T30] audit: type=1800 audit(1785930673.512:612): pid=15816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2542" name="num" dev="configfs" ino=35975 res=0 errno=0 [ 899.700138][ T30] audit: type=1800 audit(1785930673.512:613): pid=15816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2542" name="local" dev="configfs" ino=35976 res=0 errno=0 [ 899.728071][ T30] audit: type=1800 audit(1785930673.512:614): pid=15816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2542" name="block_bytes" dev="configfs" ino=35977 res=0 errno=0 [ 899.749724][T15816] loop0: detected capacity change from 0 to 2048 [ 899.774325][ T30] audit: type=1800 audit(1785930673.512:615): pid=15816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2542" name="blocks" dev="configfs" ino=35978 res=0 errno=0 [ 899.823606][T11669] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 899.827172][ T30] audit: type=1800 audit(1785930673.512:616): pid=15816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2542" name="start_block" dev="configfs" ino=35979 res=0 errno=0 [ 899.860772][T11669] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 899.885299][T11669] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 899.895674][T11669] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 899.903445][T11669] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 899.959793][T15820] jffs2: notice: (15820) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 900.414613][T15830] jffs2: notice: (15830) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 901.026399][T15839] loop3: detected capacity change from 0 to 512 [ 901.048918][T15839] EXT4-fs: Ignoring removed bh option [ 901.085196][T15839] EXT4-fs (loop3): 1 truncate cleaned up [ 901.106371][T15839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 901.264424][ T803] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 901.400572][ T803] usb 1-1: device descriptor read/64, error -71 [ 901.455899][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.569785][T15852] loop3: detected capacity change from 0 to 128 [ 901.660853][ T803] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 901.823002][T15852] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5622] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[15852] [ 901.994288][ T803] usb 1-1: device descriptor read/64, error -71 [ 902.004558][ T5629] Bluetooth: hci7: command tx timeout [ 902.034632][T15817] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.043928][T15817] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.052311][T15817] bridge_slave_0: entered allmulticast mode [ 902.060928][T15817] bridge_slave_0: entered promiscuous mode [ 902.073264][T15817] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.081178][T15817] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.088586][T15817] bridge_slave_1: entered allmulticast mode [ 902.096194][T15817] bridge_slave_1: entered promiscuous mode [ 902.104554][ T803] usb usb1-port1: attempt power cycle [ 902.131570][T15817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.143843][T15817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.182560][T15817] team0: Port device team_slave_0 added [ 902.190726][T15817] team0: Port device team_slave_1 added [ 902.220818][T15817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.227823][T15817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.254542][T15817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.267273][T15817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.276207][T15817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.294338][ T5752] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 902.302277][T15817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.361339][T15817] hsr_slave_0: entered promiscuous mode [ 902.367909][T15817] hsr_slave_1: entered promiscuous mode [ 902.376378][T15817] debugfs: 'hsr0' already exists in 'hsr' [ 902.383814][T15817] Cannot create hsr debugfs directory [ 902.444336][ T803] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 902.461832][ T5752] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 902.472090][ T5752] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 902.484422][ T803] usb 1-1: device descriptor read/8, error -71 [ 902.494852][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.606179][T15817] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 902.616308][T15817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 902.624647][T15817] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 902.634052][T15817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 902.642066][T15817] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 902.658828][T15817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 902.667195][T15817] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 902.682294][T15817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 902.736742][ T803] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 902.775798][ T803] usb 1-1: device descriptor read/8, error -71 [ 902.782499][T15817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.811395][T15817] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.825532][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.832688][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.846758][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.853919][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.894567][ T803] usb usb1-port1: unable to enumerate USB device [ 903.276287][T15817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 903.538187][T15817] veth0_vlan: entered promiscuous mode [ 903.551211][T15817] veth1_vlan: entered promiscuous mode [ 903.583057][T15817] veth0_macvtap: entered promiscuous mode [ 903.594121][T15817] veth1_macvtap: entered promiscuous mode [ 903.621936][T15817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.637538][T15817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.671555][ T1013] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.706826][T10217] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.727141][T10217] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.764591][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.792375][T10217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.810293][T10217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.842448][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.852044][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.095552][ T5629] Bluetooth: hci7: command tx timeout [ 904.478070][T15895] lo speed is unknown, defaulting to 1000 [ 904.483939][T15895] lo speed is unknown, defaulting to 1000 [ 904.493556][T11669] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 904.505477][T11669] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 904.506254][T15895] lo speed is unknown, defaulting to 1000 [ 904.521067][T11669] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 904.522296][T15895] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 904.541112][ T30] audit: type=1800 audit(1785930678.392:617): pid=15898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2555" name="attr_allow_any_host" dev="configfs" ino=36395 res=0 errno=0 [ 904.547576][T15895] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 904.591547][T11669] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 904.599353][T15895] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 904.601048][T15898] nvmet: adding nsid 1 to subsystem testnqn [ 904.617222][T11669] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 904.640132][T15895] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 904.683538][ T30] audit: type=1800 audit(1785930678.532:618): pid=15898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2555" name="device_path" dev="configfs" ino=35703 res=0 errno=0 [ 904.705330][T15898] nvmet: failed to open file /dev/null: (-22) [ 904.744893][ T30] audit: type=1800 audit(1785930678.532:619): pid=15898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2555" name="enable" dev="configfs" ino=36399 res=0 errno=0 [ 904.783658][T15895] lo speed is unknown, defaulting to 1000 [ 904.796635][T15895] lo speed is unknown, defaulting to 1000 [ 904.810633][T15895] lo speed is unknown, defaulting to 1000 [ 904.820462][T15895] lo speed is unknown, defaulting to 1000 [ 904.830162][T15895] lo speed is unknown, defaulting to 1000 [ 904.839527][T15895] lo speed is unknown, defaulting to 1000 [ 904.848071][T15895] lo speed is unknown, defaulting to 1000 [ 904.855917][T15895] lo speed is unknown, defaulting to 1000 [ 905.075810][ T5752] usb 4-1: USB disconnect, device number 39 [ 905.099622][ T30] audit: type=1800 audit(1785930678.952:620): pid=15906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2556" name="ipv4_port" dev="configfs" ino=36407 res=0 errno=0 [ 905.157640][ T30] audit: type=1800 audit(1785930678.982:621): pid=15906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2556" name="num" dev="configfs" ino=36409 res=0 errno=0 [ 905.195784][T15909] jffs2: notice: (15909) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 905.243546][ T30] audit: type=1800 audit(1785930678.982:622): pid=15906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2556" name="local" dev="configfs" ino=36410 res=0 errno=0 [ 905.304276][ T30] audit: type=1800 audit(1785930678.992:623): pid=15906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2556" name="block_bytes" dev="configfs" ino=36411 res=0 errno=0 [ 905.346018][ T30] audit: type=1800 audit(1785930678.992:624): pid=15906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2556" name="blocks" dev="configfs" ino=36412 res=0 errno=0 [ 905.414033][ T30] audit: type=1800 audit(1785930679.002:625): pid=15906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2556" name="start_block" dev="configfs" ino=36413 res=0 errno=0 [ 905.506600][T15893] lo speed is unknown, defaulting to 1000 [ 906.074389][T15930] loop8: detected capacity change from 0 to 256 [ 906.214332][T11669] Bluetooth: hci7: command tx timeout [ 906.724323][T11669] Bluetooth: hci8: command tx timeout [ 906.912985][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 907.455902][ T186] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 907.503463][ T10] lo speed is unknown, defaulting to 1000 [ 907.804850][ T186] usb 4-1: device descriptor read/64, error -71 [ 907.982588][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 907.994670][ T24] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 908.021695][ T24] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 908.031340][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.255353][T11669] Bluetooth: hci7: command tx timeout [ 908.607581][ T186] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 908.800754][ T9811] Process accounting resumed [ 908.806216][T11669] Bluetooth: hci8: command tx timeout [ 908.812380][ T186] usb 4-1: device descriptor read/64, error -71 [ 908.867968][ T24] usb 1-1: Product: syz [ 908.872228][ T24] usb 1-1: Manufacturer: syz [ 908.877148][ T24] usb 1-1: SerialNumber: syz [ 908.890445][ T24] usb 1-1: can't set config #2, error -71 [ 908.903215][ T24] usb 1-1: USB disconnect, device number 51 [ 908.986715][ T186] usb usb4-port1: attempt power cycle [ 909.352089][T15939] kAFS: unable to lookup cell 'ÿ' [ 909.391798][ T5629] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 909.408335][ T30] audit: type=1800 audit(1785930683.242:626): pid=15948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2569" name="ipv4_port" dev="configfs" ino=35794 res=0 errno=0 [ 909.429059][ T5629] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 909.444975][ T5629] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 909.461375][ T30] audit: type=1800 audit(1785930683.302:627): pid=15948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2569" name="num" dev="configfs" ino=35795 res=0 errno=0 [ 909.482085][ T5629] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 909.484343][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 909.500302][ T5629] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 909.547303][T15948] loop0: detected capacity change from 0 to 2048 [ 909.592064][T15893] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.626319][T15893] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.663028][T15893] bridge_slave_0: entered allmulticast mode [ 909.681390][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 909.715679][T15893] bridge_slave_0: entered promiscuous mode [ 909.732431][ T24] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 909.757924][T15893] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.777265][T11669] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 909.790072][T11669] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 909.800883][T11669] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 909.812375][T11669] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 909.824417][T11669] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 909.833602][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.844584][T15893] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.863586][T15893] bridge_slave_1: entered allmulticast mode [ 909.894632][T15893] bridge_slave_1: entered promiscuous mode [ 910.019460][T15893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.061307][T15893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.214875][T15961] jffs2: notice: (15961) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 910.243053][T15893] team0: Port device team_slave_0 added [ 910.262421][T15893] team0: Port device team_slave_1 added [ 910.376078][T15893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.398691][T15893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.449180][T15893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.482929][T15893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.514270][T15893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.571242][T15893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.589957][T15970] jffs2: notice: (15970) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 910.711487][T15893] hsr_slave_0: entered promiscuous mode [ 910.725527][T15893] hsr_slave_1: entered promiscuous mode [ 910.745506][T15893] debugfs: 'hsr0' already exists in 'hsr' [ 910.752534][T15893] Cannot create hsr debugfs directory [ 910.884437][T11669] Bluetooth: hci8: command tx timeout [ 911.757239][T11669] Bluetooth: hci9: command tx timeout [ 911.944368][T11669] Bluetooth: hci10: command tx timeout [ 912.086625][T15947] lo speed is unknown, defaulting to 1000 [ 912.129388][T15951] lo speed is unknown, defaulting to 1000 [ 912.426607][T15986] loop3: detected capacity change from 0 to 256 [ 913.278794][T11669] Bluetooth: hci8: command tx timeout [ 914.280589][T11669] Bluetooth: hci9: command tx timeout [ 914.286082][T11669] Bluetooth: hci10: command tx timeout [ 914.365265][ T803] usb 9-1: USB disconnect, device number 2 [ 916.324320][ T5629] Bluetooth: hci10: command tx timeout [ 916.333742][ T5629] Bluetooth: hci9: command tx timeout [ 916.806163][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 916.806184][ T30] audit: type=1800 audit(1785930690.662:632): pid=16008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2579" name="ipv4_address" dev="configfs" ino=37009 res=0 errno=0 [ 916.844905][ T30] audit: type=1800 audit(1785930690.692:633): pid=16008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2579" name="ipv4_port" dev="configfs" ino=37010 res=0 errno=0 [ 916.865442][ T803] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 916.873274][ T30] audit: type=1800 audit(1785930690.692:634): pid=16008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2579" name="num" dev="configfs" ino=37011 res=0 errno=0 [ 916.897424][ T30] audit: type=1800 audit(1785930690.692:635): pid=16008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2579" name="local" dev="configfs" ino=37012 res=0 errno=0 [ 916.992216][ T30] audit: type=1800 audit(1785930690.692:636): pid=16008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2579" name="block_bytes" dev="configfs" ino=37013 res=0 errno=0 [ 916.994322][ T803] usb 1-1: device descriptor read/64, error -71 [ 917.060535][ T30] audit: type=1800 audit(1785930690.692:637): pid=16008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2579" name="blocks" dev="configfs" ino=37014 res=0 errno=0 [ 917.098450][ T30] audit: type=1800 audit(1785930690.692:638): pid=16008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2579" name="start_block" dev="configfs" ino=37015 res=0 errno=0 [ 917.264676][ T803] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 917.306633][T15893] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 917.318493][T15893] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 917.332003][T15893] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 917.344758][T15893] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 917.379940][T15893] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 917.399656][T15893] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 917.415545][T15893] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 917.422312][ T803] usb 1-1: device descriptor read/64, error -71 [ 917.434400][ T5752] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 917.453235][T15893] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 917.535074][ T803] usb usb1-port1: attempt power cycle [ 917.588178][ T5752] usb 9-1: Using ep0 maxpacket: 8 [ 917.601907][ T5752] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 917.623065][ T5752] usb 9-1: config 179 has no interface number 0 [ 917.634997][ T5752] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 917.646576][ T5752] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 917.659441][ T5752] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 917.671578][ T5752] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 917.683921][ T5752] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 917.705401][ T5752] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 917.715773][ T5752] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.729068][T16016] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 917.786804][T15951] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.794533][T15951] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.801850][T15951] bridge_slave_0: entered allmulticast mode [ 917.813555][T15951] bridge_slave_0: entered promiscuous mode [ 917.861681][T15951] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.869125][T15951] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.877944][T15951] bridge_slave_1: entered allmulticast mode [ 917.884371][ T803] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 917.895959][T15951] bridge_slave_1: entered promiscuous mode [ 917.928687][ T803] usb 1-1: device descriptor read/8, error -71 [ 917.952645][T15947] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.963651][T15947] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.971162][T15947] bridge_slave_0: entered allmulticast mode [ 917.983039][T15947] bridge_slave_0: entered promiscuous mode [ 917.990234][T16016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.121484][T16016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.170555][T15947] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.180245][T15947] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.204667][ T803] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 918.220547][T10293] usb 9-1: USB disconnect, device number 3 [ 918.220617][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 918.220669][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 918.249553][T15947] bridge_slave_1: entered allmulticast mode [ 918.258011][T15947] bridge_slave_1: entered promiscuous mode [ 918.288466][ T803] usb 1-1: device descriptor read/8, error -71 [ 918.310890][T16037] loop3: detected capacity change from 0 to 1024 [ 918.350668][T16037] EXT4-fs: Ignoring removed orlov option [ 918.385272][T15951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.402230][T15947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.405058][ T803] usb usb1-port1: unable to enumerate USB device [ 918.411731][T11669] Bluetooth: hci10: command tx timeout [ 918.425751][ T5629] Bluetooth: hci9: command tx timeout [ 918.433111][T16037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 918.442431][T15951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.460822][T15947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.555244][T15951] team0: Port device team_slave_0 added [ 918.590295][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.591946][T15951] team0: Port device team_slave_1 added [ 918.689021][T15947] team0: Port device team_slave_0 added [ 918.710110][T15947] team0: Port device team_slave_1 added [ 918.730142][T15951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.739606][T15951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.766753][T15951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.688605][T15947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.710393][T15947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.822837][T15947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.865911][T15951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.878350][T15951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.910038][T15951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.026649][T15951] hsr_slave_0: entered promiscuous mode [ 920.045263][T15951] hsr_slave_1: entered promiscuous mode [ 920.055451][T15951] debugfs: 'hsr0' already exists in 'hsr' [ 920.073387][T15951] Cannot create hsr debugfs directory [ 920.164812][T15947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.171806][T15947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.174320][ T5752] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 920.200903][T15947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.404036][ T5752] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 920.440269][ T5752] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 920.467275][ T5752] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.860281][T15947] hsr_slave_0: entered promiscuous mode [ 920.867548][T15947] hsr_slave_1: entered promiscuous mode [ 920.873892][T15947] debugfs: 'hsr0' already exists in 'hsr' [ 920.879892][T15947] Cannot create hsr debugfs directory [ 921.016829][T16051] tipc: Enabled bearer , priority 0 [ 921.028094][T16050] tipc: Disabling bearer [ 921.038414][T16063] jffs2: notice: (16063) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 921.250775][ T30] audit: type=1800 audit(1785930695.102:639): pid=16066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2590" name="ipv4_address" dev="configfs" ino=37211 res=0 errno=0 [ 921.296286][ T30] audit: type=1800 audit(1785930695.122:640): pid=16066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2590" name="ipv4_port" dev="configfs" ino=37212 res=0 errno=0 [ 921.321289][T16066] loop0: detected capacity change from 0 to 2048 [ 921.343286][ T30] audit: type=1800 audit(1785930695.122:641): pid=16066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2590" name="num" dev="configfs" ino=37213 res=0 errno=0 [ 921.570991][T15893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 921.610541][T15893] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.670770][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.677933][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.689649][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.696829][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.812249][ T5776] usb 9-1: USB disconnect, device number 4 [ 924.314450][T10293] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 924.504552][T10293] usb 4-1: device descriptor read/64, error -71 [ 924.795095][T16096] loop0: detected capacity change from 0 to 128 [ 924.804428][T10293] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 924.908962][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 924.908982][ T30] audit: type=1800 audit(1785930698.752:646): pid=16098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2599" name="zoned" dev="configfs" ino=37989 res=0 errno=0 [ 924.948996][T10293] usb 4-1: device descriptor read/64, error -71 [ 924.975357][ T30] audit: type=1800 audit(1785930698.752:647): pid=16098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2599" name="zone_nr_conv" dev="configfs" ino=37990 res=0 errno=0 [ 924.996718][ T30] audit: type=1800 audit(1785930698.752:648): pid=16098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2599" name="power" dev="configfs" ino=37991 res=0 errno=0 [ 925.021818][ T30] audit: type=1800 audit(1785930698.752:649): pid=16098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2599" name="power" dev="configfs" ino=37992 res=0 errno=0 [ 925.070025][T16096] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5623] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[16096] [ 925.071080][T10293] usb usb4-port1: attempt power cycle [ 925.116345][T11669] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 925.296842][ T30] audit: type=1800 audit(1785930699.132:650): pid=16103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2601" name="ipv4_address" dev="configfs" ino=38000 res=0 errno=0 [ 925.387653][ T30] audit: type=1800 audit(1785930699.172:651): pid=16103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2601" name="ipv4_port" dev="configfs" ino=38001 res=0 errno=0 [ 925.411683][T16103] loop0: detected capacity change from 0 to 2048 [ 925.434506][T16104] tipc: Started in network mode [ 925.449603][ T30] audit: type=1800 audit(1785930699.182:652): pid=16103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2601" name="num" dev="configfs" ino=38002 res=0 errno=0 [ 925.472255][T16104] tipc: Node identity 6aa805c525c7, cluster identity 4711 [ 925.488161][T16104] tipc: Enabled bearer , priority 0 [ 925.498267][ T30] audit: type=1800 audit(1785930699.192:653): pid=16103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2601" name="local" dev="configfs" ino=38003 res=0 errno=0 [ 925.532642][ T30] audit: type=1800 audit(1785930699.192:654): pid=16103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2601" name="block_bytes" dev="configfs" ino=38004 res=0 errno=0 [ 925.566609][T16101] tipc: Disabling bearer [ 925.585905][ T30] audit: type=1800 audit(1785930699.192:655): pid=16103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2601" name="blocks" dev="configfs" ino=38005 res=0 errno=0 [ 925.645408][T10293] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 925.688215][T10293] usb 4-1: device descriptor read/8, error -71 [ 925.859807][T15893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.998197][T10293] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 926.157254][ T5776] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 926.461969][ T5776] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 926.509933][ T5776] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 926.539155][ T5776] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 926.584950][ T5776] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.084453][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 927.091746][T10293] usb 4-1: device descriptor read/8, error -32 [ 927.179859][T15951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 927.218123][T10293] usb usb4-port1: unable to enumerate USB device [ 927.235708][T15951] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 927.476471][T15951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 928.540865][T15951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 928.594061][T15951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 928.719750][T15951] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 928.736818][T15951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 928.753117][T15951] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 928.945250][ T5776] usb 9-1: USB disconnect, device number 5 [ 929.190480][T16162] loop8: detected capacity change from 0 to 128 [ 929.499518][T15893] veth0_vlan: entered promiscuous mode [ 929.515295][T15893] veth1_vlan: entered promiscuous mode [ 929.521132][T16162] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[15817] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[16162] [ 929.649794][T16165] loop0: detected capacity change from 0 to 128 [ 930.125034][T11669] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 930.690704][T16173] tipc: Started in network mode [ 930.712484][T16173] tipc: Node identity 6aedc71c7c66, cluster identity 4711 [ 930.747318][T16173] tipc: Enabled bearer , priority 0 [ 930.762927][T16179] loop8: detected capacity change from 0 to 8 [ 930.833965][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.853756][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.906676][T16172] tipc: Disabling bearer [ 931.063303][T15893] veth0_macvtap: entered promiscuous mode [ 931.097238][T15893] veth1_macvtap: entered promiscuous mode [ 931.198173][T16188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.226352][ T5776] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 931.261831][T16192] jffs2: notice: (16192) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 931.389449][ T5776] usb 1-1: device descriptor read/64, error -71 [ 931.725722][ T5776] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 931.986388][ T5776] usb 1-1: device descriptor read/64, error -71 [ 932.208024][ T5776] usb usb1-port1: attempt power cycle [ 932.232510][T15951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.354008][T15893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.388103][T15947] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 932.418296][T15947] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 932.459430][T15893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 932.511673][T15947] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 932.538066][T15947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 932.552054][T15951] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.564676][ T5776] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 932.580253][T15947] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 932.598774][T15947] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 932.606582][T16211] MTD: Couldn't look up './dev/mtdblock0': -2 [ 932.613179][ T5776] usb 1-1: device descriptor read/8, error -71 [ 932.627817][T15947] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 932.642688][T15947] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 932.659877][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.667041][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.714618][T12970] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.750060][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.757192][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.854505][ T5776] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 932.909126][ T5776] usb 1-1: device descriptor read/8, error -71 [ 932.915969][ T48] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.919353][ T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.004303][ T57] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.044988][T10217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.052971][ T5776] usb usb1-port1: unable to enumerate USB device [ 933.070906][T10217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.080268][ T5768] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 933.185356][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.210046][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.248052][ T5768] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 933.274640][ T5768] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 933.314947][ T5768] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 933.338903][T15947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.354703][ T5768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.416538][T15947] 8021q: adding VLAN 0 to HW filter on device team0 [ 933.472291][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.479509][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.194111][ T1019] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.201332][ T1019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.794175][T16251] loop9: detected capacity change from 0 to 256 [ 936.619107][ T1222] usb 4-1: USB disconnect, device number 47 [ 938.876497][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 938.876521][ T30] audit: type=1800 audit(1785930712.722:664): pid=16256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2622" name="ipv4_address" dev="configfs" ino=38558 res=0 errno=0 [ 939.143073][ T30] audit: type=1800 audit(1785930712.762:665): pid=16256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2622" name="ipv4_port" dev="configfs" ino=38560 res=0 errno=0 [ 939.250773][ T30] audit: type=1800 audit(1785930712.772:666): pid=16256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2622" name="num" dev="configfs" ino=38561 res=0 errno=0 [ 939.273465][ T30] audit: type=1800 audit(1785930712.782:667): pid=16256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2622" name="local" dev="configfs" ino=38562 res=0 errno=0 [ 939.296603][ T30] audit: type=1800 audit(1785930712.782:668): pid=16256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2622" name="block_bytes" dev="configfs" ino=38563 res=0 errno=0 [ 939.421163][ T30] audit: type=1800 audit(1785930712.792:669): pid=16256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2622" name="blocks" dev="configfs" ino=38564 res=0 errno=0 [ 939.450821][ T30] audit: type=1800 audit(1785930712.802:670): pid=16256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2622" name="start_block" dev="configfs" ino=38566 res=0 errno=0 [ 941.233933][T16279] tipc: Started in network mode [ 941.255923][T16279] tipc: Node identity da4a714c684b, cluster identity 4711 [ 941.266471][T16279] tipc: Enabled bearer , priority 0 [ 941.370280][T16285] jffs2: notice: (16285) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 941.404885][T16278] tipc: Disabling bearer [ 941.947000][T15951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.112794][T15951] veth0_vlan: entered promiscuous mode [ 942.179600][T15951] veth1_vlan: entered promiscuous mode [ 942.314026][T16300] netlink: 'syz.9.2629': attribute type 1 has an invalid length. [ 942.315663][T16304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2628'. [ 942.342638][T15951] veth0_macvtap: entered promiscuous mode [ 942.354506][T15951] veth1_macvtap: entered promiscuous mode [ 942.374893][T16300] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2629'. [ 942.375891][T15951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 942.396282][T15951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 942.421268][T16300] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2629'. [ 942.716790][ T5768] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 942.846299][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.900814][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.926660][T15947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.934474][ T5768] usb 4-1: device descriptor read/64, error -71 [ 942.994665][T12970] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.030100][T12970] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.109144][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.151642][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.317981][ T6002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.344319][ T6002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.378999][ T803] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 943.399642][ T5768] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 943.609799][ T803] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 943.698142][ T803] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 943.867201][ T803] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 944.064406][ T5768] usb 4-1: device descriptor read/64, error -71 [ 944.081170][ T803] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.295573][ T5768] usb usb4-port1: attempt power cycle [ 944.410980][ T30] audit: type=1800 audit(1785930718.262:671): pid=16339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2634" name="ipv4_address" dev="configfs" ino=39008 res=0 errno=0 [ 944.442106][T16339] loop0: detected capacity change from 0 to 2048 [ 944.457931][ T30] audit: type=1800 audit(1785930718.262:672): pid=16339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2634" name="ipv4_port" dev="configfs" ino=39009 res=0 errno=0 [ 944.484176][T15947] veth0_vlan: entered promiscuous mode [ 944.510599][T15947] veth1_vlan: entered promiscuous mode [ 944.522542][ T30] audit: type=1800 audit(1785930718.262:673): pid=16339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2634" name="num" dev="configfs" ino=39010 res=0 errno=0 [ 944.582331][ T30] audit: type=1800 audit(1785930718.262:674): pid=16339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2634" name="local" dev="configfs" ino=39011 res=0 errno=0 [ 944.608733][T15947] veth0_macvtap: entered promiscuous mode [ 944.628508][ T30] audit: type=1800 audit(1785930718.262:675): pid=16339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2634" name="block_bytes" dev="configfs" ino=39012 res=0 errno=0 [ 944.658204][T15947] veth1_macvtap: entered promiscuous mode [ 944.668545][ T5768] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 944.692508][ T30] audit: type=1800 audit(1785930718.262:676): pid=16339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2634" name="blocks" dev="configfs" ino=39013 res=0 errno=0 [ 944.716360][ T5768] usb 4-1: device descriptor read/8, error -71 [ 944.731345][T15947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.015172][ T5768] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 945.073677][ T30] audit: type=1800 audit(1785930718.262:677): pid=16339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2634" name="start_block" dev="configfs" ino=39014 res=0 errno=0 [ 945.135383][ T5768] usb 4-1: device descriptor read/8, error -71 [ 945.161769][T15947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.325649][ T5768] usb usb4-port1: unable to enumerate USB device [ 945.580366][ T171] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.616893][ T171] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.765395][ T1019] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.804119][ T1019] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.140936][T16362] loop1: detected capacity change from 0 to 512 [ 946.183696][T16362] EXT4-fs: Ignoring removed bh option [ 946.438427][T16357] tipc: Enabled bearer , priority 0 [ 946.480637][T16362] EXT4-fs (loop1): 1 truncate cleaned up [ 946.534354][T10293] usb 10-1: USB disconnect, device number 2 [ 946.558297][T16362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 946.634639][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.727853][T15817] Process accounting resumed [ 946.801996][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.827850][ T30] audit: type=1800 audit(1785930720.622:678): pid=16375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2641" name="nexus" dev="configfs" ino=40076 res=0 errno=0 [ 946.899662][T16356] tipc: Disabling bearer [ 947.470737][ T9637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.515829][ T9637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.549228][ T5629] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 947.565765][ T5629] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 947.580024][ T5629] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 947.614838][ T5629] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 947.623767][ T5629] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 947.901314][T16392] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 948.240551][T16405] loop3: detected capacity change from 0 to 128 [ 948.611467][T16409] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5622] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[16409] [ 948.638153][T16409] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 948.648386][T16409] FAT-fs (loop3): Filesystem has been set read-only [ 948.685110][ T5629] Bluetooth: hci0: link tx timeout [ 948.695534][ T5629] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 949.592022][T15951] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.684739][T11669] Bluetooth: hci11: command tx timeout [ 950.102173][T16429] loop0: detected capacity change from 0 to 2048 [ 950.109826][T16429] EXT4-fs: Ignoring removed i_version option [ 950.304315][ T1222] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 950.417824][T16223] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 950.450065][T16429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.453776][T16384] lo speed is unknown, defaulting to 1000 [ 950.473269][T16429] ext4 filesystem being mounted at /517/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 950.664263][ T1222] usb 6-1: Using ep0 maxpacket: 16 [ 950.671302][ T1222] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.682439][ T1222] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 950.691876][ T1222] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 950.806729][T11669] Bluetooth: hci0: command 0x0406 tx timeout [ 951.436246][T16223] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 951.454315][ T1222] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.457230][T16223] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 951.466551][ T1222] usb 6-1: config 0 descriptor?? [ 951.656899][T16223] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 951.776287][ T5629] Bluetooth: hci11: command tx timeout [ 951.800922][T16317] usb 6-1: USB disconnect, device number 23 [ 951.807056][T16223] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.867070][ T5623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.614481][T16462] tipc: Enabling of bearer rejected, failed to enable media [ 953.720765][T16239] usb 10-1: USB disconnect, device number 3 [ 953.846790][ T5629] Bluetooth: hci11: command tx timeout [ 954.433368][T16472] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2657'. [ 955.925451][ T5629] Bluetooth: hci11: command tx timeout [ 956.054305][T16239] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 956.239212][T16239] usb 10-1: Using ep0 maxpacket: 16 [ 956.538184][T16239] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 956.615128][T16384] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.643879][T16384] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.660358][T16239] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 956.804607][T16384] bridge_slave_0: entered allmulticast mode [ 956.849207][T16239] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 956.864065][T16239] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 956.890518][T16239] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.922980][T16384] bridge_slave_0: entered promiscuous mode [ 957.771136][T16384] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.775628][T16239] usb 10-1: config 0 descriptor?? [ 957.785322][T16384] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.799262][T16384] bridge_slave_1: entered allmulticast mode [ 957.811727][T16384] bridge_slave_1: entered promiscuous mode [ 957.923815][T16384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.948017][T16239] usb 10-1: can't set config #0, error -71 [ 957.968799][T16239] usb 10-1: USB disconnect, device number 4 [ 958.046020][T16384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.110456][T16524] siw: device registration error -23 [ 958.414748][ T1222] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 959.283048][ T1222] usb 4-1: Using ep0 maxpacket: 16 [ 959.671604][T16384] team0: Port device team_slave_0 added [ 959.682135][T16384] team0: Port device team_slave_1 added [ 959.749662][T16541] No source specified [ 959.768266][ T1222] usb 4-1: device descriptor read/all, error -71 [ 959.857393][T16384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.891816][T16384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.972579][T16384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.005020][T16538] tipc: Enabling of bearer rejected, failed to enable media [ 960.021500][ T30] audit: type=1800 audit(1785930733.872:679): pid=16549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2673" name="nexus" dev="configfs" ino=40419 res=0 errno=0 [ 960.030446][T16384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.136610][T16384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.262577][T16384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.373207][T16384] hsr_slave_0: entered promiscuous mode [ 961.397569][T16384] hsr_slave_1: entered promiscuous mode [ 961.412749][T16384] debugfs: 'hsr0' already exists in 'hsr' [ 961.440622][T16384] Cannot create hsr debugfs directory [ 962.438446][T16573] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 962.577713][T16583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 963.555283][T16239] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 963.701666][T16596] loop0: detected capacity change from 0 to 128 [ 963.906349][T16239] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 963.920179][T16239] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 963.933620][T16239] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 964.379280][T16601] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5623] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[16601] [ 964.407298][T16601] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 964.417453][T16601] FAT-fs (loop0): Filesystem has been set read-only [ 964.717409][ T5629] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 964.747249][T16239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.115101][T16607] No source specified [ 965.254664][ T1222] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 965.309408][T16384] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.424776][ T1222] usb 2-1: Using ep0 maxpacket: 16 [ 965.441281][T16239] gud 4-1:1.0: Failed to add properties (error=-71) [ 965.461386][ T1222] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.473950][T16239] gud 4-1:1.0: probe with driver gud failed with error -71 [ 965.483607][ T1222] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 965.524423][ T30] audit: type=1800 audit(1785930739.372:680): pid=16616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2689" name="ipv4_address" dev="configfs" ino=39332 res=0 errno=0 [ 965.545290][ T1222] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 965.545325][ T1222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.551906][T16239] usb 4-1: USB disconnect, device number 54 [ 965.572219][ T1222] usb 2-1: config 0 descriptor?? [ 966.269117][T16239] usb 2-1: USB disconnect, device number 38 [ 966.433268][ T30] audit: type=1800 audit(1785930739.372:681): pid=16616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2689" name="ipv4_port" dev="configfs" ino=39333 res=0 errno=0 [ 966.501148][ T30] audit: type=1800 audit(1785930739.372:682): pid=16616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2689" name="num" dev="configfs" ino=39334 res=0 errno=0 [ 966.605332][ T30] audit: type=1800 audit(1785930739.422:683): pid=16616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2689" name="local" dev="configfs" ino=39336 res=0 errno=0 [ 966.675544][T16384] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.687958][ T30] audit: type=1800 audit(1785930739.432:684): pid=16616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2689" name="block_bytes" dev="configfs" ino=39337 res=0 errno=0 [ 966.716419][ T30] audit: type=1800 audit(1785930739.432:685): pid=16616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2689" name="blocks" dev="configfs" ino=39338 res=0 errno=0 [ 966.737804][ T30] audit: type=1800 audit(1785930739.452:686): pid=16616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2689" name="start_block" dev="configfs" ino=40560 res=0 errno=0 [ 966.846350][T16384] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.911721][T16632] loop9: detected capacity change from 0 to 1024 [ 966.918990][T16632] EXT4-fs: Ignoring removed orlov option [ 966.969019][T16632] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 967.882454][T15893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.179530][T16384] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.744463][T11669] Bluetooth: hci3: command 0x0406 tx timeout [ 969.567217][T16670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 969.932992][T16675] PKCS7: Unknown OID: [4] (bad) [ 970.072552][T16675] PKCS7: Only support pkcs7_signedData type [ 970.771149][T16683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2700'. [ 970.852971][T16682] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 970.876082][T16384] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 970.902557][T16384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 970.912567][T16384] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 970.942102][T16384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 970.951051][T16384] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 970.962977][ T30] audit: type=1800 audit(1785930744.812:687): pid=16689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2703" name="ipv4_address" dev="configfs" ino=40800 res=0 errno=0 [ 971.021882][T16384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 971.041514][ T30] audit: type=1800 audit(1785930744.812:688): pid=16689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2703" name="ipv4_port" dev="configfs" ino=40801 res=0 errno=0 [ 971.067700][T16384] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 971.114477][T16384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 971.121696][ T30] audit: type=1800 audit(1785930744.842:689): pid=16689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2703" name="num" dev="configfs" ino=39424 res=0 errno=0 [ 971.165684][ T30] audit: type=1800 audit(1785930744.842:690): pid=16689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2703" name="local" dev="configfs" ino=39427 res=0 errno=0 [ 971.243548][ T30] audit: type=1800 audit(1785930744.872:691): pid=16689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2703" name="block_bytes" dev="configfs" ino=39429 res=0 errno=0 [ 971.332007][ T30] audit: type=1800 audit(1785930744.872:692): pid=16689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2703" name="blocks" dev="configfs" ino=39430 res=0 errno=0 [ 971.582059][ T30] audit: type=1800 audit(1785930744.872:693): pid=16689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2703" name="start_block" dev="configfs" ino=39431 res=0 errno=0 [ 971.604963][ T30] audit: type=1800 audit(1785930744.972:694): pid=16693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2704" name="nexus" dev="configfs" ino=39432 res=0 errno=0 [ 972.237098][T16384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.332615][T16384] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.640651][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.647979][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.733844][T12969] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.741086][T12969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.814613][ T803] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 973.014504][ T803] usb 4-1: Using ep0 maxpacket: 16 [ 973.246753][ T803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.375584][ T803] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 973.606048][ T803] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 973.717399][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.789227][ T803] usb 4-1: config 0 descriptor?? [ 973.838686][ T803] pxrc 4-1:0.0: Could not find endpoint [ 973.880048][ T803] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 974.066649][ T186] usb 4-1: USB disconnect, device number 55 [ 975.712731][T16384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.848579][T16384] veth0_vlan: entered promiscuous mode [ 975.855957][T16758] PKCS7: Unknown OID: [4] (bad) [ 975.874031][T16758] PKCS7: Only support pkcs7_signedData type [ 975.880237][T16384] veth1_vlan: entered promiscuous mode [ 975.938371][T16384] veth0_macvtap: entered promiscuous mode [ 975.958229][T16384] veth1_macvtap: entered promiscuous mode [ 975.989983][T16384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 976.020314][T16384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 976.056225][T16762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2716'. [ 976.086565][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.119154][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.161554][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.361787][ T9637] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.362684][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.424462][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.505930][ T6002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.532875][ T6002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.610217][ T30] audit: type=1800 audit(1785930751.352:695): pid=16779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2717" name="ipv4_address" dev="configfs" ino=40931 res=0 errno=0 [ 977.678981][T16779] loop0: detected capacity change from 0 to 2048 [ 977.694825][ T30] audit: type=1800 audit(1785930751.422:696): pid=16779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2717" name="ipv4_port" dev="configfs" ino=40932 res=0 errno=0 [ 977.774171][ T30] audit: type=1800 audit(1785930751.432:697): pid=16779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2717" name="num" dev="configfs" ino=40933 res=0 errno=0 [ 977.974371][ T30] audit: type=1800 audit(1785930751.442:698): pid=16779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2717" name="local" dev="configfs" ino=40934 res=0 errno=0 [ 978.220200][ T30] audit: type=1800 audit(1785930751.442:699): pid=16779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2717" name="block_bytes" dev="configfs" ino=40935 res=0 errno=0 [ 980.508314][ T30] audit: type=1800 audit(1785930751.452:700): pid=16779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2717" name="blocks" dev="configfs" ino=40936 res=0 errno=0 [ 980.945230][ T30] audit: type=1800 audit(1785930751.462:701): pid=16779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2717" name="start_block" dev="configfs" ino=40937 res=0 errno=0 [ 982.042252][T11669] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 982.058135][T11669] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 982.068419][T11669] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 982.079061][T11669] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 982.087336][T11669] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 982.561804][ T803] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 983.114269][ T803] usb 1-1: Using ep0 maxpacket: 16 [ 983.190545][ T803] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.201849][T16815] loop1: detected capacity change from 0 to 1024 [ 983.209050][T16815] EXT4-fs: Ignoring removed orlov option [ 983.234316][ T803] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 983.263433][T16815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 983.339543][T15951] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.350091][ T803] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 983.360624][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.384312][ T803] usb 1-1: config 0 descriptor?? [ 983.410155][ T803] pxrc 1-1:0.0: Could not find endpoint [ 983.422232][ T803] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 983.434347][T16317] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 983.598116][T16317] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 983.611117][ T803] usb 1-1: USB disconnect, device number 60 [ 983.623679][T16317] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 983.661735][T16317] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 983.700487][T16317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.851788][T16833] syzkaller0: entered promiscuous mode [ 983.857793][T16833] syzkaller0: entered allmulticast mode [ 984.033529][T16801] lo speed is unknown, defaulting to 1000 [ 984.096442][T16839] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 984.164509][ T5629] Bluetooth: hci12: command tx timeout [ 984.440497][T15893] Process accounting resumed [ 984.783357][T11669] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 984.792020][T11669] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 984.800957][T11669] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 984.815315][T11669] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 984.827768][T11669] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 984.961545][T16869] ªªªªªª: renamed from vlan0 (while UP) [ 985.423747][T16801] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.431624][T16861] overlayfs: statfs failed on './file0' [ 985.466142][T16801] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.504557][T16801] bridge_slave_0: entered allmulticast mode [ 985.540629][T16801] bridge_slave_0: entered promiscuous mode [ 985.570191][T16801] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.589277][T16801] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.614549][T16801] bridge_slave_1: entered allmulticast mode [ 985.644819][T16801] bridge_slave_1: entered promiscuous mode [ 985.763277][T16801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.818919][T16801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.989645][T16801] team0: Port device team_slave_0 added [ 986.008205][T16801] team0: Port device team_slave_1 added [ 986.153947][T16801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.171100][T16801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.227418][ T803] usb 3-1: USB disconnect, device number 52 [ 986.246681][T11669] Bluetooth: hci12: command tx timeout [ 986.256751][T16801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.351151][T16801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.360774][T16801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.388156][T16801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.516160][T16863] lo speed is unknown, defaulting to 1000 [ 986.779007][T16919] device-mapper: ioctl: Invalid ioctl structure: name , dev 6c65646f63 [ 986.817910][T16801] hsr_slave_0: entered promiscuous mode [ 986.842040][T16801] hsr_slave_1: entered promiscuous mode [ 986.868344][T16801] debugfs: 'hsr0' already exists in 'hsr' [ 986.884836][T11669] Bluetooth: hci13: command tx timeout [ 986.893354][T16801] Cannot create hsr debugfs directory [ 987.623251][T16801] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.802647][T16801] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.866606][ T30] audit: type=1326 audit(1785930761.722:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.1.2773" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f331e597e57 code=0x0 [ 988.113887][T16801] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.327671][T11669] Bluetooth: hci12: command tx timeout [ 988.353450][T16863] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.377734][T16863] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.395020][T16863] bridge_slave_0: entered allmulticast mode [ 988.426979][T16863] bridge_slave_0: entered promiscuous mode [ 988.548946][T16801] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.661886][T16863] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.687177][T16863] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.690397][T16964] xt_hashlimit: size too large, truncated to 1048576 [ 988.724112][T16863] bridge_slave_1: entered allmulticast mode [ 988.744042][T16863] bridge_slave_1: entered promiscuous mode [ 988.910490][T16863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.942140][T16863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.964396][T11669] Bluetooth: hci13: command tx timeout [ 989.147533][T16863] team0: Port device team_slave_0 added [ 989.282336][T16863] team0: Port device team_slave_1 added [ 989.555741][T16863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.568606][T16863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.611537][T16863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.639456][T16863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.659773][T16863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.710484][T16863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.873841][T16801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 989.916011][T16801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 989.952302][T16863] hsr_slave_0: entered promiscuous mode [ 989.986355][T16863] hsr_slave_1: entered promiscuous mode [ 990.005584][T16863] debugfs: 'hsr0' already exists in 'hsr' [ 990.036443][T16863] Cannot create hsr debugfs directory [ 990.050657][T16801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 990.100125][T16801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 990.163265][T16801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 990.188871][T16801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 990.226056][ T10] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 990.278289][T17012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2796'. [ 990.300735][T16801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 990.321246][T16801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 990.348006][T17012] bond0: entered promiscuous mode [ 990.353586][T17012] bond_slave_0: entered promiscuous mode [ 990.360385][T17012] bond_slave_1: entered promiscuous mode [ 990.375630][T17012] gretap0: entered promiscuous mode [ 990.385806][T17012] hsr1: entered promiscuous mode [ 990.396923][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 990.408439][T11669] Bluetooth: hci12: command tx timeout [ 990.434310][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 990.456841][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 990.472643][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.536439][T17015] [ 990.538791][T17015] ====================================================== [ 990.545797][T17015] WARNING: possible circular locking dependency detected [ 990.552798][T17015] syzkaller #0 Not tainted [ 990.557196][T17015] ------------------------------------------------------ [ 990.564199][T17015] syz.0.2797/17015 is trying to acquire lock: [ 990.570253][T17015] ffffffff8f9f1348 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x75/0x4d0 [ 990.581486][T17015] [ 990.581486][T17015] but task is already holding lock: [ 990.588836][T17015] ffff88805416a740 (&sb->s_type->i_mutex_key#34){++++}-{4:4}, at: configfs_symlink+0x3af/0x1030 [ 990.599292][T17015] [ 990.599292][T17015] which lock already depends on the new lock. [ 990.599292][T17015] [ 990.609685][T17015] [ 990.609685][T17015] the existing dependency chain (in reverse order) is: [ 990.618693][T17015] [ 990.618693][T17015] -> #2 (&sb->s_type->i_mutex_key#34){++++}-{4:4}: [ 990.627415][T17015] down_write+0x96/0x200 [ 990.632202][T17015] configfs_depend_item_unlocked+0x153/0x420 [ 990.638710][T17015] usbg_make_tpg+0x1f6/0x590 [ 990.643829][T17015] target_fabric_make_tpg+0xa8/0x6d0 [ 990.649657][T17015] configfs_mkdir+0x4f6/0x9e0 [ 990.654842][T17015] vfs_mkdir+0x406/0x620 [ 990.659591][T17015] filename_mkdirat+0x285/0x510 [ 990.664955][T17015] __se_sys_mkdirat+0x35/0x150 [ 990.670229][T17015] do_syscall_64+0x174/0x580 [ 990.675355][T17015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.681770][T17015] [ 990.681770][T17015] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 990.689420][T17015] __mutex_lock+0x19d/0x1550 [ 990.694538][T17015] tcm_set_name+0x2b/0xd0 [ 990.699397][T17015] function_make+0x1a8/0x360 [ 990.704509][T17015] configfs_mkdir+0x4f6/0x9e0 [ 990.709694][T17015] vfs_mkdir+0x406/0x620 [ 990.714542][T17015] filename_mkdirat+0x285/0x510 [ 990.719907][T17015] __se_sys_mkdirat+0x35/0x150 [ 990.725189][T17015] do_syscall_64+0x174/0x580 [ 990.728887][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 990.730299][T17015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.730328][T17015] [ 990.730328][T17015] -> #0 ( [ 990.735986][ T10] usbtmc 4-1:16.0: can't read capabilities [ 990.742143][T17015] gadget_subsys.su_mutex){+.+.}-{4:4}: [ 990.742176][T17015] __lock_acquire+0x1520/0x2cf0 [ 990.763831][T17015] lock_acquire+0x106/0x350 [ 990.768876][T17015] __mutex_lock+0x19d/0x1550 [ 990.774087][T17015] uvcg_streaming_header_allow_link+0x75/0x4d0 [ 990.780774][T17015] configfs_symlink+0x59a/0x1030 [ 990.786242][T17015] vfs_symlink+0x18b/0x330 [ 990.791178][T17015] filename_symlinkat+0x1cd/0x410 [ 990.796717][T17015] __se_sys_symlinkat+0x4e/0x2b0 [ 990.802170][T17015] do_syscall_64+0x174/0x580 [ 990.807276][T17015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.813679][T17015] [ 990.813679][T17015] other info that might help us debug this: [ 990.813679][T17015] [ 990.823885][T17015] Chain exists of: [ 990.823885][T17015] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#34 [ 990.823885][T17015] [ 990.838594][T17015] Possible unsafe locking scenario: [ 990.838594][T17015] [ 990.846038][T17015] CPU0 CPU1 [ 990.851389][T17015] ---- ---- [ 990.856756][T17015] lock(&sb->s_type->i_mutex_key#34); [ 990.862221][T17015] lock(&opts->dep_lock); [ 990.869152][T17015] lock(&sb->s_type->i_mutex_key#34); [ 990.877130][T17015] lock(gadget_subsys.su_mutex); [ 990.882145][T17015] [ 990.882145][T17015] *** DEADLOCK *** [ 990.882145][T17015] [ 990.890271][T17015] 2 locks held by syz.0.2797/17015: [ 990.895477][T17015] #0: ffff88801d722450 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 990.904722][T17015] #1: ffff88805416a740 (&sb->s_type->i_mutex_key#34){++++}-{4:4}, at: configfs_symlink+0x3af/0x1030 [ 990.915706][T17015] [ 990.915706][T17015] stack backtrace: [ 990.921587][T17015] CPU: 1 UID: 0 PID: 17015 Comm: syz.0.2797 Not tainted syzkaller #0 PREEMPT(full) [ 990.921612][T17015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 990.921626][T17015] Call Trace: [ 990.921635][T17015] [ 990.921645][T17015] dump_stack_lvl+0xe8/0x150 [ 990.921681][T17015] print_circular_bug+0x2e1/0x300 [ 990.921708][T17015] check_noncircular+0x12e/0x150 [ 990.921734][T17015] __lock_acquire+0x1520/0x2cf0 [ 990.921768][T17015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 990.921796][T17015] ? __pfx_stack_trace_save+0x10/0x10 [ 990.921826][T17015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 990.921851][T17015] ? stack_depot_save_flags+0x33/0x800 [ 990.921881][T17015] ? __lock_acquire+0x683/0x2cf0 [ 990.921914][T17015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 990.921942][T17015] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 990.921970][T17015] lock_acquire+0x106/0x350 [ 990.922001][T17015] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 990.922032][T17015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 990.922061][T17015] __mutex_lock+0x19d/0x1550 [ 990.922091][T17015] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 990.922124][T17015] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 990.922151][T17015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 990.922178][T17015] ? __pfx___mutex_lock+0x10/0x10 [ 990.922215][T17015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 990.922241][T17015] ? make_vfsuid+0x49/0xa0 [ 990.922267][T17015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 990.922297][T17015] uvcg_streaming_header_allow_link+0x75/0x4d0 [ 990.922325][T17015] ? inode_permission+0x2bc/0x5f0 [ 990.922354][T17015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 990.922382][T17015] configfs_symlink+0x59a/0x1030 [ 990.922409][T17015] ? lookup_one_qstr_excl+0x1d4/0x360 [ 990.922449][T17015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 990.922475][T17015] ? make_vfsuid+0x49/0xa0 [ 990.922503][T17015] ? __pfx_configfs_symlink+0x10/0x10 [ 990.922529][T17015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 990.922555][T17015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 990.922580][T17015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 990.922608][T17015] vfs_symlink+0x18b/0x330 [ 990.922634][T17015] ? security_path_symlink+0xfd/0x360 [ 990.922665][T17015] filename_symlinkat+0x1cd/0x410 [ 990.922694][T17015] ? __pfx_filename_symlinkat+0x10/0x10 [ 990.922722][T17015] ? srso_alias_return_thunk+0x5/0xfbef5 [ 990.922747][T17015] ? do_getname+0x151/0x250 [ 990.922775][T17015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.922798][T17015] __se_sys_symlinkat+0x4e/0x2b0 [ 990.922825][T17015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.922849][T17015] do_syscall_64+0x174/0x580 [ 990.922877][T17015] ? trace_irq_disable+0x3b/0x140 [ 990.922910][T17015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.922953][T17015] RIP: 0033:0x7f31b399e0d9 [ 990.922973][T17015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.922992][T17015] RSP: 002b:00007f31b478e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 990.923014][T17015] RAX: ffffffffffffffda RBX: 00007f31b3c26090 RCX: 00007f31b399e0d9 [ 990.923031][T17015] RDX: 0000200000001600 RSI: ffffffffffffff9c RDI: 0000200000001500 [ 990.923047][T17015] RBP: 00007f31b3a35024 R08: 0000000000000000 R09: 0000000000000000 [ 990.923062][T17015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.923075][T17015] R13: 00007f31b3c26128 R14: 00007f31b3c26090 R15: 00007ffdf1adc5e8 [ 990.923100][T17015] [ 990.943490][T16317] usb 4-1: USB disconnect, device number 56 [ 991.049488][T11669] Bluetooth: hci13: command tx timeout [ 991.292193][T16863] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.360308][T16801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.379796][T16801] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.393477][T16863] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.408652][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.415789][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.430540][T12969] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.437659][T12969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.451154][T16863] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.494522][T16863] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.635690][T16863] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 991.646285][T16863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 991.654135][T16863] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 991.663439][T16863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 991.675293][T16863] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 991.684392][T16863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 991.692069][T16863] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 991.701805][T16863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 991.778495][T16863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.798071][T16863] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.811286][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.818411][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.838313][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.845472][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.933399][T16801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.182373][T16801] veth0_vlan: entered promiscuous mode [ 992.195492][T16801] veth1_vlan: entered promiscuous mode [ 992.228719][T16801] veth0_macvtap: entered promiscuous mode [ 992.238137][T16801] veth1_macvtap: entered promiscuous mode [ 992.248538][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.255300][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.263682][T16863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.286758][T16801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.300728][T16801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.328125][T12969] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.337791][T12969] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.363451][T16801] ieee80211 phy49: Selected rate control algorithm 'minstrel_ht' [ 992.396533][T12970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.398164][T16801] ieee80211 phy50: Selected rate control algorithm 'minstrel_ht' [ 992.412967][T12970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.449593][T12969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.458376][T12969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.465981][T14969] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.479728][T14969] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.577561][T16863] veth0_vlan: entered promiscuous mode [ 992.589124][T16863] veth1_vlan: entered promiscuous mode [ 992.611267][T16863] veth0_macvtap: entered promiscuous mode [ 992.621275][T16863] veth1_macvtap: entered promiscuous mode [ 992.636091][T16863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.650226][T16863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.683050][T16863] ieee80211 phy51: Selected rate control algorithm 'minstrel_ht' [ 992.711301][T14969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.713514][T16863] ieee80211 phy52: Selected rate control algorithm 'minstrel_ht' [ 992.724813][T14969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.752004][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.760014][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.764570][ T48] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.795947][T12969] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.806893][T12969] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.816899][T12969] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.284397][T11669] Bluetooth: hci13: command tx timeout