last executing test programs: 3m6.39223825s ago: executing program 3 (id=36): mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4a, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x1, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0x3, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x7fc, 0x400003, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x7, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x9, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0xa, 0x8, 0x4, 0x0, 0xfffffffc], [0xc0, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x7, 0xfffffffc, 0x6, 0x2, 0x1, 0x2, 0x2f, 0x1782000, 0x313, 0x77, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e0, 0x2, 0x4, 0xf, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x0, 0x4, 0x10009, 0x3, 0x9, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x1000, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x4, 0x5, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x37f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x150, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0x8ae2, 0x10000, 0x3, 0x8d, 0x100, 0xfc, 0x40000047, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m5.862508635s ago: executing program 3 (id=40): r0 = fanotify_init(0xf00, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x800, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) read$FUSE(r0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 3m4.381886638s ago: executing program 3 (id=46): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x41}, 0xeefb59555986b7f0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) 3m3.367692367s ago: executing program 3 (id=53): syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setrlimit(0xc, &(0x7f0000000100)={0x0, 0x7fffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$search(0x18, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000240)={0x4, 0x1, 0x18, 0x1, 0x100, &(0x7f0000001100)="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"}) 3m1.085856894s ago: executing program 3 (id=56): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r2, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000840)='\'', 0x1}, {&(0x7f00000004c0)="1307622fb9f5d6c0e21b8e36450ff1df2f5837887f4f271d915387b23c6777198f2be87150a65a4b72bd5aeee473d6998d122bcfc1", 0x35}], 0x2}, 0x4) 2m58.881222015s ago: executing program 3 (id=62): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1410, 0x1, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c808}, 0xc0) 2m43.454128257s ago: executing program 32 (id=62): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1410, 0x1, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c808}, 0xc0) 2m19.444759258s ago: executing program 1 (id=190): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net\x00', 0x0, 0x0) statx(r0, &(0x7f0000000340)='./sys/class/net\x00', 0x2000, 0x800, 0x0) 2m19.091043186s ago: executing program 1 (id=194): syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0000000004000800460fa2e2f5549ea6969a90780000000000000000940400040000000000000000000000000000000000004e2300004e210000000300000003"], 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0xdddd0000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000002700)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000180)=0x1) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0xc000, 0x0) 2m17.168732357s ago: executing program 1 (id=198): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0xe503, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)) 2m16.44109961s ago: executing program 1 (id=200): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000000", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x8916, 0x0) r7 = socket(0x1d, 0x3, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x65, 0x10, 0x0, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x4, 0xfff3}}}, 0x24}}, 0x24040084) 2m14.914958447s ago: executing program 1 (id=204): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x4924924924925c1, 0x8801) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r2, 0x3b}, &(0x7f0000000280)=0x8) 2m14.758568851s ago: executing program 1 (id=205): r0 = socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ptrace$getregs(0xc, r1, 0xeb, &(0x7f0000000300)=""/180) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x60040000) socket(0xa, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m8.987539219s ago: executing program 0 (id=215): openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) close(0xffffffffffffffff) 2m8.747320829s ago: executing program 0 (id=216): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x4924924924925c1, 0x8801) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r2, 0x3b}, &(0x7f0000000280)=0x8) 2m7.759049067s ago: executing program 0 (id=220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a800000001c0a01030000000000000000020000000900020073797a30000000000900010073797a30"], 0xa8}}, 0x0) 2m7.529747561s ago: executing program 0 (id=222): mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x100000c, 0x31, 0xffffffffffffffff, 0x61333000) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0x8, &(0x7f0000000200)="952bb3e006ae9a4c"}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\x90\xe1\xf4=\xb5#\xc6\xa5:\xcd\x8e\x02tm\xcb\xbc\x9b\xdc\x85\xfby\x1d\x8f3\xe8W\x1b\xf9\x16\x9c\xc3W\x01\x93\xb1\xb4b\xd9\x7f\xd4.5+\x17\x8c\x1a\xcf\xc5\x90\x03\x94\xd0\xf0\xa9\f\x84\x17', 0xfffffffffffffffd) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m4.458071383s ago: executing program 0 (id=232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000840)='\'', 0x1}, {&(0x7f00000004c0)="1307622fb9f5d6c0e21b8e36450ff1df2f5837887f4f271d915387b23c6777198f2be87150a65a4b72bd5aeee473d6998d122bcfc1", 0x35}], 0x2}, 0x4) 2m3.381733973s ago: executing program 0 (id=237): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ftruncate(r0, 0x10001) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setresgid(0x0, 0x0, r2) 1m59.107100822s ago: executing program 33 (id=205): r0 = socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ptrace$getregs(0xc, r1, 0xeb, &(0x7f0000000300)=""/180) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x60040000) socket(0xa, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m46.315718267s ago: executing program 34 (id=237): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ftruncate(r0, 0x10001) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setresgid(0x0, 0x0, r2) 6.810835279s ago: executing program 2 (id=557): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) unshare(0x20000400) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b2, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x79a9, 0x3000, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1ffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c2e, 0x80020, 0x0, 0x312}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 5.809121116s ago: executing program 2 (id=558): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') 5.610913816s ago: executing program 2 (id=559): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) 5.610690426s ago: executing program 4 (id=560): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) close(r0) write(0xffffffffffffffff, &(0x7f0000000d00)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) 5.234503515s ago: executing program 2 (id=562): syz_emit_vhci(0x0, 0x0) syz_io_uring_setup(0xefd, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) 5.18333593s ago: executing program 4 (id=564): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x84}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) sendmmsg$inet(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x6}}, 0x20) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x80000005, @loopback, 0x1}}, 0x4, 0x21, 0xf06, 0x8, 0xac, 0x7d, 0x4}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 4.943399023s ago: executing program 4 (id=565): mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x100000c, 0x31, 0xffffffffffffffff, 0x61333000) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0x8, &(0x7f0000000200)="952bb3e006ae9a4c"}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\x90\xe1\xf4=\xb5#\xc6\xa5:\xcd\x8e\x02tm\xcb\xbc\x9b\xdc\x85\xfby\x1d\x8f3\xe8W\x1b\xf9\x16\x9c\xc3W\x01\x93\xb1\xb4b\xd9\x7f\xd4.5+\x17\x8c\x1a\xcf\xc5\x90\x03\x94\xd0\xf0\xa9\f\x84\x17', 0xfffffffffffffffd) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f0000002a80)=""/4101, 0x2f3) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000200)={0x0, 0x0}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 4.602632394s ago: executing program 5 (id=567): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="b82cf65762", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)="02563aa2ae", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000001200)="bafe4b96f11b275ea20ee687761ed3347dc573edb0d165b24ef40f760c4ee91500188f88f023340d337aedb0c68f2abca6503815b0dcb0bea377cbac8c71e991725a2eadb1e2ef0870364cd705c439ba2a6cea96cca9631ffd6e9386b86fc3e1122ccaca04ed443d9d6cd66b59453c48bfeef04da5b6eab4f37851a4303a33e9ed291a43d947b5d9280cd0e706673f895a97ae41ee2bea6a79f1de024eaed5d3f35c7a7a9479cf30ceab9b70694d67c3f163ebcadbbd4417b77ae7364a5bff39ba20a2aa5f2caa0d7f0f82d4ed074fedd8f24a61a59962a2591e05a0a6e4e3a059a97703ade51e6d168990c2695d16dfe8e6f5ed599ab7077f3f9c3f4a383b9c12dc886a237a1e9e3e82f70d8ba44d725f942251c72bc7f61d3d0acfdfc048e964b3dbed90b6a48884f64e0bc956d6cdea0c0df4f6210e3e173b5c4ac48412d5e6ad8a52c366d558a39bcdedd85203cf614e35ea8eb89a548b92fd0ef1855087bf4b192646187d3fdafa0c37aa841db35a0dcadea542343d14f14981fca5b8f59385da7be0352ef0332ed18a82d3c2e5342ce7e149fe9bb5e67f0255788194cefeb28adc0fe2b7eed8ee4bdd05f1a0a2678eae307a60337bc7ef79e1923b631e9421acfd51478ec49cef5e635ec0885d5d6f5a455817af0947697b332c9af0fe9e18159467467bc1dea05511a9713303f5068888f82244c9e1a72fcd7d95b4d4f2", 0x201}], 0x1}}], 0x3, 0x20004081) 3.13833253s ago: executing program 5 (id=568): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') 2.905299803s ago: executing program 5 (id=569): mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') 2.765449541s ago: executing program 2 (id=570): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x4}}}]}, 0x24}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}, {&(0x7f00000006c0)="d589691446dbd70a2ae2ef1359796c27d68ed3bd77988b4ddaf825f9b9bb3b0a7a4716ec3fee77b2989037452dcca5c60008a809fe60ebe27fa4b253df6a4f3a3d6d6c8a672d36988f4565e325d7313e997fece52cdcf8b0abaaf9b0756e6f4222c9b1b192cb0540c85fc56b7fa8e1c96bc640c42b56edc98ba10e3a218c4c7f256c57c98c2c1b0ff83c4340d79527b6a1e4b8398447481957ccd49dffb4208eb630a7f692db77199c0b389e05b5ae06c075004a5ff92da72f1ee4fd6d52f3a7721292cd5c4800f2830b457fc655b7b5e00d9466f15f714c1c2ee108afe3a5a6e924ccc83443b7237d12929c212243ff83b65b64911c3583c0453a94c084c9138ff0c4bda6756c7300f0f866b46b09035284fa76b1941604701c134f9ee280c302ae61345228afd40357a6301c57f66c22907b581102451c9b58dd969e09719980f9b41692ea1e8e21e90ca0c8c75c4172b271ae9f7f9547d11500549489080ab7846cba5106b74ce64afb1dea233a4dd4c1e0eb5d18ad4b211f797e9b7132ce5e1a948163eac0b42c659f93075b2b1910c8f2282add7898e8c98dda7e1e33ff9f1a6f805e2b17d8f104e2472590410f170c84ee03a1edbaba71d9621c7d8993e9dc173886e6772c86f962522eb3ccd2136a9517894bfda651acdcffda0f1e46d8dc6d0e89f3e55f837e60b1b75998c2e1702b1da5bb5935828e864ea38e4d74a75c166a75dadc8010976ed4316d87fcc18796bcf4028883cfbfd14b7e4e0758aeee8c07e8c69eb4d7b3d6bb0c6f8689454dd4a5054de480382ad5a0590d16bbde852e305101cf3f07d4a6c4cc597a14b548f1154b80379dbe1d0963cbe79d32cbdbc6b88a768ac02ac0295acd00b1df988a42e353dd5492450c44b4d9262eb494eaae20dad5ca46db5964a74a403832d6062493e24ecc3f58deb97efe579569867d535955617507de4eacb3b1af5ccc7e8b009b5d56dcc383ebb457b695d263d8c8bd16ba09e2b6197fdd580bfe46f55a29a1428e74b003ce943384de7b32f13f6a342243a45bf5e294edb49401c5bf2a9116f156d10c3c2c581c6065d8e74ef28967bdf91cd5f640bb2c8b0451940eeaa8a67564a2820b9ff494db262515fa0f5455f304f5f40c8f143f98a13503e76643547e665a12bbe2b8bb859fb11570ae111608e8bc706292cbc7f6c39d0c997139eabf4d8685908542686749956d09057905988bb7f4388eb784bdcfd5eaefb6c552784da07bfbdc3e0fc83c4ec3b48df9bf950c02b258eaeb3d600bd09250451043c02320f1669eb9ef03b0bcdab82c8b1db67e01dded29657e81455a98071bf82cf3d8eba9461ddea2413dbab91351eb4651a214a3c20d7f089f7af1e3a725b9b41b2e685404d593fd78ca3dcca50feeaa042c4e28dc696d283bdf0a9543b932925fffbb3d43bf706f6bd2c80065da9a11741d6da9fe400ea042f1a7e8fe5a76786a5fe6d78f681a1d49088de57deb02e02d5cdccf08040246c38ff3f82864a56bde3e019c46b96b1419a7bf7bdbc3d352dd724cb99639426a73df3773f7e0d92ebbc442f2f3f018196a851112b4f588a45f9a29079527f3169ad4d1922e919b36fa9a143bc4f86002020bd62d99de43cc3a3eec5453aeb3f91c37c2d80801629fc4e2f082ea83bf8c966d228b71d6734195c1f25ff93a447ebb5c2ad090011ea06837b59f9c0b32c94a69e38c64e3e2b1b66a63abd40746397041ee9a529e94ce992ef7a6e8cf5233e2c5a9a67792d3d98ff0f9ae305d3a3a48b90270a3ab34828d52f98e81ba23eb269275731cc00c8be8c075c31b916c24211a2e957ff1da356ecbf9302deaf56657d7c40ac0c7188d3273429cf00f467329474f823fa78c446ea20ce09d9d3886253ec2e4389399c8af8399f77fdba71fa81b6d7fa56cd9c4a8af7f88e5ee56a3d04cc6866580479728d8993832ae1da31ebc1a1ffc5c9cfd09021c35a689bccf3dbfeacba282e78e3bf08f21cbd937f8a3370ebe93dc33c2339451a7370b6a3999cd4c32861a176a8781535215b54bb64f337abbfdabc0338e1b4782e43ba3acc851ca34d60a07b72c202bee2d538ff0981f54d24329365afe57e55e8712170e75be05a2274b5d29da9ce05091d40cb33fb258faeb88d693fcafe15f4dea4c3eea0494bb9d2ec9eb008f30e7b7e639a531812b7d8f14ed0064d36abce1fa33ad61dbd441e66a382cd8836ebc3eacf294e148ba6b30797b33bc9bc84672840dbe3e6614f4922e519171bdcae94a0bc573652fd4059e6a25f8c86ac0ddb7f04a12f2701bd35a407e4ee116597ec9f48f98947734c5e0dcf8b2f70faf29a14dcb66acaba1980bfe3cca5ae6d2243aa8d07f5e30b8133047edc6cd3d8dd5da37ed519f63b2ea82662f11347f4ee8e17976de18d04143136049d32eca7346432dcfb53c61452eb1854f20cdb822dca9d8523e8199e3f8c572400251415cf0e68e5691fb6f4deeb187f67098eaac390d3b0b334638960ea489ea220ccb1fcbd45060a220623dc9d05fc96b55ef0fdb9a9268089a15d524bdbbcf3122b62eccf2eab0830e140e8f6171c6a36ac77e3ec32833a4ee507526e07b39d15bd02a578b90e0d4598aee32fd03530b24b54af8a3acbe557841d7b8a0c7b0dfe46b4c4ca36df6ec06daa2f0c6abf50db83d2edc6e23146b2d20059bc43476ec19db478668be5ae6705882f48cf9692b2539aca039e7c0f5aefb2ee03f9843ab6c67c66fc2722ef6be2014f0a6c90f9c4967340cb08256956c0de358575b2bd7c0b40834d7371d462adf56a7c45bf871abc803a6f460d1ed715680428a4d835922e9edc96665a78ffd6b64857aad017bf3e06228c91e86fac90a2de0cbe4492905ea92e3457774a401926b1d28bcf472a4601e35811f07b0d69a1d3a74919258869c71f4163e3e30596549ab2ec572fb524ea45c1f81da48a263e751b997cbc4fb50250650db36a962f4f29d723ea5146e3c20bb2b97442087b284dabbd49750ba061597e3f0eaa9590cfd74e669b2b06e14520333dc12286e32583205b3ab59e122f910d6a2d076460262ec06fc604e70879785335b533b2f2bc4b26e082c26c6ed7f1e2446a6fe5cc3efc10f9129b5693750107b88e694259225b35accc1d7070945ecfdfa95490688e03d98d5a90dee1932d22866d0b2bd5ea43783bc0def805af2a4f3c0c77e9913ef8c41c718dd3ff40e277137e506c0b67e95cd6873ceb980b63d5fb66f265e7bf4b047faf67ea954d2735dbb558d7542d67f7d718f233d17a6616350d543111cc9cec0c4b25f10a9791bcc697cc0ca3d5d0f1e6fc7c43caf3f8bea7613d5b8ef5198d8af0864afa78932415c0e7ce1f80297275d60b1e08e07f40c8c3a6482c47b5539843fec3fc9e1b02a4bf885be2f30ba2fb59bd5669ce044ede35f213c7cc2b9a3cb5715205f61bd380a46bfc6bc2843673fcebc1e9adf22161430acc51d5ec2b5c21350db11e623cbe39c1e40337b8f88bf700d20b583f37e7274ed6fc882ec5e50da7a1536e6b30f1265c2690c23a4720fc1c3e835a09b90834c410b3f533130ede733282cfb2b8bb4b5767ac7f32e24847384440564d09aa02da326d5a6255edd05bc36ee8d66bfb64cdb3341d44b0b73d2b632b288a9ab7a027f6cccea9bda75e23aec40be9bc2343e479a925e541c431dd549fd72df8174f97a2b2fc3d8bc1febbaa49fd708a97070dce0e6d01c7d22d80e4e428aceaab601100f4c152a531ccf0412ffc38913133d10ffa0ffefe6ccdcc689b0bdf8ee697c52ea08db5f7fa2b1ed240bf800c6c82c028423ce7b506e8f52654665b1986eb3a9b3b95a9b810c543cf83f560bba5a35b75f4af819964c12ce57f1a9c914b68cf62b3da762f93b70df2172b9b7d0909ae21fc7fa87a009aabb9d0f46bc56e088acc5ccf92aa1d35d324b7fbbd4f6e4bf7c6dcff1c2395d13ae21a84b1f7231b312396a8903c04d3addbc9416e058803452364c8801f11fb40dc67bda8a6054ff5363147f6d20b580c0d06584b10f7c2cbfde11046d57e8646395dee4b25b89b3d85a891e9f1b34205cc95824e416667ab930aac490412feda43b5adc36be1997ce58d496181674a0826221b6e789ff447653e6cb939be2400d1cb86126dae9574e2cc86fc0b3982bed6f02cc8a616a29478f4817f9ce4766ee9d6396e376da9de4f2d6bca72a58d33ff9ee79a70ea7eb95a2b55182f8e1be34cb00336297f4bfb77cda9f319ed539519738a1d3150c3c4b255bf7d7179411d77c01b7a79a30b2d65fe1809d53f71ecb1afecc7fc79d9f4f69ee0f61696f8f7ccc2aa2d2e826918599cb92a7844caeefbf07cc16020e50f345b5f911c2315a5a923f889452cd6ea41bb939e652cb9aca43ac2fe99dc617695f87b9f17ce27968f6710015355cbe38ff3142345b3f1b8d90910a706611002da04eb843248fb965622e29be84430aa18fd7d0226d46ec2492c9c19ced0bf4cb102c20a28be92bd234ebca61628c7fb0423d82a6087e1d2c4ddb53235b1830f2e18b1c8b03d16d75eae2e24dfe5ae454765221d318b9020b8d746b4054e7b67dcbc2f23ac90366228184bd235d0fb7fbe2b8dfa49ec8e6d1338e894776d505bf587cca85fe7b9bc20255308f3c925e265400bb7779c98135e275027d6fc73337fa2d5dd00ce34a831180b065ed7a475309c389906dbeac87bb22355c2d1ddef0cf92e529f4971a05e069d1e0cc8f047b30ed17f24d32107ccd4cf65925edb08d6b1541d9effc8637d98a6986c92672dc3658b15ac5d914c4e8b245f7f9f4d82b08f1f47b926fee3c36dbb07ca21a233997295179915e6c75fa780f823fb99640ee17d9c1422254b39f6c5322f1ec5e58df8f9941580ba9fb38b99ddade8e4b5ec146abd98e6de1b30b328dafad0ef18a7c002a38c0242d37ce0fc6f8b3791415ff3be36203055d3d666aab2a59ebb50f5262db09ae6985c943376b4723a1850ae2ae4b7b87dfd5038994b46330ce233288c73c7e1e29680bc5cedf92fa65d9ee6f6bf98abedfb81e99795878580dac250db7d48729e02244728a27be0cd90fe9095b4681722cf37788ef85cd51edd55aca6ec483ff2de8b23d813ce7ed08db2ad728c52f875e0a8c7e84f3918ad7c40f6fecb394d00ec7a136a60930236976dbcb45ba1bca5456e1ee8a842d1e8a7972f79a9878c8415eae4402f1b38bf20e69ee913b14aaebb9ffb5820d6150ad5db1f927fe2c8ddded985fcf56f1e80855bee098811524d174a06c39ced2369cc74b8f037b0619aafb714416a2f4c1ad3c91d835434fc8798a8f66f7ce4a3cbd1ba3eccf5e50a9ef2af006270798354eb6c63b730466f2d93cbab40d99cdd3a252c847645454f9a50b22dfddb8107c60c005bda5523f4f8c9f53eda71bdeeddfba5040903f1143c1eb469305b9ac5f0e8b77e800f19e8a9002a4c82fae84cdc4d5f2a1e8ffe54a59fd27061137fba256ac2dd695f4c2ff9af0eb076e1179794c2f2f2a92a03ff80893ed0180026358bd0ebe3dccbdc0771b91d921e60bf7ab6abd809f54d628d977dc120424e7b14bfc7a4804dcc38c0fe3463f1716e3be42906d3f5606848846ba68864bacdc324e003bc9c63a00ed281314c622c95520175be58b1791f346ef38955c52b230c8c70fc7cf3c847f0e7507e7314cf592450ee4e7d4ba2aaed4ae35ee8408757a0e04d2fd09bbc691a173fda2c95c5a49f88494a69655d4b45c729cd5757351e8785c1e01130ff23ee3c2db5917556c8d651f6deb3c05e8de1364", 0x1000}, {&(0x7f00000016c0)="62b4a0cf5802f4ba8b23f24217a1ff51b03e2f1398151dded9c30aa008105945dc3376d12653cfb8a0ed6487c41f5d87bcbb7567c9c68834f5121313ec67a6b6bae7010bdf533a9f9b241c5e1fb0272d665af95a7004e21b761154e6a09a5f046348a418d1bb54c6dbe5d64954", 0x6d}], 0x3}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80000001000010402400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="88d10100000000009400128009000100766c616e00000000840002800c00020008000000000000004c0004800c00010084000000030000000c00010000000000ffffffff0c00010405000000060000000c00010085ffffff080000000c00010002000000ff0f00000c000100ff030000ff0f00000400038006000500810000001c0003806700010002100000060000000c0001000c0000000700000014000300766c616e30"], 0xc8}}, 0x0) 2.701409061s ago: executing program 5 (id=571): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x70}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) ioctl$sock_inet_SIOCGARP(r2, 0x8954, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rf', @ANYRESHEX=r8]) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000440)={0x2, @sliced={0x2, [0x2, 0xb, 0x8, 0x8, 0x2, 0x4, 0x6, 0x1, 0x7, 0x7, 0xb84, 0x7, 0x200, 0x2, 0x6, 0x8fee, 0x8, 0x6, 0x1, 0x8000, 0x1, 0x78e5, 0x3, 0x8, 0xae4, 0x300, 0x4, 0x9, 0x7fff, 0x401, 0xd874, 0x100, 0x9, 0x9, 0x4, 0x67, 0x1, 0xfff8, 0x58f, 0x3a4, 0xfff, 0x4, 0x7, 0x7, 0xbdcf, 0x9, 0x0, 0x93], 0xfffffa6a}}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x1, 'sed\x00', 0x12, 0x0, 0x26}, 0x2c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004f37ea30f5e6dc290c54acf7c91d450702777fb6650f7da88f07755b5738e49186f1490de575054f77aaa828ba3b4dbd67549a9fa1b608b089"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 1.755831839s ago: executing program 4 (id=572): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000b40)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1.65995795s ago: executing program 5 (id=573): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) 1.557365005s ago: executing program 5 (id=574): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ftruncate(r1, 0x10001) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000180)=0x0) r5 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setresgid(0x0, 0x0, r6) r7 = fcntl$dupfd(r5, 0x406, r5) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) fchown(0xffffffffffffffff, 0x0, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.367921703s ago: executing program 2 (id=575): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r1, &(0x7f00000004c0)='\n', 0x1) 1.184230686s ago: executing program 4 (id=576): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) 0s ago: executing program 4 (id=577): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) sendmmsg$sock(r0, 0x0, 0x0, 0x20004081) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. [ 94.110484][ T5608] cgroup: Unknown subsys name 'net' [ 94.254549][ T5608] cgroup: Unknown subsys name 'cpuset' [ 94.264814][ T5608] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.912038][ T5608] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.417042][ T29] cfg80211: failed to load regulatory.db [ 98.727982][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.739612][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.754216][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.772087][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.783925][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.794676][ T5643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.805284][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.818840][ T5644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.828418][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.837516][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.840653][ T5643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.849378][ T5644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.853449][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.860958][ T5644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.868740][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.874535][ T5644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.880854][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.898481][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.912161][ T5649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.912373][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.923887][ T5647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.928655][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.937795][ T5647] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.946444][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.957118][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.966508][ T5647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.967777][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.982576][ T5647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.000150][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.014100][ T5643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.028157][ T5632] Bluetooth: hci1: command tx timeout [ 101.028156][ T5633] Bluetooth: hci5: command tx timeout [ 101.028507][ T5632] Bluetooth: hci0: command tx timeout [ 101.107159][ T50] Bluetooth: hci4: command tx timeout [ 101.113282][ T50] Bluetooth: hci2: command tx timeout [ 101.120679][ T5632] Bluetooth: hci3: command tx timeout [ 101.703145][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.710619][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.718269][ T5639] bridge_slave_0: entered allmulticast mode [ 101.726556][ T5639] bridge_slave_0: entered promiscuous mode [ 101.799737][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.807227][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.814775][ T5636] bridge_slave_0: entered allmulticast mode [ 101.822975][ T5636] bridge_slave_0: entered promiscuous mode [ 101.834686][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.842141][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.851076][ T5639] bridge_slave_1: entered allmulticast mode [ 101.858973][ T5639] bridge_slave_1: entered promiscuous mode [ 101.901571][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.909444][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.917577][ T5630] bridge_slave_0: entered allmulticast mode [ 101.925485][ T5630] bridge_slave_0: entered promiscuous mode [ 101.935451][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.942790][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.950258][ T5636] bridge_slave_1: entered allmulticast mode [ 101.958663][ T5636] bridge_slave_1: entered promiscuous mode [ 102.033257][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.040550][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.048234][ T5630] bridge_slave_1: entered allmulticast mode [ 102.056019][ T5630] bridge_slave_1: entered promiscuous mode [ 102.113461][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.121111][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.129011][ T5627] bridge_slave_0: entered allmulticast mode [ 102.137179][ T5627] bridge_slave_0: entered promiscuous mode [ 102.193681][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.207786][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.217693][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.225021][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.232878][ T5627] bridge_slave_1: entered allmulticast mode [ 102.241145][ T5627] bridge_slave_1: entered promiscuous mode [ 102.294419][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.308416][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.348994][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.356418][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.364184][ T5637] bridge_slave_0: entered allmulticast mode [ 102.372264][ T5637] bridge_slave_0: entered promiscuous mode [ 102.381106][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.388977][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.396444][ T5628] bridge_slave_0: entered allmulticast mode [ 102.405035][ T5628] bridge_slave_0: entered promiscuous mode [ 102.417600][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.471676][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.479132][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.486982][ T5637] bridge_slave_1: entered allmulticast mode [ 102.495116][ T5637] bridge_slave_1: entered promiscuous mode [ 102.505494][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.514427][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.522049][ T5628] bridge_slave_1: entered allmulticast mode [ 102.530206][ T5628] bridge_slave_1: entered promiscuous mode [ 102.554779][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.581404][ T5639] team0: Port device team_slave_0 added [ 102.594526][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.651372][ T5636] team0: Port device team_slave_0 added [ 102.659795][ T5639] team0: Port device team_slave_1 added [ 102.669845][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.696447][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.722463][ T5636] team0: Port device team_slave_1 added [ 102.760192][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.773064][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.784578][ T5630] team0: Port device team_slave_0 added [ 102.833767][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.861583][ T5630] team0: Port device team_slave_1 added [ 102.898258][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.905255][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.931768][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.947686][ T5627] team0: Port device team_slave_0 added [ 102.999490][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.006542][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.036518][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.048939][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.056018][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.082068][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.099334][ T5627] team0: Port device team_slave_1 added [ 103.106953][ T50] Bluetooth: hci1: command tx timeout [ 103.113934][ T5632] Bluetooth: hci5: command tx timeout [ 103.119894][ T5633] Bluetooth: hci0: command tx timeout [ 103.131604][ T5628] team0: Port device team_slave_0 added [ 103.138108][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.145070][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.171354][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.186940][ T5633] Bluetooth: hci3: command tx timeout [ 103.187405][ T50] Bluetooth: hci4: command tx timeout [ 103.197714][ T5632] Bluetooth: hci2: command tx timeout [ 103.212928][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.219942][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.247799][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.286575][ T5637] team0: Port device team_slave_0 added [ 103.295987][ T5628] team0: Port device team_slave_1 added [ 103.315951][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.323335][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.349827][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.389923][ T5637] team0: Port device team_slave_1 added [ 103.425448][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.432671][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.459550][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.485730][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.493378][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.519510][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.532758][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.539860][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.566112][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.604831][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.611992][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.638018][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.734195][ T5636] hsr_slave_0: entered promiscuous mode [ 103.741403][ T5636] hsr_slave_1: entered promiscuous mode [ 103.749527][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.756917][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.783513][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.819084][ T5630] hsr_slave_0: entered promiscuous mode [ 103.826039][ T5630] hsr_slave_1: entered promiscuous mode [ 103.832732][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 103.838659][ T5630] Cannot create hsr debugfs directory [ 103.853949][ T5639] hsr_slave_0: entered promiscuous mode [ 103.861149][ T5639] hsr_slave_1: entered promiscuous mode [ 103.868293][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 103.875437][ T5639] Cannot create hsr debugfs directory [ 103.886538][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.894044][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.920280][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.144141][ T5628] hsr_slave_0: entered promiscuous mode [ 104.151216][ T5628] hsr_slave_1: entered promiscuous mode [ 104.158397][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 104.164174][ T5628] Cannot create hsr debugfs directory [ 104.180671][ T5627] hsr_slave_0: entered promiscuous mode [ 104.187674][ T5627] hsr_slave_1: entered promiscuous mode [ 104.194124][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 104.200045][ T5627] Cannot create hsr debugfs directory [ 104.358329][ T5637] hsr_slave_0: entered promiscuous mode [ 104.365330][ T5637] hsr_slave_1: entered promiscuous mode [ 104.372133][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 104.378057][ T5637] Cannot create hsr debugfs directory [ 105.042249][ T5630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.058817][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.070285][ T5630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.082281][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.092444][ T5630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.103896][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.126452][ T5630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.137979][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.196807][ T5632] Bluetooth: hci0: command tx timeout [ 105.196914][ T50] Bluetooth: hci5: command tx timeout [ 105.202354][ T5633] Bluetooth: hci1: command tx timeout [ 105.254128][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.268339][ T5632] Bluetooth: hci3: command tx timeout [ 105.268512][ T50] Bluetooth: hci4: command tx timeout [ 105.275329][ T5633] Bluetooth: hci2: command tx timeout [ 105.282445][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.297909][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.312696][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.323039][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.337414][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.346053][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.358999][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.481356][ T5628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.493892][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.503822][ T5628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.520445][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.531452][ T5628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.543082][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.552073][ T5628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.562942][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.745527][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.754419][ T5639] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.769644][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.789760][ T5639] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.802184][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.842672][ T5639] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.860652][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.870057][ T5639] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.885161][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.960535][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.037881][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.045748][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.104194][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.111505][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.121065][ T5637] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.135410][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.147844][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.170854][ T5637] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.185446][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.195155][ T5637] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.210196][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.219430][ T5637] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.233539][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.395926][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.413477][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.461157][ T5627] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.477564][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.505842][ T5627] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.523388][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.542392][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.550087][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.578391][ T5627] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.590892][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.600272][ T5627] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.614368][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.656381][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.663685][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.698616][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.752553][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.760455][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.824225][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.831514][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.073090][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.264265][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.271594][ T5632] Bluetooth: hci1: command tx timeout [ 107.278518][ T5633] Bluetooth: hci0: command tx timeout [ 107.279442][ T50] Bluetooth: hci5: command tx timeout [ 107.336088][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.347468][ T50] Bluetooth: hci3: command tx timeout [ 107.353895][ T50] Bluetooth: hci2: command tx timeout [ 107.356945][ T5632] Bluetooth: hci4: command tx timeout [ 107.380725][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.388263][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.502622][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.509909][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.663056][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.813670][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.821012][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.897848][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.925022][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.932260][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.971631][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.033563][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.103318][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.110612][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.212203][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.219490][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.321344][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.526002][ T5630] veth0_vlan: entered promiscuous mode [ 108.615021][ T5630] veth1_vlan: entered promiscuous mode [ 108.728581][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.910828][ T5636] veth0_vlan: entered promiscuous mode [ 108.942587][ T5630] veth0_macvtap: entered promiscuous mode [ 108.987523][ T5630] veth1_macvtap: entered promiscuous mode [ 109.013728][ T5636] veth1_vlan: entered promiscuous mode [ 109.224652][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.264700][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.308014][ T5628] veth0_vlan: entered promiscuous mode [ 109.389611][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.417188][ T1110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.450212][ T1110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.476145][ T5628] veth1_vlan: entered promiscuous mode [ 109.531476][ T1110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.582889][ T1110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.687589][ T5636] veth0_macvtap: entered promiscuous mode [ 109.753616][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.766675][ T5636] veth1_macvtap: entered promiscuous mode [ 109.952412][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.996311][ T5628] veth0_macvtap: entered promiscuous mode [ 110.057860][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.069663][ T5628] veth1_macvtap: entered promiscuous mode [ 110.110173][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.122213][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.134122][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.205566][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.244780][ T1110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.254367][ T1110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.282793][ T1110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.291897][ T1110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.325881][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.348106][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.368089][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.448996][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.460223][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.474407][ T5637] veth0_vlan: entered promiscuous mode [ 110.500508][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.510330][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.515160][ T5630] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.596374][ T5639] veth0_vlan: entered promiscuous mode [ 110.638023][ T5637] veth1_vlan: entered promiscuous mode [ 110.674547][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.704895][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.827389][ T5639] veth1_vlan: entered promiscuous mode [ 110.875302][ T5627] veth0_vlan: entered promiscuous mode [ 110.891389][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.904759][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.929617][ T5860] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 111.010413][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.022176][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.099735][ T5627] veth1_vlan: entered promiscuous mode [ 111.194977][ T5637] veth0_macvtap: entered promiscuous mode [ 111.225050][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.247910][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.404987][ T5637] veth1_macvtap: entered promiscuous mode [ 111.506804][ T5639] veth0_macvtap: entered promiscuous mode [ 113.194564][ T5639] veth1_macvtap: entered promiscuous mode [ 113.307053][ T5627] veth0_macvtap: entered promiscuous mode [ 113.386157][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.506481][ T5627] veth1_macvtap: entered promiscuous mode [ 113.784119][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.592025][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.621396][ T1023] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.636876][ T1023] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.672988][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.681784][ T1023] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.701248][ T1023] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.745524][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.813167][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.167244][ T5883] process 'syz.2.12' launched './file2' with NULL argv: empty string added [ 115.670674][ T47] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.722747][ T47] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.757735][ T5872] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.783425][ T5872] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.800604][ T5889] UDC core: g1: couldn't find an available UDC or it's busy [ 115.834097][ T5872] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.855015][ T5872] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.890764][ T5872] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.921820][ T5872] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.063246][ T5896] netlink: 'syz.2.17': attribute type 10 has an invalid length. [ 116.075482][ T5895] bond0: entered promiscuous mode [ 116.080871][ T5895] bond_slave_0: entered promiscuous mode [ 116.089154][ T5895] bond_slave_1: entered promiscuous mode [ 116.105336][ T5895] batadv0: entered promiscuous mode [ 116.140410][ T5896] syz_tun: entered promiscuous mode [ 116.166507][ T5896] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 116.315643][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.349500][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.506435][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.522538][ T5904] syzkaller0: entered promiscuous mode [ 116.537739][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.540483][ T5904] syzkaller0: entered allmulticast mode [ 116.722273][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.734512][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.981254][ T5872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.003582][ T5872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.125085][ T5918] loop1: detected capacity change from 0 to 256 [ 117.190769][ T5918] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.361967][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.376054][ T5922] Zero length message leads to an empty skb [ 117.386365][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.545801][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.570906][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.041984][ T5939] loop4: detected capacity change from 0 to 512 [ 119.090442][ T5939] ======================================================= [ 119.090442][ T5939] WARNING: The mand mount option has been deprecated and [ 119.090442][ T5939] and is ignored by this kernel. Remove the mand [ 119.090442][ T5939] option from the mount to silence this warning. [ 119.090442][ T5939] ======================================================= [ 119.234637][ T5939] EXT4-fs: inline encryption not supported [ 119.240794][ T5939] EXT4-fs: Ignoring removed i_version option [ 119.364390][ T5939] EXT4-fs (loop4): 1 orphan inode deleted [ 119.574951][ T5939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.810851][ T5963] 9pnet_fd: Insufficient options for proto=fd [ 119.820898][ T5963] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 120.379530][ T24] IPVS: starting estimator thread 0... [ 120.430247][ T5939] EXT4-fs (loop4): shut down requested (2) [ 120.538128][ T5966] IPVS: using max 26 ests per chain, 62400 per kthread [ 120.577462][ T5633] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 120.588455][ T5633] CPU: 1 UID: 0 PID: 5633 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 120.588494][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 120.588513][ T5633] Workqueue: hci5 hci_rx_work [ 120.588692][ T5633] Call Trace: [ 120.588710][ T5633] [ 120.588731][ T5633] dump_stack_lvl+0xe8/0x150 [ 120.588787][ T5633] sysfs_create_dir_ns+0x271/0x2a0 [ 120.588830][ T5633] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 120.588870][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.588901][ T5633] ? do_raw_spin_unlock+0xf5/0x210 [ 120.588936][ T5633] kobject_add_internal+0x622/0xcd0 [ 120.588984][ T5633] kobject_add+0x163/0x240 [ 120.589015][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.589051][ T5633] ? __pfx_kobject_add+0x10/0x10 [ 120.589081][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.589113][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.589144][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.589181][ T5633] ? get_device_parent+0x366/0x3a0 [ 120.589217][ T5633] device_add+0x3fa/0xb80 [ 120.589257][ T5633] hci_conn_add_sysfs+0xd5/0x210 [ 120.589292][ T5633] le_conn_complete_evt+0xfef/0x1580 [ 120.589342][ T5633] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 120.589377][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.589404][ T5633] ? __mutex_unlock_slowpath+0x731/0x900 [ 120.589438][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.589465][ T5633] ? skb_pull_data+0xf0/0x200 [ 120.589507][ T5633] hci_le_conn_complete_evt+0x187/0x470 [ 120.589551][ T5633] hci_event_packet+0x67a/0xf10 [ 120.589589][ T5633] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 120.589621][ T5633] ? __pfx_hci_event_packet+0x10/0x10 [ 120.589655][ T5633] ? audit_tree_freeing_mark+0x9e0/0xb20 [ 120.589691][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.589718][ T5633] ? hci_send_to_monitor+0xe2/0x590 [ 120.589755][ T5633] hci_rx_work+0x3ee/0x1020 [ 120.589789][ T5633] ? process_scheduled_works+0xa20/0x14e0 [ 120.589816][ T5633] process_scheduled_works+0xa8e/0x14e0 [ 120.589871][ T5633] ? __pfx_process_scheduled_works+0x10/0x10 [ 120.589903][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.589928][ T5633] ? assign_work+0x3cf/0x5d0 [ 120.589959][ T5633] worker_thread+0xa47/0xfb0 [ 120.590069][ T5633] kthread+0x388/0x470 [ 120.590105][ T5633] ? __pfx_worker_thread+0x10/0x10 [ 120.590130][ T5633] ? __pfx_kthread+0x10/0x10 [ 120.590165][ T5633] ret_from_fork+0x514/0xb70 [ 120.590208][ T5633] ? __pfx_ret_from_fork+0x10/0x10 [ 120.590246][ T5633] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.590271][ T5633] ? __switch_to+0xc89/0x1420 [ 120.590306][ T5633] ? __pfx_kthread+0x10/0x10 [ 120.590342][ T5633] ret_from_fork_asm+0x1a/0x30 [ 120.590386][ T5633] [ 120.590692][ T5633] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 120.859302][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.864379][ T5633] Bluetooth: hci5: failed to register connection device [ 121.433353][ T10] xhci_hcd 0000:00:00.0: init 0000:00:00.0 fail, -16 [ 121.459267][ T5985] xhci_hcd 0000:00:00.0: probe with driver xhci_hcd failed with error -16 [ 122.584787][ T6009] loop4: detected capacity change from 0 to 512 [ 123.373529][ T6009] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 123.387901][ T6009] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.746580][ T6009] EXT4-fs error (device loop4): __ext4_iget:5533: inode #11: block 2: comm syz.4.54: invalid block [ 123.757952][ T6009] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.776762][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 123.796485][ C0] EXT4-fs (loop4): initial error at time 1784938324: __ext4_iget:5533: inode 11: block 2 [ 123.806503][ C0] EXT4-fs (loop4): last error at time 1784938324: __ext4_iget:5533: inode 11: block 2 [ 123.847351][ T6009] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.54: couldn't read orphan inode 11 (err -117) [ 123.860053][ T6009] loop4: lost filesystem error report for type 5 error -117 [ 123.972135][ T6009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.232668][ T6025] netlink: 'syz.2.57': attribute type 1 has an invalid length. [ 125.334722][ T6025] netlink: 'syz.2.57': attribute type 3 has an invalid length. [ 126.339554][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.498767][ T6029] syz.0.58 (6029): drop_caches: 2 [ 127.374548][ T6049] binder: BINDER_SET_CONTEXT_MGR already set [ 127.443781][ T6049] binder: 6040:6049 ioctl 4018620d 200000000040 returned -16 [ 127.508979][ T6053] netlink: 'syz.2.66': attribute type 11 has an invalid length. [ 127.537696][ T6045] loop1: detected capacity change from 0 to 4096 [ 127.599249][ T6045] EXT4-fs: inline encryption not supported [ 127.712432][ T6045] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.772933][ T6045] EXT4-fs (loop1): Test dummy encryption mode enabled [ 127.840905][ T6045] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 127.886917][ T6045] System zones: 0-5 [ 128.808978][ T6045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.377674][ T6045] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 129.910395][ T6070] overlayfs: failed to resolve './bus': -2 [ 130.466380][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.595285][ T30] audit: type=1326 audit(1784938332.181:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.5.77" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07d9de99 code=0x7ffc0000 [ 131.715973][ T30] audit: type=1326 audit(1784938332.181:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.5.77" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07d9de99 code=0x7ffc0000 [ 131.784720][ T6038] infiniband syz1: set active [ 131.803503][ T6038] infiniband syz1: added syz_tun [ 131.834158][ T30] audit: type=1326 audit(1784938332.231:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.5.77" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07d9de99 code=0x7ffc0000 [ 131.835177][ T6108] loop1: detected capacity change from 0 to 4096 [ 131.953455][ T30] audit: type=1326 audit(1784938332.231:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.5.77" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07d9de99 code=0x7ffc0000 [ 131.954449][ T6108] EXT4-fs: inline encryption not supported [ 131.978374][ T30] audit: type=1326 audit(1784938332.231:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.5.77" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fee07d9de99 code=0x7ffc0000 [ 132.009296][ T30] audit: type=1326 audit(1784938332.231:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.5.77" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07d9de99 code=0x7ffc0000 [ 132.045686][ T30] audit: type=1326 audit(1784938332.231:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.5.77" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07d9de99 code=0x7ffc0000 [ 132.073692][ T30] audit: type=1326 audit(1784938332.231:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.5.77" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07d9de99 code=0x7ffc0000 [ 132.116188][ T6108] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 132.119478][ T6038] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 132.138450][ T30] audit: type=1326 audit(1784938332.231:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.5.77" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee07d9de99 code=0x7ffc0000 [ 132.198608][ T6108] EXT4-fs (loop1): Test dummy encryption mode enabled [ 132.222197][ T6038] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 132.256105][ T6108] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec0a8, mo2=0002] [ 132.270533][ T6119] loop5: detected capacity change from 0 to 4096 [ 132.277512][ T30] audit: type=1326 audit(1784938332.241:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.5.77" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fee07d9de99 code=0x7ffc0000 [ 132.284969][ T6108] System zones: [ 132.302711][ T6038] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 132.352314][ T6108] 0-5 [ 132.360443][ T6119] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.378967][ T6108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.397345][ T6119] EXT4-fs (loop5): Test dummy encryption mode enabled [ 132.471920][ T6119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.532743][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.561388][ T6038] RDS/IB: syz1: added [ 132.566502][ T6038] smc: adding ib device syz1 with port count 1 [ 132.743561][ T6038] smc: ib device syz1 port 1 has no pnetid [ 133.560184][ T6119] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 133.824064][ T5639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.254685][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.267498][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.559391][ T6148] UDC core: g1: couldn't find an available UDC or it's busy [ 134.696272][ T6157] syzkaller0: entered promiscuous mode [ 134.717176][ T6157] syzkaller0: entered allmulticast mode [ 135.740514][ T6161] netlink: 'syz.2.80': attribute type 10 has an invalid length. [ 136.243140][ T6173] capability: warning: `syz.0.97' uses 32-bit capabilities (legacy support in use) [ 136.281316][ T6170] loop1: detected capacity change from 0 to 4096 [ 136.360872][ T6170] EXT4-fs: inline encryption not supported [ 136.368666][ T6174] loop2: detected capacity change from 0 to 4096 [ 136.401071][ T6170] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 136.414707][ T6174] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.457680][ T6170] EXT4-fs (loop1): Test dummy encryption mode enabled [ 136.472005][ T6174] EXT4-fs (loop2): Test dummy encryption mode enabled [ 136.513299][ T6170] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec0a8, mo2=0002] [ 136.544159][ T6170] System zones: 0-5 [ 136.585281][ T6174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.612537][ T6170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.784861][ T6174] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 137.017294][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.077498][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.656915][ T5633] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 139.111887][ T6213] syzkaller0: entered promiscuous mode [ 139.150079][ T6213] syzkaller0: entered allmulticast mode [ 140.490358][ T6221] loop2: detected capacity change from 0 to 512 [ 140.601238][ T6221] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.113: missing EA_INODE flag [ 140.676282][ T6227] i2c i2c-0: delete_device: Can't find device in list [ 140.704828][ T6221] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 140.706814][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 140.722585][ C0] EXT4-fs (loop2): initial error at time 1784938341: ext4_xattr_inode_iget:441: inode 12 [ 140.732517][ C0] EXT4-fs (loop2): last error at time 1784938341: ext4_xattr_inode_iget:441: inode 12 [ 140.806316][ T6229] loop4: detected capacity change from 0 to 4096 [ 140.814658][ T6221] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.113: error while reading EA inode 12 err=-117 [ 140.852452][ T6229] EXT4-fs: inline encryption not supported [ 140.873445][ T6221] loop2: lost filesystem error report for type 5 error -117 [ 140.875357][ T6221] EXT4-fs (loop2): 1 orphan inode deleted [ 140.876342][ T6229] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 140.914785][ T6221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.951469][ T6229] EXT4-fs (loop4): Test dummy encryption mode enabled [ 141.001674][ T6229] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec0a8, mo2=0002] [ 141.064891][ T6229] System zones: 0-5 [ 141.117596][ T6229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.234143][ T6233] loop5: detected capacity change from 0 to 4096 [ 141.242885][ T6233] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.262020][ T6233] EXT4-fs (loop5): Test dummy encryption mode enabled [ 141.713189][ T6233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.950537][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.003897][ T6233] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 142.021164][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.175066][ T5633] Bluetooth: Frame is too long (len 24, expected len 4) [ 142.189677][ T6246] syzkaller0: entered promiscuous mode [ 142.237331][ T6246] syzkaller0: entered allmulticast mode [ 142.245975][ T5639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.611799][ T6258] file system registered [ 142.660622][ T6260] No source specified [ 142.846263][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 142.859218][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 142.869755][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 142.879696][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 142.895404][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 143.729006][ T6278] syzkaller0: entered promiscuous mode [ 143.766721][ T6278] syzkaller0: entered allmulticast mode [ 143.905810][ T50] Bluetooth: Frame is too long (len 24, expected len 4) [ 144.024648][ T6310] loop4: detected capacity change from 0 to 1024 [ 144.039367][ T6310] EXT4-fs: Ignoring removed orlov option [ 144.144624][ T6310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.227437][ T50] Bluetooth: hci2: command 0x2016 tx timeout [ 144.287710][ T6318] loop1: detected capacity change from 0 to 512 [ 144.332756][ T6318] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 144.387586][ T6318] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 144.419706][ T6318] System zones: 1-12 [ 144.439897][ T6325] EXT4-fs (loop4): shut down requested (1) [ 144.555886][ T6318] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 144.651529][ T6318] EXT4-fs (loop1): 1 truncate cleaned up [ 144.705653][ T6318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.804384][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.848693][ T6318] EXT4-fs warning (device loop1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 144.993076][ T5632] Bluetooth: hci6: command tx timeout [ 145.803757][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.989217][ T5632] Bluetooth: hci0: command 0x2016 tx timeout [ 146.306887][ T5632] Bluetooth: hci2: command 0x2016 tx timeout [ 147.031594][ T5643] Bluetooth: hci6: command tx timeout [ 147.042610][ T5632] Bluetooth: Frame is too long (len 24, expected len 4) [ 147.495955][ T6357] syzkaller0: entered promiscuous mode [ 147.517737][ T6357] syzkaller0: entered allmulticast mode [ 148.137062][ T50] Bluetooth: hci0: command 0x2016 tx timeout [ 149.113467][ T5629] Bluetooth: hci6: command tx timeout [ 149.119512][ T5629] Bluetooth: hci4: command 0x2016 tx timeout [ 149.577044][ T6377] netlink: 'syz.5.162': attribute type 1 has an invalid length. [ 149.966368][ T6377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.935225][ T6378] bond1: (slave veth3): Enslaving as an active interface with a down link [ 150.974178][ T6379] veth0_virt_wifi: entered promiscuous mode [ 151.006502][ T6391] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 151.092151][ T6379] bond1: (slave veth0_virt_wifi): making interface the new active one [ 151.115727][ T6379] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 151.247041][ T50] Bluetooth: hci6: command tx timeout [ 151.258268][ T5633] Bluetooth: hci4: command 0x2016 tx timeout [ 151.514425][ T6401] 9pnet_fd: Insufficient options for proto=fd [ 151.528146][ T6401] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 152.307098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 153.934420][ T6381] bond1: (slave veth0_virt_wifi): Releasing active interface [ 153.961079][ T5749] IPVS: starting estimator thread 0... [ 154.089321][ T6404] IPVS: using max 27 ests per chain, 64800 per kthread [ 154.556974][ T5629] Bluetooth: Frame is too long (len 24, expected len 4) [ 156.632511][ T5633] Bluetooth: hci4: command 0x2016 tx timeout [ 157.616348][ T6442] 9pnet_fd: Insufficient options for proto=fd [ 157.624693][ T6442] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 159.576893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 159.987114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 161.511116][ T50] Bluetooth: hci4: command 0x2016 tx timeout [ 162.137035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 164.288186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 166.015375][ T50] Bluetooth: Frame is too long (len 24, expected len 4) [ 166.352998][ T57] smc: removing ib device syz1 [ 166.459090][ T5789] syz1: Port: 1 Link DOWN [ 166.864835][ T6497] netlink: 'syz.1.194': attribute type 10 has an invalid length. [ 168.004694][ T6490] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 168.069881][ T6497] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 168.124355][ T50] Bluetooth: hci2: command 0x2016 tx timeout [ 169.071877][ T57] smbdirect: ib_dev[syz1] removed [ 170.053780][ T6507] team_slave_0: entered allmulticast mode [ 170.166807][ T50] Bluetooth: hci2: command 0x2016 tx timeout [ 170.563305][ T6536] loop5: detected capacity change from 0 to 1024 [ 170.585065][ T6536] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.604127][ T6536] EXT4-fs: Ignoring removed orlov option [ 170.725865][ T6536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.010211][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.052222][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.133753][ T6264] bridge_slave_0: entered allmulticast mode [ 173.789246][ T6264] bridge_slave_0: entered promiscuous mode [ 173.918306][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.971706][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.016466][ T6264] bridge_slave_1: entered allmulticast mode [ 174.832201][ T6558] netlink: 'syz.2.209': attribute type 10 has an invalid length. [ 175.013824][ T5639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.036004][ T6264] bridge_slave_1: entered promiscuous mode [ 175.193789][ T6558] veth0_to_bond: entered promiscuous mode [ 175.200990][ T6558] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 175.364684][ T6565] netlink: 'syz.0.210': attribute type 10 has an invalid length. [ 175.374299][ T6565] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.383517][ T6565] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.403384][ T6565] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.410649][ T6565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.419016][ T6565] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.426275][ T6565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.446771][ T6565] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 175.467551][ T5756] xhci_hcd 0000:00:00.0: init 0000:00:00.0 fail, -16 [ 175.481501][ T6562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.210'. [ 175.490589][ T6564] xhci_hcd 0000:00:00.0: probe with driver xhci_hcd failed with error -16 [ 175.771503][ T6562] vlan0: entered promiscuous mode [ 175.913503][ T6264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.048219][ T6264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.422656][ T6264] team0: Port device team_slave_0 added [ 176.465318][ T6264] team0: Port device team_slave_1 added [ 176.538381][ T6568] loop2: detected capacity change from 0 to 32768 [ 176.725018][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.742467][ T6568] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 176.759788][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.795793][ T6585] tmpfs: Bad value for 'nr_inodes' [ 176.838054][ T6264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.893405][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.917775][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.972235][ T6264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.071866][ T6568] (syz.2.211,6568,0):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 177.135242][ T6568] (syz.2.211,6568,0):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 177.304781][ T6568] syz.2.211 (6568) used greatest stack depth: 19040 bytes left [ 177.392081][ T6264] hsr_slave_0: entered promiscuous mode [ 177.408673][ T6264] hsr_slave_1: entered promiscuous mode [ 177.426467][ T6264] debugfs: 'hsr0' already exists in 'hsr' [ 177.443823][ T6264] Cannot create hsr debugfs directory [ 177.466470][ T6590] syzkaller0: entered promiscuous mode [ 177.472432][ T6590] syzkaller0: entered allmulticast mode [ 177.487318][ T5636] ocfs2: Unmounting device (7,2) on (node local) [ 177.745639][ T6594] netlink: 84 bytes leftover after parsing attributes in process `syz.0.220'. [ 177.926483][ T6596] binder_alloc: 6595: binder_alloc_buf, no vma [ 179.625413][ T6609] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 179.966935][ T6609] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 180.054666][ T6616] 9pnet_fd: Insufficient options for proto=fd [ 180.064428][ T6616] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 180.339191][ T3107] IPVS: starting estimator thread 0... [ 181.016731][ T6617] IPVS: using max 30 ests per chain, 72000 per kthread [ 181.987992][ T6647] binder_alloc: 6646: binder_alloc_buf, no vma [ 182.817599][ T6665] 9pnet_fd: Insufficient options for proto=fd [ 182.826306][ T6665] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 183.663053][ T6668] loop4: detected capacity change from 0 to 4096 [ 183.679596][ T6668] EXT4-fs: inline encryption not supported [ 184.621871][ T6668] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 184.631790][ T6668] EXT4-fs (loop4): Test dummy encryption mode enabled [ 184.945549][ T6668] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 184.955283][ T6668] System zones: 0-5 [ 185.322580][ T6668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.542446][ T6668] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 186.144278][ T6264] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 186.253458][ T6264] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 186.290366][ T6264] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 186.385891][ T6264] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.652779][ T6683] netlink: 68 bytes leftover after parsing attributes in process `syz.5.246'. [ 186.682397][ T6014] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.774442][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.922092][ T6686] netlink: 'syz.2.244': attribute type 10 has an invalid length. [ 187.394048][ T6264] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 187.461654][ T6264] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 187.492704][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.494104][ T6264] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 187.515426][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.527062][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.543715][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.554449][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.573416][ T6264] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.725306][ T6692] binder_alloc: 6690: binder_alloc_buf, no vma [ 188.275119][ T6014] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.369266][ T6708] syzkaller0: entered promiscuous mode [ 189.427686][ T6708] syzkaller0: entered allmulticast mode [ 189.586746][ T5633] Bluetooth: hci5: command tx timeout [ 189.724034][ T6729] 9pnet_fd: Insufficient options for proto=fd [ 189.731940][ T6729] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 189.807254][ T186] IPVS: starting estimator thread 0... [ 190.066987][ T6730] IPVS: using max 26 ests per chain, 62400 per kthread [ 190.234794][ T6014] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.611259][ T6737] loop5: detected capacity change from 0 to 1024 [ 190.633768][ T6737] EXT4-fs: Ignoring removed orlov option [ 190.684968][ T6014] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.737732][ T6737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.795057][ T6744] netlink: 68 bytes leftover after parsing attributes in process `syz.2.257'. [ 191.170314][ T5639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.329264][ T6753] netlink: 'syz.4.259': attribute type 10 has an invalid length. [ 191.677274][ T5633] Bluetooth: hci5: command tx timeout [ 191.917101][ T6753] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 192.522431][ T186] xhci_hcd 0000:00:00.0: init 0000:00:00.0 fail, -16 [ 192.564188][ T6765] xhci_hcd 0000:00:00.0: probe with driver xhci_hcd failed with error -16 [ 192.871141][ T6264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.159785][ T6264] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.249508][ T6014] bridge_slave_1: left allmulticast mode [ 193.274117][ T6014] bridge_slave_1: left promiscuous mode [ 193.294040][ T6787] netlink: 68 bytes leftover after parsing attributes in process `syz.4.271'. [ 193.307613][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.351766][ T6014] bridge_slave_0: left allmulticast mode [ 193.387605][ T6014] bridge_slave_0: left promiscuous mode [ 193.398857][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.878021][ T6798] netlink: 'syz.2.272': attribute type 10 has an invalid length. [ 194.332434][ T5633] Bluetooth: hci5: command tx timeout [ 194.579146][ T6774] loop5: detected capacity change from 0 to 32768 [ 194.729912][ T6774] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 194.788426][ T6804] loop4: detected capacity change from 0 to 8192 [ 194.818756][ T6804] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 195.002091][ T6014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.018387][ T6774] (syz.5.267,6774,0):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 195.073048][ T6774] (syz.5.267,6774,1):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 195.107767][ T6014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.169499][ T6014] bond0 (unregistering): Released all slaves [ 195.558981][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.566234][ T5872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.737797][ T5639] ocfs2: Unmounting device (7,5) on (node local) [ 195.802712][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.813166][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.070045][ T6819] loop2: detected capacity change from 0 to 512 [ 196.078573][ T6819] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.828955][ T5633] Bluetooth: hci5: command tx timeout [ 196.834444][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 200.517051][ T5749] xhci_hcd 0000:00:00.0: init 0000:00:00.0 fail, -16 [ 200.565298][ T6828] xhci_hcd 0000:00:00.0: probe with driver xhci_hcd failed with error -16 [ 200.781946][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.812702][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.022703][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.119554][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.252058][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.575551][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.582807][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.822289][ T6840] netlink: 68 bytes leftover after parsing attributes in process `syz.5.283'. [ 203.046017][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 203.352753][ T5633] Bluetooth: hci0: command tx timeout [ 203.814468][ T6868] netlink: 'syz.4.288': attribute type 10 has an invalid length. [ 205.713612][ T5629] Bluetooth: hci0: command tx timeout [ 205.722183][ T5629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 205.733946][ T5629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 205.743199][ T5629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 205.757224][ T5629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 205.768795][ T5629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 206.647589][ T6888] bond0: (slave syz_tun): Releasing backup interface [ 206.655148][ T6895] loop5: detected capacity change from 0 to 128 [ 206.674110][ T6895] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 206.694605][ T6888] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 206.703476][ T6895] FAT-fs (loop5): data area starts beyond volume (33 > 0) [ 206.736997][ T6895] FAT-fs (loop5): Can't find a valid FAT filesystem [ 206.765329][ T6014] hsr_slave_0: left promiscuous mode [ 206.793204][ T6014] hsr_slave_1: left promiscuous mode [ 206.826908][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.849364][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.883665][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.896116][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.970204][ T6014] veth1_macvtap: left promiscuous mode [ 206.979938][ T6014] veth0_macvtap: left promiscuous mode [ 206.985914][ T6014] veth1_vlan: left promiscuous mode [ 206.993940][ T6014] veth0_vlan: left promiscuous mode [ 207.564774][ T6911] netlink: 'syz.4.302': attribute type 10 has an invalid length. [ 207.757484][ T5629] Bluetooth: hci0: command tx timeout [ 208.076905][ T5629] Bluetooth: hci7: command tx timeout [ 208.393994][ T6014] team0 (unregistering): Port device team_slave_1 removed [ 208.848855][ T6014] team0 (unregistering): Port device team_slave_0 removed [ 209.838496][ T5629] Bluetooth: hci0: command tx timeout [ 210.158072][ T5629] Bluetooth: hci7: command tx timeout [ 210.712308][ T6935] UDC core: g1: couldn't find an available UDC or it's busy [ 210.718413][ T6688] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.758411][ T6688] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.774945][ T6688] bridge_slave_0: entered allmulticast mode [ 210.795623][ T6688] bridge_slave_0: entered promiscuous mode [ 210.837185][ T6688] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.864767][ T6688] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.902268][ T6688] bridge_slave_1: entered allmulticast mode [ 210.931807][ T6688] bridge_slave_1: entered promiscuous mode [ 211.639210][ T6950] netlink: 'syz.5.311': attribute type 10 has an invalid length. [ 211.932407][ T6949] bridge_slave_0: left allmulticast mode [ 211.955027][ T6949] bridge_slave_0: left promiscuous mode [ 211.962214][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.995913][ T6949] bridge_slave_1: left allmulticast mode [ 212.012191][ T6949] bridge_slave_1: left promiscuous mode [ 212.026994][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.056276][ T6949] bond0: (slave bond_slave_0): Releasing backup interface [ 212.105155][ T6949] bond0: (slave bond_slave_1): Releasing backup interface [ 212.156354][ T6949] team0: Port device team_slave_0 removed [ 212.186717][ T6949] team0: Port device team_slave_1 removed [ 212.199406][ T6949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.227778][ T6949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.228013][ T5629] Bluetooth: hci7: command tx timeout [ 212.249242][ T6949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.266659][ T6949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.290428][ T6949] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.359873][ T6950] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.373319][ T6950] team0: Port device netdevsim1 added [ 212.484124][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 212.515317][ T6688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.558751][ T6688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.713175][ T6688] team0: Port device team_slave_0 added [ 212.743569][ T6688] team0: Port device team_slave_1 added [ 213.023608][ T6688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.061360][ T6688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.057902][ T6688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.306842][ T5629] Bluetooth: hci7: command tx timeout [ 214.645921][ T6983] UDC core: g1: couldn't find an available UDC or it's busy [ 215.154127][ T6688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.161229][ T6688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.190216][ T6688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.082621][ T6989] loop2: detected capacity change from 0 to 1024 [ 216.090692][ T6989] EXT4-fs: Ignoring removed bh option [ 216.113981][ T6989] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 216.189221][ T6989] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 216.241273][ T6989] System zones: 0-1, 3-12 [ 216.322768][ T6989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.558822][ T7002] se_device not configured yet, cannot port link [ 217.340961][ T5636] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /75/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 217.379885][ T5636] EXT4-fs (loop2): Remounting filesystem read-only [ 217.694017][ T7015] UDC core: g1: couldn't find an available UDC or it's busy [ 217.906999][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.185812][ T5629] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 218.202061][ T5629] CPU: 0 UID: 0 PID: 5629 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 218.202098][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 218.202116][ T5629] Workqueue: hci3 hci_rx_work [ 218.202191][ T5629] Call Trace: [ 218.202203][ T5629] [ 218.202215][ T5629] dump_stack_lvl+0xe8/0x150 [ 218.202263][ T5629] sysfs_create_dir_ns+0x271/0x2a0 [ 218.202309][ T5629] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 218.202359][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.202394][ T5629] ? do_raw_spin_unlock+0xf5/0x210 [ 218.202433][ T5629] kobject_add_internal+0x622/0xcd0 [ 218.202484][ T5629] kobject_add+0x163/0x240 [ 218.202514][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.202547][ T5629] ? __pfx_kobject_add+0x10/0x10 [ 218.202575][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.202605][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.202640][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.202668][ T5629] ? get_device_parent+0x366/0x3a0 [ 218.202704][ T5629] device_add+0x3fa/0xb80 [ 218.202733][ T5629] hci_conn_add_sysfs+0xd5/0x210 [ 218.202767][ T5629] le_conn_complete_evt+0xfef/0x1580 [ 218.202817][ T5629] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 218.202855][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.202884][ T5629] ? __mutex_unlock_slowpath+0x731/0x900 [ 218.202921][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.202951][ T5629] ? skb_pull_data+0xf0/0x200 [ 218.202994][ T5629] hci_le_conn_complete_evt+0x187/0x470 [ 218.203039][ T5629] hci_event_packet+0x67a/0xf10 [ 218.203080][ T5629] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 218.203113][ T5629] ? __pfx_hci_event_packet+0x10/0x10 [ 218.203149][ T5629] ? audit_tree_freeing_mark+0x9e0/0xb20 [ 218.203185][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.203213][ T5629] ? hci_send_to_monitor+0xe2/0x590 [ 218.203269][ T5629] hci_rx_work+0x3ee/0x1020 [ 218.203310][ T5629] ? process_scheduled_works+0xa20/0x14e0 [ 218.203351][ T5629] process_scheduled_works+0xa8e/0x14e0 [ 218.203412][ T5629] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.203450][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.203479][ T5629] ? assign_work+0x3cf/0x5d0 [ 218.203513][ T5629] worker_thread+0xa47/0xfb0 [ 218.203572][ T5629] kthread+0x388/0x470 [ 218.203616][ T5629] ? __pfx_worker_thread+0x10/0x10 [ 218.203644][ T5629] ? __pfx_kthread+0x10/0x10 [ 218.203685][ T5629] ret_from_fork+0x514/0xb70 [ 218.203733][ T5629] ? __pfx_ret_from_fork+0x10/0x10 [ 218.203773][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.203801][ T5629] ? __switch_to+0xc89/0x1420 [ 218.203840][ T5629] ? __pfx_kthread+0x10/0x10 [ 218.203878][ T5629] ret_from_fork_asm+0x1a/0x30 [ 218.203924][ T5629] [ 218.203968][ T5629] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 218.489415][ T5629] Bluetooth: hci3: failed to register connection device [ 218.508977][ T6688] hsr_slave_0: entered promiscuous mode [ 218.516050][ T6688] hsr_slave_1: entered promiscuous mode [ 218.522675][ T6688] debugfs: 'hsr0' already exists in 'hsr' [ 218.528504][ T6688] Cannot create hsr debugfs directory [ 220.946446][ T7056] loop5: detected capacity change from 0 to 4096 [ 220.954798][ T7056] EXT4-fs: inline encryption not supported [ 220.964469][ T7056] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 220.973222][ T7056] EXT4-fs (loop5): Test dummy encryption mode enabled [ 221.921730][ T7056] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 221.930132][ T7056] System zones: 0-5 [ 221.949037][ T7056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.456482][ T7050] bridge0: port 3(syz_tun) entered blocking state [ 222.472658][ T7050] bridge0: port 3(syz_tun) entered disabled state [ 222.492558][ T7050] syz_tun: entered allmulticast mode [ 222.762825][ T7064] UDC core: g1: couldn't find an available UDC or it's busy [ 222.915032][ T7061] warning: `syz.4.340' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 223.346203][ T5639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.428947][ T50] Bluetooth: hci4: command 0x2016 tx timeout [ 223.435051][ T5629] Bluetooth: hci3: command 0x0406 tx timeout [ 223.508141][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 223.552305][ T5633] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 223.731561][ T6830] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.746940][ T6830] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.761392][ T6830] bridge_slave_0: entered allmulticast mode [ 223.801560][ T6830] bridge_slave_0: entered promiscuous mode [ 223.906130][ T6830] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.936777][ T6830] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.949251][ T6830] bridge_slave_1: entered allmulticast mode [ 223.982088][ T6830] bridge_slave_1: entered promiscuous mode [ 224.172943][ T7090] netlink: 'syz.4.347': attribute type 10 has an invalid length. [ 224.207216][ T7090] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.214969][ T7090] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.264694][ T7095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.347'. [ 224.273173][ T7090] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.280955][ T7090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.292317][ T7090] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.299547][ T7090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.392527][ T7090] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 224.892670][ T6688] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 225.514308][ T6688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 225.517187][ T7099] UDC core: g1: couldn't find an available UDC or it's busy [ 225.539542][ T6688] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 226.353460][ T6688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.533116][ T6830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.553293][ T7095] vlan0: entered promiscuous mode [ 227.145817][ T6688] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 227.211006][ T6688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 227.295103][ T6830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.465487][ T5629] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 227.477613][ T5629] CPU: 0 UID: 0 PID: 5629 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 227.477649][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 227.477668][ T5629] Workqueue: hci4 hci_rx_work [ 227.477715][ T5629] Call Trace: [ 227.477727][ T5629] [ 227.477738][ T5629] dump_stack_lvl+0xe8/0x150 [ 227.477785][ T5629] sysfs_create_dir_ns+0x271/0x2a0 [ 227.477834][ T5629] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 227.477874][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.477905][ T5629] ? do_raw_spin_unlock+0xf5/0x210 [ 227.477942][ T5629] kobject_add_internal+0x622/0xcd0 [ 227.477990][ T5629] kobject_add+0x163/0x240 [ 227.478021][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.478057][ T5629] ? __pfx_kobject_add+0x10/0x10 [ 227.478087][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.478118][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.478150][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.478178][ T5629] ? get_device_parent+0x366/0x3a0 [ 227.478215][ T5629] device_add+0x3fa/0xb80 [ 227.478245][ T5629] hci_conn_add_sysfs+0xd5/0x210 [ 227.478281][ T5629] le_conn_complete_evt+0xfef/0x1580 [ 227.478334][ T5629] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 227.478378][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.478406][ T5629] ? __mutex_unlock_slowpath+0x731/0x900 [ 227.478443][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.478472][ T5629] ? skb_pull_data+0xf0/0x200 [ 227.478533][ T5629] hci_le_conn_complete_evt+0x187/0x470 [ 227.478577][ T5629] hci_event_packet+0x67a/0xf10 [ 227.478615][ T5629] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 227.478647][ T5629] ? __pfx_hci_event_packet+0x10/0x10 [ 227.478682][ T5629] ? audit_tree_freeing_mark+0x9e0/0xb20 [ 227.478718][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.478746][ T5629] ? hci_send_to_monitor+0xe2/0x590 [ 227.478789][ T5629] hci_rx_work+0x3ee/0x1020 [ 227.478830][ T5629] ? process_scheduled_works+0xa20/0x14e0 [ 227.478863][ T5629] process_scheduled_works+0xa8e/0x14e0 [ 227.478927][ T5629] ? __pfx_process_scheduled_works+0x10/0x10 [ 227.478965][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.478993][ T5629] ? assign_work+0x3cf/0x5d0 [ 227.479029][ T5629] worker_thread+0xa47/0xfb0 [ 227.479092][ T5629] kthread+0x388/0x470 [ 227.479131][ T5629] ? __pfx_worker_thread+0x10/0x10 [ 227.479161][ T5629] ? __pfx_kthread+0x10/0x10 [ 227.479201][ T5629] ret_from_fork+0x514/0xb70 [ 227.479245][ T5629] ? __pfx_ret_from_fork+0x10/0x10 [ 227.479281][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.479310][ T5629] ? __switch_to+0xc89/0x1420 [ 227.479348][ T5629] ? __pfx_kthread+0x10/0x10 [ 227.479392][ T5629] ret_from_fork_asm+0x1a/0x30 [ 227.479438][ T5629] [ 227.479600][ T5629] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 227.504456][ T6688] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 227.507173][ T5629] Bluetooth: hci4: failed to register connection device [ 228.044303][ T6688] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 228.780781][ T6830] team0: Port device team_slave_0 added [ 228.808597][ T6830] team0: Port device team_slave_1 added [ 228.908215][ T6830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.915372][ T6830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.944294][ T6830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.963652][ T6830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.971146][ T6830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.002039][ T6830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.447793][ T6014] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.522987][ T5284] 8021q: adding VLAN 0 to HW filter on device eth4 [ 229.731501][ T6014] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.248073][ T7148] UDC core: g1: couldn't find an available UDC or it's busy [ 230.630447][ T6014] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.214245][ T6873] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.223331][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.231249][ T6873] bridge_slave_0: entered allmulticast mode [ 231.240638][ T6873] bridge_slave_0: entered promiscuous mode [ 231.264951][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.276097][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.283846][ T5633] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 231.306503][ T6873] bridge_slave_1: entered allmulticast mode [ 231.316449][ T6873] bridge_slave_1: entered promiscuous mode [ 231.415251][ T6830] hsr_slave_0: entered promiscuous mode [ 231.423753][ T6830] hsr_slave_1: entered promiscuous mode [ 231.431041][ T6830] debugfs: 'hsr0' already exists in 'hsr' [ 231.439469][ T6830] Cannot create hsr debugfs directory [ 231.638746][ T6014] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.680764][ T6873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.766797][ T6873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.324988][ T6873] team0: Port device team_slave_0 added [ 232.353838][ T6873] team0: Port device team_slave_1 added [ 232.637806][ T6873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.657460][ T6873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.698466][ T6873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.973249][ T6873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.006541][ T6873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.086487][ T6873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.119433][ T7193] UDC core: g1: couldn't find an available UDC or it's busy [ 233.177490][ T5284] 8021q: adding VLAN 0 to HW filter on device eth5 [ 233.520567][ T6014] bridge_slave_1: left allmulticast mode [ 233.534350][ T6014] bridge_slave_1: left promiscuous mode [ 233.540529][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.563267][ T6014] bridge_slave_0: left allmulticast mode [ 233.578527][ T6014] bridge_slave_0: left promiscuous mode [ 233.592814][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.601936][ T5629] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 233.643854][ T6014] bridge_slave_1: left allmulticast mode [ 233.650183][ T6014] bridge_slave_1: left promiscuous mode [ 233.656167][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.679377][ T6014] bridge_slave_0: left allmulticast mode [ 233.685220][ T6014] bridge_slave_0: left promiscuous mode [ 233.701091][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.453261][ T6014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.507138][ T6014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.564129][ T6014] bond0 (unregistering): Released all slaves [ 234.681558][ T7222] UDC core: g1: couldn't find an available UDC or it's busy [ 234.921909][ T6014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.933332][ T6014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.954035][ T6014] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 234.966433][ T6014] bond0 (unregistering): Released all slaves [ 234.995451][ T6873] hsr_slave_0: entered promiscuous mode [ 235.002588][ T6873] hsr_slave_1: entered promiscuous mode [ 235.009133][ T6873] debugfs: 'hsr0' already exists in 'hsr' [ 235.014868][ T6873] Cannot create hsr debugfs directory [ 236.122133][ T7237] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 236.533693][ T6830] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 236.703975][ T6830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 237.115123][ T7253] loop4: detected capacity change from 0 to 4096 [ 237.129893][ T7253] EXT4-fs: inline encryption not supported [ 237.240788][ T7253] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 237.250199][ T7253] EXT4-fs (loop4): Test dummy encryption mode enabled [ 237.408717][ T7253] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 237.417802][ T7253] System zones: 0-5 [ 237.479299][ T7253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.772303][ T6014] hsr_slave_0: left promiscuous mode [ 238.899877][ T6014] hsr_slave_1: left promiscuous mode [ 238.918163][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.957436][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.004852][ T6014] hsr_slave_0: left promiscuous mode [ 239.081686][ T6014] hsr_slave_1: left promiscuous mode [ 239.105002][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.134827][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.162153][ T6014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.187878][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.218915][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.241902][ T6014] veth1_macvtap: left promiscuous mode [ 239.286177][ T6014] veth0_macvtap: left promiscuous mode [ 239.307062][ T6014] veth1_vlan: left promiscuous mode [ 239.316057][ T6014] veth0_vlan: left promiscuous mode [ 239.880153][ T7287] loop4: detected capacity change from 0 to 512 [ 240.221104][ T7287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.237519][ T7287] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.391883][ T7286] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 240.963740][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 240.963800][ T30] audit: type=1800 audit(1784938441.311:16): pid=7291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.399" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 241.305159][ T6014] team0 (unregistering): Port device team_slave_1 removed [ 241.344090][ T6014] team0 (unregistering): Port device team_slave_0 removed [ 241.983965][ T6014] team0 (unregistering): Port device team_slave_1 removed [ 241.998164][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.041690][ T6014] team0 (unregistering): Port device team_slave_0 removed [ 242.329899][ T7297] se_dev->se_dev_ptr already set for storage object [ 242.426114][ T6830] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 242.442389][ T6830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 242.453025][ T6830] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 242.469186][ T6830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 242.505205][ T5284] 8021q: adding VLAN 0 to HW filter on device eth6 [ 242.630141][ T6830] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 242.663308][ T6830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 242.704908][ T7304] loop5: detected capacity change from 0 to 1024 [ 242.731411][ T7304] ext4: Unknown parameter 'mask' [ 243.659473][ T7320] loop4: detected capacity change from 0 to 4096 [ 243.667312][ T7320] EXT4-fs: inline encryption not supported [ 243.803240][ T7320] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 243.812224][ T7320] EXT4-fs (loop4): Test dummy encryption mode enabled [ 243.845665][ T7320] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 243.855163][ T7320] System zones: 0-5 [ 243.947652][ T7320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.887585][ T6688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.914770][ T6688] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.102319][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.109689][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.211940][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.219308][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.621320][ T7337] loop5: detected capacity change from 0 to 1024 [ 245.664425][ T7337] EXT4-fs: Ignoring removed orlov option [ 245.907879][ T7337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.964169][ T7340] syzkaller0: entered promiscuous mode [ 245.975889][ T7340] syzkaller0: entered allmulticast mode [ 246.051221][ T7344] EXT4-fs (loop5): shut down requested (1) [ 246.093306][ T7332] tipc: Started in network mode [ 246.109821][ T7332] tipc: Node identity 12949ff1d061, cluster identity 4711 [ 246.137260][ T7332] tipc: Enabled bearer , priority 0 [ 246.143320][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.160013][ T5639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.329903][ T7338] tipc: Resetting bearer [ 246.365004][ T7331] tipc: Resetting bearer [ 246.665768][ T7331] tipc: Disabling bearer [ 247.312790][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 247.343580][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 247.355175][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 247.363379][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.371243][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.808462][ T6830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.380867][ T6014] IPVS: stop unused estimator thread 0... [ 248.846401][ T6830] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.944949][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.952327][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.101607][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.109143][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.427373][ T5629] Bluetooth: hci2: command tx timeout [ 249.814739][ T7402] 9pnet_fd: Insufficient options for proto=fd [ 249.823401][ T7402] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 250.308702][ T7403] binder: 7401:7403 ioctl c0306201 200000000040 returned -22 [ 251.507403][ T5629] Bluetooth: hci2: command tx timeout [ 251.607470][ T7412] syz_tun: Device is already in use. [ 253.588705][ T5629] Bluetooth: hci2: command tx timeout [ 253.776757][ T30] audit: type=1800 audit(1784938454.361:17): pid=7432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.431" name="serialnumber" dev="configfs" ino=15753 res=0 errno=0 [ 254.000842][ T7435] se_dev->se_dev_ptr already set for storage object [ 254.011162][ T7436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.433'. [ 254.259133][ T7439] binder: BINDER_SET_CONTEXT_MGR already set [ 254.274034][ T7439] binder: 7438:7439 ioctl 4018620d 200000004a80 returned -16 [ 254.375346][ T7441] binder: 7440:7441 ioctl c0306201 200000000040 returned -22 [ 254.630974][ T6873] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 254.680551][ T6873] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.779289][ T6873] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 254.862368][ T6873] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.878079][ T6873] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 254.914358][ T6873] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 255.009082][ T6873] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 255.054029][ T6873] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 255.667320][ T5629] Bluetooth: hci2: command tx timeout [ 257.117200][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.123649][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.754313][ T7463] loop5: detected capacity change from 0 to 32768 [ 257.832592][ T7463] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.440 (7463) [ 258.447018][ T6014] bridge_slave_1: left allmulticast mode [ 258.478093][ T6014] bridge_slave_1: left promiscuous mode [ 258.530249][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.572615][ T6014] bridge_slave_0: left allmulticast mode [ 259.546795][ T6014] bridge_slave_0: left promiscuous mode [ 259.582165][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.343964][ T7463] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.563140][ T7463] BTRFS info (device loop5): using crc32c checksum algorithm [ 260.808024][ T7463] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 261.266896][ T7463] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 261.283255][ T7463] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 261.296532][ T7463] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 261.309022][ T7463] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 261.323115][ T7463] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 261.334452][ T7463] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 261.363571][ T7463] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 261.550335][ T7463] BTRFS error (device loop5): open_ctree failed: -12 [ 261.730954][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.744265][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.758538][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.772536][ T6014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.784409][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.793478][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.844644][ T6014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.887795][ T6014] bond0 (unregistering): Released all slaves [ 261.942116][ T7355] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.970346][ T7355] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.007637][ T7355] bridge_slave_0: entered allmulticast mode [ 262.069567][ T7355] bridge_slave_0: entered promiscuous mode [ 262.091725][ T7355] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.108840][ T7355] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.124006][ T7355] bridge_slave_1: entered allmulticast mode [ 262.167119][ T7355] bridge_slave_1: entered promiscuous mode [ 262.187208][ T5284] 8021q: adding VLAN 0 to HW filter on device eth9 [ 262.612577][ T6014] hsr_slave_0: left promiscuous mode [ 262.649173][ T6014] hsr_slave_1: left promiscuous mode [ 262.657308][ T7527] binder: BINDER_SET_CONTEXT_MGR already set [ 262.671919][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.687020][ T7527] binder: 7525:7527 ioctl 4018620d 200000004a80 returned -16 [ 262.702219][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.050202][ T50] Bluetooth: hci5: command tx timeout [ 264.122768][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.207828][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.328617][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.347855][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.355793][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.637084][ T6014] team0 (unregistering): Port device team_slave_1 removed [ 264.756917][ T6014] team0 (unregistering): Port device team_slave_0 removed [ 265.134448][ T7534] syz_tun: Device is already in use. [ 265.554458][ T7355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.628179][ T7355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.939317][ T7355] team0: Port device team_slave_0 added [ 265.990034][ T7355] team0: Port device team_slave_1 added [ 266.125943][ T7571] netlink: 'syz.5.456': attribute type 10 has an invalid length. [ 266.170116][ T5629] Bluetooth: hci5: command tx timeout [ 266.247470][ T7573] syzkaller0: entered promiscuous mode [ 266.262599][ T7573] syzkaller0: entered allmulticast mode [ 266.478286][ T5629] Bluetooth: hci0: command tx timeout [ 267.943853][ T7583] 9pnet_fd: Insufficient options for proto=fd [ 267.952049][ T7583] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 268.228428][ T5629] Bluetooth: hci5: command tx timeout [ 268.556740][ T5629] Bluetooth: hci0: command tx timeout [ 270.319423][ T5629] Bluetooth: hci5: command tx timeout [ 270.630497][ T5629] Bluetooth: hci0: command tx timeout [ 270.790615][ T7355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.803088][ T7355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.836209][ T7355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.649562][ T7355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.680666][ T7355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.724686][ T7355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.229009][ T7355] hsr_slave_0: entered promiscuous mode [ 272.241762][ T7355] hsr_slave_1: entered promiscuous mode [ 272.260242][ T7355] debugfs: 'hsr0' already exists in 'hsr' [ 272.266215][ T7355] Cannot create hsr debugfs directory [ 272.676355][ T7624] 9pnet_fd: Insufficient options for proto=fd [ 272.678030][ T7624] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 272.726237][ T5629] Bluetooth: hci0: command tx timeout [ 273.679311][ T7640] netlink: 'syz.4.472': attribute type 10 has an invalid length. [ 274.032694][ T7640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 274.046121][ T7640] team0: Port device netdevsim1 added [ 274.119606][ T5284] 8021q: adding VLAN 0 to HW filter on device eth10 [ 274.184660][ T7653] loop4: detected capacity change from 0 to 512 [ 274.203591][ T7653] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 274.230922][ T7635] syzkaller0: entered promiscuous mode [ 274.237487][ T7635] syzkaller0: entered allmulticast mode [ 274.273338][ T7653] EXT4-fs (loop4): 1 truncate cleaned up [ 274.318781][ T7653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.465618][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.767001][ T7660] loop4: detected capacity change from 0 to 4096 [ 274.789944][ T7660] EXT4-fs: inline encryption not supported [ 274.815841][ T7660] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 274.826345][ T7660] EXT4-fs (loop4): Test dummy encryption mode enabled [ 274.836145][ T7660] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 274.847777][ T7660] System zones: 0-5 [ 274.866999][ T7660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.918452][ T7660] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 274.935312][ T7660] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 275.078920][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.519633][ T7667] binder: 7666:7667 ioctl c0306201 2000000006c0 returned -14 [ 275.861648][ T7673] 9pnet_fd: Insufficient options for proto=fd [ 275.870893][ T7673] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 276.753167][ T7679] binder: BINDER_SET_CONTEXT_MGR already set [ 276.760119][ T7679] binder: 7677:7679 ioctl 4018620d 200000000040 returned -16 [ 278.841771][ T7683] netlink: 24 bytes leftover after parsing attributes in process `syz.5.487'. [ 279.877126][ T7705] 9pnet_fd: Insufficient options for proto=fd [ 279.885247][ T7705] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 280.855376][ T7716] binder: BINDER_SET_CONTEXT_MGR already set [ 280.904170][ T7716] binder: 7714:7716 ioctl 4018620d 200000000040 returned -16 [ 281.021574][ T5629] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 281.270148][ T7730] Illegal XDP return value 351891255 on prog (id 44) dev syz_tun, expect packet loss! [ 281.562075][ T7736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.499'. [ 282.174947][ T7752] syzkaller0: entered promiscuous mode [ 282.187436][ T7752] syzkaller0: entered allmulticast mode [ 282.405311][ T7764] 9pnet_fd: Insufficient options for proto=fd [ 282.414262][ T7764] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 284.623440][ T7775] binder: BINDER_SET_CONTEXT_MGR already set [ 284.663034][ T7775] binder: 7774:7775 ioctl 4018620d 200000000040 returned -16 [ 285.312064][ T7782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.507'. [ 287.098633][ T7794] loop5: detected capacity change from 0 to 512 [ 287.201858][ T7794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.215805][ T7794] ext4 filesystem being mounted at /138/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.506439][ T7793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.920851][ T7782] vlan0: entered promiscuous mode [ 289.216781][ T7807] binder: 7806:7807 ioctl c0306201 0 returned -14 [ 289.300840][ T7547] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.340787][ T7547] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.401319][ T7547] bridge_slave_0: entered allmulticast mode [ 289.941458][ T7547] bridge_slave_0: entered promiscuous mode [ 291.220200][ T7547] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.390007][ T7547] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.398153][ T7547] bridge_slave_1: entered allmulticast mode [ 291.422409][ T7547] bridge_slave_1: entered promiscuous mode [ 291.594426][ T7832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.525'. [ 291.746351][ T7836] overlayfs: failed to clone upperpath [ 292.652860][ T7547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.745048][ T7547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.830258][ T7514] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.849158][ T7514] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.868715][ T7514] bridge_slave_0: entered allmulticast mode [ 292.888233][ T7514] bridge_slave_0: entered promiscuous mode [ 293.058891][ T7547] team0: Port device team_slave_0 added [ 293.074035][ T7514] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.083459][ T7514] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.091393][ T7514] bridge_slave_1: entered allmulticast mode [ 293.103807][ T7514] bridge_slave_1: entered promiscuous mode [ 293.137847][ T7547] team0: Port device team_slave_1 added [ 293.356039][ T7514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.894807][ T7514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.935641][ T7547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.958380][ T7547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.033626][ T7547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.069661][ T7547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.086590][ T7547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.206098][ T7547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.896381][ T7887] netlink: 'syz.5.537': attribute type 10 has an invalid length. [ 294.948431][ T7888] netlink: 24 bytes leftover after parsing attributes in process `syz.5.537'. [ 295.216111][ T7894] binder: 7893:7894 ioctl c0306201 0 returned -14 [ 295.223835][ T7887] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 295.323650][ T7888] vlan0: entered promiscuous mode [ 295.344138][ T7514] team0: Port device team_slave_0 added [ 295.369706][ T5284] 8021q: adding VLAN 0 to HW filter on device eth11 [ 295.460490][ T7514] team0: Port device team_slave_1 added [ 295.740011][ T7895] syzkaller0: entered promiscuous mode [ 295.745545][ T7895] syzkaller0: entered allmulticast mode [ 295.790091][ T7547] hsr_slave_0: entered promiscuous mode [ 295.800033][ T7547] hsr_slave_1: entered promiscuous mode [ 295.809960][ T7547] debugfs: 'hsr0' already exists in 'hsr' [ 295.826852][ T7547] Cannot create hsr debugfs directory [ 296.006269][ T6014] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.342042][ T7924] loop2: detected capacity change from 0 to 4096 [ 296.379051][ T7924] EXT4-fs: inline encryption not supported [ 296.415725][ T7924] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 296.428493][ T7924] EXT4-fs (loop2): Test dummy encryption mode enabled [ 296.476867][ T7924] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 296.491587][ T7924] System zones: 0-5 [ 296.535734][ T7924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.653614][ T7924] overlayfs: missing 'workdir' [ 296.830010][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.097281][ T7939] netlink: 'syz.5.551': attribute type 10 has an invalid length. [ 297.136395][ T7940] netlink: 24 bytes leftover after parsing attributes in process `syz.5.551'. [ 299.512369][ T7355] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 299.570040][ T7355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.601544][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.662585][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.757926][ T7514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.914850][ T7355] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 299.987866][ T7959] se_dev->se_dev_ptr already set for storage object [ 299.990493][ T7355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 300.032518][ T7355] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 300.075895][ T7355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 300.105793][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.133049][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.229122][ T7514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.413171][ T6014] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.604210][ T7355] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 300.677725][ T7355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 301.242636][ T7976] loop4: detected capacity change from 0 to 4096 [ 301.260429][ T7976] EXT4-fs: inline encryption not supported [ 301.336175][ T7976] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 301.345613][ T7976] EXT4-fs (loop4): Test dummy encryption mode enabled [ 301.446699][ T7976] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 301.456044][ T7976] System zones: 0-5 [ 301.491195][ T7976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.811741][ T6014] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.008771][ T7992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.570'. [ 303.020458][ T7989] netlink: 'syz.2.570': attribute type 10 has an invalid length. [ 303.119504][ T7996] 9pnet_fd: Insufficient options for proto=fd [ 303.128009][ T7996] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 303.744787][ T7514] hsr_slave_0: entered promiscuous mode [ 303.763012][ T7514] hsr_slave_1: entered promiscuous mode [ 303.766227][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.769693][ T7514] debugfs: 'hsr0' already exists in 'hsr' [ 303.783709][ T7514] Cannot create hsr debugfs directory [ 303.832379][ T7989] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.839899][ T7989] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.903147][ T7989] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.910397][ T7989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.918131][ T7989] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.925341][ T7989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.964653][ T7989] bridge0: entered promiscuous mode [ 303.977023][ T7989] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 305.587861][ T8005] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 305.601419][ T8005] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000f2: 0000 [#1] SMP KASAN NOPTI [ 305.613513][ T8005] KASAN: null-ptr-deref in range [0x0000000000000790-0x0000000000000797] [ 305.621957][ T8005] CPU: 1 UID: 0 PID: 8005 Comm: syz.2.575 Not tainted syzkaller #0 PREEMPT(full) [ 305.631163][ T8005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 305.641214][ T8005] RIP: 0010:uvcg_video_init+0x4e7/0x630 [ 305.646792][ T8005] Code: 89 63 60 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9a a8 67 fa 48 8b 1b 4c 8d bb 90 07 00 00 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 7a a8 67 fa 4d 8b 3f 49 83 c7 30 [ 305.666517][ T8005] RSP: 0018:ffffc9000516f710 EFLAGS: 00010212 [ 305.672657][ T8005] RAX: 00000000000000f2 RBX: 0000000000000000 RCX: 0000000000080000 [ 305.680628][ T8005] RDX: ffffc900043b4000 RSI: 0000000000017b17 RDI: 0000000000017b18 [ 305.688598][ T8005] RBP: 1ffff11006a31914 R08: ffffffff90578c37 R09: 1ffffffff20af186 [ 305.696571][ T8005] R10: dffffc0000000000 R11: fffffbfff20af187 R12: fffffffffffffffc [ 305.704540][ T8005] R13: dffffc0000000000 R14: ffff88803518c8a0 R15: 0000000000000790 [ 305.712539][ T8005] FS: 00007f0c7e9f66c0(0000) GS:ffff888125051000(0000) knlGS:0000000000000000 [ 305.721622][ T8005] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.728223][ T8005] CR2: 000000110c2e0480 CR3: 000000007e4b6000 CR4: 0000000000350ef0 [ 305.736212][ T8005] Call Trace: [ 305.739504][ T8005] [ 305.742517][ T8005] uvc_function_bind+0x1076/0x15a0 [ 305.747670][ T8005] usb_add_function+0x2e1/0x9f0 [ 305.752560][ T8005] configfs_composite_bind+0xde0/0x1410 [ 305.758134][ T8005] ? __pfx_configfs_composite_bind+0x10/0x10 [ 305.764137][ T8005] gadget_bind_driver+0x2ca/0x9e0 [ 305.769202][ T8005] ? __pfx_gadget_bind_driver+0x10/0x10 [ 305.774767][ T8005] really_probe+0x254/0xae0 [ 305.779309][ T8005] __driver_probe_device+0x1e8/0x360 [ 305.784615][ T8005] driver_probe_device+0x4f/0x240 [ 305.789666][ T8005] __driver_attach+0x339/0x600 [ 305.794448][ T8005] bus_for_each_dev+0x23b/0x2c0 [ 305.799325][ T8005] ? __pfx___driver_attach+0x10/0x10 [ 305.804632][ T8005] ? __pfx_bus_for_each_dev+0x10/0x10 [ 305.810068][ T8005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 305.815717][ T8005] ? do_raw_spin_unlock+0xf5/0x210 [ 305.820871][ T8005] bus_add_driver+0x345/0x670 [ 305.825578][ T8005] driver_register+0x23a/0x320 [ 305.830371][ T8005] usb_gadget_register_driver_owner+0xf9/0x270 [ 305.836562][ T8005] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 305.842227][ T8005] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 305.848400][ T8005] configfs_write_iter+0x337/0x430 [ 305.853547][ T8005] vfs_write+0x612/0xba0 [ 305.857810][ T8005] ? __pfx_vfs_write+0x10/0x10 [ 305.862607][ T8005] ? __fget_files+0x2a/0x420 [ 305.867226][ T8005] ? srso_alias_return_thunk+0x5/0xfbef5 [ 305.872872][ T8005] ksys_write+0x150/0x270 [ 305.877217][ T8005] ? __pfx_ksys_write+0x10/0x10 [ 305.882079][ T8005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.888153][ T8005] do_syscall_64+0x174/0x580 [ 305.892759][ T8005] ? trace_irq_disable+0x3b/0x140 [ 305.897801][ T8005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.903701][ T8005] RIP: 0033:0x7f0c8079de99 [ 305.908162][ T8005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.927778][ T8005] RSP: 002b:00007f0c7e9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 305.936201][ T8005] RAX: ffffffffffffffda RBX: 00007f0c80a25fa0 RCX: 00007f0c8079de99 [ 305.944170][ T8005] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000004 [ 305.952141][ T8005] RBP: 00007f0c80833eaf R08: 0000000000000000 R09: 0000000000000000 [ 305.960124][ T8005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.968088][ T8005] R13: 00007f0c80a26038 R14: 00007f0c80a25fa0 R15: 00007ffe5f95dae8 [ 305.976069][ T8005] [ 305.979113][ T8005] Modules linked in: [ 305.984470][ T8005] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 306.253901][ T6014] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.265909][ T8005] RIP: 0010:uvcg_video_init+0x4e7/0x630 [ 306.326490][ T8005] Code: 89 63 60 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9a a8 67 fa 48 8b 1b 4c 8d bb 90 07 00 00 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 7a a8 67 fa 4d 8b 3f 49 83 c7 30 [ 306.410981][ T8005] RSP: 0018:ffffc9000516f710 EFLAGS: 00010212 [ 306.441396][ T8005] RAX: 00000000000000f2 RBX: 0000000000000000 RCX: 0000000000080000 [ 306.486818][ T8005] RDX: ffffc900043b4000 RSI: 0000000000017b17 RDI: 0000000000017b18 [ 306.541950][ T8005] RBP: 1ffff11006a31914 R08: ffffffff90578c37 R09: 1ffffffff20af186 [ 306.579261][ T8005] R10: dffffc0000000000 R11: fffffbfff20af187 R12: fffffffffffffffc [ 306.614627][ T8005] R13: dffffc0000000000 R14: ffff88803518c8a0 R15: 0000000000000790 [ 306.655810][ T8005] FS: 00007f0c7e9f66c0(0000) GS:ffff888124f51000(0000) knlGS:0000000000000000 [ 306.741546][ T8005] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.775052][ T8005] CR2: 000055d9d1259950 CR3: 000000007e4b6000 CR4: 0000000000350ef0 [ 306.830302][ T8005] Kernel panic - not syncing: Fatal exception [ 306.836910][ T8005] Kernel Offset: disabled [ 306.841256][ T8005] Rebooting in 86400 seconds..