last executing test programs: 3m19.954178392s ago: executing program 0 (id=200): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/exits\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0', 0x1) 3m19.342825987s ago: executing program 0 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() r1 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x203, 0x1, 0x139}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x20, 0x20, 0x49, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=unc']) sendfile(r6, r6, 0x0, 0x7f03) 3m18.275105224s ago: executing program 0 (id=205): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000380)=""/200, 0xc8}, {&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000002fc0)=""/184, 0xb8}, {&(0x7f0000003080)=""/4083, 0xff3}, {&(0x7f00000005c0)=""/46, 0x2e}], 0x6}, 0x7}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40, 0x0) 3m12.65032756s ago: executing program 0 (id=211): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) shutdown(r1, 0x32ce970513f32900) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0), 0x0, 0xf0, 0xa) write(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x123) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) 3m8.697311104s ago: executing program 0 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() r1 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x203, 0x1, 0x139}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x20, 0x20, 0x49, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=unc']) sendfile(r6, r6, 0x0, 0x7f03) 3m6.65096083s ago: executing program 0 (id=220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05032200d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m51.457940869s ago: executing program 32 (id=220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05032200d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m2.748964755s ago: executing program 2 (id=333): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x4000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200600) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x7fffffe, 0x1, 0xff, 0xd9e0fe5014d32144, 0x0, 0x1}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_delvlan={0x18, 0x70, 0x1, 0x70bd29, 0x2, {0x7, 0x0, 0x0, r7}}, 0x18}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000000) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="28000000040000000000004cad0000000600000000000000090000000000000000000000000000002d056e8edcf71e8b3447ed5b2c3a4ec5516becea70d2b3ad91"], 0x28) 2m1.096497792s ago: executing program 2 (id=339): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000440)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) socket$inet(0x2, 0x801, 0x0) r6 = socket(0x2b, 0x1, 0x1) listen(r6, 0x5) 1m58.022520336s ago: executing program 2 (id=343): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f00000000c0)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) openat(0xffffffffffffffff, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x31) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001600)='usbip-vudc.0', 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m56.357058033s ago: executing program 2 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0xfffffffffffffffe}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r3, 0x9000aecf, &(0x7f0000ffa000/0x3000)=nil) 1m52.417407247s ago: executing program 2 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000005540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) 1m50.611332764s ago: executing program 2 (id=358): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$PTRACE_GETSIGMASK(0x420a, r5, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$inet6(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) umount2(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8) 1m34.870380213s ago: executing program 33 (id=358): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$PTRACE_GETSIGMASK(0x420a, r5, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$inet6(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) umount2(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8) 20.497632595s ago: executing program 1 (id=491): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r3 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x2000000000006) 20.06613509s ago: executing program 1 (id=493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0xeeee8000, 0x1000, &(0x7f0000f40000/0x1000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x80a0000, 0x2000, &(0x7f0000c7d000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) 17.534703037s ago: executing program 1 (id=496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab", @ANYRESOCT], 0xfdef) 17.407839093s ago: executing program 3 (id=497): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) 16.20506579s ago: executing program 3 (id=499): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x0, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) 14.352231472s ago: executing program 3 (id=500): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314402484b81bc3727426283f803d9c60eb5e9320574a599d763952148fb2bd655e900c850243e43246c70a3b317b0d87a001ce1972a24ba7a5e294243829ead8f34d4d740101685fc8608e", 0x1b4}, {&(0x7f0000000700)="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", 0x1b4}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d6", 0x26}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="7a7262ebbadcd6d70e4a2a0e92807cbacbaf1825df0b68eb423034edeb804cb3fa8817e5caf838d4c0e37b661cc240f230ec07c8cc297b786e4eb856c15e2a2ab7fa7f50cdefca7b009fb6bb26c1c849664d81993840cc51c0", 0x59}, {&(0x7f00000002c0)="1c063cf8e1c05b3286459c56d77a43484c208206d46cb73604a90947e9b6073bfaa076289cdb103febf9dd62a083d2ff449dcfa4dfdeb1e549e4078d4fa115de247fffe69229bfa76df31f93c8e42f5f904e78a0086aca458b6650a3c08117303e02c0615a7ca0a9fd3c2f3290d19c6f1b88fde807", 0x75}, {&(0x7f0000000480)="2832153eaf32634667cc78b4215a6393dc970f0304a170a5c5fe651fe5619e871e764b89a7a96d92204b0c9deac3", 0x2e}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x435) 12.190408001s ago: executing program 5 (id=502): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x129d6d3a7a711f6e}]}}}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x5, 0x0, 0x8}}]}}]}, 0x44}}, 0x30000000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) 11.970981947s ago: executing program 4 (id=503): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x3, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x140, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0x2278, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) 11.767245431s ago: executing program 1 (id=504): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c0c8) tkill(r3, 0xb) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/rcu_expedited', 0x10000, 0x10) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) r6 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000009b80)={0x40000012}) read$FUSE(r5, 0x0, 0x0) epoll_pwait(r6, 0x0, 0x0, 0x2, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_CQ_RING(0x0, 0x6, 0x1000007, 0x11, r4, 0x8000000) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 10.547860821s ago: executing program 5 (id=505): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4) fcntl$getown(r0, 0x9) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, 0x0, &(0x7f0000000540)) write$cgroup_type(r6, &(0x7f0000000280), 0x9) openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12041, 0x0) 10.409181849s ago: executing program 4 (id=506): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000700)) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x4000) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Lu1cUB/CbgKSFSkQEBzsIBpdGhTjokAxWYprFiFiR0llw0EFwcJCU6OzLP6D4BuIidnYUI4hCnCSjOBcUl0wprU+hrV3aYkp/fD5LuPece08u3yfwvxYPPzWbzVgIoZn4+6e/Pc1PFHunxqZnQoiF70MI+S+/+LUSizp+u/U8WpeidTGRqe3fjL+cdtz23VdTh/GofhEP4YcQwuLjUfLfvo1P31nuKrm+sVzYXM0tPBTWnobnB/I9W/mlnZGDbHm2OzsXfVgX8dbMT9VGj++apefd9sG2aq2RuY760rGPmc9/68/573VV6pXGZP/JylC6s35Z3o5yf5U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwwc5yV8n1jeXC5mpu4aGw9jQ8P5Dv2cov7YwcZMuz3dm5+FvfRbw181O10eO7Zul5t32wrVprZK6jvnTs3dGvf/yYv0QLfRX+mP9eV6VeaUz2n6wMpTvrl+XtKPfX9/kDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyl/ESxd2pseiaEWPgshPDN/Xd9v+w3E2/1WNR3Hv2Wov1iIlPbvxl/Oe247buvpg6nEiEkfnfv4uNR8vNWPoR/5OcAAAD//8gGhpo=") r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200600) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x7fffffe, 0x1, 0xff, 0xd9e0fe5014d32144, 0x0, 0x1}, 0x20) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_delvlan={0x18, 0x70, 0x1, 0x70bd29, 0x2, {0x7, 0x0, 0x0, r7}}, 0x18}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000000) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="28000000040000000000004cad0000000600000000000000090000000000000000000000000000002d056e8edcf71e8b3447ed5b2c3a4ec5516becea70d2b3ad91"], 0x28) 9.014530567s ago: executing program 5 (id=507): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4) fcntl$getown(r0, 0x9) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, 0x0, &(0x7f0000000540)) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12041, 0x0) 7.64764788s ago: executing program 5 (id=508): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x3}]}) 7.346706951s ago: executing program 5 (id=509): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x0, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) 7.319111988s ago: executing program 3 (id=510): r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x303000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) socket(0x2a, 0x2, 0x9) 5.75830436s ago: executing program 5 (id=511): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x70411, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r2}) 5.740912683s ago: executing program 3 (id=512): syz_open_dev$ttys(0xc, 0x2, 0x0) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x0, 0xb7, &(0x7f0000000000)=ANY=[@ANYBLOB="1201eb00000000106b1d01014000010203010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440), 0x0, 0x0) 5.264153534s ago: executing program 1 (id=513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) 4.180185851s ago: executing program 1 (id=514): r0 = epoll_create1(0x0) syz_open_pts(0xffffffffffffffff, 0x167142) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2d516fba, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x3fd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 4.077683157s ago: executing program 4 (id=515): syz_open_dev$dri(0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x3, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x140, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0x2278, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) 2.610878105s ago: executing program 4 (id=516): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4) fcntl$getown(r0, 0x9) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, 0x0, &(0x7f0000000540)) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12041, 0x0) 1.303352765s ago: executing program 4 (id=517): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4) fcntl$getown(r0, 0x9) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, 0x0, &(0x7f0000000540)) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12041, 0x0) 1.170123285s ago: executing program 3 (id=518): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x1db) writev(r0, 0x0, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x9, 0xa, 0x9, 0x4, @time={0x1, 0xc}, {0x4, 0x17}, {0x42, 0x7}, @raw32={[0x8, 0x63b, 0xf3]}}, {0xb, 0x6, 0xc4, 0x1, @tick=0x6, {0xc8, 0x4}, {0x0, 0x1}, @control={0x4, 0x1, 0x7}}, {0xc3, 0x8, 0x81, 0x6, @tick=0xffffffff, {0x4, 0x2}, {0x84, 0x1d}, @raw32={[0x7f, 0x5, 0x4]}}, {0x18, 0xff, 0xff, 0xa6, @tick=0x2, {0x8, 0x7f}, {0xdf, 0x6}, @control={0x9, 0xc, 0x1000009}}], 0x70) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x1, 0x7, 0x7, @time={0x401, 0x400}, {0x7, 0x1}, {0x7, 0x4}, @note={0x2, 0x4, 0xa, 0x9, 0xb9a}}], 0x1c) 0s ago: executing program 4 (id=519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xb5, &(0x7f00000000c0)=""/181}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') syz_open_dev$loop(0x0, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. [ 80.603718][ T5603] cgroup: Unknown subsys name 'net' [ 80.719463][ T5603] cgroup: Unknown subsys name 'cpuset' [ 80.729917][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.455914][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.943989][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.944872][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.953000][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.965176][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.966686][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.969110][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.973106][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.979629][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.980343][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.982218][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.986019][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.988678][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.992593][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.997673][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.001855][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.002875][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.009606][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.010199][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.011386][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.012956][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.016529][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.023900][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.039155][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.039797][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.054156][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.066224][ T5617] Bluetooth: hci1: command tx timeout [ 87.145498][ T5627] Bluetooth: hci3: command tx timeout [ 87.145566][ T52] Bluetooth: hci0: command tx timeout [ 87.156813][ T5617] Bluetooth: hci2: command tx timeout [ 87.184815][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.186146][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.187361][ T5614] bridge_slave_0: entered allmulticast mode [ 87.192703][ T5614] bridge_slave_0: entered promiscuous mode [ 87.225472][ T5617] Bluetooth: hci4: command tx timeout [ 87.276547][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.278124][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.278552][ T5614] bridge_slave_1: entered allmulticast mode [ 87.283758][ T5614] bridge_slave_1: entered promiscuous mode [ 87.341636][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.347844][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.349001][ T5616] bridge_slave_0: entered allmulticast mode [ 87.353914][ T5616] bridge_slave_0: entered promiscuous mode [ 87.399942][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.400208][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.400511][ T5616] bridge_slave_1: entered allmulticast mode [ 87.405522][ T5616] bridge_slave_1: entered promiscuous mode [ 87.420636][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.427780][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.504536][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.504938][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.507261][ T5622] bridge_slave_0: entered allmulticast mode [ 87.512411][ T5622] bridge_slave_0: entered promiscuous mode [ 87.553974][ T5614] team0: Port device team_slave_0 added [ 87.561028][ T5614] team0: Port device team_slave_1 added [ 87.577583][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.578079][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.579239][ T5622] bridge_slave_1: entered allmulticast mode [ 87.584091][ T5622] bridge_slave_1: entered promiscuous mode [ 87.628726][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.687494][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.688162][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.689391][ T5613] bridge_slave_0: entered allmulticast mode [ 87.694821][ T5613] bridge_slave_0: entered promiscuous mode [ 87.716399][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.735126][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.737124][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.737225][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.740906][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.741194][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.741640][ T5615] bridge_slave_0: entered allmulticast mode [ 87.751152][ T5615] bridge_slave_0: entered promiscuous mode [ 87.768898][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.776874][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.827734][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.827937][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.828440][ T5613] bridge_slave_1: entered allmulticast mode [ 87.833507][ T5613] bridge_slave_1: entered promiscuous mode [ 87.873278][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.873335][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.873363][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.879787][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.880057][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.880445][ T5615] bridge_slave_1: entered allmulticast mode [ 87.887202][ T5615] bridge_slave_1: entered promiscuous mode [ 87.962311][ T5616] team0: Port device team_slave_0 added [ 87.988285][ T5622] team0: Port device team_slave_0 added [ 87.996284][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.006398][ T5616] team0: Port device team_slave_1 added [ 88.024363][ T5622] team0: Port device team_slave_1 added [ 88.031163][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.073167][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.116984][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.117023][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.119414][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.137813][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.174959][ T5613] team0: Port device team_slave_0 added [ 88.191711][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.194757][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.194845][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.238037][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.238086][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.238114][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.253124][ T5613] team0: Port device team_slave_1 added [ 88.298541][ T5614] hsr_slave_0: entered promiscuous mode [ 88.301693][ T5614] hsr_slave_1: entered promiscuous mode [ 88.336511][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.336560][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.337638][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.402149][ T5615] team0: Port device team_slave_0 added [ 88.421767][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.421924][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.422020][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.439078][ T5615] team0: Port device team_slave_1 added [ 88.487010][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.487069][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.487113][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.548172][ T5616] hsr_slave_0: entered promiscuous mode [ 88.551142][ T5616] hsr_slave_1: entered promiscuous mode [ 88.553256][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 88.553519][ T5616] Cannot create hsr debugfs directory [ 88.610770][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.611063][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.611140][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.678554][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.678597][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.678639][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.741641][ T5622] hsr_slave_0: entered promiscuous mode [ 88.744425][ T5622] hsr_slave_1: entered promiscuous mode [ 88.747269][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 88.747307][ T5622] Cannot create hsr debugfs directory [ 88.801837][ T5613] hsr_slave_0: entered promiscuous mode [ 88.804473][ T5613] hsr_slave_1: entered promiscuous mode [ 88.807719][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 88.807740][ T5613] Cannot create hsr debugfs directory [ 88.984887][ T5615] hsr_slave_0: entered promiscuous mode [ 88.990851][ T5615] hsr_slave_1: entered promiscuous mode [ 88.991607][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 88.991636][ T5615] Cannot create hsr debugfs directory [ 89.146942][ T5617] Bluetooth: hci1: command tx timeout [ 89.225526][ T5617] Bluetooth: hci2: command tx timeout [ 89.226033][ T5627] Bluetooth: hci3: command tx timeout [ 89.226138][ T5627] Bluetooth: hci0: command tx timeout [ 89.306220][ T5617] Bluetooth: hci4: command tx timeout [ 89.417487][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.430255][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.435156][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.449653][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.472813][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.483682][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.505711][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.518674][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.581923][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.597815][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.608662][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.623775][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.651098][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.661372][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.672761][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.684403][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.753639][ T5622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.769540][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.772093][ T5622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.788990][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.803703][ T5622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.818042][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.832483][ T5622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.843968][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.946007][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.958210][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.960799][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.974289][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.994218][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.004745][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.037284][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.049056][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.132303][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.144826][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.161747][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.171836][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.193239][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.210321][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.222017][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.236845][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.248918][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.316886][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.333113][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.333267][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.389966][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.390171][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.429448][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.453993][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.517021][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.549910][ T5614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.568135][ T659] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.568385][ T659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.590565][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.620379][ T659] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.620612][ T659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.640654][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.664368][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.664615][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.715113][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.716998][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.785860][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.836594][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.848322][ T659] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.850122][ T659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.898354][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.898583][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.935927][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.011089][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.011322][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.051147][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.051290][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.245288][ T5617] Bluetooth: hci1: command tx timeout [ 91.313039][ T52] Bluetooth: hci0: command tx timeout [ 91.313094][ T52] Bluetooth: hci3: command tx timeout [ 91.324636][ T5617] Bluetooth: hci2: command tx timeout [ 91.385410][ T5617] Bluetooth: hci4: command tx timeout [ 91.801867][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.039487][ T30] cfg80211: failed to load regulatory.db [ 92.078935][ T5614] veth0_vlan: entered promiscuous mode [ 92.147392][ T5614] veth1_vlan: entered promiscuous mode [ 92.319993][ T5614] veth0_macvtap: entered promiscuous mode [ 92.368219][ T5614] veth1_macvtap: entered promiscuous mode [ 92.403627][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.468028][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.540841][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.569060][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.637279][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.667922][ T659] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.668004][ T659] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.668084][ T659] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.699422][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.738861][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.916872][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.916918][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.991043][ T5616] veth0_vlan: entered promiscuous mode [ 93.043278][ T5615] veth0_vlan: entered promiscuous mode [ 93.050218][ T5616] veth1_vlan: entered promiscuous mode [ 93.060460][ T659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.060503][ T659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.085144][ T5613] veth0_vlan: entered promiscuous mode [ 93.115149][ T5615] veth1_vlan: entered promiscuous mode [ 93.171588][ T5622] veth0_vlan: entered promiscuous mode [ 93.184216][ T5613] veth1_vlan: entered promiscuous mode [ 93.198954][ T5622] veth1_vlan: entered promiscuous mode [ 93.221319][ T5614] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.259805][ T5616] veth0_macvtap: entered promiscuous mode [ 93.298402][ T5615] veth0_macvtap: entered promiscuous mode [ 93.306977][ T5617] Bluetooth: hci1: command tx timeout [ 93.328373][ T5616] veth1_macvtap: entered promiscuous mode [ 93.335745][ T5615] veth1_macvtap: entered promiscuous mode [ 93.386020][ T5617] Bluetooth: hci2: command tx timeout [ 93.386072][ T5617] Bluetooth: hci3: command tx timeout [ 93.386113][ T5617] Bluetooth: hci0: command tx timeout [ 93.421793][ T5622] veth0_macvtap: entered promiscuous mode [ 93.438585][ T5613] veth0_macvtap: entered promiscuous mode [ 93.455117][ T5622] veth1_macvtap: entered promiscuous mode [ 93.466187][ T5627] Bluetooth: hci4: command tx timeout [ 93.472117][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.494084][ T5613] veth1_macvtap: entered promiscuous mode [ 93.501953][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.534780][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.557474][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.629901][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.640805][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.651991][ T45] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.664391][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.682711][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.732407][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.830660][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.906562][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.919535][ T659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.930074][ T659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.985839][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.985915][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.986018][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.986151][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.986242][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.063040][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.063080][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.109624][ T1024] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140691][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.140742][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.194749][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.194792][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.297696][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.297738][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.352236][ T1109] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.352503][ T1109] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.352698][ T1109] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.353046][ T1109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.353390][ T1109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.403727][ T1109] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.543637][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.543699][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.647186][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.647228][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.669701][ T5815] loop2: detected capacity change from 0 to 512 [ 94.695706][ T5813] Zero length message leads to an empty skb [ 94.720557][ T5815] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.720599][ T5815] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.778846][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.778897][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.833097][ T5815] EXT4-fs (loop2): 1 truncate cleaned up [ 94.875802][ T5815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.041271][ T5821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7'. [ 96.083267][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.100233][ T5831] syz.4.9 uses obsolete (PF_INET,SOCK_PACKET) [ 96.128657][ T5833] loop3: detected capacity change from 0 to 512 [ 96.293430][ T5833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.320122][ T5833] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.740678][ T5844] xt_TCPMSS: Only works on TCP SYN packets [ 97.354568][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.746345][ T5861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17'. [ 98.115913][ T5734] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.025435][ T5734] usb 4-1: device descriptor read/64, error -71 [ 100.305335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.018421][ T5734] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.485278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.068876][ T5887] loop3: detected capacity change from 0 to 512 [ 102.185199][ T5887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.191283][ T5887] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.556983][ T5898] xt_TCPMSS: Only works on TCP SYN packets [ 103.067745][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.384746][ T5902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30'. [ 105.425428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.835270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 106.168486][ T5917] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 106.619758][ T30] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.717630][ T5926] loop3: detected capacity change from 0 to 512 [ 106.779675][ T5926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.793242][ T5926] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.794963][ T30] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.826191][ T30] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.826259][ T30] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 106.826743][ T30] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 37632, setting to 1024 [ 106.826788][ T30] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 106.877080][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.886942][ T30] usb 3-1: Product: syz [ 106.893892][ T30] usb 3-1: Manufacturer: syz [ 106.901321][ T30] usb 3-1: SerialNumber: syz [ 106.934966][ T30] cdc_mbim 3-1:1.0: skipping garbage [ 107.245776][ T5922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 107.246500][ T5922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 107.278146][ T5931] xt_TCPMSS: Only works on TCP SYN packets [ 107.835665][ T5933] netlink: 28 bytes leftover after parsing attributes in process `syz.4.41'. [ 107.872853][ T30] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 107.872995][ T30] cdc_mbim 3-1:1.0: bind() failure [ 107.889963][ T30] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 107.890041][ T30] cdc_ncm 3-1:1.1: bind() failure [ 107.919334][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.265376][ T30] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.404969][ T5805] usb 3-1: USB disconnect, device number 2 [ 109.644734][ T30] usb 1-1: device descriptor read/64, error -71 [ 109.895436][ T30] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.096718][ T30] usb 1-1: device descriptor read/64, error -71 [ 110.212870][ T30] usb usb1-port1: attempt power cycle [ 110.667347][ T30] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.698235][ T30] usb 1-1: device descriptor read/8, error -71 [ 110.863891][ T5976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.53'. [ 110.918221][ T5975] loop1: detected capacity change from 0 to 512 [ 110.935317][ T30] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.956122][ T30] usb 1-1: device descriptor read/8, error -71 [ 111.112647][ T30] usb usb1-port1: unable to enumerate USB device [ 111.144915][ T5975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.167952][ T5975] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.484381][ T5987] xt_TCPMSS: Only works on TCP SYN packets [ 111.941941][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.133010][ T988] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.137808][ T988] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.343450][ T988] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 112.503251][ T5998] macsec1: entered allmulticast mode [ 112.503317][ T5998] veth1_macvtap: entered allmulticast mode [ 112.508569][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 113.106086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.262044][ T5998] veth1_macvtap (unregistering): left allmulticast mode [ 113.498553][ T5995] fido_id[5995]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 115.213885][ T6016] loop4: detected capacity change from 0 to 32768 [ 115.237952][ T6016] (syz.4.64,6016,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 115.252298][ T6016] (syz.4.64,6016,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 115.292824][ T6016] JBD2: Ignoring recovery information on journal [ 115.377638][ T6016] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 115.681892][ T5622] ocfs2: Unmounting device (7,4) on (node local) [ 115.739989][ T6023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.65'. [ 117.094133][ T6029] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.435564][ T5620] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.566003][ T5620] usb 3-1: device descriptor read/64, error -71 [ 118.601437][ T5734] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.601509][ T5734] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.659879][ T5734] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 118.789941][ T6043] fido_id[6043]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 118.816324][ T5620] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.509997][ T5620] usb 3-1: device descriptor read/64, error -71 [ 120.027789][ T5620] usb usb3-port1: attempt power cycle [ 121.754927][ T5620] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 121.895784][ T5620] usb 3-1: device descriptor read/8, error -71 [ 122.189634][ T6063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.76'. [ 122.327404][ T6064] tipc: Started in network mode [ 122.327484][ T6064] tipc: Node identity 22fe394314d2, cluster identity 4711 [ 122.328127][ T6064] tipc: Enabled bearer , priority 1 [ 122.497866][ T6061] tipc: Resetting bearer [ 122.891188][ T6061] tipc: Disabling bearer [ 124.835942][ T5741] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 124.836007][ T5741] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 124.858802][ T5741] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 124.909507][ T6092] syzkaller0: entered promiscuous mode [ 124.915126][ T6092] syzkaller0: entered allmulticast mode [ 125.779019][ T5741] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 126.019394][ T5741] usb 5-1: device descriptor read/64, error -71 [ 126.067203][ T6097] fido_id[6097]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 126.268051][ T5741] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 126.334340][ T6105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.89'. [ 126.411332][ T5741] usb 5-1: device descriptor read/64, error -71 [ 126.521518][ T5741] usb usb5-port1: attempt power cycle [ 126.867926][ T5741] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 126.897012][ T5741] usb 5-1: device descriptor read/8, error -71 [ 127.135510][ T5741] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.156587][ T5741] usb 5-1: device descriptor read/8, error -71 [ 127.266449][ T5741] usb usb5-port1: unable to enumerate USB device [ 129.137049][ T6133] macsec1: entered allmulticast mode [ 129.137148][ T6133] veth1_macvtap: entered allmulticast mode [ 129.155866][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 129.473292][ T6133] veth1_macvtap (unregistering): left allmulticast mode [ 130.531365][ T6148] loop0: detected capacity change from 0 to 32768 [ 130.565371][ T6148] (syz.0.102,6148,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 130.566308][ T6148] (syz.0.102,6148,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 130.649919][ T6148] JBD2: Ignoring recovery information on journal [ 130.719966][ T6148] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 130.943324][ T5614] ocfs2: Unmounting device (7,0) on (node local) [ 131.309850][ T6157] syzkaller0: entered promiscuous mode [ 131.318038][ T6157] syzkaller0: entered allmulticast mode [ 131.436092][ T5749] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.595334][ T5749] usb 1-1: Using ep0 maxpacket: 16 [ 131.600370][ T5749] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0000, bcdDevice= 0.00 [ 131.600492][ T5749] usb 1-1: no configurations [ 131.600526][ T5749] usb 1-1: can't read configurations, error -22 [ 131.635601][ T6163] netlink: 28 bytes leftover after parsing attributes in process `syz.4.107'. [ 131.729253][ T5749] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.887043][ T5749] usb 1-1: Using ep0 maxpacket: 16 [ 131.893511][ T5749] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0000, bcdDevice= 0.00 [ 131.893604][ T5749] usb 1-1: no configurations [ 131.893634][ T5749] usb 1-1: can't read configurations, error -22 [ 131.899474][ T5749] usb usb1-port1: attempt power cycle [ 132.247615][ T5749] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 132.278477][ T5749] usb 1-1: Using ep0 maxpacket: 16 [ 132.281114][ T5749] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0000, bcdDevice= 0.00 [ 132.281219][ T5749] usb 1-1: no configurations [ 132.281260][ T5749] usb 1-1: can't read configurations, error -22 [ 132.369658][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 132.406987][ T5749] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 132.426153][ T5749] usb 1-1: Using ep0 maxpacket: 16 [ 132.427586][ T5749] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0000, bcdDevice= 0.00 [ 132.427693][ T5749] usb 1-1: no configurations [ 132.427731][ T5749] usb 1-1: can't read configurations, error -22 [ 132.428588][ T5749] usb usb1-port1: unable to enumerate USB device [ 132.988619][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.989073][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.803196][ T6185] macsec1: entered allmulticast mode [ 133.803238][ T6185] veth1_macvtap: entered allmulticast mode [ 133.807019][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'. [ 133.971888][ T6185] veth1_macvtap (unregistering): left allmulticast mode [ 134.904550][ T6191] loop2: detected capacity change from 0 to 32768 [ 134.929323][ T6191] (syz.2.115,6191,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 134.943832][ T6191] (syz.2.115,6191,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 134.970056][ T6191] JBD2: Ignoring recovery information on journal [ 135.249332][ T6191] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 135.503805][ T5731] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.503865][ T5731] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.543442][ T5731] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 135.618003][ T5613] ocfs2: Unmounting device (7,2) on (node local) [ 135.671085][ T6207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.122'. [ 135.689163][ T6206] fido_id[6206]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 135.749897][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 136.184987][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'. [ 137.664124][ T6242] loop2: detected capacity change from 0 to 32768 [ 137.689460][ T6242] (syz.2.133,6242,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 137.705379][ T6242] (syz.2.133,6242,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 137.742117][ T6242] JBD2: Ignoring recovery information on journal [ 137.810443][ T6242] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 137.991200][ T5734] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 137.991259][ T5734] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 138.011056][ T5734] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 138.110349][ T5613] ocfs2: Unmounting device (7,2) on (node local) [ 138.156771][ T6251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.135'. [ 138.309281][ T6253] fido_id[6253]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 138.410096][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 138.623695][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'. [ 140.538370][ T6289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.149'. [ 140.794567][ T5805] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 140.807114][ T5805] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 140.830353][ T5805] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 141.050728][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.153'. [ 141.088628][ T6299] fido_id[6299]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 141.300045][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'. [ 142.605944][ T6329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.164'. [ 142.857480][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 142.857545][ T30] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 142.877503][ T30] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 143.208944][ T6338] fido_id[6338]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 143.234541][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 143.835988][ T6353] configfs-gadget.g1 gadget.0: HOST MAC ae:bb:9f:dc:b0:bb [ 143.836333][ T6353] configfs-gadget.g1 gadget.0: MAC 9e:b4:8f:00:5c:59 [ 145.059053][ T30] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 145.437347][ T30] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 145.451341][ T30] usb 1-1: Dual-Role OTG device on HNP port [ 145.460237][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.199822][ T6365] netlink: 28 bytes leftover after parsing attributes in process `syz.3.176'. [ 146.438719][ T30] rndis_host 1-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, ae:bb:9f:dc:b0:bb [ 149.381495][ T6397] ======================================================= [ 149.381495][ T6397] WARNING: The mand mount option has been deprecated and [ 149.381495][ T6397] and is ignored by this kernel. Remove the mand [ 149.381495][ T6397] option from the mount to silence this warning. [ 149.381495][ T6397] ======================================================= [ 149.421467][ T6397] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 149.462801][ T6399] loop3: detected capacity change from 0 to 1024 [ 149.503502][ T6399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.501466][ T6425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.190'. [ 151.669317][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.488250][ T6446] loop4: detected capacity change from 0 to 256 [ 155.548439][ T6446] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 155.565280][ T6446] FAT-fs (loop4): Filesystem has been set read-only [ 155.826426][ T6454] syzkaller0: entered promiscuous mode [ 155.826472][ T6454] syzkaller0: entered allmulticast mode [ 166.265251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.280292][ T6512] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 166.317910][ T6512] CIFS: Attempting to mount //127.0.0.1/share [ 166.471557][ T6512] CIFS: VFS: Error connecting to socket. Aborting operation. [ 166.472454][ T6512] CIFS: VFS: cifs_mount failed w/return code = -111 [ 168.512081][ T6538] loop4: detected capacity change from 0 to 256 [ 168.553714][ T6538] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 168.553750][ T6538] FAT-fs (loop4): Filesystem has been set read-only [ 169.798206][ T6551] loop1: detected capacity change from 0 to 512 [ 169.901665][ T6545] syzkaller0: entered promiscuous mode [ 169.901791][ T6545] syzkaller0: entered allmulticast mode [ 171.039852][ T6551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.058194][ T6551] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.499654][ T6566] xt_TCPMSS: Only works on TCP SYN packets [ 172.278503][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.724733][ T6577] loop4: detected capacity change from 0 to 2048 [ 173.995266][ T6573] loop2: detected capacity change from 0 to 512 [ 173.997635][ T6573] EXT4-fs: Invalid want_extra_isize 1969 [ 174.043051][ T6577] Alternate GPT is invalid, using primary GPT. [ 174.076425][ T6577] loop4: p2 p3 p7 [ 175.125240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 177.593508][ T6595] loop1: detected capacity change from 0 to 2048 [ 177.761782][ T6595] Alternate GPT is invalid, using primary GPT. [ 177.761938][ T6595] loop1: p2 p3 p7 [ 179.147774][ T6489] udevd[6489]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 179.288586][ T6481] udevd[6481]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 179.347203][ T6519] udevd[6519]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 179.493601][ T6489] udevd[6489]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 179.520809][ T6481] udevd[6481]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 179.540213][ T6584] udevd[6584]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 181.033558][ T6611] loop4: detected capacity change from 0 to 512 [ 181.115960][ T6611] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 181.140275][ T6611] EXT4-fs (loop4): 1 truncate cleaned up [ 181.165579][ T6611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.651018][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.389481][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 184.402794][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 184.411941][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 184.421643][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 184.441086][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 185.220692][ T6658] loop4: detected capacity change from 0 to 512 [ 185.240327][ T6658] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 185.288763][ T6658] EXT4-fs (loop4): 1 truncate cleaned up [ 185.311407][ T6658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.574543][ T5627] Bluetooth: hci5: command tx timeout [ 186.909616][ T6632] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.613700][ T6678] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 187.774549][ T6632] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.376244][ T6632] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.655262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 189.905440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 190.315159][ T5627] Bluetooth: hci5: command tx timeout [ 190.412592][ T6632] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.795928][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.346522][ T5627] Bluetooth: hci5: command tx timeout [ 193.062231][ T6716] : renamed from bond_slave_0 (while UP) [ 193.143460][ T6720] binder_alloc: 6719: binder_alloc_buf, no vma [ 193.158478][ T6632] bridge_slave_1: left allmulticast mode [ 193.158549][ T6632] bridge_slave_1: left promiscuous mode [ 193.196977][ T6632] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.272133][ T6632] bridge_slave_0: left allmulticast mode [ 193.272186][ T6632] bridge_slave_0: left promiscuous mode [ 193.290460][ T6632] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.430067][ T5627] Bluetooth: hci5: command tx timeout [ 194.437728][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.444982][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.651481][ T6632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.669068][ T6632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.673013][ T6632] bond0 (unregistering): Released all slaves [ 198.181676][ T6752] loop3: detected capacity change from 0 to 512 [ 198.209779][ T6752] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 198.437170][ T6752] EXT4-fs (loop3): 1 truncate cleaned up [ 198.450048][ T6752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.665241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 198.762132][ T6759] loop1: detected capacity change from 0 to 512 [ 198.779714][ T6759] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.838235][ T6759] EXT4-fs (loop1): 1 truncate cleaned up [ 198.853123][ T6759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.175968][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.013112][ T6632] hsr_slave_0: left promiscuous mode [ 201.026915][ T6632] hsr_slave_1: left promiscuous mode [ 201.040543][ T6632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.051987][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.269379][ T6632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.304667][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.908927][ T6632] veth1_vlan: left promiscuous mode [ 201.911205][ T6632] veth0_vlan: left promiscuous mode [ 202.332486][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.536638][ T6632] team0 (unregistering): Port device team_slave_1 removed [ 202.569379][ T6632] team0 (unregistering): Port device team_slave_0 removed [ 202.688481][ T5731] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 202.853746][ T5731] usb 5-1: unable to get BOS descriptor or descriptor too short [ 202.878997][ T5731] usb 5-1: not running at top speed; connect to a high speed hub [ 202.900098][ T5731] usb 5-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 202.960778][ T5731] usb 5-1: config 200 has an invalid interface number: 97 but max is 0 [ 202.971435][ T5731] usb 5-1: config 200 has no interface number 0 [ 202.987530][ T5731] usb 5-1: config 200 interface 97 has no altsetting 0 [ 203.061725][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.070857][ T5731] usb 5-1: Product: syz [ 203.079099][ T5731] usb 5-1: Manufacturer: syz [ 203.091424][ T5731] usb 5-1: SerialNumber: syz [ 203.610901][ T6795] : renamed from bond_slave_0 (while UP) [ 203.639975][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 203.799750][ T5731] go7007 5-1:200.97: probe with driver go7007 failed with error -12 [ 203.849064][ T6645] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.856474][ T5731] usb 5-1: USB disconnect, device number 6 [ 203.862524][ T6645] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.873342][ T6645] bridge_slave_0: entered allmulticast mode [ 203.897149][ T6645] bridge_slave_0: entered promiscuous mode [ 203.928046][ T6645] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.942856][ T6645] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.959656][ T6645] bridge_slave_1: entered allmulticast mode [ 203.986684][ T6645] bridge_slave_1: entered promiscuous mode [ 204.133721][ T6645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.152182][ T6645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.203164][ T6645] team0: Port device team_slave_0 added [ 204.213423][ T6645] team0: Port device team_slave_1 added [ 204.255660][ T6645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.262798][ T6645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.289217][ T6645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.307442][ T6645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.315095][ T6645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.343011][ T6645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.437268][ T6645] hsr_slave_0: entered promiscuous mode [ 204.448996][ T6645] hsr_slave_1: entered promiscuous mode [ 205.056033][ T1222] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 205.198156][ T6645] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 205.211798][ T1222] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 205.222365][ T1222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 205.222427][ T1222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.222587][ T1222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.318671][ T1222] usb 5-1: config 0 descriptor?? [ 205.356586][ T6645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 205.379745][ T6645] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 205.395098][ T1222] hub 5-1:0.0: USB hub found [ 205.452698][ T6645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 205.480121][ T6645] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 205.519040][ T6645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 205.529902][ T6645] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 205.565648][ T6645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 205.599827][ T1222] hub 5-1:0.0: 1 port detected [ 205.881668][ T1222] hub 5-1:0.0: config failed, can't get hub status (err -5) [ 206.069934][ T1222] usbhid 5-1:0.0: can't add hid device: -71 [ 206.070468][ T1222] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 206.128694][ T6645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.154061][ T1222] usb 5-1: USB disconnect, device number 7 [ 206.170653][ T6645] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.196887][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.197093][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.250602][ T6632] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.250735][ T6632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.000768][ T6860] loop3: detected capacity change from 0 to 512 [ 208.022205][ T6860] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 208.066002][ T6860] EXT4-fs (loop3): 1 truncate cleaned up [ 208.090563][ T6860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.523969][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 209.190954][ T6880] : renamed from bond_slave_0 (while UP) [ 210.238080][ T6645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.708492][ T6909] pim6reg: entered allmulticast mode [ 211.725949][ T6911] loop4: detected capacity change from 0 to 512 [ 211.782877][ T6909] pim6reg: left allmulticast mode [ 211.809795][ T6911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.824380][ T6911] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.868098][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 211.868202][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 211.876030][ T4933] Bluetooth: hci4: command 0x0406 tx timeout [ 211.876111][ T4933] Bluetooth: hci3: command 0x0406 tx timeout [ 212.602044][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.850378][ T6645] veth0_vlan: entered promiscuous mode [ 212.963283][ T6645] veth1_vlan: entered promiscuous mode [ 213.604625][ T6645] veth0_macvtap: entered promiscuous mode [ 213.636040][ T6645] veth1_macvtap: entered promiscuous mode [ 213.720498][ T6645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.759624][ T6645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.868134][ T1024] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.020664][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.062109][ T5876] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.080125][ T5876] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.096029][ T5876] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.166335][ T5620] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 214.313008][ T5876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.313100][ T5876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.334796][ T5620] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 214.348775][ T5620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.348840][ T5620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.384695][ T5620] usb 2-1: config 0 descriptor?? [ 214.639809][ T5620] usbhid 2-1:0.0: can't add hid device: -71 [ 214.650592][ T5620] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 214.680839][ T5620] usb 2-1: USB disconnect, device number 2 [ 214.714773][ T5876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.714864][ T5876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.147359][ T5620] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 215.317208][ T5620] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 215.533873][ T5620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.546182][ T5620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.561847][ T5620] usb 2-1: config 0 descriptor?? [ 215.999616][ T6961] loop5: detected capacity change from 0 to 2048 [ 216.698001][ T6961] Alternate GPT is invalid, using primary GPT. [ 216.698231][ T6961] loop5: p2 p3 p7 [ 217.381072][ T5620] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 217.437642][ T5620] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 217.981869][ T6977] loop2: detected capacity change from 0 to 512 [ 218.042457][ T6977] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 218.077543][ T6977] EXT4-fs (loop2): 1 truncate cleaned up [ 218.134581][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 218.157076][ T6977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.281260][ T6584] udevd[6584]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 219.307191][ T6489] udevd[6489]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 219.416048][ T6985] udevd[6985]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 219.800108][ T25] usb 2-1: USB disconnect, device number 3 [ 219.800246][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 219.926775][ T6993] loop3: detected capacity change from 0 to 2048 [ 220.556816][ T6993] Alternate GPT is invalid, using primary GPT. [ 220.557315][ T6993] loop3: p2 p3 p7 [ 221.854829][ T7009] loop1: detected capacity change from 0 to 512 [ 222.008400][ T7009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.036515][ T7009] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.109161][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.296230][ T6986] udevd[6986]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 222.441071][ T6986] udevd[6986]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 222.509093][ T6989] udevd[6989]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 222.868115][ T5749] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 223.015478][ T5749] usb 4-1: Using ep0 maxpacket: 16 [ 223.017372][ T5749] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.041021][ T5749] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 223.041123][ T5749] usb 4-1: can't read configurations, error -61 [ 223.188622][ T5749] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 223.268131][ T7030] ip_tables: iptables: counters copy to user failed while replacing table [ 223.337262][ T7036] xt_TCPMSS: Only works on TCP SYN packets [ 223.338010][ T5749] usb 4-1: Using ep0 maxpacket: 16 [ 223.340706][ T5749] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.343411][ T5749] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 223.343469][ T5749] usb 4-1: can't read configurations, error -61 [ 223.343800][ T5749] usb usb4-port1: attempt power cycle [ 223.456614][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 223.695370][ T5749] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 223.732706][ T5749] usb 4-1: Using ep0 maxpacket: 16 [ 223.739545][ T5749] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.780227][ T5749] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 223.780324][ T5749] usb 4-1: can't read configurations, error -61 [ 223.802838][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.945415][ T5749] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 223.968929][ T5749] usb 4-1: Using ep0 maxpacket: 16 [ 223.978654][ T5749] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.995656][ T5749] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 223.995751][ T5749] usb 4-1: can't read configurations, error -61 [ 223.996137][ T5749] usb usb4-port1: unable to enumerate USB device [ 224.590090][ T7043] loop1: detected capacity change from 0 to 32768 [ 225.587724][ T7043] JBD2: Ignoring recovery information on journal [ 225.808625][ T7043] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 226.137655][ T7069] (syz.1.314,7069,0):ocfs2_validate_inode_block:1483 ERROR: Invalid dinode #65: Corrupt state (nlink = 0 or mode = 0) detected! [ 226.137731][ T7069] (syz.1.314,7069,0):ocfs2_find_entry_id:421 ERROR: status = -117 [ 226.492402][ T7069] (syz.1.314,7069,0):ocfs2_validate_inode_block:1483 ERROR: Invalid dinode #65: Corrupt state (nlink = 0 or mode = 0) detected! [ 226.494105][ T7069] (syz.1.314,7069,0):ocfs2_assign_bh:2417 ERROR: status = -117 [ 226.494272][ T7069] (syz.1.314,7069,0):ocfs2_inode_lock_full_nested:2512 ERROR: status = -117 [ 226.504090][ T7072] loop2: detected capacity change from 0 to 2048 [ 226.633370][ T7069] (syz.1.314,7069,0):ocfs2_mknod:277 ERROR: status = -117 [ 226.633510][ T7069] (syz.1.314,7069,0):ocfs2_create:685 ERROR: status = -117 [ 227.328949][ T7080] loop5: detected capacity change from 0 to 512 [ 227.339812][ T7080] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 227.410608][ T7080] EXT4-fs (loop5): 1 truncate cleaned up [ 227.413155][ T7080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.555345][ T1222] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 227.743456][ T5615] ocfs2: Unmounting device (7,1) on (node local) [ 227.859389][ T1222] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 227.870749][ T1222] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 227.882425][ T1222] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.882548][ T1222] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.882587][ T1222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 227.882672][ T1222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.020914][ T1222] usb 5-1: config 0 descriptor?? [ 229.449005][ T1222] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 229.458835][ T1222] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 230.411587][ T1222] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 230.419049][ T1222] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 230.426654][ T1222] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 230.434004][ T1222] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 230.441473][ T1222] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 230.448904][ T1222] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 230.458145][ T1222] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 230.502946][ T7107] loop1: detected capacity change from 0 to 512 [ 230.582074][ T7107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.582189][ T7107] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.077771][ T1222] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 231.103971][ T1222] kovaplus 0003:1E7D:2D50.0008: hidraw0: USB HID v0.05 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 231.125678][ T1222] usb 5-1: USB disconnect, device number 8 [ 231.441431][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.011957][ T7126] Need at least one configuration in g_uac2. [ 232.012357][ T7126] udc usbip-vudc.0: failed to start g_uac2: -22 [ 232.012439][ T7126] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 232.061283][ T7126] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 232.369054][ T7122] fido_id[7122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 232.553759][ T7129] loop1: detected capacity change from 0 to 4096 [ 232.640786][ T7129] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 233.198199][ T6645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.287186][ T7152] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 237.486648][ T7175] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 237.518865][ T7173] loop3: detected capacity change from 0 to 512 [ 237.557845][ T7173] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 237.599873][ T7173] EXT4-fs (loop3): 1 truncate cleaned up [ 237.642181][ T7173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.967471][ T31] audit: type=1800 audit(1786509280.686:2): pid=7182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.345" name="enable" dev="configfs" ino=13812 res=0 errno=0 [ 239.072512][ T7205] process 'syz.5.348' launched './file1' with NULL argv: empty string added [ 239.172338][ T1222] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 239.250383][ T7215] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 239.943903][ T7205] fuse: Unknown parameter '0x0000000000000007' [ 239.966321][ T1222] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 239.973929][ T1222] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.993189][ T1222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.993273][ T1222] usb 2-1: Product: syz [ 239.993350][ T1222] usb 2-1: Manufacturer: syz [ 239.993500][ T1222] usb 2-1: SerialNumber: syz [ 240.050503][ T1222] usb 2-1: config 0 descriptor?? [ 240.077305][ T1222] usb 2-1: selecting invalid altsetting 1 [ 240.077391][ T1222] usb 2-1: Can not set alternate setting to 1, error: -22 [ 240.077455][ T1222] synaptics_usb 2-1:0.0: probe with driver synaptics_usb failed with error -22 [ 240.297079][ T30] usb 2-1: USB disconnect, device number 4 [ 244.697095][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.336030][ T31] audit: type=1800 audit(1786509288.066:3): pid=7251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.357" name="enable" dev="configfs" ino=14018 res=0 errno=0 [ 245.559493][ T7231] loop4: detected capacity change from 0 to 32768 [ 245.632444][ T7231] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 245.681159][ T7231] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 245.904317][ T7231] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 245.939082][ T1222] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 245.939132][ T1222] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 246.401376][ T1222] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 462ms [ 246.461114][ T1222] gfs2: fsid=syz:syz.0: jid=0: Done [ 246.469734][ T7231] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 246.527931][ T7231] gfs2: fsid=syz:syz.0: can't create quotad thread: -4 [ 247.726385][ T7265] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 249.165495][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 249.335429][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 249.347898][ T25] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 249.376019][ T25] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 249.388604][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 249.438135][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.447161][ T25] usb 6-1: Product: syz [ 249.447232][ T25] usb 6-1: Manufacturer: syz [ 249.447294][ T25] usb 6-1: SerialNumber: syz [ 249.687420][ T25] usb 6-1: config 0 descriptor?? [ 249.718366][ T25] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 249.729415][ T25] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 250.330797][ T25] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 250.339120][ T25] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 250.353175][ T7287] loop3: detected capacity change from 0 to 512 [ 250.373577][ T7287] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 250.410212][ T7287] EXT4-fs (loop3): 1 truncate cleaned up [ 250.439313][ T7287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.175881][ T25] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 251.184025][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 251.672834][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 251.674151][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 251.675628][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 251.676755][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 251.681686][ T25] usb 6-1: USB disconnect, device number 2 [ 251.928569][ T31] audit: type=1800 audit(1786509294.656:4): pid=7299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.369" name="enable" dev="configfs" ino=13277 res=0 errno=0 [ 253.439679][ T7317] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 253.575376][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 253.737417][ T25] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 253.784292][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.794198][ T25] usb 6-1: Product: syz [ 253.800021][ T25] usb 6-1: Manufacturer: syz [ 253.800090][ T25] usb 6-1: SerialNumber: syz [ 253.930463][ T25] usb 6-1: config 0 descriptor?? [ 254.238498][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.777119][ T25] usb 6-1: f81604_read: reg: 105 failed: -EPIPE [ 254.783513][ T25] f81604 6-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 254.792903][ T25] f81604 6-1:0.0: probe with driver f81604 failed with error -32 [ 255.869146][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.874977][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.426784][ T1222] usb 6-1: USB disconnect, device number 3 [ 256.649762][ T7332] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 258.920788][ T31] audit: type=1800 audit(1786509301.646:5): pid=7346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.380" name="enable" dev="configfs" ino=14152 res=0 errno=0 [ 259.507400][ T7353] loop4: detected capacity change from 0 to 32768 [ 259.518817][ T7353] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.382 (7353) [ 259.551511][ T7353] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 259.551584][ T7353] BTRFS info (device loop4): using sha256 checksum algorithm [ 259.698016][ T7353] BTRFS info (device loop4): enabling ssd optimizations [ 259.698081][ T7353] BTRFS info (device loop4): turning on sync discard [ 259.698122][ T7353] BTRFS info (device loop4): enabling free space tree [ 259.698190][ T7353] BTRFS info (device loop4): use zlib compression, level 3 [ 260.205338][ T31] audit: type=1800 audit(1786509302.836:6): pid=7376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.382" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 260.784752][ T5622] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 260.899489][ T7386] bridge0: port 3(syz_tun) entered blocking state [ 260.911933][ T7386] bridge0: port 3(syz_tun) entered disabled state [ 260.925840][ T7386] syz_tun: entered allmulticast mode [ 261.004521][ T7386] syz_tun: entered promiscuous mode [ 261.017609][ T7386] bridge0: port 3(syz_tun) entered blocking state [ 261.018314][ T7386] bridge0: port 3(syz_tun) entered forwarding state [ 261.534607][ T7388] loop3: detected capacity change from 0 to 512 [ 261.668323][ T7388] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 261.959489][ T7388] EXT4-fs (loop3): 1 truncate cleaned up [ 261.981312][ T7388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.537766][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.547735][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.566003][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.583417][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.595733][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.805347][ T5631] Bluetooth: hci0: command tx timeout [ 264.866525][ T1222] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 265.035330][ T1222] usb 5-1: Using ep0 maxpacket: 8 [ 265.043024][ T1222] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 265.057926][ T1222] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.058033][ T1222] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 265.058199][ T1222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 265.058280][ T1222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 265.058427][ T1222] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 265.113968][ T1222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 265.114135][ T1222] usb 5-1: Product: syz [ 265.114184][ T1222] usb 5-1: Manufacturer: syz [ 265.114219][ T1222] usb 5-1: SerialNumber: syz [ 265.203801][ T1222] usb 5-1: config 0 descriptor?? [ 265.460734][ T1222] radio-si470x 5-1:0.0: DeviceID=0x53c8 ChipID=0xa300 [ 265.529202][ T5749] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 265.729878][ T5749] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 265.836812][ T1222] radio-si470x 5-1:0.0: software version 83, hardware version 200 [ 266.084770][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.094522][ T5749] usb 6-1: Product: syz [ 266.095560][ T5749] usb 6-1: Manufacturer: syz [ 266.109554][ T5749] usb 6-1: SerialNumber: syz [ 266.333918][ T1222] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 266.344145][ T1222] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 266.434515][ T1222] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 266.573889][ T1222] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 266.784789][ T5749] usb 6-1: config 0 descriptor?? [ 266.806394][ T1222] usb 5-1: USB disconnect, device number 9 [ 266.825289][ T5631] Bluetooth: hci0: command tx timeout [ 267.691660][ T31] audit: type=1800 audit(1786509310.416:7): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.393" name="enable" dev="configfs" ino=14286 res=0 errno=0 [ 268.417051][ T5749] usb 6-1: f81604_read: reg: 105 failed: -EPIPE [ 268.417110][ T5749] f81604 6-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 268.417157][ T5749] f81604 6-1:0.0: probe with driver f81604 failed with error -32 [ 268.421068][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.686850][ T7440] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 268.907182][ T5631] Bluetooth: hci0: command tx timeout [ 268.940146][ T5620] usb 6-1: USB disconnect, device number 4 [ 270.989196][ T5631] Bluetooth: hci0: command tx timeout [ 271.817969][ T7471] binder: 7444:7471 ioctl 4018620d 0 returned -22 [ 271.821304][ T7471] binder: 7444:7471 ioctl c0306201 200000000040 returned -22 [ 275.230756][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.240349][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.248152][ T7392] bridge_slave_0: entered allmulticast mode [ 275.489563][ T7473] loop1: detected capacity change from 0 to 40427 [ 275.508450][ T7473] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 275.508516][ T7473] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 275.537813][ T7473] F2FS-fs (loop1): invalid crc value [ 275.549334][ T7392] bridge_slave_0: entered promiscuous mode [ 275.740115][ T7473] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 275.768425][ T7473] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 275.769059][ T7473] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 276.682061][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.072883][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.073310][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.074030][ T7392] bridge_slave_1: entered allmulticast mode [ 277.185335][ T7392] bridge_slave_1: entered promiscuous mode [ 277.919446][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.030230][ T7392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.063790][ T7392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.203591][ T7499] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 278.286284][ T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 279.060898][ T7392] team0: Port device team_slave_0 added [ 279.103189][ T7392] team0: Port device team_slave_1 added [ 279.122185][ T30] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 279.140143][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.140189][ T30] usb 6-1: Product: syz [ 279.140223][ T30] usb 6-1: Manufacturer: syz [ 279.140242][ T30] usb 6-1: SerialNumber: syz [ 279.151654][ T30] usb 6-1: config 0 descriptor?? [ 279.401344][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.595565][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.652443][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.652478][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.658205][ T7392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.716116][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.716179][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.725840][ T7392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.829737][ T30] usb 6-1: f81604_read: reg: 105 failed: -EPIPE [ 279.829787][ T30] f81604 6-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 279.829862][ T30] f81604 6-1:0.0: probe with driver f81604 failed with error -32 [ 280.218967][ T7392] hsr_slave_0: entered promiscuous mode [ 280.242893][ T7392] hsr_slave_1: entered promiscuous mode [ 280.254152][ T7392] debugfs: 'hsr0' already exists in 'hsr' [ 280.254202][ T7392] Cannot create hsr debugfs directory [ 281.436452][ T5620] usb 6-1: USB disconnect, device number 5 [ 283.496690][ T13] bridge_slave_1: left allmulticast mode [ 283.496737][ T13] bridge_slave_1: left promiscuous mode [ 283.497044][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.608902][ T13] bridge_slave_0: left allmulticast mode [ 283.631925][ T13] bridge_slave_0: left promiscuous mode [ 283.632208][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.825570][ T1222] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 283.968923][ T7548] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 284.578689][ T13] bond0 (unregistering): (slave 30): Releasing backup interface [ 284.600172][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.612174][ T13] bond0 (unregistering): Released all slaves [ 284.657725][ T1222] usb 6-1: Using ep0 maxpacket: 8 [ 284.695767][ T1222] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 284.703004][ T1222] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.703240][ T1222] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 284.703378][ T1222] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 284.703451][ T1222] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 284.703575][ T1222] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 284.754670][ T1222] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 284.754765][ T1222] usb 6-1: Product: syz [ 284.754874][ T1222] usb 6-1: Manufacturer: syz [ 284.754916][ T1222] usb 6-1: SerialNumber: syz [ 284.810835][ T1222] usb 6-1: config 0 descriptor?? [ 285.069869][ T1222] radio-si470x 6-1:0.0: DeviceID=0x53c8 ChipID=0xa300 [ 285.170290][ T189] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 285.989323][ T1222] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 285.989412][ T1222] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 285.990714][ T1222] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 286.079862][ T189] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 286.112323][ T1222] usb 6-1: USB disconnect, device number 6 [ 286.116039][ T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.116185][ T189] usb 5-1: Product: syz [ 286.116221][ T189] usb 5-1: Manufacturer: syz [ 286.116263][ T189] usb 5-1: SerialNumber: syz [ 286.214523][ T189] usb 5-1: config 0 descriptor?? [ 286.453432][ T13] hsr_slave_0: left promiscuous mode [ 286.469275][ T13] hsr_slave_1: left promiscuous mode [ 286.470235][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.470279][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.495859][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.503498][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.524336][ T13] veth1_vlan: left promiscuous mode [ 286.524452][ T13] veth0_vlan: left promiscuous mode [ 286.888723][ T189] usb 5-1: f81604_read: reg: 105 failed: -EPIPE [ 286.888778][ T189] f81604 5-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 286.888929][ T189] f81604 5-1:0.0: probe with driver f81604 failed with error -32 [ 288.953289][ T5734] usb 5-1: USB disconnect, device number 10 [ 289.450248][ T7592] loop4: detected capacity change from 0 to 2048 [ 290.129135][ T7599] loop3: detected capacity change from 0 to 2048 [ 290.947579][ T7599] Alternate GPT is invalid, using primary GPT. [ 290.949157][ T7599] loop3: p2 p3 p7 [ 291.554140][ T7603] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.717231][ T13] team0 (unregistering): Port device team_slave_1 removed [ 292.343843][ T7604] NILFS (loop4): error -2 truncating bmap (ino=16) [ 292.359420][ T7606] loop1: detected capacity change from 0 to 512 [ 292.360614][ T13] team0 (unregistering): Port device team_slave_0 removed [ 292.420632][ T7606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.420865][ T7606] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.690267][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.875450][ T7603] NILFS (loop4): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 294.896573][ T7603] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=16) [ 295.077813][ T7603] Remounting filesystem read-only [ 295.087884][ T5622] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 296.749554][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 298.491485][ T7624] syzkaller0: entered promiscuous mode [ 298.499151][ T7624] syzkaller0: entered allmulticast mode [ 298.505650][ T5620] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 298.868695][ T5620] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 298.926360][ T5620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.934799][ T5620] usb 4-1: Product: syz [ 298.941617][ T5620] usb 4-1: Manufacturer: syz [ 298.948251][ T5620] usb 4-1: SerialNumber: syz [ 299.031807][ T5620] usb 4-1: config 0 descriptor?? [ 299.124120][ T7623] loop1: detected capacity change from 0 to 32768 [ 299.747735][ T5620] usb 4-1: f81604_read: reg: 105 failed: -EPIPE [ 299.754415][ T5620] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 299.764682][ T5620] f81604 4-1:0.0: probe with driver f81604 failed with error -32 [ 299.794450][ T7623] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.434 (7623) [ 300.859684][ T7623] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 300.859742][ T7623] BTRFS info (device loop1): using blake2b checksum algorithm [ 300.888771][ T7623] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 300.914061][ T7623] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 300.946661][ T7623] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 300.965914][ T7623] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 300.967122][ T7623] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 300.968246][ T7623] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 300.969466][ T7623] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 300.970607][ T7623] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 300.971859][ T7623] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 300.973129][ T7623] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 300.974237][ T7623] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 301.025736][ T7623] BTRFS error (device loop1): open_ctree failed: -ENOMEM [ 301.270027][ T9] usb 4-1: USB disconnect, device number 8 [ 301.829175][ T7677] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 301.829244][ T7677] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 301.829478][ T7677] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 301.829506][ T7677] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 304.680820][ T7691] loop1: detected capacity change from 0 to 2048 [ 304.778523][ T7691] Alternate GPT is invalid, using primary GPT. [ 304.778716][ T7691] loop1: p2 p3 p7 [ 308.223582][ T7392] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 308.243518][ T7392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.268709][ T7392] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 308.286596][ T7392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 308.294829][ T7392] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 308.311700][ T7392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 308.324574][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 308.536059][ T7392] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 308.845299][ T988] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 309.378417][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 309.481498][ T7392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 309.535647][ T988] usb 5-1: Using ep0 maxpacket: 16 [ 309.537109][ T988] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.538296][ T988] usb 5-1: config 0 has no interfaces? [ 309.557273][ T988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.557360][ T988] usb 5-1: Product: syz [ 309.557375][ T988] usb 5-1: Manufacturer: syz [ 309.557391][ T988] usb 5-1: SerialNumber: syz [ 309.565665][ T988] usb 5-1: config 0 descriptor?? [ 309.823492][ T5620] usb 5-1: USB disconnect, device number 11 [ 310.062344][ T7392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.132949][ T7392] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.169707][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.169866][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.257368][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.257631][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.286880][ T7714] loop3: detected capacity change from 0 to 32768 [ 310.423446][ T7714] JBD2: Ignoring recovery information on journal [ 310.554027][ T7730] loop1: detected capacity change from 0 to 4096 [ 310.683603][ T7714] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 310.729041][ T7707] loop5: detected capacity change from 0 to 32768 [ 310.757762][ T7707] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.448 (7707) [ 310.878462][ T7735] (syz.3.450,7735,1):ocfs2_validate_inode_block:1483 ERROR: Invalid dinode #65: Corrupt state (nlink = 0 or mode = 0) detected! [ 310.878527][ T7735] (syz.3.450,7735,1):ocfs2_find_entry_id:421 ERROR: status = -117 [ 310.923353][ T7735] (syz.3.450,7735,1):ocfs2_validate_inode_block:1483 ERROR: Invalid dinode #65: Corrupt state (nlink = 0 or mode = 0) detected! [ 310.923449][ T7735] (syz.3.450,7735,1):ocfs2_assign_bh:2417 ERROR: status = -117 [ 310.923479][ T7735] (syz.3.450,7735,1):ocfs2_inode_lock_full_nested:2512 ERROR: status = -117 [ 310.923504][ T7735] (syz.3.450,7735,1):ocfs2_mknod:277 ERROR: status = -117 [ 310.923596][ T7735] (syz.3.450,7735,1):ocfs2_create:685 ERROR: status = -117 [ 310.956491][ T7707] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 310.956594][ T7707] BTRFS info (device loop5): using blake2b checksum algorithm [ 311.074477][ T7714] (syz.3.450,7714,0):ocfs2_validate_inode_block:1483 ERROR: Invalid dinode #65: Corrupt state (nlink = 0 or mode = 0) detected! [ 311.144492][ T7714] (syz.3.450,7714,1):ocfs2_find_entry_id:421 ERROR: status = -117 [ 311.276976][ T31] audit: type=1326 audit(1786509354.006:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.3.450" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f137259e0d9 code=0x0 [ 311.315592][ T7714] (syz.3.450,7714,0):ocfs2_validate_inode_block:1483 ERROR: Invalid dinode #65: Corrupt state (nlink = 0 or mode = 0) detected! [ 311.330564][ T7714] (syz.3.450,7714,0):ocfs2_assign_bh:2417 ERROR: status = -117 [ 311.340319][ T7714] (syz.3.450,7714,0):ocfs2_inode_lock_full_nested:2512 ERROR: status = -117 [ 311.358708][ T7707] BTRFS info (device loop5): enabling ssd optimizations [ 311.366604][ T7707] BTRFS info (device loop5): turning on async discard [ 311.373550][ T7707] BTRFS info (device loop5): enabling free space tree [ 311.378734][ T7714] (syz.3.450,7714,1):ocfs2_mknod:277 ERROR: status = -117 [ 311.389076][ T7707] BTRFS info (device loop5): use zstd compression, level 3 [ 311.418496][ T7735] (syz.3.450,7735,0):ocfs2_validate_inode_block:1483 ERROR: Invalid dinode #65: Corrupt state (nlink = 0 or mode = 0) detected! [ 311.444448][ T7735] (syz.3.450,7735,0):ocfs2_find_entry_id:421 ERROR: status = -117 [ 311.497842][ T6645] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 311.521489][ T7753] loop4: detected capacity change from 0 to 4096 [ 312.100413][ T5616] ocfs2: Unmounting device (7,3) on (node local) [ 312.627106][ T7766] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 313.884340][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7 [ 314.150947][ T7783] loop5: detected capacity change from 0 to 2048 [ 314.392663][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 316.011006][ T7783] loop5: unable to read partition table [ 316.011246][ T7783] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 316.048319][ T7782] team0: Port device team_slave_0 removed [ 316.810893][ T7392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.995083][ T7811] loop3: detected capacity change from 0 to 2048 [ 317.310595][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.310715][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.369178][ T7811] Alternate GPT is invalid, using primary GPT. [ 317.369363][ T7811] loop3: p2 p3 p7 [ 318.026224][ T7816] loop4: detected capacity change from 0 to 4096 [ 318.342325][ T7790] loop1: detected capacity change from 0 to 32768 [ 318.358543][ T7790] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.462 (7790) [ 318.574820][ T7790] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 318.602470][ T7790] BTRFS info (device loop1): using blake2b checksum algorithm [ 318.661172][ T6986] udevd[6986]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 319.114762][ T6986] udevd[6986]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 319.143125][ T6584] udevd[6584]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 320.211109][ T7790] BTRFS error (device loop1): open_ctree failed: -EINTR [ 320.550226][ T7392] veth0_vlan: entered promiscuous mode [ 321.073756][ T5620] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 323.041328][ T5620] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 323.054280][ T5620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.054332][ T5620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.054390][ T5620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.101032][ T5620] usb 2-1: config 0 descriptor?? [ 323.235878][ T5278] 8021q: adding VLAN 0 to HW filter on device eth8 [ 323.384118][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 323.411808][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 323.426024][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.440458][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.450656][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.837455][ T5620] hid-led 0003:1D34:000A.0009: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 323.888951][ T5620] hid-led 0003:1D34:000A.0009: Dream Cheeky Webmail Notifier initialized [ 325.545547][ T5627] Bluetooth: hci1: command tx timeout [ 326.185100][ T5749] usb 2-1: USB disconnect, device number 5 [ 326.529754][ T7885] fido_id[7885]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 326.620671][ T7889] loop5: detected capacity change from 0 to 4096 [ 326.735495][ T5741] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 327.069471][ T5741] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 327.204796][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.204898][ T5741] usb 4-1: Product: syz [ 327.204945][ T5741] usb 4-1: Manufacturer: syz [ 327.204959][ T5741] usb 4-1: SerialNumber: syz [ 327.378883][ T5741] usb 4-1: config 0 descriptor?? [ 327.625723][ T5627] Bluetooth: hci1: command tx timeout [ 327.802692][ T5741] usb 4-1: f81604_read: reg: 105 failed: -EPIPE [ 327.802744][ T5741] f81604 4-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 327.802791][ T5741] f81604 4-1:0.0: probe with driver f81604 failed with error -32 [ 328.988888][ T7912] binder: 7909:7912 ioctl c0306201 200000000040 returned -14 [ 329.705606][ T5627] Bluetooth: hci1: command tx timeout [ 329.992157][ T9] usb 4-1: USB disconnect, device number 9 [ 332.038246][ T5627] Bluetooth: hci1: command tx timeout [ 334.975093][ T7947] loop1: detected capacity change from 0 to 512 [ 334.992876][ T7947] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 335.036113][ T7947] EXT4-fs (loop1): 1 truncate cleaned up [ 335.058328][ T7947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.230592][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.988867][ T1024] bridge_slave_1: left allmulticast mode [ 337.988914][ T1024] bridge_slave_1: left promiscuous mode [ 337.989168][ T1024] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.014928][ T1024] bridge_slave_0: left allmulticast mode [ 338.022188][ T1024] bridge_slave_0: left promiscuous mode [ 338.031782][ T1024] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.192946][ T1024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.228194][ T1024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.274478][ T1024] bond0 (unregistering): Released all slaves [ 343.476396][ T7869] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.485017][ T7869] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.491377][ T7869] bridge_slave_0: entered allmulticast mode [ 343.527667][ T7869] bridge_slave_0: entered promiscuous mode [ 343.543878][ T8005] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.502'. [ 344.440909][ T1024] hsr_slave_0: left promiscuous mode [ 344.613737][ T1024] hsr_slave_1: left promiscuous mode [ 344.618094][ T1024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.629198][ T1024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.661882][ T1024] veth0_vlan: left promiscuous mode [ 345.833416][ T8021] loop4: detected capacity change from 0 to 2048 [ 346.734039][ T4983] Alternate GPT is invalid, using primary GPT. [ 346.740751][ T4983] loop4: p2 p3 p7 [ 348.129216][ T1024] team0 (unregistering): Port device team_slave_1 removed [ 348.637529][ T1024] team0 (unregistering): Port device team_slave_0 removed [ 349.975705][ T5805] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 349.992042][ T7869] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.992703][ T7869] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.993427][ T7869] bridge_slave_1: entered allmulticast mode [ 350.030339][ T7869] bridge_slave_1: entered promiscuous mode [ 350.060852][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9 [ 350.145335][ T5805] usb 4-1: Using ep0 maxpacket: 16 [ 350.214360][ T5805] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.215511][ T5805] usb 4-1: config 0 has no interfaces? [ 351.039261][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.039318][ T5805] usb 4-1: Product: syz [ 351.039382][ T5805] usb 4-1: Manufacturer: syz [ 351.039403][ T5805] usb 4-1: SerialNumber: syz [ 351.086096][ T5805] usb 4-1: config 0 descriptor?? [ 351.215482][ T7869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.243580][ T7869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.401224][ T9] usb 4-1: USB disconnect, device number 10 [ 352.556644][ T7869] team0: Port device team_slave_0 added [ 352.637207][ T7869] team0: Port device team_slave_1 added [ 352.853312][ T7869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.865734][ T7869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.895589][ T7869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.953447][ T7869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.953490][ T7869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.953602][ T7869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.576512][ T7869] hsr_slave_0: entered promiscuous mode [ 355.199658][ T7869] hsr_slave_1: entered promiscuous mode [ 355.201400][ T7869] debugfs: 'hsr0' already exists in 'hsr' [ 355.201525][ T7869] Cannot create hsr debugfs directory [ 355.781800][ T5876] ------------[ cut here ]------------ [ 355.781850][ T5876] !dev [ 355.781886][ T5876] WARNING: drivers/infiniband/core/restrack.c:138 at res_to_rt+0x1c4/0x230, CPU#1: kworker/u8:12/5876 [ 355.801829][ T5876] Modules linked in: [ 355.806140][ T5876] CPU: 1 UID: 0 PID: 5876 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 355.817459][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.827768][ T5876] Workqueue: ib_addr process_one_req [ 355.833220][ T5876] RIP: 0010:res_to_rt+0x1c4/0x230 [ 355.839371][ T5876] Code: 41 5d 41 5e 41 5f e9 8b 7f 0e 03 cc e8 b5 2f f7 f8 48 8d 3d 4e 0e 97 07 43 0f b6 44 25 00 84 c0 75 48 8b 33 67 48 0f b9 3a 90 <0f> 0b 90 31 c0 eb cc 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 59 fe ff [ 355.859226][ T5876] RSP: 0018:ffffc90005057850 EFLAGS: 00010293 [ 355.865528][ T5876] RAX: ffffffff88d07a95 RBX: ffff8880216864f8 RCX: ffff888031619f40 [ 355.873549][ T5876] RDX: 0000000000000000 RSI: ffffffff8fd99e90 RDI: 0000000000000003 [ 355.881653][ T5876] RBP: 0000000000000000 R08: ffff888031619f40 R09: 000000000000000a [ 355.890027][ T5876] R10: 0000000000000009 R11: 0000000000000000 R12: dffffc0000000000 [ 355.898575][ T5876] R13: 1ffff110042d0c9f R14: 0000000000000000 R15: 0000000000000003 [ 355.906928][ T5876] FS: 0000000000000000(0000) GS:ffff88812500a000(0000) knlGS:0000000000000000 [ 355.916086][ T5876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.922769][ T5876] CR2: 000000110c2a1e59 CR3: 000000007cf08000 CR4: 00000000003526f0 [ 355.930835][ T5876] Call Trace: [ 355.934252][ T5876] [ 355.937351][ T5876] rdma_restrack_add+0x5a/0x8a0 [ 355.942304][ T5876] ? addr_handler+0x406/0x5a0 [ 355.947235][ T5876] addr_handler+0x41a/0x5a0 [ 355.951797][ T5876] ? __pfx_addr_handler+0x10/0x10 [ 355.956944][ T5876] ? __pfx_addr_handler+0x10/0x10 [ 355.962025][ T5876] process_one_req+0x2eb/0x540 [ 355.966916][ T5876] ? process_scheduled_works+0x97a/0x1630 [ 355.972760][ T5876] process_scheduled_works+0xc3d/0x1630 [ 355.978490][ T5876] ? __pfx_process_scheduled_works+0x10/0x10 [ 355.984565][ T5876] ? assign_work+0x3cf/0x5d0 [ 355.989248][ T5876] worker_thread+0xa47/0xfb0 [ 355.993987][ T5876] ? __kthread_parkme+0x71/0x1f0 [ 355.999394][ T5876] kthread+0x38b/0x480 [ 356.003521][ T5876] ? __pfx_worker_thread+0x10/0x10 [ 356.009003][ T5876] ? __pfx_kthread+0x10/0x10 [ 356.013704][ T5876] ret_from_fork+0x514/0xb70 [ 356.018446][ T5876] ? __pfx_ret_from_fork+0x10/0x10 [ 356.023621][ T5876] ? __switch_to+0xc89/0x1420 [ 356.028454][ T5876] ? __pfx_kthread+0x10/0x10 [ 356.033097][ T5876] ret_from_fork_asm+0x1a/0x30 [ 356.038007][ T5876] [ 356.041078][ T5876] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 356.048478][ T5876] CPU: 1 UID: 0 PID: 5876 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 356.058117][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.068225][ T5876] Workqueue: ib_addr process_one_req [ 356.073563][ T5876] Call Trace: [ 356.076874][ T5876] [ 356.079839][ T5876] vpanic+0x56d/0xa60 [ 356.083900][ T5876] ? __pfx__printk+0x10/0x10 [ 356.088535][ T5876] ? __pfx_vpanic+0x10/0x10 [ 356.093097][ T5876] ? is_bpf_text_address+0x292/0x2b0 [ 356.098471][ T5876] ? is_bpf_text_address+0x26/0x2b0 [ 356.103742][ T5876] panic+0xc5/0xd0 [ 356.107518][ T5876] ? __pfx_panic+0x10/0x10 [ 356.112003][ T5876] ? ret_from_fork_asm+0x1a/0x30 [ 356.117007][ T5876] __warn+0x315/0x4c0 [ 356.121053][ T5876] ? res_to_rt+0x1c4/0x230 [ 356.125636][ T5876] ? res_to_rt+0x1c4/0x230 [ 356.130100][ T5876] __report_bug+0x276/0x570 [ 356.134747][ T5876] ? trace_contention_end+0x3d/0x140 [ 356.140114][ T5876] ? res_to_rt+0x1c4/0x230 [ 356.144580][ T5876] ? __pfx___report_bug+0x10/0x10 [ 356.149649][ T5876] ? cma_acquire_dev_by_src_ip+0x733/0x8f0 [ 356.155531][ T5876] ? __mutex_unlock_slowpath+0x731/0x900 [ 356.161318][ T5876] ? res_to_rt+0x1c4/0x230 [ 356.165785][ T5876] report_bug+0x16b/0x220 [ 356.170170][ T5876] ? res_to_rt+0x1c4/0x230 [ 356.174628][ T5876] ? res_to_rt+0x1c6/0x230 [ 356.179097][ T5876] handle_bug+0x9c/0x200 [ 356.183494][ T5876] exc_invalid_op+0x1a/0x50 [ 356.188060][ T5876] asm_exc_invalid_op+0x1a/0x20 [ 356.192992][ T5876] RIP: 0010:res_to_rt+0x1c4/0x230 [ 356.198063][ T5876] Code: 41 5d 41 5e 41 5f e9 8b 7f 0e 03 cc e8 b5 2f f7 f8 48 8d 3d 4e 0e 97 07 43 0f b6 44 25 00 84 c0 75 48 8b 33 67 48 0f b9 3a 90 <0f> 0b 90 31 c0 eb cc 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 59 fe ff [ 356.217739][ T5876] RSP: 0018:ffffc90005057850 EFLAGS: 00010293 [ 356.223883][ T5876] RAX: ffffffff88d07a95 RBX: ffff8880216864f8 RCX: ffff888031619f40 [ 356.231903][ T5876] RDX: 0000000000000000 RSI: ffffffff8fd99e90 RDI: 0000000000000003 [ 356.239915][ T5876] RBP: 0000000000000000 R08: ffff888031619f40 R09: 000000000000000a [ 356.248018][ T5876] R10: 0000000000000009 R11: 0000000000000000 R12: dffffc0000000000 [ 356.256048][ T5876] R13: 1ffff110042d0c9f R14: 0000000000000000 R15: 0000000000000003 [ 356.264073][ T5876] ? res_to_rt+0x225/0x230 [ 356.268573][ T5876] rdma_restrack_add+0x5a/0x8a0 [ 356.273490][ T5876] ? addr_handler+0x406/0x5a0 [ 356.278327][ T5876] addr_handler+0x41a/0x5a0 [ 356.282895][ T5876] ? __pfx_addr_handler+0x10/0x10 [ 356.288039][ T5876] ? __pfx_addr_handler+0x10/0x10 [ 356.293116][ T5876] process_one_req+0x2eb/0x540 [ 356.297923][ T5876] ? process_scheduled_works+0x97a/0x1630 [ 356.303703][ T5876] process_scheduled_works+0xc3d/0x1630 [ 356.309338][ T5876] ? __pfx_process_scheduled_works+0x10/0x10 [ 356.315386][ T5876] ? assign_work+0x3cf/0x5d0 [ 356.320056][ T5876] worker_thread+0xa47/0xfb0 [ 356.324719][ T5876] ? __kthread_parkme+0x71/0x1f0 [ 356.329721][ T5876] kthread+0x38b/0x480 [ 356.333927][ T5876] ? __pfx_worker_thread+0x10/0x10 [ 356.339174][ T5876] ? __pfx_kthread+0x10/0x10 [ 356.343898][ T5876] ret_from_fork+0x514/0xb70 [ 356.348550][ T5876] ? __pfx_ret_from_fork+0x10/0x10 [ 356.353718][ T5876] ? __switch_to+0xc89/0x1420 [ 356.358461][ T5876] ? __pfx_kthread+0x10/0x10 [ 356.363111][ T5876] ret_from_fork_asm+0x1a/0x30 [ 356.367943][ T5876] [ 356.371592][ T5876] Kernel Offset: disabled [ 356.375955][ T5876] Rebooting in 86400 seconds..