last executing test programs: 2m14.598909136s ago: executing program 2 (id=374): r0 = semget(0x1, 0x4, 0x3c4) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0xd}, {0x3, 0x1, 0x1800}], 0x2, 0x0) 2m12.863970829s ago: executing program 2 (id=377): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 2m11.228257259s ago: executing program 2 (id=381): socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x10c000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) 2m3.558537369s ago: executing program 2 (id=400): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[], 0x28}}, 0x4000000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m3.422494042s ago: executing program 2 (id=401): ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x0, @initdev}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000002700)=ANY=[], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) utimes(&(0x7f0000000f80)='./file0\x00', 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r5 = open(&(0x7f0000000000)='./file0\x00', 0x143142, 0x80) sendfile(r5, r5, 0x0, 0x1000000201005) 2m1.727992224s ago: executing program 2 (id=403): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r0, &(0x7f0000000400)={0xa, 0xfffd, 0x0, @empty, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 1m46.153194288s ago: executing program 32 (id=403): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r0, &(0x7f0000000400)={0xa, 0xfffd, 0x0, @empty, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 1m46.09473926s ago: executing program 0 (id=443): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0xff, 0x232, &(0x7f0000000640)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b0110003000040004"], 0x28}, 0x4004004) 1m45.775805187s ago: executing program 0 (id=446): syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x80000000002, 0x30004) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$hiddev(0x0, 0x104, 0x8080) 1m43.699508339s ago: executing program 0 (id=450): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m43.351514508s ago: executing program 0 (id=453): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080), 0x0, 0x0, 0x2) 1m42.116024798s ago: executing program 0 (id=458): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407"], 0x0) open(0x0, 0x8000, 0x112) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m38.135825557s ago: executing program 0 (id=465): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) 1m23.079867228s ago: executing program 33 (id=465): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) 16.99723973s ago: executing program 4 (id=788): r0 = openat$kvm(0x0, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0) 15.035771279s ago: executing program 4 (id=794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x891f}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @dev={0xac, 0x14, 0x14, 0xd}}, {0xa000, 0x86dd, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}}, 0x36) 14.474945242s ago: executing program 4 (id=800): ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x0, @initdev}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000002700)=ANY=[@ANYBLOB="5b37182347bcffffffffffff88a800004305000086dd60f7537200140600ff02000000000000000000000000000100000000000000000000ffff0000000000000000", @ANYRES32=0x41424344, @ANYBLOB="50000000a89eb81a"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) utimes(&(0x7f0000000f80)='./file0\x00', 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r5 = open(&(0x7f0000000000)='./file0\x00', 0x143142, 0x80) sendfile(r5, r5, 0x0, 0x1000000201005) 7.564030483s ago: executing program 6 (id=822): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000004000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bc02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="d2ff03076003008cb89e08f088a8", 0x0, 0xd9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.392711447s ago: executing program 6 (id=825): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r3, &(0x7f00000000c0)}, 0x20) 7.177950562s ago: executing program 6 (id=828): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a9968100000005"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="6f4913451e8b"}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 6.775799212s ago: executing program 6 (id=831): syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x80000000002, 0x30004) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0x8, &(0x7f0000000200)="952bb3e006ae9a4c"}) syz_open_dev$hiddev(0x0, 0x104, 0x8080) 5.770107137s ago: executing program 5 (id=833): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='./my_dbroot', 0xb) close(r0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='1', 0x1) close(r2) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r3, &(0x7f0000001700)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r4, &(0x7f0000001900)='1', 0x1) close(r4) 5.491461734s ago: executing program 1 (id=834): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x400c884) sendmsg$kcm(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000e40)="97", 0x1}], 0x1}, 0x10) 5.26961875s ago: executing program 3 (id=835): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071111400000000008510000002000000850000000000000095000000000000009500a50502000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) 5.226168991s ago: executing program 5 (id=836): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000900)=""/4071, 0xfe7}], 0x1}, 0x12100) 5.068145925s ago: executing program 3 (id=837): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000640)=@framed={{}, [@ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 4.975000997s ago: executing program 3 (id=838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$sock(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000740)="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", 0x2c6}], 0x1}, 0x40c0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 4.917793838s ago: executing program 5 (id=839): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x189001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x100200, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff8864", 0x0, 0xfb, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x13) 4.579334666s ago: executing program 4 (id=840): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091"], 0xfe33) 4.45599122s ago: executing program 1 (id=841): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="6f4913451e8b"}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 4.321282203s ago: executing program 3 (id=842): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 3.898147923s ago: executing program 4 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x200040c4) add_key$fscrypt_v1(&(0x7f0000000340), 0x0, &(0x7f0000000400)={0x0, "cfe062a761e3827b24b8892afdefedeb95e601613685c3359b46736511645680f020b02d24851781ed8c7134d7fd8378d32f107e462b4542f6487e32df24b2e6", 0x40}, 0x48, 0xfffffffffffffff8) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)=@chain) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000280)='$\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0xa00}, 0x2040) syz_usb_connect$cdc_ecm(0x2, 0x51, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023f000101ff8000090400000202060000052406000005240008000d000000001200005305000000042413cf0905"], 0x0) 3.775913357s ago: executing program 5 (id=844): socket$kcm(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 3.775582686s ago: executing program 1 (id=845): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089000000e024c283", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000300)) getsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x8914, &(0x7f0000000040)='dummy0\x00'/40) ioctl(r6, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r6, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r6, 0x890b, &(0x7f0000000100)="00000000000000000000000000000000020000006c6170623000"/64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) close(0x3) socket(0x8, 0x800, 0xdf5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={&(0x7f0000000740)="674eeaf37e6df597d30c072b031c6b3268974b2e9cc7895c19ff9fa43465e6d105ac7b297c91283a673f81c36d51acc906127d57753f3c10c4b09c9671c37fa28f13a27558995567ae4dfc811e7a0a282901fd585f21626be02de00e2dab97c0f190bfe8dd84b5dd393aff4851723989268dc8af9b371942338c86d42d2bec2ea53cb771e3a91d47f3ce2643f4ce12b8db2d9ea2aac4b4dd3da1d304281975d7bc603b51eab080a4ee8fb047a5cf44429a2b3eeae7664018627ad29e802bc4e025892a86b2e25ee5b3265cc33f8c89e1c575bfa5db7e0904962938", &(0x7f0000000b40)=""/213, &(0x7f0000000c40)="8d7d24ba663efc470b53f8f85b179597635c7972d132034ca4d44316a945c361e465cbb072060b64d3912b4dc5b421b44c5fa89f2b7624556c103bb38a80f44367a213dcbf25f986cd9688e33f6e16d25696d5d7dd110bdc12085de731f90d7c1bc86ed933bb0a9a7cf0afa058cb2c3bc052c24b32dcb2269b6c292cb0468eebe74097812eaa54a0130e7d84d054f51a611aef480a86b925", &(0x7f00000008c0)="91d92a5e9820d340cc180e5c6cea5adb2173c7951c9b89c5e15601e9b19e6e5715cfa955d4c6e813e3e78e45d33eb4bd55487b1763bfad59a6f37b7bc3468c01a1adeadc248c74a949c37ec2f95511ef827974a4e0f1486ab8a124154cc2c3cfa06dedfabb4cdfc23d33a93dcb69806d5800be2cba11b103081637719d418b3d809d92f2d630769c653b72e75de3fa300205b5", 0x70, r0}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) 2.225622175s ago: executing program 3 (id=846): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='./my_dbroot', 0xb) close(r0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='1', 0x1) close(r2) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r3, &(0x7f0000001700)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r4, &(0x7f0000001900)='1', 0x1) close(r4) 2.157728857s ago: executing program 6 (id=847): socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) 1.983803621s ago: executing program 1 (id=848): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000001d80)=ANY=[@ANYBLOB='b 0:'], 0xa) 1.849076754s ago: executing program 5 (id=849): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 1.799452195s ago: executing program 3 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = inotify_init1(0x0) fcntl$lock(r4, 0x5, &(0x7f0000000380)={0x0, 0x2, 0x5, 0x7fffffffffffffff}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 1.720072617s ago: executing program 1 (id=851): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='./my_dbroot', 0xb) close(r0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r2, &(0x7f0000001700)='1', 0x1) 1.59059811s ago: executing program 6 (id=852): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}], 0x10, 0xfffffffd}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000ff802f008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 103.078897ms ago: executing program 4 (id=853): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d000009058202"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x5, 0x28, 0x800, 0xfff6, 0x3fc, 0x4, 0x440, 0x6, 0x1000, 0x5, 0x1060, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 59.052548ms ago: executing program 1 (id=854): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/Loopback.0\x00') 0s ago: executing program 5 (id=855): openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYRES8=r0], 0x0) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) socket$unix(0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x3}}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)={'c', ' *:* ', 'rw\x00'}, 0x9) kernel console output (not intermixed with test programs): 27][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.641365][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.648486][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.675327][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.683679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.694877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.706681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.715709][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.722867][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.745509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.760537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.771385][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.778948][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.800584][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.818683][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.830237][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.841336][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.899364][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.907228][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.917123][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.926848][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.936253][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.945433][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.954578][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.964266][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.973659][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.983848][ T4237] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.991037][ T4237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.999117][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.008386][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.016982][ T4237] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.024099][ T4237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.032901][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.042512][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.056767][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.065322][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.073741][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.084315][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.095894][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.104908][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.122048][ T4226] Bluetooth: hci1: command 0x041b tx timeout [ 69.128213][ T4226] Bluetooth: hci3: command 0x041b tx timeout [ 69.151430][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.161427][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.178743][ T4185] device veth0_vlan entered promiscuous mode [ 69.185537][ T4226] Bluetooth: hci0: command 0x041b tx timeout [ 69.192536][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.201645][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.209175][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.217362][ T4226] Bluetooth: hci2: command 0x041b tx timeout [ 69.223733][ T4226] Bluetooth: hci4: command 0x041b tx timeout [ 69.231169][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.243865][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.253235][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.262259][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.271102][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.278898][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.288118][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.296902][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.305368][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.316790][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.327912][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.345614][ T4185] device veth1_vlan entered promiscuous mode [ 69.360291][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.368501][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.378024][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.387999][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.396642][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.406234][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.414850][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.421964][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.434115][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.452155][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.491508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.509435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.518087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.534043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.543071][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.550427][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.599974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.619146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.631128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.640333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.649122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.658748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.668813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.682580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.692497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.705872][ T4185] device veth0_macvtap entered promiscuous mode [ 69.732194][ T4185] device veth1_macvtap entered promiscuous mode [ 69.750811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.761057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.785993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.802659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.815557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.826817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.835605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.845164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.858016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.866918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.891547][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.899997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.908976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.923745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.937344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.953486][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.970021][ T4198] device veth0_vlan entered promiscuous mode [ 69.982871][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.001260][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.008830][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.034778][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.050563][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.072528][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.084249][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.096280][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.105371][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.120853][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.135158][ T4198] device veth1_vlan entered promiscuous mode [ 70.161569][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.172024][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.185113][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.198950][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.269325][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.293332][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.303495][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.323404][ T4198] device veth0_macvtap entered promiscuous mode [ 70.350869][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.359084][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.370721][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.380577][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.389329][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.398563][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.409080][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.418453][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.427221][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.460075][ T4194] device veth0_vlan entered promiscuous mode [ 70.476406][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.487535][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.498805][ T4198] device veth1_macvtap entered promiscuous mode [ 70.512510][ T4192] device veth0_vlan entered promiscuous mode [ 70.524619][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.539733][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.547167][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.552803][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.585257][ T4192] device veth1_vlan entered promiscuous mode [ 70.598110][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.611319][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.622778][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.631219][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.648789][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.660928][ T4194] device veth1_vlan entered promiscuous mode [ 70.682744][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.694164][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.708754][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.736205][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.753081][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.764963][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.777251][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.786178][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.796133][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.805501][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.818087][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.826844][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.836803][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.845962][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.855434][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.875217][ T4192] device veth0_macvtap entered promiscuous mode [ 70.884528][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.899344][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.923204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.938484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.948405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.972440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.998099][ T4192] device veth1_macvtap entered promiscuous mode [ 71.018779][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.035793][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.048494][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.082947][ T4194] device veth0_macvtap entered promiscuous mode [ 71.143515][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.160909][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.174838][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.188393][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.204857][ T4226] Bluetooth: hci3: command 0x040f tx timeout [ 71.211704][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.226593][ T4194] device veth1_macvtap entered promiscuous mode [ 71.237652][ T4226] Bluetooth: hci1: command 0x040f tx timeout [ 71.245601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.262412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.278987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.288277][ T4254] Bluetooth: hci4: command 0x040f tx timeout [ 71.299959][ T4254] Bluetooth: hci2: command 0x040f tx timeout [ 71.306999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.315889][ T4254] Bluetooth: hci0: command 0x040f tx timeout [ 71.327163][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.343189][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.357523][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.370531][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.382010][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.386760][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.388806][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.420534][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.430630][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.824187][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.852151][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.955556][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.007163][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.076917][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.128312][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.335456][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.347016][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.357064][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.374335][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.387496][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.411260][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.424283][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.439033][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.449005][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.459707][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.468744][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.478042][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.503274][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.514254][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.524441][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.536133][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.547052][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.558097][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.569742][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.585137][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.596127][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.608543][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.617538][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.626797][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.635483][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.653603][ T4186] device veth0_vlan entered promiscuous mode [ 72.666151][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.675462][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.685132][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.695274][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.723762][ T4207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.755382][ T4186] device veth1_vlan entered promiscuous mode [ 72.762413][ T4207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.813066][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.827160][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.864875][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.882101][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.909775][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.918087][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.949217][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.963839][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.984702][ T4186] device veth0_macvtap entered promiscuous mode [ 73.038286][ T4186] device veth1_macvtap entered promiscuous mode [ 73.120789][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.128677][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.143286][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.160913][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.189775][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.198166][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.221893][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.235151][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.256477][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.288557][ T4254] Bluetooth: hci1: command 0x0419 tx timeout [ 73.295657][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.313160][ T4254] Bluetooth: hci3: command 0x0419 tx timeout [ 73.323791][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.340936][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.354694][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.366321][ T4254] Bluetooth: hci0: command 0x0419 tx timeout [ 73.378728][ T4254] Bluetooth: hci2: command 0x0419 tx timeout [ 73.380909][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.386384][ T4254] Bluetooth: hci4: command 0x0419 tx timeout [ 73.409365][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.426316][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.442333][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.464535][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.491585][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.515193][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.524768][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.542629][ T4271] loop1: detected capacity change from 0 to 32768 [ 73.572057][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.580144][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.590530][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.602517][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.614832][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.625859][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.632186][ T4271] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.7 (4271) [ 73.638208][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.665526][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.697579][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.733893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.740082][ T4271] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 73.754416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.790339][ T4271] BTRFS info (device loop1): using free space tree [ 73.807036][ T4271] BTRFS info (device loop1): has skinny extents [ 73.807879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.845506][ T4278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 73.878398][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.921858][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.944143][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.964734][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.170595][ T4271] BTRFS info (device loop1): enabling ssd optimizations [ 74.205354][ T4298] xt_hashlimit: size too large, truncated to 1048576 [ 74.409705][ T4307] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.477712][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.509514][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.517973][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.562469][ T4207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.595220][ T4207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.629845][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.703762][ T4312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11'. [ 75.545486][ T4335] loop3: detected capacity change from 0 to 256 [ 75.602551][ T4335] ======================================================= [ 75.602551][ T4335] WARNING: The mand mount option has been deprecated and [ 75.602551][ T4335] and is ignored by this kernel. Remove the mand [ 75.602551][ T4335] option from the mount to silence this warning. [ 75.602551][ T4335] ======================================================= [ 75.757467][ T4335] FAT-fs (loop3): Directory bread(block 64) failed [ 75.841059][ T4335] FAT-fs (loop3): Directory bread(block 65) failed [ 75.847793][ T4335] FAT-fs (loop3): Directory bread(block 66) failed [ 75.854884][ T4335] FAT-fs (loop3): Directory bread(block 67) failed [ 75.866233][ T4335] FAT-fs (loop3): Directory bread(block 68) failed [ 75.895529][ T4335] FAT-fs (loop3): Directory bread(block 69) failed [ 75.905339][ T4335] FAT-fs (loop3): Directory bread(block 70) failed [ 75.940648][ T4335] FAT-fs (loop3): Directory bread(block 71) failed [ 75.948476][ T4335] FAT-fs (loop3): Directory bread(block 72) failed [ 75.980151][ T4335] FAT-fs (loop3): Directory bread(block 73) failed [ 76.223870][ T26] audit: type=1800 audit(1785226052.755:2): pid=4335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.18" name="file1" dev="loop3" ino=1048590 res=0 errno=0 [ 76.233463][ T4335] attempt to access beyond end of device [ 76.233463][ T4335] loop3: rw=0, want=1772, limit=256 [ 76.331289][ T4347] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.482227][ T4347] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.776663][ T4347] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.263634][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 77.321075][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 77.802135][ T4347] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.180283][ T4365] scsi_dev_info_list_add_str: bad dev info string 'e' '(null)' '(null)' [ 78.206204][ T4368] netlink: 16 bytes leftover after parsing attributes in process `syz.4.29'. [ 78.489412][ T4376] loop1: detected capacity change from 0 to 2048 [ 78.596346][ T4386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.38'. [ 78.707203][ T4376] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.826046][ T4376] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 78.992662][ T4376] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 79.048725][ T4376] EXT4-fs (loop1): This should not happen!! Data will be lost [ 79.048725][ T4376] [ 79.068799][ T4376] EXT4-fs (loop1): Total free blocks count 0 [ 79.076395][ T4376] EXT4-fs (loop1): Free/Dirty block details [ 79.096913][ T4376] EXT4-fs (loop1): free_blocks=4096 [ 79.120670][ T4411] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.146545][ T4376] EXT4-fs (loop1): dirty_blocks=32 [ 79.165110][ T4376] EXT4-fs (loop1): Block reservation details [ 79.186375][ T4376] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 79.271922][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 79.285410][ T4226] Bluetooth: hci5: command 0x1003 tx timeout [ 79.295621][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 79.309675][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 79.309675][ T9] [ 79.576650][ T4419] loop1: detected capacity change from 0 to 512 [ 79.714789][ T4419] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 79.736506][ T4419] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.45: corrupted in-inode xattr [ 79.829935][ T4419] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.45: couldn't read orphan inode 15 (err -117) [ 79.888987][ T4419] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 81.335630][ T4444] loop1: detected capacity change from 0 to 164 [ 81.359922][ T4228] Bluetooth: hci5: command 0x1001 tx timeout [ 81.382150][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 81.769084][ T4464] xt_hashlimit: size too large, truncated to 1048576 [ 81.934246][ T4469] loop4: detected capacity change from 0 to 512 [ 81.949227][ T4471] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.141226][ T4469] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.252694][ T4469] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.358258][ T4469] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.59: bad orphan inode 16 [ 82.375767][ T4469] ext4_test_bit(bit=15, block=4) = 0 [ 82.381267][ T4469] EXT4-fs (loop4): 1 orphan inode deleted [ 82.387033][ T4469] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,max_dir_size_kb=0x000000000000004b,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000000008,acl,stripe=0x0000000000000002,max_batch_time=0x0000000000008e6e,acl,auto_da_alloc,,errors=continue. Quota mode: none. [ 83.295400][ T4504] capability: warning: `syz.0.69' uses 32-bit capabilities (legacy support in use) [ 83.437657][ T4509] netlink: 620 bytes leftover after parsing attributes in process `syz.3.70'. [ 83.448994][ T4231] Bluetooth: hci5: command 0x1009 tx timeout [ 84.471104][ T4530] loop3: detected capacity change from 0 to 512 [ 84.500512][ T4531] Illegal XDP return value 4294967294, expect packet loss! [ 84.519909][ T4530] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.78: iget: bad i_size value: 38620345925642 [ 84.550672][ T4530] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.78: couldn't read orphan inode 15 (err -117) [ 84.590642][ T4530] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.647822][ T4530] EXT4-fs error (device loop3): empty_inline_dir:1881: inode #12: block 7: comm syz.3.78: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 84.738038][ T4530] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 84.749224][ T4536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.81'. [ 84.972297][ T4544] netlink: 620 bytes leftover after parsing attributes in process `syz.3.86'. [ 85.220859][ T4551] loop4: detected capacity change from 0 to 164 [ 86.072600][ T4551] device syzkaller0 entered promiscuous mode [ 86.169991][ T4565] loop1: detected capacity change from 0 to 1024 [ 86.344316][ T4565] Quota error (device loop1): find_tree_dqentry: Getting block too big (64 >= 6) [ 86.406683][ T4565] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 86.430883][ T4565] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.93: Failed to acquire dquot type 0 [ 86.471151][ T4565] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 86.498660][ T4565] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #13: comm syz.1.93: corrupted inode contents [ 86.528411][ T4565] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #13: comm syz.1.93: mark_inode_dirty error [ 86.544639][ T4565] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #13: comm syz.1.93: corrupted inode contents [ 86.669725][ T4565] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #13: comm syz.1.93: mark_inode_dirty error [ 86.697606][ T4565] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #13: comm syz.1.93: corrupted inode contents [ 86.750730][ T7] cfg80211: failed to load regulatory.db [ 86.849697][ T4565] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 86.875667][ T4565] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #13: comm syz.1.93: corrupted inode contents [ 86.969417][ T4565] EXT4-fs error (device loop1): ext4_truncate:4286: inode #13: comm syz.1.93: mark_inode_dirty error [ 86.988868][ T4565] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 87.032603][ T4565] EXT4-fs (loop1): 1 truncate cleaned up [ 87.038331][ T4565] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.408550][ T4585] netlink: 608 bytes leftover after parsing attributes in process `syz.0.100'. [ 87.503707][ T4590] loop2: detected capacity change from 0 to 512 [ 87.580010][ T4590] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 87.662328][ T4590] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.120255][ T4602] loop1: detected capacity change from 0 to 128 [ 88.185450][ T4602] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.219181][ T4602] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 88.311373][ T4207] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.925254][ T4633] netlink: 608 bytes leftover after parsing attributes in process `syz.2.115'. [ 89.935094][ T4615] netlink: 'syz.1.109': attribute type 4 has an invalid length. [ 90.032048][ T4634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 90.317735][ T4643] futex_wake_op: syz.4.117 tries to shift op by 144; fix this program [ 91.211689][ T4653] netlink: 'syz.1.120': attribute type 4 has an invalid length. [ 91.233104][ T4653] netlink: 17 bytes leftover after parsing attributes in process `syz.1.120'. [ 91.312883][ T4653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'. [ 91.348713][ T4660] usbip-vudc usbip-vudc.0: gadget not bound [ 91.421527][ T4653] netlink: 'syz.1.120': attribute type 5 has an invalid length. [ 91.609705][ T4669] device syzkaller0 entered promiscuous mode [ 91.684864][ T4674] device syzkaller0 entered promiscuous mode [ 91.912113][ T4680] netlink: 608 bytes leftover after parsing attributes in process `syz.3.133'. [ 92.158442][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 92.223679][ T7] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 92.592964][ T4707] loop3: detected capacity change from 0 to 512 [ 92.704908][ T4707] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 92.793322][ T4707] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.808046][ T4712] loop2: detected capacity change from 0 to 1024 [ 92.823088][ T4714] loop4: detected capacity change from 0 to 128 [ 92.854118][ T4712] EXT4-fs (loop2): Ignoring removed nobh option [ 92.919392][ T4712] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,nobh,delalloc,nogrpid,i_version,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 92.920170][ T4714] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.011492][ T4714] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.155293][ T4723] netlink: 'syz.3.146': attribute type 4 has an invalid length. [ 93.191449][ T4723] netlink: 17 bytes leftover after parsing attributes in process `syz.3.146'. [ 93.279814][ T4723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 93.431623][ T4726] netlink: 'syz.3.146': attribute type 5 has an invalid length. [ 93.606306][ T4735] netlink: 'syz.2.152': attribute type 1 has an invalid length. [ 93.618865][ T4736] netlink: 608 bytes leftover after parsing attributes in process `syz.4.153'. [ 94.649645][ T4735] : renamed from dummy0 [ 95.300549][ T4777] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.837562][ T4797] netlink: 608 bytes leftover after parsing attributes in process `syz.3.171'. [ 97.749669][ T4808] loop4: detected capacity change from 0 to 2048 [ 98.040509][ T4808] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.116267][ T4813] device syzkaller0 entered promiscuous mode [ 98.122933][ T26] audit: type=1800 audit(1785226330.705:3): pid=4808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.175" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 98.290168][ T4829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 98.464245][ T4834] loop4: detected capacity change from 0 to 512 [ 98.538480][ T4834] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.183: casefold flag without casefold feature [ 98.576993][ T4834] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.183: couldn't read orphan inode 15 (err -117) [ 98.636185][ T4834] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000b7,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 99.573040][ T4846] netlink: 608 bytes leftover after parsing attributes in process `syz.3.188'. [ 101.023428][ T4869] device syzkaller0 entered promiscuous mode [ 102.189838][ T4323] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.499473][ C0] sched: RT throttling activated [ 102.709223][ T4900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 102.786447][ T4323] usb 4-1: Using ep0 maxpacket: 16 [ 102.920271][ T4323] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 102.962227][ T4323] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 103.060067][ T4323] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 103.158504][ T4323] usb 4-1: config 0 has no interface number 1 [ 103.232424][ T4323] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 103.459660][ T4323] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 103.475447][ T4323] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 103.501729][ T4323] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.537445][ T4323] usb 4-1: config 0 interface 125 has no altsetting 0 [ 103.709965][ T4323] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 103.747277][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.773145][ T4323] usb 4-1: Product: syz [ 103.788002][ T4323] usb 4-1: Manufacturer: syz [ 103.798143][ T4323] usb 4-1: SerialNumber: syz [ 103.845084][ T4323] usb 4-1: config 0 descriptor?? [ 103.899422][ T4917] autofs4:pid:4917:autofs_fill_super: called with bogus options [ 103.919988][ T4323] usb 4-1: can't set config #0, error -71 [ 103.951134][ T4917] process 'syz.2.214' launched './file1' with NULL argv: empty string added [ 103.970863][ T4323] usb 4-1: USB disconnect, device number 2 [ 106.035660][ T4951] syz.2.226 uses obsolete (PF_INET,SOCK_PACKET) [ 107.277300][ T4974] device syzkaller0 entered promiscuous mode [ 109.727012][ T5013] futex_wake_op: syz.2.246 tries to shift op by 144; fix this program [ 110.156320][ T5032] db_root: cannot be changed: target drivers registered [ 110.184982][ T5032] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 110.217434][ T5032] filp_open(/var/target/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 111.408945][ T5042] loop4: detected capacity change from 0 to 512 [ 111.603363][ T5042] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 112.276609][ T5042] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000006,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 112.555933][ T5059] program syz.1.263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.561912][ T5042] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.715092][ T5066] futex_wake_op: syz.3.261 tries to shift op by 144; fix this program [ 113.492913][ T5068] netlink: 556 bytes leftover after parsing attributes in process `syz.1.265'. [ 113.569198][ T5072] loop2: detected capacity change from 0 to 512 [ 113.686994][ T5072] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.702625][ T5083] loop4: detected capacity change from 0 to 512 [ 113.722921][ T5072] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.782162][ T5083] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.810833][ T5083] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.859951][ T5087] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 115.132772][ T5113] futex_wake_op: syz.4.278 tries to shift op by 144; fix this program [ 116.110847][ T5127] netlink: 556 bytes leftover after parsing attributes in process `syz.4.287'. [ 116.236988][ T5131] loop3: detected capacity change from 0 to 256 [ 116.333096][ T5133] loop2: detected capacity change from 0 to 2048 [ 116.738615][ T5133] loop2: p1 p2 p3 p4 [ 116.738615][ T5133] p1: [ 117.236200][ T5133] loop2: p1 size 67110656 extends beyond EOD, truncated [ 117.295535][ T5133] loop2: p3 size 134217728 extends beyond EOD, truncated [ 117.346236][ T5133] loop2: p4 size 4278190080 extends beyond EOD, truncated [ 117.423788][ T5150] futex_wake_op: syz.4.294 tries to shift op by 144; fix this program [ 117.617070][ T5133] loop2: p5 size 67110656 extends beyond EOD, truncated [ 117.914017][ T5133] loop2: p6 size 134217728 extends beyond EOD, truncated [ 118.236463][ T5153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.295'. [ 118.274127][ T5159] netlink: 124 bytes leftover after parsing attributes in process `syz.3.296'. [ 118.289307][ T3558] loop2: p1 p2 p3 p4 [ 118.289307][ T3558] p1: [ 118.305848][ T3558] loop2: p1 size 67110656 extends beyond EOD, truncated [ 118.346545][ T3558] loop2: p3 size 134217728 extends beyond EOD, truncated [ 118.362176][ T3558] loop2: p4 size 4278190080 extends beyond EOD, truncated [ 118.377196][ T3558] loop2: p5 size 67110656 extends beyond EOD, truncated [ 118.396048][ T3558] loop2: p6 size 134217728 extends beyond EOD, truncated [ 119.526896][ T5181] netlink: 556 bytes leftover after parsing attributes in process `syz.4.305'. [ 119.876591][ T5199] futex_wake_op: syz.1.308 tries to shift op by 144; fix this program [ 120.663997][ T5189] crypto_alloc_aead failed rc=-2 [ 120.715566][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 120.743017][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 120.756750][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 120.805456][ T5210] udevd[5210]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 120.886840][ T5208] udevd[5208]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 120.922088][ T5209] udevd[5209]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 121.032546][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 121.045839][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 121.064682][ T5210] udevd[5210]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 121.065308][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 121.084779][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.270965][ T5234] smpboot: CPU 1 is now offline [ 123.299984][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 123.409641][ T23] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 123.449598][ T23] usb 2-1: can't read configurations, error -71 [ 124.916841][ T5249] futex_wake_op: syz.2.321 tries to shift op by 144; fix this program [ 124.994735][ T5252] netlink: 'syz.0.323': attribute type 2 has an invalid length. [ 125.099763][ T5255] netlink: 308 bytes leftover after parsing attributes in process `syz.3.324'. [ 125.303191][ T5263] loop1: detected capacity change from 0 to 1024 [ 125.326475][ T5266] loop4: detected capacity change from 0 to 128 [ 125.372338][ T5263] EXT4-fs (loop1): Ignoring removed nobh option [ 125.412803][ T5266] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 125.477182][ T5263] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,i_version,grpquota,max_batch_time=0x0000000000000003,user_xattr,min_batch_time=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 125.590937][ T1172] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 125.676123][ T5276] autofs4:pid:5276:autofs_fill_super: called with bogus options [ 125.935036][ T5276] loop2: detected capacity change from 0 to 2048 [ 127.492610][ T5263] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 127.684600][ T5263] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 444 with error 28 [ 127.707725][ T5276] Alternate GPT is invalid, using primary GPT. [ 127.775575][ T5276] loop2: p2 p3 p7 [ 127.823505][ T5263] EXT4-fs (loop1): This should not happen!! Data will be lost [ 127.823505][ T5263] [ 127.937645][ T5263] EXT4-fs (loop1): Total free blocks count 0 [ 129.278184][ T5303] futex_wake_op: syz.3.335 tries to shift op by 144; fix this program [ 129.377185][ T5263] EXT4-fs (loop1): Free/Dirty block details [ 129.494669][ T5263] EXT4-fs (loop1): free_blocks=20480 [ 129.561845][ T5263] EXT4-fs (loop1): dirty_blocks=448 [ 129.634320][ T5263] EXT4-fs (loop1): Block reservation details [ 129.693479][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 129.709161][ T5210] udevd[5210]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 129.738864][ T5263] EXT4-fs (loop1): i_reserved_data_blocks=28 [ 129.778988][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 130.193831][ T5323] loop2: detected capacity change from 0 to 128 [ 130.231768][ T5324] loop4: detected capacity change from 0 to 764 [ 130.263635][ T5326] netlink: 308 bytes leftover after parsing attributes in process `syz.1.341'. [ 131.833036][ T5324] rock: directory entry would overflow storage [ 131.986216][ T5324] rock: sig=0x4654, size=5, remaining=4 [ 132.034714][ T5334] device bond0 entered promiscuous mode [ 132.112861][ T5334] device bond_slave_0 entered promiscuous mode [ 132.156594][ T5334] device bond_slave_1 entered promiscuous mode [ 133.503759][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.510438][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.707881][ T5343] futex_wake_op: syz.0.348 tries to shift op by 144; fix this program [ 134.069589][ T4228] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 135.695824][ T4228] usb 5-1: Using ep0 maxpacket: 16 [ 135.829597][ T4228] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 135.879836][ T4228] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 135.932219][ T4228] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 135.968346][ T5382] netlink: 308 bytes leftover after parsing attributes in process `syz.3.362'. [ 135.992424][ T4228] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 136.032932][ T4228] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 136.067797][ T4228] usb 5-1: config 0 has no interface number 0 [ 136.093948][ T4228] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 136.134038][ T4228] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 136.172144][ T4228] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.213027][ T4228] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.257664][ T4228] usb 5-1: config 0 interface 125 has no altsetting 2 [ 137.785892][ T5391] futex_wake_op: syz.0.363 tries to shift op by 144; fix this program [ 137.849668][ T4228] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 137.946623][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.984296][ T4228] usb 5-1: Product: syz [ 138.008848][ T4228] usb 5-1: Manufacturer: syz [ 138.053049][ T4228] usb 5-1: config 0 descriptor?? [ 138.138535][ T4228] usb 5-1: can't set config #0, error -71 [ 138.166385][ T5397] loop4: detected capacity change from 0 to 4096 [ 138.202572][ T4228] usb 5-1: USB disconnect, device number 2 [ 138.363445][ T5397] EXT4-fs (loop4): Ignoring removed bh option [ 138.589990][ T5397] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: writeback. [ 138.657469][ T5420] device syzkaller0 entered promiscuous mode [ 141.773373][ T5436] futex_wake_op: syz.1.376 tries to shift op by 144; fix this program [ 141.960115][ T5441] netlink: 620 bytes leftover after parsing attributes in process `syz.3.378'. [ 143.524215][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.456716][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.465066][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.428525][ T5481] futex_wake_op: syz.3.390 tries to shift op by 144; fix this program [ 148.612839][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.798482][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.808164][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.834228][ T5492] loop3: detected capacity change from 0 to 512 [ 148.972073][ T5492] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.075613][ T5492] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 149.159638][ T4228] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 149.188428][ T5492] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.394: Invalid block bitmap block 0 in block_group 0 [ 149.241964][ T5503] autofs4:pid:5503:autofs_fill_super: called with bogus options [ 149.258071][ T5504] netlink: 620 bytes leftover after parsing attributes in process `syz.4.397'. [ 149.312434][ T5492] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 149.371065][ T5492] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.394: attempt to clear invalid blocks 983261 len 1 [ 149.449566][ T4228] usb 2-1: Using ep0 maxpacket: 16 [ 149.473508][ T5492] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.394: Invalid inode table block 0 in block_group 0 [ 149.574237][ T4228] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 149.583857][ T5492] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 149.613373][ T4228] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 149.641720][ T5492] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 149.652964][ T4228] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 149.672933][ T5492] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.394: Invalid inode table block 0 in block_group 0 [ 149.716699][ T4228] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 149.745479][ T4228] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 149.775269][ T5492] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 149.789556][ T4228] usb 2-1: config 0 has no interface number 0 [ 149.809926][ T5492] EXT4-fs error (device loop3): ext4_truncate:4286: inode #11: comm syz.3.394: mark_inode_dirty error [ 149.846234][ T4228] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 149.888213][ T5492] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 149.913847][ T4228] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 149.953724][ T5492] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.394: Invalid inode table block 0 in block_group 0 [ 151.392786][ T4228] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 151.432438][ T5492] EXT4-fs (loop3): 1 truncate cleaned up [ 151.443068][ T4228] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.474127][ T5492] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 151.558332][ T4228] usb 2-1: config 0 interface 125 has no altsetting 0 [ 151.581173][ T5529] xt_hashlimit: size too large, truncated to 1048576 [ 151.623306][ T4228] usb 2-1: config 0 interface 125 has no altsetting 2 [ 151.709624][ T4228] usb 2-1: string descriptor 0 read error: -71 [ 151.722028][ T5534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.766695][ T4228] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 151.816010][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.086504][ T5535] futex_wake_op: syz.4.404 tries to shift op by 144; fix this program [ 152.161952][ T4228] usb 2-1: config 0 descriptor?? [ 152.219754][ T4228] usb 2-1: can't set config #0, error -71 [ 152.251250][ T4228] usb 2-1: USB disconnect, device number 4 [ 152.299178][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.310328][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.430160][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.332370][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.386789][ T5560] netlink: 620 bytes leftover after parsing attributes in process `syz.3.412'. [ 156.210058][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.218427][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.353313][ T4231] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 156.554570][ T5584] netlink: 'syz.3.418': attribute type 10 has an invalid length. [ 156.639702][ T4231] usb 2-1: Using ep0 maxpacket: 16 [ 156.645669][ T5584] device syz_tun entered promiscuous mode [ 156.728428][ T5584] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 156.779817][ T4231] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 156.822016][ T4231] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 156.887551][ T4231] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 156.947849][ T4231] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 157.112420][ T4231] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 158.531882][ T4231] usb 2-1: config 0 has no interface number 0 [ 158.608046][ T5600] futex_wake_op: syz.4.421 tries to shift op by 144; fix this program [ 158.633174][ T4231] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 158.702477][ T4231] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 158.812248][ T4231] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 158.880244][ T4231] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 158.956257][ T4231] usb 2-1: config 0 interface 125 has no altsetting 0 [ 158.994909][ T4231] usb 2-1: config 0 interface 125 has no altsetting 2 [ 159.089593][ T4231] usb 2-1: string descriptor 0 read error: -71 [ 159.112563][ T4231] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 159.158918][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.809341][ T4231] usb 2-1: config 0 descriptor?? [ 160.869687][ T4231] usb 2-1: can't set config #0, error -71 [ 160.968051][ T4231] usb 2-1: USB disconnect, device number 5 [ 161.052846][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.062121][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.455133][ T5638] loop4: detected capacity change from 0 to 1024 [ 161.631646][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.736357][ T5638] EXT4-fs (loop4): inline encryption not supported [ 163.197905][ T5645] futex_wake_op: syz.1.434 tries to shift op by 144; fix this program [ 163.234615][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.302311][ T5638] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #3: block 1: comm syz.4.431: lblock 1 mapped to illegal pblock 1 (length 1) [ 163.753821][ T5638] EXT4-fs (loop4): Remounting filesystem read-only [ 163.788845][ T5638] Quota error (device loop4): write_blk: dquota write failed [ 165.368258][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.376752][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.389308][ T5638] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 165.516683][ T5638] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.431: Failed to acquire dquot type 0 [ 166.516338][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.002555][ T5662] futex_wake_op: syz.0.439 tries to shift op by 144; fix this program [ 167.428896][ T5638] EXT4-fs (loop4): Remounting filesystem read-only [ 167.553992][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.663173][ T5638] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.431: Freeing blocks not in datazone - block = 0, count = 4096 [ 167.916293][ T5638] EXT4-fs (loop4): Remounting filesystem read-only [ 169.415513][ T1172] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 169.434104][ T5638] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.431: Invalid inode bitmap blk 0 in block_group 0 [ 169.450022][ T5687] binder: 5682:5687 ioctl c0306201 0 returned -14 [ 169.471133][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.479560][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.633447][ T1172] EXT4-fs (loop4): Remounting filesystem read-only [ 169.683175][ T1172] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 169.767112][ T1172] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 169.866568][ T5638] EXT4-fs (loop4): Remounting filesystem read-only [ 169.882526][ T5678] chnl_net:caif_netlink_parms(): no params data found [ 169.914009][ T1172] EXT4-fs (loop4): Remounting filesystem read-only [ 169.920740][ T4231] Bluetooth: hci5: command 0x0409 tx timeout [ 170.115026][ T5638] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 170.239552][ T5638] EXT4-fs (loop4): Remounting filesystem read-only [ 170.292601][ T5678] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.333816][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.351696][ T5638] EXT4-fs (loop4): 1 orphan inode deleted [ 170.400042][ T5678] device bridge_slave_0 entered promiscuous mode [ 170.445955][ T5711] loop3: detected capacity change from 0 to 1024 [ 170.455832][ T5678] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.465210][ T5638] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; abort,journal_ioprio=0x0000000000000002,noinit_itable,errors=remount-ro,auto_da_alloc,inlinecrypt,. Quota mode: writeback. [ 170.513880][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.533831][ T5711] EXT4-fs (loop3): Ignoring removed bh option [ 170.560715][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.578170][ T5678] device bridge_slave_1 entered promiscuous mode [ 170.611407][ T5711] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 170.713946][ T5678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.802727][ T5678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.830277][ T5711] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 170.966835][ T5678] team0: Port device team_slave_0 added [ 171.038486][ T5678] team0: Port device team_slave_1 added [ 171.215864][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.231745][ T4270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.267096][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.445001][ T5678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.508655][ T1107] Bluetooth: hci5: command 0x041b tx timeout [ 172.901469][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.972670][ T4270] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 172.988757][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.074830][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.135328][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.514943][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.707019][ T4240] Bluetooth: hci5: command 0x040f tx timeout [ 174.722845][ T5678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.733857][ T4270] usb 4-1: Using ep0 maxpacket: 16 [ 174.809688][ T4270] usb 4-1: device descriptor read/all, error -71 [ 174.833529][ T5736] loop3: detected capacity change from 0 to 512 [ 174.988182][ T5678] device hsr_slave_0 entered promiscuous mode [ 175.072027][ T5678] device hsr_slave_1 entered promiscuous mode [ 175.170403][ T5678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.234321][ T5678] Cannot create hsr debugfs directory [ 175.385841][ T5747] loop3: detected capacity change from 0 to 1024 [ 175.524986][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.561795][ T5747] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 175.616965][ T5747] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 175.723558][ T5747] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 175.831870][ T5747] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 175.899708][ T5747] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 175.919675][ T4270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.207389][ T5744] ODEBUG: Out of memory. ODEBUG disabled [ 176.424162][ T5678] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.518357][ T5678] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.566523][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.647115][ T5678] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 176.721639][ T5678] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 176.799698][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 177.199756][ T5678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.516236][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.972300][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.981688][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.996567][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.068938][ T5678] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.236202][ T4924] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.385464][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.470746][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.479082][ T4237] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.486199][ T4237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.678372][ T4924] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.728045][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.755793][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.793024][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.824859][ T4237] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.832004][ T4237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.878101][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.938521][ T4924] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.065062][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.123753][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.200569][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.213676][ T5794] netlink: 36 bytes leftover after parsing attributes in process `syz.3.480'. [ 180.393744][ T4924] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.489766][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.540050][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.609958][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.618480][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.720183][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.750163][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.786206][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.827673][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.852890][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.915068][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.045941][ T5678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.355202][ T5831] loop1: detected capacity change from 0 to 1024 [ 182.522732][ T5831] EXT4-fs (loop1): Ignoring removed bh option [ 182.617630][ T5831] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 182.985612][ T26] audit: type=1800 audit(1785226415.565:4): pid=5831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.487" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 183.118253][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.148865][ T26] audit: type=1804 audit(1785226415.595:5): pid=5845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.487" name="/newroot/92/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 183.180126][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.340203][ T1107] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 183.408497][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.442501][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.548487][ T5678] device veth0_vlan entered promiscuous mode [ 183.579113][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.586870][ T1107] usb 4-1: Using ep0 maxpacket: 16 [ 183.631512][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.724078][ T1107] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 183.735203][ T5678] device veth1_vlan entered promiscuous mode [ 183.770724][ T1107] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 183.849498][ T1107] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 183.859733][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.867783][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 183.906276][ T1107] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 183.937822][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.958295][ T1107] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 183.997302][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.024377][ T1107] usb 4-1: config 0 has no interface number 0 [ 184.055535][ T1107] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 184.081687][ T5678] device veth0_macvtap entered promiscuous mode [ 184.110977][ T5678] device veth1_macvtap entered promiscuous mode [ 184.128600][ T1107] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 184.196926][ T1107] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 184.238067][ T1107] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.259248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.287557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.327571][ T1107] usb 4-1: config 0 interface 125 has no altsetting 0 [ 184.348107][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.380382][ T1107] usb 4-1: config 0 interface 125 has no altsetting 2 [ 184.423638][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.480492][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.503206][ T5873] loop1: detected capacity change from 0 to 512 [ 184.544963][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.569691][ T1107] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 184.620192][ T5873] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 184.628195][ T5873] System zones: 1-12 [ 184.636325][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.654538][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.688296][ T1107] usb 4-1: Product: syz [ 184.707665][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.724085][ T1107] usb 4-1: Manufacturer: syz [ 184.741131][ T5873] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.492: error while reading EA inode 32 err=-116 [ 184.758990][ T1107] usb 4-1: SerialNumber: syz [ 184.787048][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.800288][ T1107] usb 4-1: config 0 descriptor?? [ 184.838868][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.851301][ T1107] usb 4-1: selecting invalid altsetting 2 [ 184.866245][ T5873] EXT4-fs (loop1): Remounting filesystem read-only [ 184.903645][ T5873] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.492: error while reading EA inode 32 err=-116 [ 184.924373][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.965393][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.995896][ T5873] EXT4-fs (loop1): Remounting filesystem read-only [ 185.011637][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.039343][ T5873] EXT4-fs (loop1): 1 orphan inode deleted [ 185.093425][ T5873] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsddf,jqfmt=vfsv1,grpid,. Quota mode: none. [ 185.189493][ C0] usb 4-1: async_complete: urb error -71 [ 185.195684][ C0] usb 4-1: async_complete: urb error -71 [ 185.201354][ C0] usb 4-1: async_complete: urb error -71 [ 185.207017][ C0] usb 4-1: async_complete: urb error -71 [ 185.226188][ T1107] get_1284_register: usb error -71 [ 185.252745][ T1107] usb 4-1: USB disconnect, device number 5 [ 185.266515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.308906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.363958][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.397512][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.416955][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.453390][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.476637][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.503108][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.525640][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.553078][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.575335][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.598930][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.648817][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.677188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.760595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.929591][ T5678] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.958614][ T5678] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.019491][ T5678] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.069575][ T5678] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.083791][ T5892] loop3: detected capacity change from 0 to 8192 [ 186.162752][ T5892] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.244918][ T5892] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 186.400958][ T5892] FAT-fs (loop3): Filesystem has been set read-only [ 186.663240][ T4742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.725301][ T4742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.846832][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.879824][ T5902] loop1: detected capacity change from 0 to 8192 [ 186.909351][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.998929][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.066665][ T5688] loop1: p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 187.068235][ T5688] loop1: p3 start 524032 is beyond EOD, [ 187.209978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.487973][ T4924] device hsr_slave_0 left promiscuous mode [ 187.578995][ T4924] device hsr_slave_1 left promiscuous mode [ 187.698889][ T4924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.760459][ T4924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.807448][ T4924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.833895][ T5688] truncated [ 187.844062][ T4924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.887639][ T4924] device bridge_slave_1 left promiscuous mode [ 187.929456][ T4924] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.008292][ T4924] device bridge_slave_0 left promiscuous mode [ 188.036932][ T4924] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.159268][ T4924] device veth1_macvtap left promiscuous mode [ 188.188273][ T4924] device veth0_macvtap left promiscuous mode [ 188.223883][ T4924] device veth1_vlan left promiscuous mode [ 188.249205][ T4924] device veth0_vlan left promiscuous mode [ 189.352253][ T4924] team0 (unregistering): Port device team_slave_1 removed [ 189.419212][ T4924] team0 (unregistering): Port device team_slave_0 removed [ 189.498129][ T4924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.566881][ T4924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.877981][ T5902] loop1: p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 189.888134][ T5902] loop1: p3 start 524032 is beyond EOD, [ 189.997874][ T4924] bond0 (unregistering): Released all slaves [ 191.038470][ T5902] truncated [ 191.199917][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 191.235866][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 191.302130][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 191.339518][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 192.432155][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 192.968361][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.047831][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.120776][ T5961] device bridge_slave_0 entered promiscuous mode [ 193.145105][ T4270] Bluetooth: hci4: command 0x0409 tx timeout [ 193.169603][ T4228] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 193.196519][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.290899][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.374666][ T5961] device bridge_slave_1 entered promiscuous mode [ 193.561287][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.579709][ T4228] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.606794][ T4228] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 193.683796][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.760569][ T4228] usb 4-1: config 0 descriptor?? [ 193.769511][ T1107] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 193.917887][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.149883][ T5961] team0: Port device team_slave_0 added [ 194.169747][ T1107] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 194.224495][ T1107] usb 6-1: config 0 has no interface number 0 [ 194.231588][ T5961] team0: Port device team_slave_1 added [ 194.246052][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.252383][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.280071][ T4228] hid (null): global environment stack underflow [ 194.317620][ T1107] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.341512][ T4228] hid (null): global environment stack underflow [ 194.347887][ T4228] hid (null): invalid report_size 13705 [ 194.444274][ T1107] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.455397][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.472236][ T4228] bigben 0003:146B:0902.0002: unexpected rdesc, please submit for review [ 194.535379][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.570827][ T1107] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 194.599131][ T4228] bigben 0003:146B:0902.0002: global environment stack underflow [ 194.639491][ T1107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.674543][ T4228] bigben 0003:146B:0902.0002: item 0 0 1 11 parsing failed [ 194.715433][ T1107] usb 6-1: config 0 descriptor?? [ 194.726585][ T4228] bigben 0003:146B:0902.0002: parse failed [ 194.759544][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.781233][ T4228] bigben: probe of 0003:146B:0902.0002 failed with error -22 [ 194.862887][ T4228] usb 4-1: USB disconnect, device number 6 [ 195.110119][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.166729][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.231176][ T1107] prodikeys 0003:041E:2801.0003: item fetching failed at offset 5/7 [ 195.268966][ T5738] udevd[5738]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 195.310934][ T5688] udevd[5688]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 195.328880][ T5966] udevd[5966]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 195.347300][ T1107] prodikeys 0003:041E:2801.0003: hid parse failed [ 195.409622][ T1107] prodikeys: probe of 0003:041E:2801.0003 failed with error -22 [ 195.546643][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.579602][ T1107] usb 6-1: USB disconnect, device number 2 [ 195.617909][ T5738] udevd[5738]: inotify_add_watch(7, /dev/loop1p14, 10) failed: No such file or directory [ 195.711165][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 195.746298][ T5688] udevd[5688]: inotify_add_watch(7, /dev/loop1p15, 10) failed: No such file or directory [ 195.758586][ T5663] udevd[5663]: inotify_add_watch(7, /dev/loop1p16, 10) failed: No such file or directory [ 195.771207][ T5966] udevd[5966]: inotify_add_watch(7, /dev/loop1p17, 10) failed: No such file or directory [ 195.892173][ T5738] udevd[5738]: inotify_add_watch(7, /dev/loop1p18, 10) failed: No such file or directory [ 196.132484][ T5688] udevd[5688]: inotify_add_watch(7, /dev/loop1p20, 10) failed: No such file or directory [ 196.145088][ T5738] udevd[5738]: inotify_add_watch(7, /dev/loop1p19, 10) failed: No such file or directory [ 196.359122][ T5961] device hsr_slave_0 entered promiscuous mode [ 196.534244][ T5961] device hsr_slave_1 entered promiscuous mode [ 196.585126][ T5961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.682006][ T5961] Cannot create hsr debugfs directory [ 197.509841][ T6083] overlayfs: overlapping lowerdir path [ 197.749488][ T7] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 197.858820][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 198.209727][ T7] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.277980][ T5961] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 198.295231][ T7] usb 4-1: config 0 has no interface number 0 [ 198.335692][ T7] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 198.450016][ T7] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.522504][ T7] usb 4-1: config 0 interface 1 has no altsetting 0 [ 198.625204][ T7] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 198.694027][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.762198][ T7] usb 4-1: config 0 descriptor?? [ 198.856005][ T5961] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 198.968225][ T5961] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 199.489625][ T7] uclogic 0003:2179:0053.0004: failed retrieving string descriptor #100: -71 [ 199.589742][ T7] uclogic 0003:2179:0053.0004: failed retrieving pen parameters: -71 [ 199.654866][ T7] uclogic 0003:2179:0053.0004: pen probing failed: -71 [ 199.771872][ T7] uclogic 0003:2179:0053.0004: failed probing parameters: -71 [ 199.942982][ T7] uclogic: probe of 0003:2179:0053.0004 failed with error -71 [ 200.119621][ T7] usb 4-1: USB disconnect, device number 7 [ 200.280736][ T6048] udevd[6048]: inotify_add_watch(7, /dev/loop1p210, 10) failed: No such file or directory [ 200.294329][ T6046] udevd[6046]: inotify_add_watch(7, /dev/loop1p215, 10) failed: No such file or directory [ 200.317478][ T6047] udevd[6047]: inotify_add_watch(7, /dev/loop1p217, 10) failed: No such file or directory [ 200.329818][ T6055] udevd[6055]: inotify_add_watch(7, /dev/loop1p222, 10) failed: No such file or directory [ 200.340441][ T6053] udevd[6053]: inotify_add_watch(7, /dev/loop1p214, 10) failed: No such file or directory [ 200.351221][ T5663] udevd[5663]: inotify_add_watch(7, /dev/loop1p219, 10) failed: No such file or directory [ 200.361964][ T6049] udevd[6049]: inotify_add_watch(7, /dev/loop1p221, 10) failed: No such file or directory [ 200.372628][ T5688] udevd[5688]: inotify_add_watch(7, /dev/loop1p218, 10) failed: No such file or directory [ 200.384533][ T6050] udevd[6050]: inotify_add_watch(7, /dev/loop1p223, 10) failed: No such file or directory [ 200.396947][ T5966] udevd[5966]: inotify_add_watch(7, /dev/loop1p220, 10) failed: No such file or directory [ 200.417172][ T1107] Bluetooth: hci4: command 0x0419 tx timeout [ 200.733575][ T5961] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 201.316188][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.448518][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.551733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.600579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.711301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.787463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.898741][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.905898][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.041053][ T1107] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 202.070173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.078825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.214812][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.221982][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.334273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.387225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.458126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.470584][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.537748][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.553791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.603815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.617256][ T1107] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 202.677796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.687455][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.728246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.759216][ T1107] usb 4-1: config 0 descriptor?? [ 202.808431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.844033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.905942][ T5961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.977773][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.028458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.062654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.130302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.138339][ T13] Bluetooth: hci2: command 0x1003 tx timeout [ 203.173596][ T4190] Bluetooth: hci2: sending frame failed (-49) [ 203.265504][ T1107] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 203.298717][ T1107] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 203.346963][ T1107] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 203.419609][ T1107] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 203.469654][ T1107] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 203.549811][ T1107] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 203.669507][ T1107] usb 4-1: USB disconnect, device number 8 [ 204.262648][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.337363][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.390848][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.199851][ T4270] Bluetooth: hci2: command 0x1001 tx timeout [ 205.205947][ T4190] Bluetooth: hci2: sending frame failed (-49) [ 205.389339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 205.488799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.657928][ T5961] device veth0_vlan entered promiscuous mode [ 205.708477][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 205.756591][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 205.773156][ T6263] overlayfs: overlapping lowerdir path [ 205.814926][ T5961] device veth1_vlan entered promiscuous mode [ 205.847212][ T6267] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 205.873685][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 205.901289][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.920836][ T6267] overlayfs: overlapping lowerdir path [ 205.959247][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 205.999920][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 207.387748][ T13] Bluetooth: hci2: command 0x1009 tx timeout [ 207.395243][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.527859][ T5961] device veth0_macvtap entered promiscuous mode [ 207.572612][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.592318][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.637621][ T5961] device veth1_macvtap entered promiscuous mode [ 207.726125][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.780196][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.863252][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.874140][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 207.929607][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.964290][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.985416][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.038136][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.064203][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.093837][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.124763][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.153751][ T7] usb 2-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 208.178227][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.186697][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.207595][ T7] usb 2-1: Product: syz [ 208.222282][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.239588][ T7] usb 2-1: Manufacturer: syz [ 208.247177][ T7] usb 2-1: SerialNumber: syz [ 209.396344][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.679775][ T7] usb 2-1: can't set config #1, error -71 [ 209.703435][ T7] usb 2-1: USB disconnect, device number 6 [ 210.039295][ T6293] db_root: cannot be changed: target drivers registered [ 210.065770][ T6293] se_dev->se_dev_ptr already set for storage object [ 210.111124][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.144951][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.205276][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.267085][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.289467][ T4270] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 210.331568][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.392808][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.433315][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.466818][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.509455][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.553847][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.609697][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.649766][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.689628][ T4270] usb 2-1: unable to get BOS descriptor or descriptor too short [ 210.698835][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.809764][ T4270] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 210.862855][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.896150][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.952991][ T5961] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.399957][ T4270] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 212.468216][ T4270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.479526][ T5961] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.535938][ T4270] usb 2-1: Product: syz [ 212.550655][ T5961] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.628805][ T4270] usb 2-1: Manufacturer: syz [ 212.663107][ T4270] usb 2-1: SerialNumber: syz [ 212.676491][ T5961] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.013329][ T4270] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 214.383572][ T4270] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 214.599490][ T4270] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 214.896943][ T6334] db_root: cannot be changed: target drivers registered [ 214.914484][ T6334] se_dev->se_dev_ptr already set for storage object [ 214.939758][ T4270] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 214.968667][ T4270] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 215.030572][ T4924] device hsr_slave_0 left promiscuous mode [ 215.059240][ T4924] device hsr_slave_1 left promiscuous mode [ 215.069494][ T4270] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 215.128522][ T4924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.182488][ T4924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.255902][ T4270] usb 2-1: USB disconnect, device number 7 [ 215.292590][ T4924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.355113][ T4924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.426355][ T4924] device bridge_slave_1 left promiscuous mode [ 215.449637][ T4924] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.508647][ T4924] device bridge_slave_0 left promiscuous mode [ 215.568523][ T4924] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.667171][ T4924] device veth1_macvtap left promiscuous mode [ 215.687168][ T4924] device veth0_macvtap left promiscuous mode [ 215.703945][ T4924] device veth1_vlan left promiscuous mode [ 215.731515][ T4924] device veth0_vlan left promiscuous mode [ 216.527885][ T4924] team0 (unregistering): Port device team_slave_1 removed [ 217.924160][ T4924] team0 (unregistering): Port device team_slave_0 removed [ 217.962796][ T4924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.055947][ T4924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.247583][ T4924] bond0 (unregistering): Released all slaves [ 218.468732][ T6354] device syzkaller0 entered promiscuous mode [ 218.523057][ T6371] db_root: cannot be changed: target drivers registered [ 218.537004][ T6371] se_dev->se_dev_ptr already set for storage object [ 218.599003][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.658628][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.686787][ T6375] dummy_hcd dummy_hcd.0: remove, state 4 [ 218.768212][ T6375] usb usb1: USB disconnect, device number 1 [ 218.877560][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.895710][ T6380] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 218.936737][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.975415][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.015593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 219.136878][ T6375] dummy_hcd dummy_hcd.0: stopped [ 219.263659][ T6375] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 219.330502][ T6391] binder: BINDER_SET_CONTEXT_MGR already set [ 219.401135][ T6391] binder: 6389:6391 ioctl 4018620d 200000000040 returned -16 [ 219.494376][ T6394] binder: 6389:6394 ioctl c0306201 0 returned -14 [ 220.062610][ T1107] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 220.179098][ T6412] device syzkaller0 entered promiscuous mode [ 220.459670][ T1107] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.503385][ T1107] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.709550][ T1107] usb 6-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 220.766546][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.850935][ T1107] usb 6-1: Product: syz [ 220.855126][ T1107] usb 6-1: Manufacturer: syz [ 220.938310][ T1107] usb 6-1: SerialNumber: syz [ 221.339842][ T1107] usb 6-1: unknown interface protocol 0x26, assuming v1 [ 221.383707][ T1107] usb 6-1: cannot find UAC_HEADER [ 221.547922][ T1107] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 221.609135][ T1107] usb 6-1: USB disconnect, device number 3 [ 221.685553][ T6055] udevd[6055]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.091312][ T6461] device syzkaller0 entered promiscuous mode [ 222.576648][ T6489] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 224.960641][ T7] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 225.170993][ T4228] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 225.359821][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.414007][ T7] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 225.456029][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.575655][ T4228] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.586118][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.655335][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 225.673751][ T4228] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.710077][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'. [ 225.739522][ T7] usb 4-1: SerialNumber: syz [ 225.839725][ T4228] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 225.870975][ T6550] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 225.915634][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 225.956089][ T4228] usb 2-1: SerialNumber: syz [ 226.102876][ T6562] netlink: 'syz.4.661': attribute type 5 has an invalid length. [ 226.292354][ T4228] usb 2-1: 0:2 : does not exist [ 226.326122][ T4228] usb 2-1: unit 5: unexpected type 0x09 [ 226.449765][ T4228] usb 2-1: USB disconnect, device number 8 [ 226.731861][ T6055] udevd[6055]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.110450][ T7] cdc_ether 4-1:1.0: skipping garbage [ 227.140993][ T7] usb 4-1: bad CDC descriptors [ 227.220448][ T6587] db_root: cannot be changed: target drivers registered [ 227.234137][ T7] usb 4-1: USB disconnect, device number 9 [ 227.273476][ T6587] se_dev->se_dev_ptr already set for storage object [ 227.413439][ T6593] db_root: cannot be changed: target drivers registered [ 227.440581][ T6593] se_dev->se_dev_ptr already set for storage object [ 227.597570][ T6599] filp_open(/var/target/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 228.109610][ T4270] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 228.371264][ T4270] usb 4-1: Using ep0 maxpacket: 32 [ 228.539705][ T4270] usb 4-1: unable to get BOS descriptor or descriptor too short [ 228.820052][ T4270] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 228.873799][ T4270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.937411][ T4270] usb 4-1: Product: syz [ 228.963320][ T4270] usb 4-1: Manufacturer: syz [ 228.967953][ T4270] usb 4-1: SerialNumber: syz [ 232.169758][ T4270] usb 4-1: unit 0 not found! [ 232.260362][ T4270] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 232.322451][ T6651] db_root: cannot be changed: target drivers registered [ 232.350511][ T6651] se_dev->se_dev_ptr already set for storage object [ 232.370127][ T4270] usb 4-1: unit 0 not found! [ 232.490197][ T4270] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 232.525901][ T6659] db_root: cannot be changed: target drivers registered [ 232.555511][ T6659] se_dev->se_dev_ptr already set for storage object [ 232.589651][ T4270] usb 4-1: unit 0 not found! [ 232.623038][ T7] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 232.876704][ T4270] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 232.944994][ T6046] udevd[6046]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.990125][ T4270] usb 4-1: USB disconnect, device number 10 [ 233.040095][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.090851][ T7] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 233.182578][ T7] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.349562][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.427605][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 233.487655][ T7] usb 2-1: SerialNumber: syz [ 233.645405][ T7] usb 2-1: can't set config #1, error -71 [ 233.704270][ T7] usb 2-1: USB disconnect, device number 9 [ 233.743547][ T6698] netlink: 'syz.1.695': attribute type 4 has an invalid length. [ 233.850516][ T6698] netlink: 17 bytes leftover after parsing attributes in process `syz.1.695'. [ 233.999103][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 234.143236][ T6708] netlink: 'syz.1.695': attribute type 5 has an invalid length. [ 234.210550][ T6712] db_root: cannot be changed: target drivers registered [ 234.263366][ T6712] se_dev->se_dev_ptr already set for storage object [ 236.669514][ T4228] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 236.712798][ T6748] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 236.771949][ T6748] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 237.060305][ T4228] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.137691][ T4228] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 237.227198][ T4228] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.400496][ T4228] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.433384][ T4228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 237.447034][ T6774] db_root: cannot be changed: target drivers registered [ 237.449125][ T6774] se_dev->se_dev_ptr already set for storage object [ 237.473904][ T4228] usb 7-1: SerialNumber: syz [ 237.538725][ T6771] netlink: 'syz.5.714': attribute type 4 has an invalid length. [ 237.620495][ T6771] netlink: 17 bytes leftover after parsing attributes in process `syz.5.714'. [ 237.734789][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.714'. [ 237.805859][ T6775] netlink: 'syz.5.714': attribute type 5 has an invalid length. [ 238.250132][ T4270] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 238.289669][ T7] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 238.630274][ T4270] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.657542][ T4270] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.720047][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.798237][ T4270] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 238.816767][ T4228] cdc_ether 7-1:1.0: skipping garbage [ 238.858324][ T4228] usb 7-1: bad CDC descriptors [ 238.879218][ T4270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 238.925208][ T4228] usb 7-1: USB disconnect, device number 2 [ 238.939771][ T7] usb 4-1: config 1 has an invalid descriptor of length 58, skipping remainder of the config [ 238.984147][ T4270] usb 2-1: SerialNumber: syz [ 239.013374][ T7] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 239.103133][ T7] usb 4-1: config 1 interface 2 altsetting 1 has an invalid endpoint with address 0xAD, skipping [ 239.311520][ T4270] usb 2-1: 0:2 : does not exist [ 239.339599][ T7] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 239.377018][ T6830] db_root: cannot be changed: target drivers registered [ 239.388772][ T4270] usb 2-1: USB disconnect, device number 10 [ 239.412505][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.425042][ T6830] se_dev->se_dev_ptr already set for storage object [ 239.485885][ T7] usb 4-1: Product: syz [ 239.512117][ T7] usb 4-1: Manufacturer: syz [ 239.557605][ T7] usb 4-1: SerialNumber: syz [ 239.921620][ T7] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 239.952848][ T4228] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 239.962313][ T6846] netlink: 'syz.1.730': attribute type 4 has an invalid length. [ 240.020148][ T7] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 240.028398][ T6846] netlink: 17 bytes leftover after parsing attributes in process `syz.1.730'. [ 240.114070][ T4270] Bluetooth: hci4: command 0x0411 tx timeout [ 240.155433][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 240.203424][ T7] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 240.235485][ T6846] netlink: 'syz.1.730': attribute type 5 has an invalid length. [ 240.243588][ T4228] usb 7-1: Using ep0 maxpacket: 32 [ 240.303388][ T7] usb 4-1: USB disconnect, device number 11 [ 240.315036][ T6046] udevd[6046]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.369766][ T4228] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 240.406250][ T4228] usb 7-1: config 0 has no interface number 0 [ 240.463313][ T4228] usb 7-1: config 0 interface 184 has no altsetting 0 [ 242.015260][ T13] Bluetooth: hci2: command 0x1003 tx timeout [ 242.021589][ T4228] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 242.048683][ T4190] Bluetooth: hci2: sending frame failed (-49) [ 242.059642][ T4228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.102290][ T4228] usb 7-1: Product: syz [ 242.117259][ T4228] usb 7-1: Manufacturer: syz [ 242.133298][ T4228] usb 7-1: SerialNumber: syz [ 242.158160][ T4228] usb 7-1: config 0 descriptor?? [ 242.221513][ T4228] smsc75xx v1.0.0 [ 242.343041][ T7] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 242.524550][ T6883] db_root: cannot be changed: target drivers registered [ 242.534884][ T6883] se_dev->se_dev_ptr already set for storage object [ 242.729781][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.772164][ T7] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 242.823187][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.963278][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.989533][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 243.017473][ T7] usb 4-1: SerialNumber: syz [ 243.539572][ T4228] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 243.598742][ T4228] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 243.699734][ T4228] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 243.734028][ T4228] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 243.784384][ T4228] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 243.827454][ T4228] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 243.856196][ T4228] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 243.887309][ T4228] usb 7-1: USB disconnect, device number 3 [ 243.978450][ T6923] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 244.003238][ T6923] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 244.080511][ T13] Bluetooth: hci2: command 0x1001 tx timeout [ 244.106153][ T4190] Bluetooth: hci2: sending frame failed (-49) [ 244.154431][ T6930] netlink: 'syz.6.744': attribute type 4 has an invalid length. [ 244.187582][ T6930] netlink: 17 bytes leftover after parsing attributes in process `syz.6.744'. [ 244.245752][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.744'. [ 244.370213][ T7] cdc_ether 4-1:1.0: skipping garbage [ 244.375636][ T7] usb 4-1: bad CDC descriptors [ 244.388452][ T6932] netlink: 'syz.6.744': attribute type 5 has an invalid length. [ 244.472894][ T7] usb 4-1: USB disconnect, device number 12 [ 244.699123][ T6949] db_root: cannot be changed: target drivers registered [ 244.744338][ T6949] se_dev->se_dev_ptr already set for storage object [ 244.885541][ T6953] db_root: cannot be changed: target drivers registered [ 244.893472][ T6953] se_dev->se_dev_ptr already set for storage object [ 245.229493][ T13] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 245.502358][ T13] usb 7-1: Using ep0 maxpacket: 16 [ 245.629713][ T13] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 70, changing to 10 [ 245.674062][ T13] usb 7-1: config 0 interface 0 has no altsetting 0 [ 245.707409][ T13] usb 7-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 245.752032][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.809036][ T13] usb 7-1: config 0 descriptor?? [ 246.094126][ T6987] netlink: 'syz.1.758': attribute type 4 has an invalid length. [ 247.418705][ T7] Bluetooth: hci2: command 0x1009 tx timeout [ 247.447932][ T6987] netlink: 17 bytes leftover after parsing attributes in process `syz.1.758'. [ 247.502424][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 247.608893][ T6991] netlink: 'syz.1.758': attribute type 5 has an invalid length. [ 249.267098][ T7004] db_root: cannot be changed: target drivers registered [ 249.292501][ T13] usbhid 7-1:0.0: can't add hid device: -71 [ 249.352648][ T13] usbhid: probe of 7-1:0.0 failed with error -71 [ 249.384295][ T7009] db_root: cannot be changed: target drivers registered [ 249.403536][ T13] usb 7-1: USB disconnect, device number 4 [ 249.421869][ T7009] se_dev->se_dev_ptr already set for storage object [ 249.930885][ T13] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 251.676205][ T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 251.779742][ T13] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.820308][ T13] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.919720][ T13] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 251.939516][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 251.956179][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 251.980551][ T13] usb 7-1: SerialNumber: syz [ 253.028050][ T13] usb 7-1: 0:2 : does not exist [ 253.659524][ T7] usb 4-1: unable to read config index 0 descriptor/all [ 253.666629][ T7] usb 4-1: can't read configurations, error -71 [ 253.719652][ T13] usb 7-1: USB disconnect, device number 5 [ 253.769120][ T7063] db_root: cannot be changed: target drivers registered [ 253.792037][ T7066] netlink: 'syz.3.776': attribute type 4 has an invalid length. [ 253.821743][ T7067] db_root: cannot be changed: target drivers registered [ 253.840976][ T7067] se_dev->se_dev_ptr already set for storage object [ 253.918948][ T7066] netlink: 17 bytes leftover after parsing attributes in process `syz.3.776'. [ 254.015381][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 254.025136][ T6055] udevd[6055]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.122790][ T7076] input: syz1 as /devices/virtual/input/input9 [ 254.195143][ T7068] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 254.364727][ T7068] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 254.621789][ T7096] netlink: 679 bytes leftover after parsing attributes in process `syz.5.783'. [ 256.006245][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.014214][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.228869][ T7108] device syzkaller1 entered promiscuous mode [ 257.918116][ T7121] db_root: cannot be changed: target drivers registered [ 257.939689][ T7112] capability: warning: `syz.5.787' uses deprecated v2 capabilities in a way that may be insecure [ 257.959844][ T7121] se_dev->se_dev_ptr already set for storage object [ 258.646547][ T7141] netlink: 'syz.1.795': attribute type 4 has an invalid length. [ 258.854943][ T7141] netlink: 17 bytes leftover after parsing attributes in process `syz.1.795'. [ 260.039928][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.795'. [ 260.525611][ T7168] db_root: cannot be changed: target drivers registered [ 260.559757][ T7168] se_dev->se_dev_ptr already set for storage object [ 262.655431][ T7208] netlink: 'syz.6.814': attribute type 4 has an invalid length. [ 262.701684][ T7208] netlink: 17 bytes leftover after parsing attributes in process `syz.6.814'. [ 262.830128][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.814'. [ 263.039769][ T7208] netlink: 'syz.6.814': attribute type 5 has an invalid length. [ 265.435770][ T7226] db_root: cannot be changed: target drivers registered [ 265.463191][ T7226] se_dev->se_dev_ptr already set for storage object [ 266.314805][ T7258] netlink: 'syz.3.830': attribute type 4 has an invalid length. [ 267.545126][ T7258] netlink: 17 bytes leftover after parsing attributes in process `syz.3.830'. [ 267.639022][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.830'. [ 267.695970][ T7269] db_root: cannot be changed: target drivers registered [ 267.701723][ T7269] se_dev->se_dev_ptr already set for storage object [ 267.754720][ T7258] netlink: 'syz.3.830': attribute type 5 has an invalid length. [ 267.833158][ T7275] filp_open(/var/target/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 267.852292][ T4270] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 268.102409][ T4270] usb 7-1: Using ep0 maxpacket: 16 [ 268.230431][ T4270] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 268.286727][ T4270] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 268.345642][ T4270] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 268.401676][ T4270] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 268.449362][ T4270] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 268.499362][ T4270] usb 7-1: config 0 has no interface number 0 [ 268.526210][ T4270] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 268.585778][ T4270] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 268.635332][ T4270] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 268.722352][ T4270] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.815382][ T4270] usb 7-1: config 0 interface 125 has no altsetting 0 [ 268.833174][ T4270] usb 7-1: config 0 interface 125 has no altsetting 2 [ 269.019577][ T4270] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 269.172334][ T4270] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.192788][ T4270] usb 7-1: Product: syz [ 269.206400][ T4270] usb 7-1: Manufacturer: syz [ 269.224590][ T4270] usb 7-1: SerialNumber: syz [ 269.244572][ T4270] usb 7-1: config 0 descriptor?? [ 269.291970][ T4270] usb 7-1: selecting invalid altsetting 2 [ 269.629465][ C0] usb 7-1: async_complete: urb error -71 [ 269.635213][ C0] usb 7-1: async_complete: urb error -71 [ 269.640881][ C0] usb 7-1: async_complete: urb error -71 [ 269.646564][ C0] usb 7-1: async_complete: urb error -71 [ 269.652447][ T4270] get_1284_register: usb error -71 [ 271.019517][ T4270] usb 7-1: USB disconnect, device number 6 [ 271.126193][ T7326] db_root: cannot be changed: target drivers registered [ 271.146952][ T7326] se_dev->se_dev_ptr already set for storage object [ 271.272609][ T7326] filp_open(/var/target/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 271.626455][ T7342] db_root: cannot be changed: target drivers registered [ 273.403478][ T7355] [ 273.412782][ T7355] ====================================================== [ 273.419810][ T7355] WARNING: possible circular locking dependency detected [ 273.426830][ T7355] syzkaller #0 Not tainted [ 273.431242][ T7355] ------------------------------------------------------ [ 273.438259][ T7355] syz.1.854/7355 is trying to acquire lock: [ 273.444154][ T7355] ffffffff8ceceff0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x638/0x980 [ 273.453934][ T7355] [ 273.453934][ T7355] but task is already holding lock: [ 273.461303][ T7355] ffff888051eb7900 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: vfs_rmdir+0xe1/0x410 [ 273.470969][ T7355] [ 273.470969][ T7355] which lock already depends on the new lock. [ 273.470969][ T7355] [ 273.481373][ T7355] [ 273.481373][ T7355] the existing dependency chain (in reverse order) is: [ 273.490406][ T7355] [ 273.490406][ T7355] -> #2 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 273.499110][ T7355] down_write+0x38/0x60 [ 273.503813][ T7355] configfs_depend_item_unlocked+0x14f/0x430 [ 273.510313][ T7355] usbg_make_tpg+0x1f3/0x580 [ 273.515427][ T7355] target_fabric_make_tpg+0xa0/0x6d0 [ 273.521236][ T7355] configfs_mkdir+0x511/0x9e0 [ 273.526439][ T7355] vfs_mkdir+0x386/0x570 [ 273.531213][ T7355] do_mkdirat+0x1dd/0x5c0 [ 273.536103][ T7355] __x64_sys_mkdir+0x6a/0x80 [ 273.541218][ T7355] do_syscall_64+0x4c/0xa0 [ 273.546176][ T7355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 273.552613][ T7355] [ 273.552613][ T7355] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 273.560258][ T7355] __mutex_lock_common+0x1e5/0x2400 [ 273.565989][ T7355] mutex_lock_nested+0x17/0x20 [ 273.571274][ T7355] tcm_set_name+0x26/0x90 [ 273.576129][ T7355] function_make+0x195/0x350 [ 273.581237][ T7355] configfs_mkdir+0x511/0x9e0 [ 273.586433][ T7355] vfs_mkdir+0x386/0x570 [ 273.591208][ T7355] do_mkdirat+0x1dd/0x5c0 [ 273.596061][ T7355] __x64_sys_mkdir+0x6a/0x80 [ 273.601175][ T7355] do_syscall_64+0x4c/0xa0 [ 273.606112][ T7355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 273.612526][ T7355] [ 273.612526][ T7355] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 273.620773][ T7355] __lock_acquire+0x2c66/0x7b50 [ 273.626150][ T7355] lock_acquire+0x19e/0x400 [ 273.631179][ T7355] __mutex_lock_common+0x1e5/0x2400 [ 273.636898][ T7355] mutex_lock_nested+0x17/0x20 [ 273.642186][ T7355] configfs_rmdir+0x638/0x980 [ 273.647382][ T7355] vfs_rmdir+0x19d/0x410 [ 273.652152][ T7355] do_rmdir+0x27f/0x710 [ 273.656829][ T7355] __x64_sys_rmdir+0x45/0x50 [ 273.661957][ T7355] do_syscall_64+0x4c/0xa0 [ 273.666915][ T7355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 273.673329][ T7355] [ 273.673329][ T7355] other info that might help us debug this: [ 273.673329][ T7355] [ 273.683554][ T7355] Chain exists of: [ 273.683554][ T7355] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#23 [ 273.683554][ T7355] [ 273.698256][ T7355] Possible unsafe locking scenario: [ 273.698256][ T7355] [ 273.705707][ T7355] CPU0 CPU1 [ 273.711067][ T7355] ---- ---- [ 273.716433][ T7355] lock(&sb->s_type->i_mutex_key#23); [ 273.721895][ T7355] lock(&opts->dep_lock); [ 273.728828][ T7355] lock(&sb->s_type->i_mutex_key#23); [ 273.736807][ T7355] lock(gadget_subsys.su_mutex); [ 273.741829][ T7355] [ 273.741829][ T7355] *** DEADLOCK *** [ 273.741829][ T7355] [ 273.749969][ T7355] 3 locks held by syz.1.854/7355: [ 273.755000][ T7355] #0: ffff8881467b6460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 273.764237][ T7355] #1: ffff888076fb9aa0 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1b0/0x710 [ 273.775043][ T7355] #2: ffff888051eb7900 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: vfs_rmdir+0xe1/0x410 [ 273.785139][ T7355] [ 273.785139][ T7355] stack backtrace: [ 273.791036][ T7355] CPU: 0 PID: 7355 Comm: syz.1.854 Not tainted syzkaller #0 [ 273.798335][ T7355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 273.808491][ T7355] Call Trace: [ 273.811776][ T7355] [ 273.814714][ T7355] dump_stack_lvl+0x188/0x250 [ 273.819401][ T7355] ? load_image+0x410/0x410 [ 273.823905][ T7355] ? show_regs_print_info+0x20/0x20 [ 273.829112][ T7355] ? print_circular_bug+0x12b/0x1a0 [ 273.834319][ T7355] check_noncircular+0x296/0x330 [ 273.839258][ T7355] ? add_chain_block+0x9b0/0x9b0 [ 273.844205][ T7355] ? lockdep_lock+0xf1/0x1f0 [ 273.848801][ T7355] ? __lock_acquire+0x2844/0x7b50 [ 273.853832][ T7355] ? mark_lock+0x94/0x320 [ 273.858155][ T7355] ? _find_first_zero_bit+0xd1/0xf0 [ 273.863372][ T7355] __lock_acquire+0x2c66/0x7b50 [ 273.868236][ T7355] ? __lock_acquire+0x13dc/0x7b50 [ 273.873275][ T7355] ? verify_lock_unused+0x140/0x140 [ 273.878497][ T7355] ? __lock_acquire+0x1305/0x7b50 [ 273.883532][ T7355] lock_acquire+0x19e/0x400 [ 273.888057][ T7355] ? configfs_rmdir+0x638/0x980 [ 273.892918][ T7355] ? __might_sleep+0xf0/0xf0 [ 273.897512][ T7355] ? read_lock_is_recursive+0x10/0x10 [ 273.902888][ T7355] __mutex_lock_common+0x1e5/0x2400 [ 273.908088][ T7355] ? configfs_rmdir+0x638/0x980 [ 273.912939][ T7355] ? configfs_rmdir+0x638/0x980 [ 273.917789][ T7355] ? __rwlock_init+0x140/0x140 [ 273.922550][ T7355] ? rcu_lock_release+0x5/0x20 [ 273.927313][ T7355] ? mutex_lock_io_nested+0x60/0x60 [ 273.932514][ T7355] ? _raw_spin_unlock+0x24/0x40 [ 273.937367][ T7355] mutex_lock_nested+0x17/0x20 [ 273.942137][ T7355] configfs_rmdir+0x638/0x980 [ 273.946822][ T7355] vfs_rmdir+0x19d/0x410 [ 273.951066][ T7355] do_rmdir+0x27f/0x710 [ 273.955234][ T7355] ? d_delete_notify+0x150/0x150 [ 273.960178][ T7355] ? getname_flags+0x1f9/0x4f0 [ 273.964958][ T7355] __x64_sys_rmdir+0x45/0x50 [ 273.969550][ T7355] do_syscall_64+0x4c/0xa0 [ 273.973983][ T7355] ? clear_bhb_loop+0x30/0x80 [ 273.978697][ T7355] ? clear_bhb_loop+0x30/0x80 [ 273.983374][ T7355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 273.989309][ T7355] RIP: 0033:0x7f4aa8368e99 [ 273.993727][ T7355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.013349][ T7355] RSP: 002b:00007f4aa65c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 274.021936][ T7355] RAX: ffffffffffffffda RBX: 00007f4aa85f0fa0 RCX: 00007f4aa8368e99 [ 274.029928][ T7355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 274.037900][ T7355] RBP: 00007f4aa83feeaf R08: 0000000000000000 R09: 0000000000000000 [ 274.045874][ T7355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.053853][ T7355] R13: 00007f4aa85f1038 R14: 00007f4aa85f0fa0 R15: 00007fffa952ab38 [ 274.061839][ T7355]