last executing test programs: 10.109179139s ago: executing program 3 (id=23): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000ec0)={0x40, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.93572888s ago: executing program 1 (id=31): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x76c9b971dc12fd) close(r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000080)={0x30, r5, 0x0, 0x0, 0xffff, 0x6, 0x3, 0x0}) 8.595608849s ago: executing program 1 (id=32): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_io_uring_complete(r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 8.465984118s ago: executing program 4 (id=33): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x18}}], 0x1, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fallocate(r1, 0x10, 0x6, 0x10001) 7.838295758s ago: executing program 0 (id=34): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 7.210258626s ago: executing program 3 (id=35): socket(0x11, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = io_uring_setup(0x68f6, &(0x7f0000000380)={0x0, 0xcb09, 0x1, 0x4, 0x100016b}) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) listen(r1, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 7.069676639s ago: executing program 0 (id=36): io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) 6.991387101s ago: executing program 4 (id=37): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x40000) 6.830482152s ago: executing program 2 (id=38): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x18, 0x10}, {0x1, 0x3}, {0xe, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r0, &(0x7f0000000b80)=[{&(0x7f0000000180)=""/136, 0x88}], 0x1, 0x5, 0x1, 0x16) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 6.320448076s ago: executing program 3 (id=39): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x88c9}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 6.040338188s ago: executing program 0 (id=40): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) 6.01012465s ago: executing program 2 (id=41): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x10, 0x3, 0x23}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r2, r0, 0x80000) 5.90696587s ago: executing program 1 (id=42): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000800)={0x1, 0x20812f49}, 0x8) r1 = syz_open_dev$rtc(0x0, 0x38, 0x311000) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) close_range(r0, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pimreg1\x00'}) 4.70684831s ago: executing program 2 (id=43): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000) r2 = dup(r1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.862128598s ago: executing program 1 (id=44): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.760336425s ago: executing program 3 (id=45): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8}, {r2, 0x2cfc08c20dafc34e}, {0xffffffffffffffff, 0xa8}, {r0, 0xf102}], 0x4, 0x8000007) 3.260816995s ago: executing program 0 (id=46): syz_open_dev$dri(&(0x7f0000000000), 0x79, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x2, 0xa4, 0x7fff0003}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.233717042s ago: executing program 4 (id=47): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c0002000100000004000000313af138583ef9d49f028eeb1b75283c459f51a37ec8e8721adfe334904da2cac782ec97b8c066b9cbd839e0e9aa8685b165ceffcee293b692119fbb12342c274cbe05f911bca8f8e1d187801239bbdc8af25b2aa895dd2de7527389432b5779d16c3a50a3"], 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 3.014799046s ago: executing program 4 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.584814087s ago: executing program 4 (id=49): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2.529050114s ago: executing program 2 (id=50): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.497243392s ago: executing program 2 (id=51): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040020) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x88) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6}, {0x2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x14) 1.392100321s ago: executing program 0 (id=52): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000016c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv6={0x86dd, @generic={0x4, 0x6, "1976df", 0x0, 0x32, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 1.239949561s ago: executing program 2 (id=53): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) pipe(&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 1.001637685s ago: executing program 1 (id=54): mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749d, 0x4, 0x0, 0x0, 0x0) 970.052052ms ago: executing program 4 (id=55): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="007bba1482f49e78241103dbac97becd82ebe028f57c7ecacc362b730682deda25afa49cee76dae817b10be22d7ef2220932b6261f61c465960fe00be06240e5163aa1c793242fe6c2a46b45a2dd35b0a7190065f3309a699a745d051ec44f55f80da5cdae29da485059cdbe4f80bd3fe96f75f7a1695687ea210e33ac45d4408b37d22183d1b904320f3e866c8d38b23d0f7f406363bdbdda098cc6fc6bfb9ad700000000b2066223a251d5138f44e9c3f191db1b0043cecd3d2d5a641cb1b70aefa3368f9721d99cf3628ee00c8d"], 0x21, 0x1cc, &(0x7f00000002c0)="$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") 861.071209ms ago: executing program 3 (id=56): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x60, r3, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @probe_request={{{}, {}, @device_a, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10) 418.201441ms ago: executing program 0 (id=57): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@abort}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) dup(0xffffffffffffffff) socket(0x2b, 0x80801, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 40.067363ms ago: executing program 1 (id=58): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c", 0x8a}], 0x1}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=59): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x56}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4000, 0x1, 0x1, 0x81}, 0x10) r0 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x4, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r3, 0x0, 0x0, 0x0, 0x12001, 0x1}) io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.122' (ED25519) to the list of known hosts. [ 93.164889][ T5808] cgroup: Unknown subsys name 'net' [ 93.320688][ T5808] cgroup: Unknown subsys name 'cpuset' [ 93.330899][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.095981][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.718244][ T796] cfg80211: failed to load regulatory.db [ 98.823977][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.834656][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.845638][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.855253][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.865823][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.874355][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.879282][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.891101][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.891681][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.901783][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.915327][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.915495][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.927374][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.934662][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.947409][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.949554][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.961391][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.965185][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.979050][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.980078][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.992698][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.005470][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.014841][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.024429][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.043748][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.927441][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 99.955341][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 99.972725][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 100.080887][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 100.111417][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 100.400163][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.409980][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.420040][ T5826] bridge_slave_0: entered allmulticast mode [ 100.429642][ T5826] bridge_slave_0: entered promiscuous mode [ 100.461394][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.469492][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.478173][ T5824] bridge_slave_0: entered allmulticast mode [ 100.487676][ T5824] bridge_slave_0: entered promiscuous mode [ 100.524099][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.532316][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.540458][ T5826] bridge_slave_1: entered allmulticast mode [ 100.549943][ T5826] bridge_slave_1: entered promiscuous mode [ 100.566149][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.574084][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.582189][ T5827] bridge_slave_0: entered allmulticast mode [ 100.590606][ T5827] bridge_slave_0: entered promiscuous mode [ 100.599850][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.607888][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.616114][ T5824] bridge_slave_1: entered allmulticast mode [ 100.624618][ T5824] bridge_slave_1: entered promiscuous mode [ 100.679138][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.687667][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.696335][ T5827] bridge_slave_1: entered allmulticast mode [ 100.706714][ T5827] bridge_slave_1: entered promiscuous mode [ 100.731863][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.740312][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.749282][ T5825] bridge_slave_0: entered allmulticast mode [ 100.758262][ T5825] bridge_slave_0: entered promiscuous mode [ 100.790814][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.844484][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.852346][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.861238][ T5825] bridge_slave_1: entered allmulticast mode [ 100.871043][ T5825] bridge_slave_1: entered promiscuous mode [ 100.884502][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.896694][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.905784][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.914446][ T5830] bridge_slave_0: entered allmulticast mode [ 100.924653][ T5830] bridge_slave_0: entered promiscuous mode [ 100.953610][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.014327][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.023175][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.031423][ T5830] bridge_slave_1: entered allmulticast mode [ 101.041474][ T5830] bridge_slave_1: entered promiscuous mode [ 101.055358][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.071377][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.082216][ T5141] Bluetooth: hci2: command tx timeout [ 101.082964][ T5841] Bluetooth: hci0: command tx timeout [ 101.088894][ T5839] Bluetooth: hci3: command tx timeout [ 101.096768][ T5841] Bluetooth: hci1: command tx timeout [ 101.143749][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.160629][ T5826] team0: Port device team_slave_0 added [ 101.168492][ T5841] Bluetooth: hci4: command tx timeout [ 101.193248][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.222907][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.238470][ T5826] team0: Port device team_slave_1 added [ 101.277637][ T5824] team0: Port device team_slave_0 added [ 101.317665][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.347151][ T5824] team0: Port device team_slave_1 added [ 101.387485][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.416582][ T5827] team0: Port device team_slave_0 added [ 101.440872][ T5825] team0: Port device team_slave_0 added [ 101.449127][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.459085][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.488513][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.519578][ T5827] team0: Port device team_slave_1 added [ 101.544356][ T5825] team0: Port device team_slave_1 added [ 101.553096][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.562353][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.591023][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.608131][ T5830] team0: Port device team_slave_0 added [ 101.631323][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.639116][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.671287][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.710638][ T5830] team0: Port device team_slave_1 added [ 101.733223][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.741773][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.771209][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.801768][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.809324][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.839873][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.868930][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.877204][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.907025][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.942641][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.950999][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.980840][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.009876][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.017973][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.046760][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.092918][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.100221][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.130535][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.183321][ T5824] hsr_slave_0: entered promiscuous mode [ 102.192599][ T5824] hsr_slave_1: entered promiscuous mode [ 102.219023][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.226997][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.256444][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.318119][ T5826] hsr_slave_0: entered promiscuous mode [ 102.325394][ T5826] hsr_slave_1: entered promiscuous mode [ 102.332687][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 102.338639][ T5826] Cannot create hsr debugfs directory [ 102.373089][ T5827] hsr_slave_0: entered promiscuous mode [ 102.380684][ T5827] hsr_slave_1: entered promiscuous mode [ 102.388234][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 102.394096][ T5827] Cannot create hsr debugfs directory [ 102.523645][ T5830] hsr_slave_0: entered promiscuous mode [ 102.531248][ T5830] hsr_slave_1: entered promiscuous mode [ 102.538934][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 102.545024][ T5830] Cannot create hsr debugfs directory [ 102.571249][ T5825] hsr_slave_0: entered promiscuous mode [ 102.580015][ T5825] hsr_slave_1: entered promiscuous mode [ 102.587636][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 102.593753][ T5825] Cannot create hsr debugfs directory [ 103.156438][ T5841] Bluetooth: hci3: command tx timeout [ 103.162368][ T5841] Bluetooth: hci2: command tx timeout [ 103.168596][ T5839] Bluetooth: hci0: command tx timeout [ 103.174812][ T5839] Bluetooth: hci1: command tx timeout [ 103.236840][ T5841] Bluetooth: hci4: command tx timeout [ 103.321187][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.341111][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.353488][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.378339][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.445995][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.471046][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.488019][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.500357][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.641021][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.674370][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.690403][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.730623][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.856116][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.872962][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.886078][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.899130][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.954434][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.010012][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.035090][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.060437][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.091040][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.109021][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.155379][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.200912][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.250189][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.258450][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.270508][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.278061][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.314753][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.322464][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.358365][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.365623][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.422173][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.513553][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.551562][ T439] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.559678][ T439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.613810][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.661881][ T439] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.669369][ T439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.752320][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.861193][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.944417][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.004769][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.082830][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.090907][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.106078][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.113906][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.125646][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.133137][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.155872][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.164666][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.184144][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.239727][ T5841] Bluetooth: hci2: command tx timeout [ 105.245375][ T5841] Bluetooth: hci1: command tx timeout [ 105.246896][ T5839] Bluetooth: hci0: command tx timeout [ 105.253667][ T5843] Bluetooth: hci3: command tx timeout [ 105.321846][ T5841] Bluetooth: hci4: command tx timeout [ 105.413281][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.615737][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.732086][ T5827] veth0_vlan: entered promiscuous mode [ 105.818613][ T5827] veth1_vlan: entered promiscuous mode [ 106.002208][ T5824] veth0_vlan: entered promiscuous mode [ 106.025170][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.044994][ T5827] veth0_macvtap: entered promiscuous mode [ 106.053470][ T5830] veth0_vlan: entered promiscuous mode [ 106.077691][ T5827] veth1_macvtap: entered promiscuous mode [ 106.089944][ T5824] veth1_vlan: entered promiscuous mode [ 106.115639][ T5830] veth1_vlan: entered promiscuous mode [ 106.157746][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.225594][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.244717][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.282751][ T5830] veth0_macvtap: entered promiscuous mode [ 106.303926][ T5830] veth1_macvtap: entered promiscuous mode [ 106.343520][ T1150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.354145][ T1150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.377393][ T5824] veth0_macvtap: entered promiscuous mode [ 106.398315][ T5824] veth1_macvtap: entered promiscuous mode [ 106.410631][ T1150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.420282][ T1150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.458017][ T5825] veth0_vlan: entered promiscuous mode [ 106.500118][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.514514][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.559541][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.568055][ T5826] veth0_vlan: entered promiscuous mode [ 106.582297][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.601494][ T5825] veth1_vlan: entered promiscuous mode [ 106.660382][ T5826] veth1_vlan: entered promiscuous mode [ 106.670524][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.681205][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.722437][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.739212][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.749808][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.796461][ T1150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.842657][ T1150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.854945][ T1150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.878149][ T1150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.888796][ T1150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.914599][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.932473][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.950367][ T5826] veth0_macvtap: entered promiscuous mode [ 106.961874][ T5825] veth0_macvtap: entered promiscuous mode [ 106.994708][ T5825] veth1_macvtap: entered promiscuous mode [ 107.015920][ T5826] veth1_macvtap: entered promiscuous mode [ 107.093752][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 107.113085][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.122016][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.164419][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.189769][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.231806][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.262840][ T1150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.272635][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.325401][ T5943] team_slave_0: entered promiscuous mode [ 107.331823][ T5943] team_slave_1: entered promiscuous mode [ 107.342147][ T5841] Bluetooth: hci0: command tx timeout [ 107.348263][ T5843] Bluetooth: hci2: command tx timeout [ 107.352423][ T5839] Bluetooth: hci1: command tx timeout [ 107.354366][ T5843] Bluetooth: hci3: command tx timeout [ 107.382170][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.396532][ T5839] Bluetooth: hci4: command tx timeout [ 107.419079][ T1150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.443889][ T1150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.489564][ T1150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.500343][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.510352][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.531491][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.595520][ T1150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.627615][ T1150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.655740][ T1150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.684230][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.692484][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.728309][ T1150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.991406][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.011109][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.159424][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.196253][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.294328][ T5952] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 108.351537][ T5954] loop2: detected capacity change from 0 to 7 [ 108.386653][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.396511][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.414568][ T5954] Dev loop2: unable to read RDB block 7 [ 108.428522][ T5954] loop2: AHDI p1 p2 p3 [ 108.432774][ T5954] loop2: partition table partially beyond EOD, truncated [ 108.448019][ T5954] loop2: p1 start 1818582900 is beyond EOD, truncated [ 108.455052][ T5954] loop2: p3 start 335544320 is beyond EOD, truncated [ 108.561248][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.601770][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.796888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.991390][ T5960] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.056153][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.286449][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 109.324339][ T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.369452][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.394307][ T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 109.437673][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.503777][ T9] usb 3-1: config 0 descriptor?? [ 110.024398][ T9] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 110.128024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.479652][ T5884] usb 3-1: USB disconnect, device number 2 [ 111.917294][ T797] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.119906][ T797] usb 4-1: Using ep0 maxpacket: 16 [ 112.137308][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 112.161866][ T797] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 112.181091][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.192853][ T797] usb 4-1: Product: syz [ 112.202832][ T797] usb 4-1: Manufacturer: syz [ 112.211909][ T797] usb 4-1: SerialNumber: syz [ 112.251452][ T797] usb 4-1: config 0 descriptor?? [ 112.281214][ T797] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 112.297123][ T797] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 112.740474][ T6028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.912163][ T797] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 113.126758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.166429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 113.222099][ T6033] loop4: detected capacity change from 0 to 1024 [ 113.253343][ T6033] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.363176][ T6033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.377556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 113.640902][ T797] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 113.692475][ T797] em28xx 4-1:0.0: board has no eeprom [ 113.796363][ T797] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 113.804714][ T797] em28xx 4-1:0.0: dvb set to bulk mode. [ 113.816905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.827343][ T9] em28xx 4-1:0.0: Binding DVB extension [ 113.875545][ T797] usb 4-1: USB disconnect, device number 2 [ 113.914280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.926606][ T797] em28xx 4-1:0.0: Disconnecting em28xx [ 114.026577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 114.148405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.158593][ T9] em28xx 4-1:0.0: Registering input extension [ 114.166527][ T797] em28xx 4-1:0.0: Closing input extension [ 114.175239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.241835][ T797] em28xx 4-1:0.0: Freeing device [ 115.224703][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.703790][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.712906][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.106792][ T5911] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.289351][ T5911] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 116.332752][ T5911] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 116.355460][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.390158][ T5911] usb 2-1: config 220 has no interface number 2 [ 116.410999][ T5911] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 116.449965][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.487888][ T5911] usb 2-1: config 220 interface 0 has no altsetting 0 [ 116.537719][ T5911] usb 2-1: config 220 interface 76 has no altsetting 0 [ 116.556519][ T5911] usb 2-1: config 220 interface 1 has no altsetting 0 [ 116.625182][ T5911] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 116.658965][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.710041][ T5911] usb 2-1: Product: syz [ 116.718748][ T5911] usb 2-1: Manufacturer: syz [ 116.726369][ T5911] usb 2-1: SerialNumber: syz [ 117.023834][ T5911] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 117.073732][ T5911] uvcvideo 2-1:220.0: No valid video chain found. [ 117.114786][ T5911] usb 2-1: selecting invalid altsetting 0 [ 117.188175][ T5911] usb 2-1: selecting invalid altsetting 0 [ 117.224989][ T5911] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 117.280329][ T5911] usb 2-1: USB disconnect, device number 2 [ 117.543629][ T1150] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.618580][ T1150] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.678552][ T1150] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.697679][ T1150] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.438241][ T6082] Zero length message leads to an empty skb [ 118.637182][ T5912] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.823885][ T5912] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 118.853894][ T5912] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 118.891808][ T5912] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 118.914150][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.950231][ T6081] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 119.023324][ T5912] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.509748][ T5912] usb 1-1: USB disconnect, device number 2 [ 120.145571][ T6093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.51'. [ 120.254567][ T6095] netlink: 'syz.0.52': attribute type 13 has an invalid length. [ 120.485410][ T6097] loop2: detected capacity change from 0 to 2048 [ 120.672561][ T6097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.845486][ T6106] loop4: detected capacity change from 0 to 8 [ 120.979096][ T6106] Can't find a SQUASHFS superblock on loop4 [ 121.063666][ T6107] warning: `syz.3.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.405721][ T6110] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 121.580249][ T6097] ------------[ cut here ]------------ [ 121.587325][ T6097] kernel BUG at fs/ext4/inline.c:240! [ 121.647835][ T6112] loop0: detected capacity change from 0 to 1024 [ 121.658033][ T6097] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 121.664640][ T6097] CPU: 0 UID: 0 PID: 6097 Comm: syz.2.53 Not tainted syzkaller #0 PREEMPT(full) [ 121.674071][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 121.685713][ T6097] RIP: 0010:ext4_write_inline_data+0x43c/0x440 [ 121.692899][ T6097] Code: c1 38 c1 0f 8c 19 ff ff ff 48 89 df 49 89 d7 e8 da b6 aa ff 4c 89 fa e9 06 ff ff ff e8 5d 87 40 ff 90 0f 0b e8 55 87 40 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f [ 121.715574][ T6097] RSP: 0018:ffffc900044ff3a8 EFLAGS: 00010287 [ 121.722736][ T6097] RAX: ffffffff8285203b RBX: 0000000000006000 RCX: 0000000000080000 [ 121.731800][ T6097] RDX: ffffc9000d312000 RSI: 000000000000abfb RDI: 000000000000abfc [ 121.740617][ T6097] RBP: ffff888076d54b2a R08: ffff888031230387 R09: 1ffff11006246070 [ 121.748969][ T6097] R10: dffffc0000000000 R11: ffffed1006246071 R12: 000000000000003c [ 121.757790][ T6097] R13: ffffc900044ff460 R14: 0000000000005000 R15: ffff888076d545c0 [ 121.766350][ T6097] FS: 00007f538a4a26c0(0000) GS:ffff888125455000(0000) knlGS:0000000000000000 [ 121.776776][ T6097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.784121][ T6097] CR2: 00007f57e9c7f000 CR3: 000000007763a000 CR4: 00000000003526f0 [ 121.793603][ T6097] Call Trace: [ 121.797523][ T6097] [ 121.800847][ T6097] ? ext4_get_inode_loc+0xc5/0xf0 [ 121.806084][ T6097] ext4_write_inline_data_end+0x34d/0xad0 [ 121.812598][ T6097] ? __pfx_ext4_write_inline_data_end+0x10/0x10 [ 121.819246][ T6097] ? ext4_da_write_end+0x228/0xd00 [ 121.824895][ T6097] generic_perform_write+0x620/0x8f0 [ 121.830840][ T6097] ? __pfx_generic_perform_write+0x10/0x10 [ 121.837243][ T6097] ? file_update_time_flags+0x400/0x4a0 [ 121.843350][ T6097] ? ext4_write_checks+0x24b/0x2c0 [ 121.848943][ T6097] ext4_buffered_write_iter+0xce/0x3a0 [ 121.854809][ T6097] ext4_file_write_iter+0x298/0x1bf0 [ 121.860411][ T6097] ? splice_from_pipe_next+0x61c/0x670 [ 121.866076][ T6097] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 121.872003][ T6097] ? __asan_memset+0x22/0x50 [ 121.877522][ T6097] iter_file_splice_write+0x9a1/0x10f0 [ 121.883800][ T6097] ? __pfx_iter_file_splice_write+0x10/0x10 [ 121.889922][ T6097] ? __pfx_iter_file_splice_write+0x10/0x10 [ 121.896322][ T6097] direct_splice_actor+0x101/0x160 [ 121.901677][ T6097] splice_direct_to_actor+0x53a/0xc70 [ 121.907550][ T6097] ? __pfx_direct_splice_actor+0x10/0x10 [ 121.913327][ T6097] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 121.919346][ T6097] ? do_splice_direct+0x172/0x290 [ 121.924498][ T6097] ? __pfx_direct_splice_actor+0x10/0x10 [ 121.930602][ T6097] do_splice_direct+0x195/0x290 [ 121.935566][ T6097] ? __pfx_do_splice_direct+0x10/0x10 [ 121.941333][ T6097] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 121.947705][ T6097] ? rw_verify_area+0x255/0x4d0 [ 121.953533][ T6097] do_sendfile+0x535/0x7d0 [ 121.958790][ T6097] ? __pfx_do_sendfile+0x10/0x10 [ 121.964085][ T6097] ? lockdep_hardirqs_on+0x7a/0x110 [ 121.970121][ T6097] ? rcu_is_watching+0x15/0xb0 [ 121.975507][ T6097] __se_sys_sendfile64+0x144/0x1a0 [ 121.981119][ T6097] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 121.987584][ T6097] ? __x64_sys_sendfile64+0x1f/0xb0 [ 121.994769][ T6097] ? __sanitizer_cov_trace_pc+0x45/0x70 [ 122.000964][ T6097] do_syscall_64+0x14d/0xf80 [ 122.006631][ T6097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.013897][ T6097] ? clear_bhb_loop+0x40/0x90 [ 122.019444][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.026269][ T6097] RIP: 0033:0x7f538959c629 [ 122.031627][ T6097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.053333][ T6097] RSP: 002b:00007f538a4a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 122.063150][ T6097] RAX: ffffffffffffffda RBX: 00007f5389815fa0 RCX: 00007f538959c629 [ 122.072334][ T6097] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 122.083602][ T6097] RBP: 00007f5389632b39 R08: 0000000000000000 R09: 0000000000000000 [ 122.093637][ T6097] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000000 [ 122.102305][ T6097] R13: 00007f5389816038 R14: 00007f5389815fa0 R15: 00007ffd9daa6318 [ 122.111015][ T6097] [ 122.114159][ T6097] Modules linked in: [ 122.119844][ T6097] ---[ end trace 0000000000000000 ]--- [ 122.127508][ T6112] EXT4-fs: Ignoring removed orlov option [ 122.143695][ T6097] RIP: 0010:ext4_write_inline_data+0x43c/0x440 [ 122.159451][ T6112] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 122.197903][ T6097] Code: c1 38 c1 0f 8c 19 ff ff ff 48 89 df 49 89 d7 e8 da b6 aa ff 4c 89 fa e9 06 ff ff ff e8 5d 87 40 ff 90 0f 0b e8 55 87 40 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f [ 122.261729][ T6112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.302699][ T6097] RSP: 0018:ffffc900044ff3a8 EFLAGS: 00010287 [ 122.313660][ T6097] RAX: ffffffff8285203b RBX: 0000000000006000 RCX: 0000000000080000 [ 122.323171][ T6097] RDX: ffffc9000d312000 RSI: 000000000000abfb RDI: 000000000000abfc [ 122.332262][ T6097] RBP: ffff888076d54b2a R08: ffff888031230387 R09: 1ffff11006246070 [ 122.342052][ T6097] R10: dffffc0000000000 R11: ffffed1006246071 R12: 000000000000003c [ 122.351356][ T6097] R13: ffffc900044ff460 R14: 0000000000005000 R15: ffff888076d545c0 [ 122.361635][ T6097] FS: 00007f538a4a26c0(0000) GS:ffff888125555000(0000) knlGS:0000000000000000 [ 122.372755][ T6097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.380976][ T6097] CR2: 000000110c31cca9 CR3: 000000007763a000 CR4: 00000000003526f0 [ 122.390771][ T6097] Kernel panic - not syncing: Fatal exception [ 122.398418][ T6097] Kernel Offset: disabled [ 122.403383][ T6097] Rebooting in 86400 seconds..