last executing test programs: 2m0.121953675s ago: executing program 3 (id=186): r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socket$inet(0x2, 0x3, 0x6) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x20080, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r3, &(0x7f00000009c0)=[{0x0}], 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000480)={{0x3, 0x0, 0x1, 0x1, 0x4}, 0x0, 0x6, 'id0\x00', 'timer0\x00'}) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000300)={0x30, 0x5, 0x0, {0x0, 0x3, 0xffffffffffffffff, 0x4}}, 0x30) r4 = dup(r0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 1m56.498990003s ago: executing program 3 (id=190): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) dup(r4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000004a00010045000000000000000a000058df"], 0x24}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 1m54.216100717s ago: executing program 3 (id=192): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, 0x1}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f00000001c0)={@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x14}}, 0xc) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000450000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb63"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 1m52.829713782s ago: executing program 3 (id=194): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x6000809) sendfile(r0, r1, 0x0, 0x7ffff004) 1m51.799696656s ago: executing program 3 (id=196): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r2 = fsopen(&(0x7f0000000080)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r3) sendmsg$NLBL_MGMT_C_ADDDEF(r0, 0x0, 0x4040040) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x2000000, 0x0, 0x73130305, 0x33565347, 0x0, 0x0, 0x25, 0x0, 0x0, 0x7, 0x1}}) 1m51.3675842s ago: executing program 3 (id=201): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r0, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) 1m35.228282914s ago: executing program 32 (id=201): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r0, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) 10.076629842s ago: executing program 1 (id=423): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$eJzs28tvG8UfAPDvrpP219cvoSqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCAJC5YgqcUcckfgLOMEFASckrnBHlSoUIbVwMlp7N7Ed23nUiaH+fKRtZ3bXnfl6drwzO90A+tZI9kcSsTcifo2IoVq28YSR2l+3lxam/lpamEqiUnnjj6R63q2lhani1OJze4rMQET6SRKHW5Q7d+XqhclyeeZynh+bv/ju2NyVq8+cvzh5bubczKWJ06dPnhh/7tTEs12JM4vr1qEPZo8cfOWt669Nnbn+9o9fJ0X8TXF0yUing49XKl0urrf21aWTgR5WhA0p1bppDFb7/1CUYqXxhuLlj3taOWBLVSqVyn3tDy9WgLtYEr2uAdAbxY0+m//mW3Hr34bRR+/dfKE2Acpiv51vtSMDkebnDDbNb7tpJCLOLP79RbbFRp9DpFtUKQDgrvZtNv55umH8l48/0qh/LvT/fA1lOCLuiYj9EXEqIg5ExL0R1XPvj4gHWhWStC+/eZFk9fgnvbHp4NYhG/89n69tNY7/lgdXw6U8t68a/2By9nx55nj+nRyLwZ1ZfrxDGd+99Mtn7Y7Vj/+yLSu/GAvm9bgxsLPxM9OT85N3EnO9mx9FHBpoFX+yvBKQNd/BiDi0yTLOP/nVkSJ9uNR4bO34O+jCOlPly4gnau2/GE3xF5LO65Nj/4vyzPGx4qpY7aefr73ervw7ir8Lsvbf3fL6X45/OKlfr53beBnXfvu07Zxms9f/juTNhn3vT87PXx6P2JG8Wqt0/f6JpvMmVs7P4j92tHX/3x8r38Th7PpPIx6MiIci4uG87o9ExKMRcbRD/D+8+Ng7HeP/s138Ozv8q92RxT/d0P7FD1+79l9J7IjmPa0TpQvff9NQ6HBT/Gu2/8lq6li+Zz2/f+up1+auZgAAAPjvySb7eyNJR5fTaTo6Wvs//Adid1qenZt/6uzse5ema+8IDMdgWjzpGqp7HjqeT+uL/ERT/kT+3Pjz0q5qfnRqtjzd6+Chz+1p0/8zv5d6XTtgy3lfC/qX/g99q/49AKDPuP9D/2rR/3f1oh7A9mt1//+wB/UAtl9T/7fsB33E/B/6l/4P/Uv/h740tyvWfkleQmJVItJ/RTUktijR618mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7vgnAAD//wW66qg=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_open_procfs(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r3, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00'}) 7.850520475s ago: executing program 1 (id=427): socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) 7.124068658s ago: executing program 0 (id=430): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 6.938171624s ago: executing program 0 (id=431): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x104, 0x4, 0x418, 0x0, 0x220, 0x220, 0x330, 0x330, 0x330, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @local, @rand_addr=0x64010101, 0x1, 0x1}}}, {{@arp={@multicast1, @rand_addr=0x64010100, 0xff, 0xffffffff, 0x7, 0x3, {@mac=@random, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7ff, 0x2, 0x7fff, 0x9, 0x0, 'veth0_virt_wifi\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x227}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @empty, @broadcast, 0x4}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010100, 0xff, 0xffffff00, 0x8, 0x6, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x6, 0x21, 0x8, 0x62, 0x4005, 0x5, 'vlan1\x00', 'wlan1\x00', {}, {}, 0x0, 0x2c8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @multicast1, @broadcast, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x468) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff010000000000000000000000000001"], 0x110) 6.938030974s ago: executing program 5 (id=432): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/226, 0xe2) 6.333021234s ago: executing program 4 (id=433): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) dup(r4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000004a00010045000000000000000a000058df"], 0x24}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 6.285649975s ago: executing program 1 (id=434): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xf, "0476bc4b4c9e3e260cbfad9904"}, @timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @local}}}, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280), 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 5.757147213s ago: executing program 5 (id=435): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xfff3}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.756941703s ago: executing program 0 (id=436): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.772000624s ago: executing program 4 (id=438): syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0xd3, 0x4}, {0x8000, 0x29}}}}, 0x11) 4.768028205s ago: executing program 2 (id=439): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) getsockopt$MRT(0xffffffffffffffff, 0x0, 0x53, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4.522103723s ago: executing program 0 (id=440): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001180)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8003, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x2, 0xf}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.423584806s ago: executing program 4 (id=441): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x40) 3.712603799s ago: executing program 2 (id=442): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fffffff}, 0xffffffffffffff2f) 3.70391845s ago: executing program 1 (id=443): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x8100, 0x0, {0x0, 0xffe1}, {0x8, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0xd}}]}}]}, 0x48}}, 0x8000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20010000120013070000000000000000e0"], 0x120}}, 0x40000) 3.632640942s ago: executing program 1 (id=444): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3.632426442s ago: executing program 4 (id=445): shutdown(0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000854) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x8800) 3.593046323s ago: executing program 5 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4711, &(0x7f0000006240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 3.577721553s ago: executing program 2 (id=447): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000d00)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000c400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0xffff, 0xa222209, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 2.879625146s ago: executing program 2 (id=448): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.782793549s ago: executing program 1 (id=449): r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 2.755233941s ago: executing program 2 (id=450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) close(r0) r1 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r1, 0x6f2d, 0x7fffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) 2.591666346s ago: executing program 5 (id=451): setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) 2.202101158s ago: executing program 5 (id=452): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup2(r0, r0) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/104, 0x68, 0x0, 0x1, 0x2}}, 0x48) 2.108464522s ago: executing program 4 (id=453): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xf, "0476bc4b4c9e3e260cbfad9904"}, @timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @local}}}, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280), 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 1.922845577s ago: executing program 5 (id=454): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) getsockopt$MRT(0xffffffffffffffff, 0x0, 0x53, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.773866832s ago: executing program 4 (id=455): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000700)={0x20, 0x5, 0x6, "a8106cb3375f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 156.943275ms ago: executing program 0 (id=456): socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x58) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty}}}}, 0x0) 3.45359ms ago: executing program 0 (id=457): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffc, "7b4b143b7461fd777b1c012bd14efbfcdb8f080c26a048a5eab88c82b8af00", "584cb72649a50f2dbc4befb57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) fchmod(r1, 0x1c2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x2b, 0x80801, 0x1) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x1, 0x1, 0x0, 0xffffffffffffff1b, 0x77}, 0x0, &(0x7f0000000280)={0xe2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003, 0x1}, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x4000010) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000018000095000a0000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970"], 0x70}}, 0x20008800) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, 0x0, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 0s ago: executing program 2 (id=458): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x5, 0x4, "6fa715e63fee9cb07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e19b47b6669f6bdb9c400", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8, 0xa, 0x87, 0x8, "b01eb45b7b42d1b78db69e4ddcbe602aceee5ab4c53511819a5d8f7a28bf04c5a4ee3470588f8f00cf676d0afca0f2e6f4d82e4208ca4c5f7365d43100", "b31f22c9080873366b499607be231200bc798b00", [0xff, 0x105e8]}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. [ 62.912045][ T4175] cgroup: Unknown subsys name 'net' [ 63.041665][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.601867][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.667478][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 66.710522][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 66.757132][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 66.787310][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 66.827876][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 66.886555][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.893721][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.902154][ T4198] device bridge_slave_0 entered promiscuous mode [ 66.941557][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.951804][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.960350][ T4198] device bridge_slave_1 entered promiscuous mode [ 67.009727][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.020043][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.028696][ T4196] device bridge_slave_0 entered promiscuous mode [ 67.043728][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.050920][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.059007][ T4196] device bridge_slave_1 entered promiscuous mode [ 67.079850][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.087115][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.094983][ T4200] device bridge_slave_0 entered promiscuous mode [ 67.109528][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.116855][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.125066][ T4200] device bridge_slave_1 entered promiscuous mode [ 67.138954][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.146213][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.154582][ T4188] device bridge_slave_0 entered promiscuous mode [ 67.162411][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.169592][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.178356][ T4189] device bridge_slave_0 entered promiscuous mode [ 67.188812][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.211882][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.222086][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.230451][ T4188] device bridge_slave_1 entered promiscuous mode [ 67.237950][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.245381][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.253685][ T4189] device bridge_slave_1 entered promiscuous mode [ 67.262465][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.280275][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.311921][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.324332][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.342874][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.359880][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.399149][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.410020][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.422604][ T4198] team0: Port device team_slave_0 added [ 67.431338][ T4200] team0: Port device team_slave_0 added [ 67.439098][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.462725][ T4198] team0: Port device team_slave_1 added [ 67.471066][ T4200] team0: Port device team_slave_1 added [ 67.492902][ T4196] team0: Port device team_slave_0 added [ 67.520400][ T4188] team0: Port device team_slave_0 added [ 67.534462][ T4196] team0: Port device team_slave_1 added [ 67.549048][ T4188] team0: Port device team_slave_1 added [ 67.558818][ T4189] team0: Port device team_slave_0 added [ 67.572248][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.579567][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.606067][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.619320][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.626516][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.652655][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.670619][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.677809][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.704560][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.717511][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.724512][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.757678][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.770875][ T4189] team0: Port device team_slave_1 added [ 67.821267][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.829932][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.858109][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.872232][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.879553][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.906280][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.919024][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.926358][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.952445][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.964377][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.971468][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.997859][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.017158][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.024152][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.050338][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.077243][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.084240][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.110225][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.141025][ T4198] device hsr_slave_0 entered promiscuous mode [ 68.148423][ T4198] device hsr_slave_1 entered promiscuous mode [ 68.183791][ T4200] device hsr_slave_0 entered promiscuous mode [ 68.191333][ T4200] device hsr_slave_1 entered promiscuous mode [ 68.198484][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.206988][ T4200] Cannot create hsr debugfs directory [ 68.244828][ T4196] device hsr_slave_0 entered promiscuous mode [ 68.251917][ T4196] device hsr_slave_1 entered promiscuous mode [ 68.260113][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.270732][ T4196] Cannot create hsr debugfs directory [ 68.281158][ T4188] device hsr_slave_0 entered promiscuous mode [ 68.288025][ T4188] device hsr_slave_1 entered promiscuous mode [ 68.295456][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.303049][ T4188] Cannot create hsr debugfs directory [ 68.309680][ T2856] Bluetooth: hci3: command 0x0409 tx timeout [ 68.315721][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 68.317517][ T2856] Bluetooth: hci1: command 0x0409 tx timeout [ 68.322773][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 68.385158][ T2856] Bluetooth: hci4: command 0x0409 tx timeout [ 68.394778][ T4189] device hsr_slave_0 entered promiscuous mode [ 68.402211][ T4189] device hsr_slave_1 entered promiscuous mode [ 68.410356][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.418297][ T4189] Cannot create hsr debugfs directory [ 68.731870][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.743551][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.758667][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.778718][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.792071][ T4200] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.814848][ T4200] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.824952][ T4200] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.837480][ T4200] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.930209][ T4196] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.943651][ T4196] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.953469][ T4196] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.963897][ T4196] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.043078][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.070501][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.089319][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.098122][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.111602][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.168081][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.185451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.195672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.215747][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.228473][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.247752][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.269679][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.280429][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.290788][ T1444] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.298114][ T1444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.308131][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.317345][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.328827][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.338304][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.358143][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.368645][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.379077][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.387959][ T1444] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.395099][ T1444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.422019][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.433580][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.441481][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.452464][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.463369][ T1444] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.470511][ T1444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.479984][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.489249][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.498171][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.506927][ T1444] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.514097][ T1444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.522352][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.531921][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.540899][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.550745][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.561790][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.570259][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.580811][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.591760][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.601018][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.634800][ T4200] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.649902][ T4200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.676295][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.685572][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.694793][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.706618][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.716518][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.725575][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.734231][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.743226][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.752237][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.761067][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.790531][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.802087][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.816621][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.825832][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.833719][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.844653][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.853671][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.864791][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.890475][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.922601][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.953572][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.971375][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.980597][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.987747][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.997357][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.006908][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.015834][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.023022][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.032607][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.041177][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.060794][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.074888][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.100470][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.148802][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.166091][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.187687][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.197064][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.206736][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.216732][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.223839][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.234049][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.243884][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.259732][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.266912][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.276315][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.285757][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.293940][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.320003][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.329911][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.342990][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.351879][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.362404][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.372905][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.381751][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.390223][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 70.397527][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.405628][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 70.411844][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 70.420547][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.428114][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 70.438126][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.447049][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.462931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.471969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.480761][ T4177] Bluetooth: hci4: command 0x041b tx timeout [ 70.487850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.498082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.517744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.525744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.533239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.541181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.554906][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.566980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.574811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.592060][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.604197][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.618028][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.631096][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.644573][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.654265][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.670359][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.711610][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.721579][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.738305][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.745564][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.808875][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.819678][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.836825][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.852937][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.863522][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.879490][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.887000][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.902222][ T4198] device veth0_vlan entered promiscuous mode [ 70.917955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.932689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.957368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.976740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.011530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.046403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.073159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.087840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.097446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.107497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.118928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.133879][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.144634][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.164948][ T4198] device veth1_vlan entered promiscuous mode [ 71.187167][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.197935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.214405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.225702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.234341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.243868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.271290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.279665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.287361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.294901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.323699][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.349088][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.356363][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.374631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.384912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.401276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.412553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.436517][ T4198] device veth0_macvtap entered promiscuous mode [ 71.459011][ T4198] device veth1_macvtap entered promiscuous mode [ 71.478866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.488132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.497118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.508372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.541641][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.557409][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.574373][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.590901][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.610983][ T4200] device veth0_vlan entered promiscuous mode [ 71.638631][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.653433][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.662735][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.672393][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.683954][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.693013][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.702819][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.711492][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.720206][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.728852][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.738630][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.746832][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.757578][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.768703][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.777535][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.787110][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.806002][ T4200] device veth1_vlan entered promiscuous mode [ 71.816116][ T4188] device veth0_vlan entered promiscuous mode [ 71.865837][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.874041][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.882956][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.892193][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.902275][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.920123][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.932527][ T4196] device veth0_vlan entered promiscuous mode [ 71.952101][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.960822][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.969578][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.000353][ T4188] device veth1_vlan entered promiscuous mode [ 72.052475][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.061863][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.083023][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.093584][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.109784][ T4189] device veth0_vlan entered promiscuous mode [ 72.125607][ T4196] device veth1_vlan entered promiscuous mode [ 72.134734][ T4200] device veth0_macvtap entered promiscuous mode [ 72.146828][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.155988][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.164493][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.174765][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.183529][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.220320][ T4200] device veth1_macvtap entered promiscuous mode [ 72.244567][ T4246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.261999][ T4196] device veth0_macvtap entered promiscuous mode [ 72.268648][ T4246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.284635][ T4189] device veth1_vlan entered promiscuous mode [ 72.299953][ T4188] device veth0_macvtap entered promiscuous mode [ 72.308651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.317686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.328329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.336649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.346662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.356860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.366968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.376541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.384809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.401388][ T4196] device veth1_macvtap entered promiscuous mode [ 72.417849][ T4188] device veth1_macvtap entered promiscuous mode [ 72.454262][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.466975][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 72.473201][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 72.479893][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 72.486098][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.496581][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 72.504444][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.527023][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.538613][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.549417][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 72.555582][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.568490][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.581496][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.591412][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.602973][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.606866][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.619494][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.633943][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.642746][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.650941][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.660463][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.669535][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.678482][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.688306][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.697746][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.710159][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.721454][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.733891][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.750101][ T4189] device veth0_macvtap entered promiscuous mode [ 72.761512][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.773058][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.784500][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.796721][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.810133][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.821485][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.830329][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.839538][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.849061][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.858535][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.871621][ T4196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.882077][ T4196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.891559][ T4196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.902710][ T4196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.916622][ T4189] device veth1_macvtap entered promiscuous mode [ 72.932586][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.947885][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.961716][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.972613][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.982772][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.994532][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.012413][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.023080][ T4200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.043170][ T4200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.053756][ T4200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.065346][ T4200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.099269][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.109715][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.120151][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.132053][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.147405][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.158046][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.170310][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.181091][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.192645][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.205557][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.213197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.223966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.244443][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.263079][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.276224][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.292540][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.302770][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.327737][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.339493][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.351254][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.366660][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.400726][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.407111][ T4265] loop3: detected capacity change from 0 to 2048 [ 73.418682][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.428830][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.438909][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.458809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.467789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.480893][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.492173][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.499609][ T4265] ======================================================= [ 73.499609][ T4265] WARNING: The mand mount option has been deprecated and [ 73.499609][ T4265] and is ignored by this kernel. Remove the mand [ 73.499609][ T4265] option from the mount to silence this warning. [ 73.499609][ T4265] ======================================================= [ 73.507153][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.561327][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.571795][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.582887][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.594278][ T4265] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.597372][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.620014][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.632498][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.662630][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.686146][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.701571][ T26] audit: type=1800 audit(1780840605.528:2): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 73.762953][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.787077][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.799202][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.819412][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.846524][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.873218][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.892094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.667637][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 74.877963][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.905270][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.919343][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 74.925533][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 74.931604][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 74.939193][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 74.979482][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.001951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.004110][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.068608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.107365][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.130437][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.194204][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.217065][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.228260][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.237302][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.287444][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.312017][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.359173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.374680][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.411445][ T4212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.428463][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.453916][ T4212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.473256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.488505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.246976][ T4291] Zero length message leads to an empty skb [ 76.678005][ T4294] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 76.825035][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38e!!! [ 76.925070][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 77.355084][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.375079][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.385059][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.395075][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.405064][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.415062][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.425055][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.435052][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 79.110950][ T4299] ODEBUG: Out of memory. ODEBUG disabled [ 79.630478][ T4310] loop3: detected capacity change from 0 to 32768 [ 79.662427][ T4314] input: syz1 as /devices/virtual/input/input5 [ 80.616218][ T4310] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 80.629246][ T4310] JBD2: Ignoring recovery information on journal [ 80.777192][ T4320] comedi comedi0: Minor 3 could not be opened [ 81.264894][ T4310] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 81.354516][ T26] audit: type=1800 audit(1780840613.178:3): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 81.865955][ T4310] syz.3.12 (4310) used greatest stack depth: 19096 bytes left [ 82.720719][ T4198] ocfs2: Unmounting device (7,3) on (node local) [ 84.425170][ T4354] loop2: detected capacity change from 0 to 128 [ 85.735395][ T2856] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.995274][ T2856] usb 2-1: Using ep0 maxpacket: 8 [ 86.115339][ T2856] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 86.142789][ T2856] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.189149][ T2856] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.253686][ T2856] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.285672][ T2856] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.455129][ T2856] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 86.464357][ T2856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.738655][ T7] cfg80211: failed to load regulatory.db [ 89.230277][ T2856] usb 2-1: usb_control_msg returned -32 [ 90.088574][ T2856] usbtmc 2-1:16.0: can't read capabilities [ 90.148425][ T2856] usb 2-1: USB disconnect, device number 2 [ 90.463251][ T4374] loop1: detected capacity change from 0 to 32768 [ 90.660269][ T4379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 95.062891][ T4410] netlink: 'syz.4.37': attribute type 4 has an invalid length. [ 96.875346][ T4229] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.295444][ T4229] usb 2-1: Using ep0 maxpacket: 8 [ 97.515442][ T4229] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 97.536931][ T4229] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.555203][ T4426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 97.577625][ T4229] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.589926][ T4229] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.602314][ T4229] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.622582][ T4229] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.633971][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.935492][ T4229] usb 2-1: usb_control_msg returned -32 [ 97.941719][ T4229] usbtmc 2-1:16.0: can't read capabilities [ 100.611793][ T4229] usb 2-1: USB disconnect, device number 3 [ 101.061094][ T4445] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 101.072820][ T4445] hfsplus: unable to find HFS+ superblock [ 103.943231][ T4459] comedi comedi0: Minor 3 could not be opened [ 106.417773][ T4476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 107.311974][ T4486] loop2: detected capacity change from 0 to 32768 [ 107.526027][ T4486] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 107.542135][ T4486] JBD2: Ignoring recovery information on journal [ 107.641917][ T4486] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 107.708823][ T26] audit: type=1800 audit(1780840639.538:4): pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.56" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 108.215412][ T4269] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.865106][ T4269] usb 5-1: Using ep0 maxpacket: 8 [ 109.881561][ T4189] ocfs2: Unmounting device (7,2) on (node local) [ 109.985406][ T4269] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 110.137387][ T4269] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.190906][ T4269] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.761735][ T4269] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.792274][ T4269] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.810984][ T4269] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.823023][ T4269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.886407][ T4269] usb 5-1: can't set config #16, error -71 [ 112.045514][ T4269] usb 5-1: USB disconnect, device number 2 [ 113.807621][ T4514] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 113.818906][ T4514] hfsplus: unable to find HFS+ superblock [ 116.790718][ T4527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 118.898436][ T4539] input: syz1 as /devices/virtual/input/input6 [ 119.345419][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.605779][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 119.746928][ T21] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 119.773456][ T21] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.870347][ T21] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.953294][ T21] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.036508][ T21] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.150004][ T21] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.338658][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.825216][ T21] usb 5-1: GET_CAPABILITIES returned 0 [ 121.830975][ T21] usbtmc 5-1:16.0: can't read capabilities [ 122.014210][ T4549] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.317230][ T21] usb 5-1: USB disconnect, device number 3 [ 122.913726][ T4581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 125.110847][ T4575] blk_update_request: I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 125.123207][ T4575] hfsplus: unable to find HFS+ superblock [ 127.340410][ T4618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 127.714992][ C1] sched: RT throttling activated [ 128.465257][ T4232] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 128.905090][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 130.105274][ T4232] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 130.445150][ T4232] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.535159][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.591338][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.635372][ T4232] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.715350][ T4232] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.724624][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.831582][ T4232] usb 2-1: can't set config #16, error -71 [ 130.893047][ T4232] usb 2-1: USB disconnect, device number 4 [ 131.095693][ T4640] binder: 4638:4640 ioctl 40406f06 200000000000 returned -22 [ 132.787507][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.793924][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.312704][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 137.903686][ T4564] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.815164][ T4564] usb 1-1: Using ep0 maxpacket: 8 [ 140.365831][ T4564] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 140.374081][ T4564] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.421023][ T4564] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.431440][ T4564] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.441457][ T4564] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.454515][ T4564] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.464234][ T4564] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.545140][ T4564] usb 1-1: can't set config #16, error -71 [ 140.584017][ T4564] usb 1-1: USB disconnect, device number 2 [ 141.721051][ T4696] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 141.735274][ T4696] hfsplus: unable to find HFS+ superblock [ 143.080330][ T4728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'. [ 144.645098][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 145.594328][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 145.765828][ T21] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 145.780085][ T21] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.790975][ T21] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.802758][ T21] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.813180][ T21] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.827639][ T21] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.837093][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.115163][ T21] usb 2-1: GET_CAPABILITIES returned 0 [ 146.120765][ T21] usbtmc 2-1:16.0: can't read capabilities [ 146.568505][ T21] usb 2-1: USB disconnect, device number 5 [ 146.901542][ T4754] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 146.978199][ T4754] hfsplus: unable to find HFS+ superblock [ 149.169515][ T4768] loop4: detected capacity change from 0 to 131072 [ 149.505634][ T4768] F2FS-fs (loop4): invalid crc value [ 149.748944][ T4782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 150.514887][ T4768] F2FS-fs (loop4): Found nat_bits in checkpoint [ 150.559100][ T4768] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 153.016305][ T4788] tipc: Enabling of bearer rejected, failed to enable media [ 154.185069][ T4232] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 155.170672][ T4232] usb 5-1: Using ep0 maxpacket: 8 [ 155.295981][ T4232] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 155.330317][ T4232] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.370767][ T4232] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.431575][ T4232] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.522967][ T4232] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.575144][ T4232] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.212872][ T4822] loop3: detected capacity change from 0 to 131072 [ 156.226551][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.604006][ T4232] usb 5-1: GET_CAPABILITIES returned 0 [ 156.610602][ T4232] usbtmc 5-1:16.0: can't read capabilities [ 156.658039][ T4822] F2FS-fs (loop3): Test dummy encryption mode enabled [ 156.732211][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 156.943109][ T4822] F2FS-fs (loop3): invalid crc value [ 157.553383][ T4836] loop2: detected capacity change from 0 to 512 [ 157.680048][ T4836] EXT4-fs (loop2): Ignoring removed bh option [ 157.691433][ T4822] F2FS-fs (loop3): Found nat_bits in checkpoint [ 157.732472][ T7] usb 5-1: USB disconnect, device number 4 [ 157.765668][ T4822] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 157.768375][ T4836] EXT4-fs (loop2): inline encryption not supported [ 157.891972][ T4836] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.030938][ T4836] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 158.098963][ T4836] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.151: bg 0: block 248: padding at end of block bitmap is not set [ 158.127625][ T4836] Quota error (device loop2): write_blk: dquota write failed [ 158.143747][ T4836] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 158.158163][ T4836] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.151: Failed to acquire dquot type 1 [ 158.223716][ T4836] EXT4-fs (loop2): 1 truncate cleaned up [ 158.245098][ T4836] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 158.446036][ T4369] Quota error (device loop2): remove_tree: Getting block too big (0 >= 6) [ 158.479094][ T4369] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:11: Failed to release dquot type 1 [ 158.756638][ T4851] loop4: detected capacity change from 0 to 32768 [ 158.885299][ T4851] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.155 (4851) [ 159.334485][ T4851] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 159.344295][ T4851] BTRFS info (device loop4): metadata ratio 0 [ 159.351711][ T4851] BTRFS info (device loop4): turning on sync discard [ 159.358792][ T4851] BTRFS info (device loop4): using free space tree [ 159.365804][ T4851] BTRFS info (device loop4): has skinny extents [ 160.170935][ T4851] BTRFS info (device loop4): enabling ssd optimizations [ 160.977880][ T26] audit: type=1800 audit(1780840692.338:5): pid=4889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.155" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 163.175688][ T4900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 165.125131][ T4913] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 166.105080][ T4913] usb 1-1: Using ep0 maxpacket: 8 [ 166.305707][ T4913] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 166.462793][ T4926] loop3: detected capacity change from 0 to 40427 [ 166.485832][ T4913] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.555094][ T4913] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.657614][ T4926] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 168.650676][ T4913] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.776207][ T4913] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.439446][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 170.466771][ T4913] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 170.676560][ T4913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.075161][ T4913] usb 1-1: can't set config #16, error -71 [ 171.281783][ T4913] usb 1-1: USB disconnect, device number 3 [ 175.159040][ T4973] loop0: detected capacity change from 0 to 40427 [ 175.654192][ T4973] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value [ 176.175033][ T4233] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 176.776619][ T4990] blk_update_request: I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 176.787873][ T4990] hfsplus: unable to find HFS+ superblock [ 176.975135][ T4233] usb 3-1: Using ep0 maxpacket: 8 [ 180.145991][ T4233] usb 3-1: unable to read config index 0 descriptor/all [ 180.157113][ T4233] usb 3-1: can't read configurations, error -71 [ 181.983877][ T5007] loop2: detected capacity change from 0 to 128 [ 182.097839][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 184.479562][ T5023] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 185.547112][ T5037] blk_update_request: I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 185.558905][ T5037] hfsplus: unable to find HFS+ superblock [ 185.915842][ T4233] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 187.665133][ T4233] usb 3-1: Using ep0 maxpacket: 8 [ 187.816810][ T4233] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 187.859050][ T5058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 187.879920][ T4233] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.326522][ T4233] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.427392][ T4233] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.638438][ T5059] tipc: Started in network mode [ 188.643385][ T5059] tipc: Node identity , cluster identity 4711 [ 188.850032][ T4233] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.865208][ T4233] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 188.874469][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.877257][ T5059] tipc: Failed to obtain node identity [ 189.955263][ T5059] tipc: Enabling of bearer rejected, failed to enable media [ 189.995945][ T4233] usb 3-1: can't set config #16, error -71 [ 190.003074][ T4233] usb 3-1: USB disconnect, device number 4 [ 190.077926][ T5076] loop1: detected capacity change from 0 to 512 [ 190.246423][ T5076] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.209: iget: bad i_size value: 38620345925642 [ 190.418675][ T5076] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.209: couldn't read orphan inode 15 (err -117) [ 190.432494][ T5084] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 190.444812][ T5084] hfsplus: unable to find HFS+ superblock [ 190.537322][ T5076] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.762236][ T5092] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.209: bg 0: block 5: invalid block bitmap [ 192.078699][ T4228] Bluetooth: hci1: command 0x0406 tx timeout [ 192.867296][ T4228] Bluetooth: hci2: command 0x0406 tx timeout [ 192.875185][ T4228] Bluetooth: hci3: command 0x0406 tx timeout [ 192.881345][ T4228] Bluetooth: hci4: command 0x0406 tx timeout [ 192.925729][ T5092] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 768 with error 28 [ 192.997901][ T5092] EXT4-fs (loop1): This should not happen!! Data will be lost [ 192.997901][ T5092] [ 193.008097][ T5092] EXT4-fs (loop1): Total free blocks count 0 [ 193.014130][ T5092] EXT4-fs (loop1): Free/Dirty block details [ 193.021664][ T5092] EXT4-fs (loop1): free_blocks=0 [ 193.027751][ T5092] EXT4-fs (loop1): dirty_blocks=772 [ 193.033094][ T5092] EXT4-fs (loop1): Block reservation details [ 193.039433][ T5092] EXT4-fs (loop1): i_reserved_data_blocks=772 [ 193.264802][ T5100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 195.406653][ T4233] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 195.417691][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.424039][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.846432][ T4300] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 195.876230][ T4233] Bluetooth: hci0: Injecting HCI hardware error event [ 195.884682][ T4195] Bluetooth: hci0: hardware error 0x00 [ 197.205027][ T4300] usb 1-1: Using ep0 maxpacket: 8 [ 197.266391][ T4300] usb 1-1: device descriptor read/all, error -71 [ 197.677138][ T5125] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 197.688817][ T5125] hfsplus: unable to find HFS+ superblock [ 199.914506][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 203.035590][ T4275] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 203.365657][ T4275] usb 5-1: Using ep0 maxpacket: 8 [ 203.506129][ T4275] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 203.558290][ T4275] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.589894][ T4275] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.627169][ T4275] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 203.667376][ T4275] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.759035][ T2856] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 203.778793][ T4275] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 203.789733][ T5162] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 203.800927][ T5162] hfsplus: unable to find HFS+ superblock [ 203.809393][ T4275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.124230][ T5163] chnl_net:caif_netlink_parms(): no params data found [ 204.132386][ T2856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.151671][ T2856] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 204.163316][ T2856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.180357][ T2856] usb 2-1: config 0 descriptor?? [ 204.195376][ T4275] usb 5-1: GET_CAPABILITIES returned 0 [ 204.201105][ T4275] usbtmc 5-1:16.0: can't read capabilities [ 204.344841][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.353568][ T5163] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.370328][ T5163] device bridge_slave_0 entered promiscuous mode [ 204.383573][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.394859][ T5163] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.445216][ T2856] ath6kl: Failed to submit usb control message: -71 [ 204.453085][ T2856] ath6kl: unable to send the bmi data to the device: -71 [ 204.469471][ T2856] ath6kl: Unable to send get target info: -71 [ 204.476164][ T5163] device bridge_slave_1 entered promiscuous mode [ 204.503464][ T2856] ath6kl: Failed to init ath6kl core: -71 [ 204.504281][ T4300] usb 5-1: USB disconnect, device number 5 [ 204.555134][ T5163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.567786][ T5163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.592332][ T2856] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 204.626798][ T2856] usb 2-1: USB disconnect, device number 6 [ 204.652376][ T5163] team0: Port device team_slave_0 added [ 204.676674][ T5163] team0: Port device team_slave_1 added [ 204.715972][ T5163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.723613][ T5163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.752265][ T5163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.768564][ T5163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.777390][ T5163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.803789][ T5163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.864360][ T5163] device hsr_slave_0 entered promiscuous mode [ 204.874454][ T5163] device hsr_slave_1 entered promiscuous mode [ 204.884691][ T5163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.894380][ T5163] Cannot create hsr debugfs directory [ 205.169959][ T5185] netlink: 40 bytes leftover after parsing attributes in process `syz.4.238'. [ 206.569784][ T4275] Bluetooth: hci5: command 0x0409 tx timeout [ 208.625128][ T4300] Bluetooth: hci5: command 0x041b tx timeout [ 208.653724][ T5201] netlink: 'syz.4.242': attribute type 13 has an invalid length. [ 208.685157][ T5201] netlink: 'syz.4.242': attribute type 17 has an invalid length. [ 208.844156][ T5201] netlink: 'syz.4.242': attribute type 27 has an invalid length. [ 208.953095][ T5163] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 209.038812][ T5163] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 209.103434][ T5208] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 209.114681][ T5208] hfsplus: unable to find HFS+ superblock [ 209.171291][ T5163] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 209.343409][ T5163] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 210.361063][ T5163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.461503][ T5163] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.768014][ T4300] Bluetooth: hci5: command 0x040f tx timeout [ 210.872651][ T4275] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 210.894327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.038553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.780135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.799224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.594825][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.602648][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.735641][ T4275] usb 2-1: Using ep0 maxpacket: 8 [ 212.755659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.856847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.865274][ T4275] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 212.873512][ T4275] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.054202][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.061569][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.727910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.905056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.081517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.249898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.399151][ T4275] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.443295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.625902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.775207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.810520][ T4275] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.821147][ T4275] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.834259][ T4275] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 215.843959][ T4275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.856819][ T4914] Bluetooth: hci5: command 0x0419 tx timeout [ 215.868353][ T4275] usb 2-1: can't set config #16, error -71 [ 215.875839][ T4275] usb 2-1: USB disconnect, device number 7 [ 215.890342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.908597][ T5163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 216.006584][ T5249] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 216.099617][ T5163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.113833][ T5249] hfsplus: unable to find HFS+ superblock [ 216.590453][ T5258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.257'. [ 217.199314][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.220030][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.231241][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.242024][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.310863][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.579145][ T5263] loop2: detected capacity change from 0 to 4096 [ 217.908894][ T5263] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 217.973003][ T4893] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.096018][ T4564] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 219.585108][ T4564] usb 5-1: Using ep0 maxpacket: 8 [ 219.718210][ T4564] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 219.788342][ T4893] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.819588][ T4189] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 219.879307][ T4564] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.939840][ T4564] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.031063][ T4564] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.232091][ T4564] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.256002][ T4564] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 220.265766][ T4564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.868417][ T4893] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.695322][ T4564] usb 5-1: usb_control_msg returned -71 [ 221.701541][ T4564] usbtmc 5-1:16.0: can't read capabilities [ 221.770975][ T4564] usb 5-1: USB disconnect, device number 6 [ 222.031135][ T4893] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.047511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.609669][ T5306] trusted_key: encrypted_key: key user:syz not found [ 223.719089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.801095][ T5163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.216807][ T5311] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 224.267039][ T5311] hfsplus: unable to find HFS+ superblock [ 224.431860][ T5320] loop4: detected capacity change from 0 to 1024 [ 224.727841][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 224.794720][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.050324][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.086128][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.135956][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.184910][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.214048][ T5163] device veth0_vlan entered promiscuous mode [ 225.298233][ T5163] device veth1_vlan entered promiscuous mode [ 225.406046][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 225.444550][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 225.606494][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.436512][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.486431][ T5163] device veth0_macvtap entered promiscuous mode [ 226.682150][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.703953][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 226.785618][ T5163] device veth1_macvtap entered promiscuous mode [ 226.939836][ T5163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.960263][ T5163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.972413][ T5163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.995992][ T2856] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 227.012547][ T5163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.029918][ T5163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.051166][ T5163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.094192][ T5163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.139551][ T5163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.157571][ T5163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.171352][ T5163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.190796][ T5163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.204885][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.233287][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.252905][ T2856] usb 3-1: Using ep0 maxpacket: 8 [ 227.446034][ T2856] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 227.458694][ T2856] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.462230][ T5163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.480889][ T2856] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.491765][ T2856] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.502413][ T2856] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.517923][ T2856] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 227.530336][ T2856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.644231][ T5163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.972969][ T5163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.229160][ T5163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.305967][ T2856] usb 3-1: can't set config #16, error -71 [ 229.313157][ T2856] usb 3-1: USB disconnect, device number 5 [ 229.341227][ T5163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.458852][ T5163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.489968][ T5163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.991523][ T5163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.003516][ T5163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.014326][ T5163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.094308][ T5163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.149417][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.173378][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.265918][ T5163] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.310661][ T5163] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.371572][ T5163] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.423500][ T5163] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.519688][ T4487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.547381][ T4487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.721693][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.746675][ T5412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 231.822319][ T4893] device hsr_slave_0 left promiscuous mode [ 231.832554][ T4893] device hsr_slave_1 left promiscuous mode [ 231.848543][ T4893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.864581][ T4893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.895046][ T4893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.929370][ T4893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.953899][ T4893] device bridge_slave_1 left promiscuous mode [ 231.964498][ T4893] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.008366][ T4893] device bridge_slave_0 left promiscuous mode [ 232.032836][ T4893] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.120047][ T5391] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 232.131905][ T5391] hfsplus: unable to find HFS+ superblock [ 232.828156][ T4893] device veth1_macvtap left promiscuous mode [ 232.835653][ T4893] device veth0_macvtap left promiscuous mode [ 232.941853][ T4893] device veth1_vlan left promiscuous mode [ 232.948334][ T4893] device veth0_vlan left promiscuous mode [ 233.206105][ T2856] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 233.455030][ T2856] usb 2-1: Using ep0 maxpacket: 8 [ 234.585313][ T2856] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 235.930811][ T2856] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.111894][ T2856] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 236.290601][ T2856] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.477656][ T2856] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.684495][ T2856] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 236.773063][ T2856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.787554][ T5445] netlink: 7084 bytes leftover after parsing attributes in process `syz.1.295'. [ 236.861772][ T2856] usb 2-1: can't set config #16, error -71 [ 236.915269][ T2856] usb 2-1: USB disconnect, device number 8 [ 237.264308][ T5460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 238.333563][ T4893] team0 (unregistering): Port device team_slave_1 removed [ 238.361750][ T4893] team0 (unregistering): Port device team_slave_0 removed [ 238.384089][ T4893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.423004][ T4893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.681628][ T4893] bond0 (unregistering): Released all slaves [ 238.775608][ T4487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.783391][ T2856] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 238.898722][ T5474] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 238.909878][ T5474] hfsplus: unable to find HFS+ superblock [ 239.140677][ T5478] loop1: detected capacity change from 0 to 40427 [ 239.199737][ T4487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.207565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 239.215705][ T2856] usb 5-1: Using ep0 maxpacket: 8 [ 239.242469][ T5478] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 239.635507][ T2856] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 239.654378][ T2856] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.904585][ T2856] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.979923][ T2856] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 240.034992][ T2856] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.105040][ T2856] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 240.141437][ T2856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.815868][ T2856] usb 5-1: GET_CAPABILITIES returned 0 [ 240.821518][ T2856] usbtmc 5-1:16.0: can't read capabilities [ 241.826716][ T2856] usb 5-1: USB disconnect, device number 7 [ 243.916563][ T5531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 244.491812][ T5499] loop2: detected capacity change from 0 to 32768 [ 245.538497][ T5499] (syz.2.308,5499,0):ocfs2_initialize_super:2313 ERROR: status = -12 [ 245.556973][ T5499] (syz.2.308,5499,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 246.445124][ T4275] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 246.715021][ T4275] usb 3-1: Using ep0 maxpacket: 8 [ 246.835179][ T4275] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 246.850568][ T4275] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.870580][ T4275] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.882940][ T4275] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.893286][ T4275] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.908933][ T4275] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 246.919585][ T4275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.485220][ T4275] usb 3-1: GET_CAPABILITIES returned 0 [ 248.490770][ T4275] usbtmc 3-1:16.0: can't read capabilities [ 249.092564][ T5565] loop5: detected capacity change from 0 to 32768 [ 249.125399][ T4275] usb 3-1: USB disconnect, device number 6 [ 249.274530][ T5565] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.323 (5565) [ 249.943314][ T5565] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 249.952101][ T5565] BTRFS info (device loop5): using free space tree [ 249.958657][ T5565] BTRFS info (device loop5): has skinny extents [ 250.573664][ T5604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 252.359204][ T5623] loop0: detected capacity change from 0 to 512 [ 252.383966][ T5626] loop2: detected capacity change from 0 to 512 [ 252.537660][ T5623] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 252.572284][ T5626] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.334: iget: bad i_size value: 38620345925642 [ 252.601551][ T5565] BTRFS error (device loop5): open_ctree failed: -12 [ 252.648846][ T4679] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by udevd (4679) [ 252.659901][ T5623] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 252.671223][ T5626] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.334: couldn't read orphan inode 15 (err -117) [ 252.729658][ T5623] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 252.738224][ T5626] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 252.816167][ T5623] EXT4-fs (loop0): 1 truncate cleaned up [ 252.822045][ T5623] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 252.845528][ T5636] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 252.925030][ T4913] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 253.032900][ T5650] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 272 with error 28 [ 253.091801][ T5650] EXT4-fs (loop2): This should not happen!! Data will be lost [ 253.091801][ T5650] [ 253.193572][ T5650] EXT4-fs (loop2): Total free blocks count 0 [ 253.199757][ T5650] EXT4-fs (loop2): Free/Dirty block details [ 253.205982][ T5650] EXT4-fs (loop2): free_blocks=0 [ 253.210964][ T5650] EXT4-fs (loop2): dirty_blocks=272 [ 253.216262][ T5650] EXT4-fs (loop2): Block reservation details [ 253.222383][ T5650] EXT4-fs (loop2): i_reserved_data_blocks=272 [ 253.250053][ T4229] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 253.785207][ T4229] usb 2-1: Using ep0 maxpacket: 8 [ 253.905497][ T4229] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 253.948675][ T4229] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.971970][ T4229] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 253.975969][ T4913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 253.987789][ T4229] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 254.010357][ T4229] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.024558][ T4913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.041664][ T4913] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 254.072136][ T4229] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 254.098389][ T4913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.123795][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.145633][ T4913] usb 5-1: config 0 descriptor?? [ 254.341128][ T5671] blk_update_request: I/O error, dev loop11, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 254.353303][ T5671] hfsplus: unable to find HFS+ superblock [ 254.455189][ T4229] usb 2-1: GET_CAPABILITIES returned 0 [ 254.460843][ T4229] usbtmc 2-1:16.0: can't read capabilities [ 254.677486][ T4229] usb 2-1: USB disconnect, device number 9 [ 254.808757][ T5673] process 'syz.2.341' launched './file1' with NULL argv: empty string added [ 255.413724][ T4913] hid-generic 0003:0C70:F0B6.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0 [ 255.671080][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.681491][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.786865][ T5689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'. [ 256.258173][ T4229] usb 5-1: USB disconnect, device number 8 [ 257.312968][ T5710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.348'. [ 257.489329][ T4913] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 257.718286][ T5724] loop4: detected capacity change from 0 to 2048 [ 257.851098][ T5724] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 257.865134][ T4913] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 257.891504][ T4913] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 257.920351][ T5724] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.967679][ T4913] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 258.038444][ T4913] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 258.092199][ T4913] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 258.265277][ T4913] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 258.274392][ T4913] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 258.314720][ T4913] usb 6-1: Product: syz [ 258.325016][ T4913] usb 6-1: Manufacturer: syz [ 258.440581][ T2856] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 258.506273][ T4913] cdc_wdm 6-1:1.0: skipping garbage [ 258.522049][ T4913] cdc_wdm 6-1:1.0: skipping garbage [ 258.529402][ T4913] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 258.541847][ T4913] cdc_wdm 6-1:1.0: Unknown control protocol [ 258.716105][ T2856] usb 3-1: Using ep0 maxpacket: 8 [ 258.866204][ T2856] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 258.875794][ T2856] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.885822][ T2856] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.897040][ T2856] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.907201][ T2856] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.920547][ T2856] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 258.930710][ T2856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.955180][ T2856] usb 3-1: GET_CAPABILITIES returned 0 [ 259.960746][ T2856] usbtmc 3-1:16.0: can't read capabilities [ 261.233935][ T2856] usb 6-1: USB disconnect, device number 2 [ 261.245014][ C0] cdc_wdm 6-1:1.0: Unexpected error -71 [ 261.246148][ T5643] usb 3-1: USB disconnect, device number 7 [ 261.256218][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 261.264205][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 261.270292][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 261.279199][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.475536][ T5767] device syzkaller0 entered promiscuous mode [ 262.446338][ T5800] capability: warning: `syz.0.368' uses deprecated v2 capabilities in a way that may be insecure [ 262.597749][ T5803] loop1: detected capacity change from 0 to 1024 [ 263.100837][ T5803] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 263.200767][ T5803] System zones: 0-1, 3-36 [ 263.274841][ T5803] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.371: bad orphan inode 134217728 [ 263.300792][ T5803] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,debug,journal_dev=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 263.358862][ T26] audit: type=1800 audit(1780840795.188:6): pid=5803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.371" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 263.489643][ T26] audit: type=1804 audit(1780840795.208:7): pid=5803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.371" name="/newroot/73/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 263.825869][ T5818] overlayfs: failed to resolve './file1': -2 [ 264.434783][ T5772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.447413][ T4195] Bluetooth: hci5: link tx timeout [ 264.453110][ T4195] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 264.467382][ T4195] Bluetooth: hci5: link tx timeout [ 264.473560][ T4195] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 264.504501][ T4195] Bluetooth: hci5: link tx timeout [ 264.512889][ T4195] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 265.405358][ T5833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.376'. [ 265.505542][ T4229] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 265.616528][ T4275] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 265.692338][ T4275] Bluetooth: hci2: Injecting HCI hardware error event [ 265.846074][ T4229] usb 5-1: Using ep0 maxpacket: 32 [ 265.915446][ T4195] Bluetooth: hci2: hardware error 0x00 [ 265.985241][ T4229] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 266.006153][ T4229] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 266.116414][ T4229] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 266.185100][ T4229] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 266.266142][ T4915] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 266.428588][ T4229] usb 5-1: config 0 interface 0 has no altsetting 0 [ 266.875040][ T4275] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 267.815250][ T4229] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 267.910110][ T4229] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 268.055316][ T4915] usb 2-1: Using ep0 maxpacket: 32 [ 268.137228][ T4229] usb 5-1: Product: syz [ 268.267207][ T4229] usb 5-1: Manufacturer: syz [ 268.413164][ T4229] usb 5-1: SerialNumber: syz [ 268.512322][ T4913] Bluetooth: hci5: command 0x0406 tx timeout [ 268.674025][ T4229] usb 5-1: config 0 descriptor?? [ 268.784988][ T4275] usb 1-1: Using ep0 maxpacket: 8 [ 268.835160][ T4229] usb 5-1: can't set config #0, error -71 [ 268.905168][ T4915] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 268.913569][ T4275] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 268.924509][ T4915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.936175][ T4275] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.946230][ T4275] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.956131][ T4915] usb 2-1: config 0 has no interface number 0 [ 268.962384][ T4915] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.990902][ T4275] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.013394][ T5848] Process accounting resumed [ 269.018434][ T4229] usb 5-1: USB disconnect, device number 9 [ 269.065258][ T4275] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.131042][ T4275] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 269.293809][ T4275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.305053][ T4915] usb 2-1: string descriptor 0 read error: -71 [ 269.311995][ T4915] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 269.985646][ T5864] syz.0.384 uses obsolete (PF_INET,SOCK_PACKET) [ 270.041997][ T4915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.055101][ T4275] usb 1-1: can't set config #16, error -71 [ 270.062098][ T4915] usb 2-1: config 0 descriptor?? [ 270.067410][ T4275] usb 1-1: USB disconnect, device number 6 [ 270.093850][ T4915] usb 2-1: can't set config #0, error -71 [ 270.251988][ T4915] usb 2-1: USB disconnect, device number 10 [ 273.169466][ T5893] loop5: detected capacity change from 0 to 4096 [ 273.457050][ T5893] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 275.762620][ T5163] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 276.747201][ T4229] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 277.925968][ T4229] usb 6-1: Using ep0 maxpacket: 8 [ 278.075425][ T4229] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 278.100203][ T4229] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 278.182097][ T4229] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 278.240639][ T4229] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 278.286100][ T4229] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.334638][ T4229] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 278.378414][ T4229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.666141][ T4229] usb 6-1: GET_CAPABILITIES returned 0 [ 278.672988][ T4229] usbtmc 6-1:16.0: can't read capabilities [ 278.931323][ T4275] usb 6-1: USB disconnect, device number 3 [ 281.005744][ T5961] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.541949][ T6008] loop4: detected capacity change from 0 to 1024 [ 282.440656][ T6015] overlayfs: missing 'lowerdir' [ 286.609043][ T6045] loop5: detected capacity change from 0 to 256 [ 286.741846][ T6058] fuse: Bad value for 'fd' [ 286.748745][ T5635] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 286.761765][ T6045] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 287.154172][ T6062] loop2: detected capacity change from 0 to 32768 [ 287.269237][ T6065] loop1: detected capacity change from 0 to 512 [ 287.368886][ T5635] usb 1-1: Using ep0 maxpacket: 8 [ 287.469337][ T6065] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 287.546139][ T5635] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 287.690847][ T5635] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.726386][ T5635] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.737769][ T5635] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.748278][ T5635] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.762267][ T5635] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 287.779372][ T5635] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.072483][ T4914] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 288.102036][ T6065] EXT4-fs (loop1): 1 truncate cleaned up [ 288.119749][ T6065] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 288.416118][ T5635] usb 1-1: GET_CAPABILITIES returned 0 [ 288.425910][ T5635] usbtmc 1-1:16.0: can't read capabilities [ 289.142063][ T4912] usb 1-1: USB disconnect, device number 7 [ 289.175388][ T4914] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 289.183560][ T4914] usb 5-1: config 0 has no interface number 0 [ 289.392883][ T4914] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 289.705344][ T4914] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 289.745117][ T4914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.770352][ T4914] usb 5-1: Product: syz [ 289.774734][ T4914] usb 5-1: Manufacturer: syz [ 289.806235][ T4914] usb 5-1: SerialNumber: syz [ 289.814869][ T4914] usb 5-1: config 0 descriptor?? [ 289.908611][ T4914] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 290.269865][ T5639] usb 5-1: USB disconnect, device number 10 [ 290.772826][ T5639] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 291.330659][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.433'. [ 292.646371][ T6108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 293.329485][ T6117] binder: 6106:6117 ioctl c0306201 0 returned -14 [ 293.687455][ T6157] loop5: detected capacity change from 0 to 32768 [ 293.697933][ T5639] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 293.943921][ T6157] (syz.5.446,6157,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 293.964266][ T6157] (syz.5.446,6157,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 293.997490][ T6157] JBD2: Ignoring recovery information on journal [ 294.171864][ T6157] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 294.415839][ T5639] usb 1-1: Using ep0 maxpacket: 8 [ 294.427274][ T6173] syz.2.450: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 294.465077][ T6173] CPU: 1 PID: 6173 Comm: syz.2.450 Not tainted syzkaller #0 [ 294.472451][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 294.482562][ T6173] Call Trace: [ 294.485879][ T6173] [ 294.488842][ T6173] dump_stack_lvl+0x188/0x250 [ 294.493590][ T6173] ? rcu_lock_release+0x5/0x20 [ 294.498398][ T6173] ? show_regs_print_info+0x20/0x20 [ 294.503646][ T6173] ? load_image+0x400/0x400 [ 294.508227][ T6173] warn_alloc+0x243/0x320 [ 294.512611][ T6173] ? zone_watermark_ok_safe+0x240/0x240 [ 294.518204][ T6173] ? __mutex_lock_common+0x465/0x2400 [ 294.523669][ T6173] ? verify_lock_unused+0x140/0x140 [ 294.528961][ T6173] __vmalloc_node_range+0x2b1/0x8b0 [ 294.534219][ T6173] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 294.536982][ T5163] ocfs2: Unmounting device (7,5) on (node local) [ 294.539288][ T6173] vmalloc+0x75/0x80 [ 294.549550][ T6173] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 294.554651][ T6173] dvb_dvr_do_ioctl+0x12a/0x220 [ 294.559556][ T6173] dvb_usercopy+0x191/0x2b0 [ 294.564096][ T6173] ? dvb_dvr_release+0x3d0/0x3d0 [ 294.569077][ T6173] ? dvb_generic_ioctl+0xb0/0xb0 [ 294.574078][ T6173] ? dvb_dvr_poll+0x230/0x230 [ 294.578798][ T6173] dvb_dvr_ioctl+0x25/0x30 [ 294.583250][ T6173] __se_sys_ioctl+0xfa/0x170 [ 294.587882][ T6173] do_syscall_64+0x4c/0xa0 [ 294.592330][ T6173] ? clear_bhb_loop+0x30/0x80 [ 294.597041][ T6173] ? clear_bhb_loop+0x30/0x80 [ 294.601760][ T6173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.608110][ T6173] RIP: 0033:0x7f1329d2ee59 [ 294.612582][ T6173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.632245][ T6173] RSP: 002b:00007f1327f88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.640705][ T6173] RAX: ffffffffffffffda RBX: 00007f1329fa7fa0 RCX: 00007f1329d2ee59 [ 294.648721][ T6173] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 294.656733][ T6173] RBP: 00007f1329dc4d6f R08: 0000000000000000 R09: 0000000000000000 [ 294.664737][ T6173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.672738][ T6173] R13: 00007f1329fa8038 R14: 00007f1329fa7fa0 R15: 00007ffcd708cb58 [ 294.680802][ T6173] [ 294.736522][ T5639] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 294.755143][ T5639] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.766084][ T2856] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 294.784079][ T5639] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.804800][ T5639] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.825932][ T5639] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.850755][ T5639] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 294.871262][ T5639] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.917660][ T6173] Mem-Info: [ 294.921231][ T6173] active_anon:352 inactive_anon:8754 isolated_anon:0 [ 294.921231][ T6173] active_file:22931 inactive_file:37815 isolated_file:0 [ 294.921231][ T6173] unevictable:768 dirty:90 writeback:0 [ 294.921231][ T6173] slab_reclaimable:20572 slab_unreclaimable:96776 [ 294.921231][ T6173] mapped:29798 shmem:3935 pagetables:750 bounce:0 [ 294.921231][ T6173] kernel_misc_reclaimable:0 [ 294.921231][ T6173] free:1357816 free_pcp:10366 free_cma:0 [ 294.968948][ T6173] Node 0 active_anon:1376kB inactive_anon:34008kB active_file:91520kB inactive_file:151260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119192kB dirty:360kB writeback:0kB shmem:13264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11616kB pagetables:3000kB all_unreclaimable? no [ 295.003284][ T6173] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 295.037502][ T6173] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.065526][ T6173] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 295.071366][ T6173] Node 0 DMA32 free:1499780kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1376kB inactive_anon:32408kB active_file:91520kB inactive_file:151260kB unevictable:1536kB writepending:360kB present:3129332kB managed:2606536kB mlocked:0kB bounce:0kB free_pcp:36636kB local_pcp:20688kB free_cma:0kB [ 295.140778][ T6173] lowmem_reserve[]: 0 0 0 0 0 [ 295.187105][ T6173] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.322633][ T5639] usb 1-1: GET_CAPABILITIES returned 0 [ 295.328994][ T5639] usbtmc 1-1:16.0: can't read capabilities [ 295.357789][ T6173] lowmem_reserve[]: 0 0 0 0 0 [ 295.362598][ T6173] Node 1 Normal free:3916124kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:6396kB local_pcp:4804kB free_cma:0kB [ 295.512056][ T6173] lowmem_reserve[]: 0 0 0 0 0 [ 295.544164][ T6173] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 295.605102][ T4912] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 296.199910][ T6173] Node 0 DMA32: 45*4kB (UME) 859*8kB (UME) 821*16kB (UME) 764*32kB (UME) 441*64kB (UME) 166*128kB (UM) 68*256kB (UM) 29*512kB (UM) 11*1024kB (UM) 6*2048kB (UM) 330*4096kB (UM) = 1501596kB [ 296.219646][ T6173] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 296.228106][ T2856] usb 2-1: unable to get BOS descriptor or descriptor too short [ 296.235428][ T4912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.255903][ T4912] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 296.266481][ T4912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.277363][ T5639] usb 1-1: USB disconnect, device number 8 [ 296.290302][ T4912] usb 5-1: config 0 descriptor?? [ 296.301808][ T6173] Node 1 Normal: 93*4kB (UE) 35*8kB (UME) 27*16kB (UME) 171*32kB (UE) 65*64kB (UME) 21*128kB (UME) 9*256kB (UME) 2*512kB (U) 2*1024kB (UE) 1*2048kB (M) 951*4096kB (M) = 3916124kB [ 296.322217][ T6173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.332510][ T6173] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 296.343274][ T6173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.355703][ T6173] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 296.356311][ T2856] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 296.367138][ T6173] 65255 total pagecache pages [ 296.383840][ T4912] pwc: Askey VC010 type 2 USB webcam detected. [ 296.390385][ T6173] 0 pages in swap cache [ 296.395455][ T6173] Swap cache stats: add 125, delete 125, find 0/0 [ 296.402090][ T6173] Free swap = 124728kB [ 296.408665][ T6173] Total swap = 124996kB [ 296.413010][ T6173] 2097051 pages RAM [ 296.417298][ T6173] 0 pages HighMem/MovableOnly [ 296.422252][ T6173] 411494 pages reserved [ 296.426731][ T6173] 0 pages cma reserved [ 296.606004][ T2856] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 296.615288][ T2856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.623394][ T2856] usb 2-1: Product: syz [ 296.629644][ T2856] usb 2-1: Manufacturer: syz [ 296.634416][ T2856] usb 2-1: SerialNumber: syz [ 296.775145][ T4912] pwc: recv_control_msg error -32 req 02 val 2b00 [ 296.815149][ T4912] pwc: recv_control_msg error -32 req 02 val 2700 [ 296.855519][ T4912] pwc: recv_control_msg error -32 req 02 val 2c00 [ 296.895038][ T4912] pwc: recv_control_msg error -32 req 04 val 1000 [ 296.935120][ T4912] pwc: recv_control_msg error -32 req 04 val 1300 [ 296.975432][ T4912] pwc: recv_control_msg error -32 req 04 val 1400 [ 297.015241][ T4912] pwc: recv_control_msg error -32 req 02 val 2000 [ 297.031208][ T2856] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 297.055108][ T4912] pwc: recv_control_msg error -32 req 02 val 2100 [ 297.115179][ T4912] pwc: recv_control_msg error -32 req 04 val 1500 [ 297.175359][ T4912] pwc: recv_control_msg error -32 req 02 val 2500 [ 297.223089][ T6204] loop6: detected capacity change from 0 to 8 [ 297.235191][ T4912] pwc: recv_control_msg error -32 req 02 val 2400 [ 297.355373][ T6206] loop_set_status: loop6 (o§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>´{fiö½¹Ä) has still dirty pages (nrpages=1) [ 297.505351][ T4912] pwc: recv_control_msg error -32 req 02 val 2900 [ 297.555773][ T4792] [ 297.558174][ T4792] ====================================================== [ 297.565209][ T4792] WARNING: possible circular locking dependency detected [ 297.572261][ T4792] syzkaller #0 Not tainted [ 297.576697][ T4792] ------------------------------------------------------ [ 297.583732][ T4792] udevd/4792 is trying to acquire lock: [ 297.589293][ T4792] ffff888024263138 ((wq_completion)loop6){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0 [ 297.599070][ T4792] [ 297.599070][ T4792] but task is already holding lock: [ 297.606450][ T4792] ffff8880209cf468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 297.615276][ T4792] [ 297.615276][ T4792] which lock already depends on the new lock. [ 297.615276][ T4792] [ 297.625729][ T4792] [ 297.625729][ T4792] the existing dependency chain (in reverse order) is: [ 297.634798][ T4792] [ 297.634798][ T4792] -> #6 (&lo->lo_mutex){+.+.}-{3:3}: [ 297.642321][ T4792] __mutex_lock_common+0x1e3/0x2400 [ 297.648074][ T4792] mutex_lock_killable_nested+0x17/0x20 [ 297.654170][ T4792] lo_open+0x6a/0x100 [ 297.658697][ T4792] blkdev_get_whole+0x90/0x390 [ 297.664034][ T4792] blkdev_get_by_dev+0x2d0/0xa60 [ 297.669553][ T4792] blkdev_open+0x12d/0x2c0 [ 297.674529][ T4792] do_dentry_open+0x7ff/0xf80 [ 297.679754][ T4792] path_openat+0x26f5/0x2fa0 [ 297.684897][ T4792] do_filp_open+0x1e2/0x410 [ 297.689946][ T4792] do_sys_openat2+0x150/0x4b0 [ 297.695168][ T4792] __x64_sys_openat+0x135/0x160 [ 297.700563][ T4792] do_syscall_64+0x4c/0xa0 [ 297.705551][ T4792] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.712001][ T4792] [ 297.712001][ T4792] -> #5 (&disk->open_mutex){+.+.}-{3:3}: [ 297.719847][ T4792] __mutex_lock_common+0x1e3/0x2400 [ 297.725616][ T4792] mutex_lock_nested+0x17/0x20 [ 297.730939][ T4792] blkdev_get_by_dev+0x157/0xa60 [ 297.736424][ T4792] swsusp_check+0xa1/0x2b0 [ 297.741388][ T4792] software_resume+0xc6/0x3b0 [ 297.746615][ T4792] resume_store+0xe4/0x130 [ 297.751580][ T4792] kernfs_fop_write_iter+0x379/0x4c0 [ 297.757423][ T4792] vfs_write+0x745/0xd60 [ 297.762211][ T4792] ksys_write+0x152/0x260 [ 297.767087][ T4792] do_syscall_64+0x4c/0xa0 [ 297.772052][ T4792] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.778494][ T4792] [ 297.778494][ T4792] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 297.787048][ T4792] __mutex_lock_common+0x1e3/0x2400 [ 297.792804][ T4792] mutex_lock_nested+0x17/0x20 [ 297.798117][ T4792] software_resume+0x7c/0x3b0 [ 297.803352][ T4792] resume_store+0xe4/0x130 [ 297.808315][ T4792] kernfs_fop_write_iter+0x379/0x4c0 [ 297.814153][ T4792] vfs_write+0x745/0xd60 [ 297.818950][ T4792] ksys_write+0x152/0x260 [ 297.823932][ T4792] do_syscall_64+0x4c/0xa0 [ 297.828902][ T4792] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.835348][ T4792] [ 297.835348][ T4792] -> #3 (&of->mutex){+.+.}-{3:3}: [ 297.842588][ T4792] __mutex_lock_common+0x1e3/0x2400 [ 297.848346][ T4792] mutex_lock_nested+0x17/0x20 [ 297.853661][ T4792] kernfs_seq_start+0x51/0x3c0 [ 297.858972][ T4792] seq_read_iter+0x3c4/0xd50 [ 297.864138][ T4792] vfs_read+0x759/0xd60 [ 297.868845][ T4792] ksys_read+0x152/0x260 [ 297.873637][ T4792] do_syscall_64+0x4c/0xa0 [ 297.878749][ T4792] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.885198][ T4792] [ 297.885198][ T4792] -> #2 (&p->lock){+.+.}-{3:3}: [ 297.892389][ T4792] __mutex_lock_common+0x1e3/0x2400 [ 297.898153][ T4792] mutex_lock_nested+0x17/0x20 [ 297.903519][ T4792] seq_read_iter+0xad/0xd50 [ 297.908570][ T4792] do_iter_readv_writev+0x47e/0x5f0 [ 297.914325][ T4792] do_iter_read+0x20b/0x7c0 [ 297.919374][ T4792] loop_process_work+0x16dd/0x24a0 [ 297.925043][ T4792] process_one_work+0x85f/0x1010 [ 297.930528][ T4792] worker_thread+0xaa6/0x1290 [ 297.935752][ T4792] kthread+0x436/0x520 [ 297.940371][ T4792] ret_from_fork+0x1f/0x30 [ 297.945358][ T4792] [ 297.945358][ T4792] -> #1 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 297.954790][ T4792] process_one_work+0x7bb/0x1010 [ 297.960294][ T4792] worker_thread+0xaa6/0x1290 [ 297.965537][ T4792] kthread+0x436/0x520 [ 297.970166][ T4792] ret_from_fork+0x1f/0x30 [ 297.975152][ T4792] [ 297.975152][ T4792] -> #0 ((wq_completion)loop6){+.+.}-{0:0}: [ 297.983272][ T4792] __lock_acquire+0x2c42/0x7d10 [ 297.988682][ T4792] lock_acquire+0x19e/0x400 [ 297.993752][ T4792] flush_workqueue+0x16c/0x13d0 [ 297.999155][ T4792] drain_workqueue+0xcf/0x380 [ 298.004399][ T4792] destroy_workqueue+0x7b/0xb20 [ 298.009806][ T4792] __loop_clr_fd+0x234/0xb90 [ 298.014952][ T4792] blkdev_put+0x53f/0x7d0 [ 298.019833][ T4792] blkdev_close+0x76/0xa0 [ 298.024716][ T4792] __fput+0x234/0x930 [ 298.029259][ T4792] task_work_run+0x125/0x1a0 [ 298.034411][ T4792] exit_to_user_mode_loop+0x10f/0x130 [ 298.040381][ T4792] exit_to_user_mode_prepare+0xee/0x180 [ 298.046482][ T4792] syscall_exit_to_user_mode+0x16/0x40 [ 298.052503][ T4792] do_syscall_64+0x58/0xa0 [ 298.057478][ T4792] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.063939][ T4792] [ 298.063939][ T4792] other info that might help us debug this: [ 298.063939][ T4792] [ 298.074197][ T4792] Chain exists of: [ 298.074197][ T4792] (wq_completion)loop6 --> &disk->open_mutex --> &lo->lo_mutex [ 298.074197][ T4792] [ 298.087716][ T4792] Possible unsafe locking scenario: [ 298.087716][ T4792] [ 298.095191][ T4792] CPU0 CPU1 [ 298.100582][ T4792] ---- ---- [ 298.105978][ T4792] lock(&lo->lo_mutex); [ 298.110256][ T4792] lock(&disk->open_mutex); [ 298.117395][ T4792] lock(&lo->lo_mutex); [ 298.124200][ T4792] lock((wq_completion)loop6); [ 298.129089][ T4792] [ 298.129089][ T4792] *** DEADLOCK *** [ 298.129089][ T4792] [ 298.137265][ T4792] 2 locks held by udevd/4792: [ 298.141971][ T4792] #0: ffff888020951918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 298.151352][ T4792] #1: ffff8880209cf468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 298.160645][ T4792] [ 298.160645][ T4792] stack backtrace: [ 298.166562][ T4792] CPU: 0 PID: 4792 Comm: udevd Not tainted syzkaller #0 [ 298.173534][ T4792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.183626][ T4792] Call Trace: [ 298.187007][ T4792] [ 298.189988][ T4792] dump_stack_lvl+0x188/0x250 [ 298.194709][ T4792] ? load_image+0x400/0x400 [ 298.199261][ T4792] ? show_regs_print_info+0x20/0x20 [ 298.204504][ T4792] ? print_circular_bug+0x12b/0x1a0 [ 298.209733][ T4792] check_noncircular+0x296/0x330 [ 298.214706][ T4792] ? add_chain_block+0x940/0x940 [ 298.219678][ T4792] ? lockdep_lock+0xf1/0x1f0 [ 298.224335][ T4792] ? mark_lock+0x94/0x320 [ 298.228689][ T4792] __lock_acquire+0x2c42/0x7d10 [ 298.233579][ T4792] ? __lock_acquire+0x13bc/0x7d10 [ 298.238641][ T4792] ? verify_lock_unused+0x140/0x140 [ 298.243871][ T4792] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 298.249891][ T4792] ? verify_lock_unused+0x140/0x140 [ 298.255130][ T4792] ? memset+0x1e/0x40 [ 298.259140][ T4792] lock_acquire+0x19e/0x400 [ 298.263674][ T4792] ? flush_workqueue+0x150/0x13d0 [ 298.268734][ T4792] ? __mutex_trylock_common+0x155/0x260 [ 298.274308][ T4792] ? read_lock_is_recursive+0x10/0x10 [ 298.279725][ T4792] ? __init_swait_queue_head+0xa5/0x150 [ 298.285301][ T4792] flush_workqueue+0x16c/0x13d0 [ 298.290272][ T4792] ? flush_workqueue+0x150/0x13d0 [ 298.295327][ T4792] ? __lock_acquire+0x7d10/0x7d10 [ 298.300404][ T4792] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 298.306440][ T4792] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 298.311933][ T4792] ? rcu_work_rcufn+0x120/0x120 [ 298.316806][ T4792] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 298.322480][ T4792] ? finish_wait+0xc0/0x1d0 [ 298.327016][ T4792] drain_workqueue+0xcf/0x380 [ 298.331728][ T4792] destroy_workqueue+0x7b/0xb20 [ 298.336613][ T4792] __loop_clr_fd+0x234/0xb90 [ 298.341241][ T4792] ? lo_release+0x172/0x1f0 [ 298.345772][ T4792] ? lo_open+0x100/0x100 [ 298.352180][ T4792] blkdev_put+0x53f/0x7d0 [ 298.356549][ T4792] blkdev_close+0x76/0xa0 [ 298.360996][ T4792] ? blkdev_open+0x2c0/0x2c0 [ 298.365616][ T4792] __fput+0x234/0x930 [ 298.369817][ T4792] task_work_run+0x125/0x1a0 [ 298.374753][ T4792] exit_to_user_mode_loop+0x10f/0x130 [ 298.380164][ T4792] exit_to_user_mode_prepare+0xee/0x180 [ 298.385736][ T4792] syscall_exit_to_user_mode+0x16/0x40 [ 298.391239][ T4792] do_syscall_64+0x58/0xa0 [ 298.395898][ T4792] ? clear_bhb_loop+0x30/0x80 [ 298.400602][ T4792] ? clear_bhb_loop+0x30/0x80 [ 298.405304][ T4792] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.411256][ T4792] RIP: 0033:0x7f80791ce407 [ 298.415710][ T4792] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 298.435340][ T4792] RSP: 002b:00007ffca3c46f60 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 298.443795][ T4792] RAX: 0000000000000000 RBX: 00007f80790e0880 RCX: 00007f80791ce407 [ 298.451792][ T4792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 298.459820][ T4792] RBP: 00007f80790e06e8 R08: 0000000000000000 R09: 0000000000000000 [ 298.467822][ T4792] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 298.475819][ T4792] R13: 00005581f7904410 R14: 0000000000000008 R15: 00005581f7915450 [ 298.483863][ T4792] [ 298.517238][ T4912] pwc: recv_control_msg error -32 req 02 val 2800 [ 298.665100][ T2856] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 298.673997][ T2856] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 298.695296][ T4912] pwc: recv_control_msg error -71 req 04 val 1100 [ 298.696422][ T2856] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 298.719177][ T4912] pwc: recv_control_msg error -71 req 04 val 1200 [ 298.742309][ T2856] usb 2-1: USB disconnect, device number 11 [ 298.775160][ T4912] pwc: Registered as video103. [ 298.780780][ T4912] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 298.821193][ T4912] usb 5-1: USB disconnect, device number 11 [ 298.978307][ T4679] udevd[4679]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory