last executing test programs: 16.977823938s ago: executing program 0 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) move_pages(r0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x3) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000001440)) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2ee", 0x8}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b351f0fda2d", 0x18}], 0x1}}], 0x2, 0x4004040) syz_usb_connect(0x1, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b", @ANYRES16=r0, @ANYBLOB="d9cc6ed6547068259fc6fab4145860690f2b8a30362178c4b48d52e2dc2a3d3e3386e7108fb0d08178725b782a5c3e881350a11944667764cb7beea562933c14c8b0b1d9f000"/84, @ANYRES8=r1, @ANYRESHEX=r4], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x3, 0x0, 0x0, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, &(0x7f0000000600)) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x4, 0xfff1}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xb, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x7fff, 0x401, 0x5, 0x6}, {0x0, 0xe1, 0x7, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}, @TCA_U32_LINK={0x8, 0x3, 0xbf0}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008085}, 0x20040054) sendmsg$rds(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x26, &(0x7f0000000280)=[@rdma_dest={0x18, 0x114, 0x2, {0x4, 0xbff}}], 0x18, 0x2000c010}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 11.532951829s ago: executing program 0 (id=590): munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x0, {0x7, 0x0, 0x0, 0x0, 0x1, 0x64, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x4048080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) keyctl$set_timeout(0xf, 0x0, 0x1) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) read(r5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) 11.192389556s ago: executing program 3 (id=592): socket$inet(0x2, 0xa, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000001a40), 0x51, 0xc8600) r0 = open(&(0x7f0000000180)='./bus\x00', 0x16b37e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x18, 0x0, 0x0, 0x0, [@sadb_key={0xe, 0x8, 0x308, 0x0, "d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f1"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0xc0}, 0x1, 0x7}, 0x0) 10.267892841s ago: executing program 4 (id=594): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x20}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) unshare(0x20000e00) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @any, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x3d, 0x4) 8.30099641s ago: executing program 4 (id=595): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x240080e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@overriderock}, {@dmode={'dmode', 0x3d, 0x6}}, {@check_strict}, {@unhide}, {@utf8}, {@overriderock}, {@showassoc}, {@session={'session', 0x3d, 0x50}}]}, 0x1, 0x698, &(0x7f0000000a80)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) 8.120078834s ago: executing program 0 (id=596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a"], 0x34}}, 0x0) 8.113842185s ago: executing program 3 (id=597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0xc4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0xa, 0x0, 0x8, 0x0, 0x7, 0x2, 0x3, 0xd7a, [{0x7fffffff, 0x7f0, 0x8, 0x8}, {0xb, 0x3, 0x4, 0x4b}, {0x35c, 0x5, 0x2, 0xf}, {0x6, 0x0, 0xbd, 0x5a57eb3c}, {0xfff, 0x4, 0x7, 0x9}, {0xc1b, 0xffffffff, 0x100, 0x6}, {0x9, 0x6, 0xd82f, 0x5}, {0x4, 0x8, 0x0, 0x5}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x81}, 0x800) 8.005376784s ago: executing program 1 (id=598): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 7.109777276s ago: executing program 4 (id=600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) move_pages(r0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x3) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000001440)) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2ee", 0x8}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b351f0fda2d", 0x18}], 0x1}}], 0x2, 0x4004040) syz_usb_connect(0x1, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b", @ANYRES16=r0, @ANYBLOB="d9cc6ed6547068259fc6fab4145860690f2b8a30362178c4b48d52e2dc2a3d3e3386e7108fb0d08178725b782a5c3e881350a11944667764cb7beea562933c14c8b0b1d9f000"/84, @ANYRES8=r1, @ANYRESHEX=r4], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x3, 0x0, 0x0, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, &(0x7f0000000600)) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x4, 0xfff1}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xb, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x7fff, 0x401, 0x5, 0x6}, {0x0, 0xe1, 0x7, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}, @TCA_U32_LINK={0x8, 0x3, 0xbf0}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008085}, 0x20040054) sendmsg$rds(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x26, &(0x7f0000000280)=[@rdma_dest={0x18, 0x114, 0x2, {0x4, 0xbff}}], 0x18, 0x2000c010}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 7.034048362s ago: executing program 1 (id=601): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = memfd_create(0x0, 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84100, 0x1c0) 7.022631893s ago: executing program 3 (id=603): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000104c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000200003801c00008018000180140001"], 0xd0}}, 0x0) 7.013922574s ago: executing program 0 (id=604): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r1, &(0x7f0000001380)=""/229, 0xe5) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$netlink(0x10, 0x3, 0x14) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r3, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffffff, 0x9678, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) 6.954233959s ago: executing program 2 (id=605): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x240080e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@overriderock}, {@dmode={'dmode', 0x3d, 0x6}}, {@check_strict}, {@unhide}, {@utf8}, {@overriderock}, {@showassoc}, {@session={'session', 0x3d, 0x50}}]}, 0x1, 0x698, &(0x7f0000000a80)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) 4.580813721s ago: executing program 1 (id=606): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) 4.278630735s ago: executing program 2 (id=607): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x94, &(0x7f00000000c0)=""/148}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) 4.200700021s ago: executing program 3 (id=608): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x0, {0x2, 0x0, @private=0xa010102}, 'lo\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000001a40), 0x51, 0xc8600) r0 = open(&(0x7f0000000180)='./bus\x00', 0x16b37e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x15, 0x0, 0x0, 0x0, [@sadb_key={0xe, 0x8, 0x308, 0x0, "d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f1"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}]}, 0xa8}, 0x1, 0x7}, 0x0) 3.388641556s ago: executing program 4 (id=609): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086e8b, 0x0) 3.387342627s ago: executing program 1 (id=610): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x0, {0x2, 0x0, @private=0xa010102}, 'lo\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000001a40), 0x51, 0xc8600) r0 = open(&(0x7f0000000180)='./bus\x00', 0x16b37e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x18, 0x0, 0x0, 0x0, [@sadb_key={0xe, 0x8, 0x308, 0x0, "d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f1"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0xc0}, 0x1, 0x7}, 0x0) 2.529174426s ago: executing program 2 (id=611): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)={0x27c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x260, 0x11d, 0x0, 0x1, [{0x160, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x11}, {0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x6, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x36, 0xc, 0x16, 0xb, 0x1b, 0x3, 0x1, 0x60, 0x5, 0x4, 0x1b, 0x48, 0x24, 0xc, 0x48, 0x3, 0x6, 0x16, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x1, 0xf, 0x100, 0xa, 0x9a8d, 0xb7]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x1}, {0x7, 0x9}, {0x4}, {0x7, 0x7}, {}, {0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x1, 0x800, 0x3, 0x0, 0x101, 0x7]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x9, 0x6, 0x48, 0x60, 0x3, 0x6, 0xb, 0x4, 0xc, 0x60, 0x3, 0x16, 0x18, 0x18, 0x18, 0x16, 0x12, 0x12, 0x5, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x4, 0xb502, 0x1c0, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x8, 0x6, 0x6, 0x7, 0xfff3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7a}]}, @NL80211_BAND_2GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x4}, {0x5}, {0x3, 0x2}, {0x5, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {0x2, 0x9}, {0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x78, 0x6, 0xfd, 0xdc, 0x7, 0x915]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x36, 0x0, 0x3ff, 0xe61, 0x0, 0x7f, 0x10]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x4, 0x9, 0x8, 0x1, 0x9, 0x7]}}]}]}]}, {0x4}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x4}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.460280552s ago: executing program 0 (id=612): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.149524447s ago: executing program 2 (id=613): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)={0x3c0, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x3a4, 0x11d, 0x0, 0x1, [{0x160, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x11}, {0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x6, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x36, 0xc, 0x16, 0xb, 0x1b, 0x3, 0x1, 0x60, 0x5, 0x4, 0x1b, 0x48, 0x24, 0xc, 0x48, 0x3, 0x6, 0x16, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x1, 0xf, 0x100, 0xa, 0x9a8d, 0xb7]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x1}, {0x7, 0x9}, {0x4}, {0x7, 0x7}, {}, {0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x1, 0x800, 0x3, 0x0, 0x101, 0x7]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x9, 0x6, 0x48, 0x60, 0x3, 0x6, 0xb, 0x4, 0xc, 0x60, 0x3, 0x16, 0x18, 0x18, 0x18, 0x16, 0x12, 0x12, 0x5, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x4, 0xb502, 0x1c0, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x8, 0x6, 0x6, 0x7, 0xfff3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7a}]}, @NL80211_BAND_2GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x95, 0x2, 0x3, 0xd6, 0x0, 0x6, 0x6]}}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x2, 0x4}, {0x5}, {0x3, 0x2}, {0x5, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {0x2, 0x9}, {0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x4}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x78, 0x6, 0xfd, 0xdc, 0x7, 0x915]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xca8, 0x4, 0x5b5d, 0x7, 0xfff, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x24, 0x0, 0x18, 0x4, 0x1b, 0x4, 0xc, 0x9, 0x12, 0x0, 0xc, 0x4, 0x24, 0x24, 0x16, 0x63]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5098abc75f17ee31, 0x4, 0x6, 0x9, 0x5, 0x12, 0x6c, 0x3, 0x6c, 0x1b, 0x30, 0x9, 0xb, 0x12, 0x3834ceaf91043b90, 0x1b, 0x48, 0x2, 0x12, 0x6, 0x30, 0x4, 0x4, 0x6c, 0xb, 0xb, 0xc, 0xc, 0x36]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8, 0xf, 0xe, 0x2, 0x3, 0x47, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x7, 0x7, 0x80, 0x4, 0x1, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x3}, {0x7, 0x7}, {0x4}, {0x5, 0x2}, {0x6}, {0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x7, 0x8}, {0x3, 0x9}, {0x4, 0x5}, {0x7, 0x8}, {0x6, 0x7}, {}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x4, 0x9}, {0x4, 0x8}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6b, 0x5, 0x3, 0x2fd, 0x8, 0x1, 0x100, 0x1]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x36, 0x0, 0x3ff, 0xe61, 0x0, 0x7f, 0x10]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x4, 0x9, 0x8, 0x1, 0x9, 0x7]}}]}]}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x81}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x4}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x1}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.078097533s ago: executing program 4 (id=614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}}, 0x24}}, 0x4000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0xc4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0xa, 0x0, 0x8, 0x0, 0x7, 0x2, 0x3, 0xd7a, [{0x7fffffff, 0x7f0, 0x8, 0x8}, {0xb, 0x3, 0x4, 0x4b}, {0x35c, 0x5, 0x2, 0xf}, {0x6, 0x0, 0xbd, 0x5a57eb3c}, {0xfff, 0x4, 0x7, 0x9}, {0xc1b, 0xffffffff, 0x100, 0x6}, {0x9, 0x6, 0xd82f, 0x5}, {0x4, 0x8, 0x0, 0x5}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x81}, 0x800) 2.069160193s ago: executing program 1 (id=615): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)={0x2fc, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2e0, 0x11d, 0x0, 0x1, [{0x160, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x11}, {0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0x7}, {0x6, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x36, 0xc, 0x16, 0xb, 0x1b, 0x3, 0x1, 0x60, 0x5, 0x4, 0x1b, 0x48, 0x24, 0xc, 0x48, 0x3, 0x6, 0x16, 0x60, 0x36]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x1, 0xf, 0x100, 0xa, 0x9a8d, 0xb7]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x1}, {0x7, 0x9}, {0x4}, {0x7, 0x7}, {}, {0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x1, 0x800, 0x3, 0x0, 0x101, 0x7]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x9, 0x6, 0x48, 0x60, 0x3, 0x6, 0xb, 0x4, 0xc, 0x60, 0x3, 0x16, 0x18, 0x18, 0x18, 0x16, 0x12, 0x12, 0x5, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x4, 0xb502, 0x1c0, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x8, 0x6, 0x6, 0x7, 0xfff3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7a}]}, @NL80211_BAND_2GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x154, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x95, 0x2, 0x3, 0xd6, 0x0, 0x6, 0x6]}}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x2, 0x4}, {0x5}, {0x3, 0x2}, {0x5, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x1, 0x8}, {0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {0x2, 0x9}, {0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x4}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x78, 0x6, 0xfd, 0xdc, 0x7, 0x915]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xca8, 0x4, 0x5b5d, 0x7, 0xfff, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x24, 0x0, 0x18, 0x4, 0x1b, 0x4, 0xc, 0x9, 0x12, 0x0, 0xc, 0x4, 0x24, 0x24, 0x16, 0x63]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5098abc75f17ee31, 0x4, 0x6, 0x9, 0x5, 0x12, 0x6c, 0x3, 0x6c, 0x30, 0x9, 0xb, 0x12, 0x3834ceaf91043b90, 0x1b, 0x48, 0x2, 0x12, 0x6, 0x30, 0x4, 0x4, 0x6c, 0xb, 0xb, 0xc, 0xc, 0x36]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8, 0xf, 0xe, 0x2, 0x3, 0x47, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x7, 0x7, 0x80, 0x4, 0x1, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}]}]}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x1}, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.045114035s ago: executing program 3 (id=616): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004", @ANYRES64=r0, @ANYBLOB, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) pipe2(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r6], 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x8010, 0x602a1}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.947023873s ago: executing program 2 (id=617): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x0, {0x2, 0x0, @private=0xa010102}, 'lo\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000001a40), 0x51, 0xc8600) r0 = open(&(0x7f0000000180)='./bus\x00', 0x16b37e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x18, 0x0, 0x0, 0x0, [@sadb_key={0xe, 0x8, 0x308, 0x0, "d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f1"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0xc0}, 0x1, 0x7}, 0x0) 1.893900097s ago: executing program 1 (id=618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$cdc_ecm(0x4, 0x84, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0x7, 0x80, 0xae, [{{0x9, 0x4, 0x0, 0x58, 0x8, 0x2, 0x6, 0x0, 0x5, {{0x8, 0x24, 0x6, 0x0, 0x0, "a2e02f"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0xe9cf, 0x3, 0x2, 0xfd}, [@country_functional={0x12, 0x24, 0x7, 0xc2, 0xab40, [0xade, 0x8c35, 0x3, 0x7, 0x44, 0x0]}, @mbim_extended={0x8, 0x24, 0x1c, 0x4c8, 0xfe, 0xf6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x1, 0xff, 0xf, 0x1, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x81, 0x0, 0xf1}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0xf3, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x5, 0xff}}}}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x68, 0x28, 0x9, 0x8, 0xba}, 0x49, &(0x7f0000000200)={0x5, 0xf, 0x49, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x6, 0xf0f, 0x1, [0xc0cf, 0xff3f0f, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x49, "9ec5a7d1f84455a8472194d14799327d"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0xa, 0x9}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0xf0, 0xf5, 0x6, 0x9}, @ptm_cap={0x3}]}, 0x1, [{0xd2, &(0x7f0000000280)=@string={0xd2, 0x3, "f80f51face6197f878d063f7381a02552c50e65f0d6836c77623e8094ab1f0106fccc4b6198e4d25390bc1f93ce4590c81e0be4bf6422381a8374c18ce7f9f9303690df30f4fc9e2bc0c98530d3e2fe41428b1ee3effb7dd98c81a7171ad657483b9eb5cf4d232b5cf4a6aa24d2493ca8022c6a0eec9a449e034670da8244dbbd2b9f0a606813b68922a08de19613e3264faa69ef448f85e6989e5502b4d8a138b9b0fe047a87e0f3dd7d279a6180a7c6a03f8502dcb6f735674a6ecd1a8478fa6fdfbfac19759bcce65672a618cfc84"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x21, 0x57, {0x57, 0x0, "f80f5419ecfa782e575df3879dcfdbe874cd0dc2f45b477094d3dcb91955de7a7083930ff78c0fe41676a44847400cf6c16e1670e2532b14d7880ccea0e13bb67ae420128813963f960967216d5d5db86de56d9480"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(r5, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000600), 0xfec8) recvmmsg(r6, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/105, 0xffffffc4}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000740)=""/135, 0x87, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000000640)={0x0, 0x989680}) 1.833692682s ago: executing program 3 (id=619): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x240080e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@overriderock}, {@dmode={'dmode', 0x3d, 0x6}}, {@check_strict}, {@unhide}, {@utf8}, {@overriderock}, {@showassoc}, {@session={'session', 0x3d, 0x50}}]}, 0x1, 0x698, &(0x7f0000000a80)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) 323.917114ms ago: executing program 4 (id=620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) move_pages(r0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x3) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000001440)) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60", 0xc}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b351f0fda2d", 0x18}], 0x1}}], 0x2, 0x4004040) syz_usb_connect(0x1, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b", @ANYRES16=r0, @ANYBLOB="d9cc6ed6547068259fc6fab4145860690f2b8a30362178c4b48d52e2dc2a3d3e3386e7108fb0d08178725b782a5c3e881350a11944667764cb7beea562933c14c8b0b1d9f000"/84, @ANYRES8=r1, @ANYRESHEX=r4], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x3, 0x0, 0x0, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, &(0x7f0000000600)) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x4, 0xfff1}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xb, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x7fff, 0x401, 0x5, 0x6}, {0x0, 0xe1, 0x7, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}, @TCA_U32_LINK={0x8, 0x3, 0xbf0}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008085}, 0x20040054) sendmsg$rds(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x26, &(0x7f0000000280)=[@rdma_dest={0x18, 0x114, 0x2, {0x4, 0xbff}}], 0x18, 0x2000c010}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 252.81179ms ago: executing program 2 (id=621): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) memfd_create(0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x2000c12, &(0x7f0000000240)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@map_off}, {@hide}, {@nocompress}, {@overriderock}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@unhide}, {@overriderock}, {@check_relaxed}, {@dmode={'dmode', 0x3d, 0xe565}}, {@unhide}, {@overriderock}]}, 0x3, 0x9f1, &(0x7f0000001b40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84100, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 0s ago: executing program 0 (id=622): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000006c0)="04d28058b5784467c8653b87a1f87d65338b1454020a802f9281193011fd0c74dff60b5c210dc156a140e2b78131b04293383f13bc30aed52d2ae624c4e1fe79f9a8dd0ecba22be33f6e4d3e1b0039c1"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.199' (ED25519) to the list of known hosts. syzkaller login: [ 35.976911][ T4295] cgroup: Unknown subsys name 'net' [ 36.275117][ T4295] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 36.581972][ T4295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 37.695683][ T4309] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.698946][ T4311] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.702010][ T4312] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.708641][ T4312] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.710867][ T4312] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.713259][ T4312] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.715989][ T4312] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.718511][ T4312] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.721425][ T4316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.721451][ T4312] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.725073][ T4316] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.726175][ T4312] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.727690][ T4316] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.729899][ T4312] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.732676][ T4316] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.736366][ T4316] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.738861][ T4311] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.741736][ T4316] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.746400][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.758830][ T4316] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.761704][ T4316] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.764370][ T4316] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.767669][ T4316] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.770304][ T4316] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.770697][ T4312] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 37.799413][ T4316] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 37.801944][ T4316] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 37.804669][ T4316] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 37.807171][ T4316] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 37.809731][ T4316] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 38.057854][ T4314] chnl_net:caif_netlink_parms(): no params data found [ 38.065558][ T4305] chnl_net:caif_netlink_parms(): no params data found [ 38.116617][ T4306] chnl_net:caif_netlink_parms(): no params data found [ 38.138750][ T4318] chnl_net:caif_netlink_parms(): no params data found [ 38.176688][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.178767][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.184497][ T4305] device bridge_slave_0 entered promiscuous mode [ 38.196277][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.198246][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.201462][ T4314] device bridge_slave_0 entered promiscuous mode [ 38.206433][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.208427][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.211534][ T4314] device bridge_slave_1 entered promiscuous mode [ 38.214280][ T4313] chnl_net:caif_netlink_parms(): no params data found [ 38.228264][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.231337][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.233936][ T4305] device bridge_slave_1 entered promiscuous mode [ 38.247500][ T4314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.275380][ T4314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.282797][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.284854][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.287382][ T4306] device bridge_slave_0 entered promiscuous mode [ 38.291256][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.293204][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.295860][ T4306] device bridge_slave_1 entered promiscuous mode [ 38.305405][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.307491][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.310338][ T4318] device bridge_slave_0 entered promiscuous mode [ 38.324607][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.328764][ T4314] team0: Port device team_slave_0 added [ 38.337768][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.339884][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.342399][ T4318] device bridge_slave_1 entered promiscuous mode [ 38.346091][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.354521][ T4314] team0: Port device team_slave_1 added [ 38.388455][ T4306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.410672][ T4306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.419058][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.421318][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.423900][ T4313] device bridge_slave_0 entered promiscuous mode [ 38.428022][ T4318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.432322][ T4305] team0: Port device team_slave_0 added [ 38.435404][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.437330][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.445170][ T4314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.455611][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.457561][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.460486][ T4313] device bridge_slave_1 entered promiscuous mode [ 38.464044][ T4318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.467867][ T4305] team0: Port device team_slave_1 added [ 38.479153][ T4314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.481496][ T4314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.488526][ T4314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.507083][ T4306] team0: Port device team_slave_0 added [ 38.551553][ T4314] device hsr_slave_0 entered promiscuous mode [ 38.599630][ T4314] device hsr_slave_1 entered promiscuous mode [ 38.651146][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.653131][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.660443][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.665477][ T4306] team0: Port device team_slave_1 added [ 38.667636][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.669892][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.677041][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.712977][ T4313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.717691][ T4318] team0: Port device team_slave_0 added [ 38.731474][ T4313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.740346][ T4318] team0: Port device team_slave_1 added [ 38.742488][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.744469][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.751861][ T4306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.775321][ T4306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.777288][ T4306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.784760][ T4306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.796935][ T4313] team0: Port device team_slave_0 added [ 38.861048][ T4305] device hsr_slave_0 entered promiscuous mode [ 38.899611][ T4305] device hsr_slave_1 entered promiscuous mode [ 38.950010][ T4305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.952422][ T4305] Cannot create hsr debugfs directory [ 38.964843][ T4313] team0: Port device team_slave_1 added [ 38.967118][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.969109][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.976988][ T4318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.013736][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.015788][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.023238][ T4318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.071278][ T4306] device hsr_slave_0 entered promiscuous mode [ 39.130652][ T4306] device hsr_slave_1 entered promiscuous mode [ 39.169389][ T4306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.171559][ T4306] Cannot create hsr debugfs directory [ 39.196480][ T4313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.198444][ T4313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.209502][ T4313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.214366][ T4313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.216256][ T4313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.223677][ T4313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.331298][ T4318] device hsr_slave_0 entered promiscuous mode [ 39.369677][ T4318] device hsr_slave_1 entered promiscuous mode [ 39.409422][ T4318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.411647][ T4318] Cannot create hsr debugfs directory [ 39.481336][ T4313] device hsr_slave_0 entered promiscuous mode [ 39.519717][ T4313] device hsr_slave_1 entered promiscuous mode [ 39.559436][ T4313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.561559][ T4313] Cannot create hsr debugfs directory [ 39.662175][ T4314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.703665][ T4314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.742969][ T4314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.769988][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 39.770030][ T4316] Bluetooth: hci1: command 0x0409 tx timeout [ 39.771893][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 39.800623][ T4314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.849901][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 39.851842][ T47] Bluetooth: hci3: command 0x0409 tx timeout [ 39.915447][ T4305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.952365][ T4305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.982973][ T4305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.034817][ T4305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.119732][ T4306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.159045][ T4306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.214750][ T4306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.245347][ T4313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.291088][ T4306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.341710][ T4313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.401522][ T4313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.453938][ T4313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.536238][ T4318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.562292][ T4318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.610956][ T4318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.663397][ T4318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.707891][ T4314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.741461][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.745263][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.761189][ T4314] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.767312][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.786130][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.788892][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.793179][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.795276][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.798178][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.805261][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.810188][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.815396][ T271] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.817452][ T271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.842406][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.845058][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.848073][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.855296][ T4305] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.867527][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.870934][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.873690][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.876187][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.878149][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.880776][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.885854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.890300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.899727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.916855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.921124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.923845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.926417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.928970][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.930991][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.934600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.944555][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.947382][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.950837][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.953582][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.963543][ T4306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.968421][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.973010][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.990104][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.993839][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.996998][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.000764][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.003486][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.006006][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.008659][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.015581][ T4305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.019095][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.029965][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.032819][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.044133][ T4313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.066406][ T4306] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.078487][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.082955][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.085525][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.094623][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.102050][ T4318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.107574][ T4313] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.118802][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.123830][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.126303][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.128292][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.144810][ T4318] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.151567][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.154172][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.156730][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.162024][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.165020][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.167552][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.169537][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.195064][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.198273][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.202417][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.205349][ T271] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.207342][ T271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.211862][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.215236][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.218058][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.223947][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.228767][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.235512][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.238204][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.240226][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.243485][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.246206][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.248716][ T271] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.250780][ T271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.254339][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.257188][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.263376][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.265973][ T271] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.267932][ T271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.270636][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.273526][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.282831][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.285522][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.287997][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.291503][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.294398][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.308077][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.312124][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.315388][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.318228][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.321730][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.325164][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.342566][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.345535][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.348328][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.352559][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.355407][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.358039][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.362328][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.365026][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.378366][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.381140][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.383293][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.385468][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.387579][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.390919][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.398256][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.403971][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.406789][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.412494][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.415398][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.420972][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.427598][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.432169][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.437286][ T4314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.447066][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.460828][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.485874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.488685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.507222][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.510380][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.527173][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.536542][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.540244][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.557373][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.577581][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.581439][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.585539][ T4314] device veth0_vlan entered promiscuous mode [ 41.597728][ T4305] device veth0_vlan entered promiscuous mode [ 41.601334][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.610673][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.619117][ T4314] device veth1_vlan entered promiscuous mode [ 41.650129][ T4305] device veth1_vlan entered promiscuous mode [ 41.670670][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.673422][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.676000][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.678580][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.690622][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.692953][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.715034][ T4318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.731085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.734037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.748232][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.753437][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.757244][ T4314] device veth0_macvtap entered promiscuous mode [ 41.765698][ T4314] device veth1_macvtap entered promiscuous mode [ 41.785749][ T4305] device veth0_macvtap entered promiscuous mode [ 41.789772][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.792468][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.795198][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.798508][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.801942][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.812837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.815076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.828453][ T4305] device veth1_macvtap entered promiscuous mode [ 41.833152][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.835716][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.838500][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.844099][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.850457][ T4307] Bluetooth: hci1: command 0x041b tx timeout [ 41.852208][ T4307] Bluetooth: hci0: command 0x041b tx timeout [ 41.853820][ T4307] Bluetooth: hci2: command 0x041b tx timeout [ 41.855026][ T4313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.866626][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.870593][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.873329][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.876527][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.886443][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.891696][ T4318] device veth0_vlan entered promiscuous mode [ 41.901992][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.904537][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.912570][ T4314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.925746][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.928777][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.935393][ T4314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.937848][ T4314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.939643][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 41.941901][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 41.945628][ T4314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.948080][ T4314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.954621][ T4318] device veth1_vlan entered promiscuous mode [ 41.972567][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.975626][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.980717][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.985511][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.988204][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.993979][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.997075][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.036831][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.040553][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.043729][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.048224][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.052934][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.055819][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.060157][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.065978][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.068430][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.071798][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.076124][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.078916][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.082946][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.088424][ T4318] device veth0_macvtap entered promiscuous mode [ 42.093379][ T4306] device veth0_vlan entered promiscuous mode [ 42.118848][ T4305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.122681][ T4305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.125102][ T4305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.127438][ T4305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.136545][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.155770][ T4318] device veth1_macvtap entered promiscuous mode [ 42.164577][ T4306] device veth1_vlan entered promiscuous mode [ 42.201797][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.203205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.204099][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.206880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.214002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.258562][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.264139][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.267445][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.271876][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.274618][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.277588][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.281882][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.295016][ T4306] device veth0_macvtap entered promiscuous mode [ 42.300966][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.303548][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.306208][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.309028][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.312620][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.315394][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.317971][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.322160][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.325078][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.327702][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.332189][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.335999][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.340668][ T4313] device veth0_vlan entered promiscuous mode [ 42.344347][ T4306] device veth1_macvtap entered promiscuous mode [ 42.350812][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.353409][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.356139][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.371870][ T4318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.374408][ T4318] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.376763][ T4318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.379064][ T4318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.385834][ T271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.388114][ T271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.398545][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.402631][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.405225][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.408147][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.414414][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.417439][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.420538][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.423306][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.427556][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.443746][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.446576][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.449168][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.452467][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.457505][ T4313] device veth1_vlan entered promiscuous mode [ 42.461224][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.464142][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.466739][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.470537][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.473437][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.476530][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.482430][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.502389][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.505217][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.508101][ T174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.526541][ T271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.528768][ T271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.547667][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.550740][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.570864][ T4306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.573393][ T4306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.575812][ T4306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.578165][ T4306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.626696][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.630262][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.643021][ T4313] device veth0_macvtap entered promiscuous mode [ 42.692988][ T4313] device veth1_macvtap entered promiscuous mode [ 42.731589][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.734703][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.737428][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.823198][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.826124][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.828985][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.831963][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.834860][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.838872][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.262706][ T4307] Bluetooth: hci2: command 0x040f tx timeout [ 44.264507][ T4307] Bluetooth: hci0: command 0x040f tx timeout [ 44.266295][ T4307] Bluetooth: hci1: command 0x040f tx timeout [ 44.267904][ T4307] Bluetooth: hci4: command 0x040f tx timeout [ 44.269691][ T4307] Bluetooth: hci3: command 0x040f tx timeout [ 44.320552][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.323454][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.326113][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.328962][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.359344][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.362685][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.378330][ T4313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.387314][ T4313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.393074][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.413437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.416114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.418921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.429075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.441297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.446674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.467007][ T4430] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 44.468963][ T4430] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 44.476949][ T4430] vhci_hcd vhci_hcd.0: Device attached [ 44.519846][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.522186][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.525132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.539676][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.541997][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.557166][ T4313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.563703][ T4313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.566164][ T4313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.568493][ T4313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.585450][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.603232][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.605510][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.623484][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.660749][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.663007][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.676831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.739446][ T4358] usb 2-1: new low-speed USB device number 2 using vhci_hcd [ 44.824194][ T4438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.846234][ T4438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.871860][ T4438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.874411][ T4438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.896811][ T4442] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 44.908230][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.914542][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.918633][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.057138][ T4440] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 45.059022][ T4440] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 45.062481][ T4440] vhci_hcd vhci_hcd.0: Device attached [ 45.088956][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.091757][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.095834][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.791490][ T4415] usb 6-1: new low-speed USB device number 2 using vhci_hcd [ 45.843733][ T4430] loop0: detected capacity change from 0 to 32768 [ 45.972087][ T4430] XFS (loop0): Mounting V5 Filesystem [ 45.999121][ T4461] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 46.001191][ T4461] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 46.005703][ T4461] vhci_hcd vhci_hcd.0: Device attached [ 46.087450][ T4430] XFS (loop0): Ending clean mount [ 46.088906][ T4440] loop2: detected capacity change from 0 to 32768 [ 46.179404][ T4474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 46.279356][ T24] usb 10-1: new low-speed USB device number 2 using vhci_hcd [ 46.331260][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 46.334104][ T4307] Bluetooth: hci4: command 0x0419 tx timeout [ 46.336222][ T4307] Bluetooth: hci1: command 0x0419 tx timeout [ 46.339952][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 46.342409][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 46.568119][ T4440] XFS (loop2): Mounting V5 Filesystem [ 46.804834][ T4440] XFS (loop2): Ending clean mount [ 46.853513][ T4443] vhci_hcd: connection closed [ 46.874518][ T271] vhci_hcd: stop threads [ 46.888573][ T271] vhci_hcd: release socket [ 46.896823][ T271] vhci_hcd: disconnect device [ 46.929526][ T4431] vhci_hcd: connection closed [ 46.936104][ T271] vhci_hcd: stop threads [ 46.940393][ T271] vhci_hcd: release socket [ 46.943235][ T271] vhci_hcd: disconnect device [ 47.053422][ T4415] vhci_hcd: vhci_device speed not set [ 47.185148][ T4487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 47.775509][ T4358] vhci_hcd: vhci_device speed not set [ 47.925121][ T4306] XFS (loop2): Unmounting Filesystem [ 47.962885][ T4305] XFS (loop0): Unmounting Filesystem [ 47.992822][ T4491] netlink: 'syz.1.14': attribute type 1 has an invalid length. [ 48.035204][ T4461] loop4: detected capacity change from 0 to 32768 [ 48.065455][ T4496] nbd3: detected capacity change from 0 to 10 [ 48.078168][ T51] block nbd3: Send control failed (result -89) [ 48.080151][ T51] block nbd3: Request send failed, requeueing [ 48.082655][ T4316] block nbd3: Receive control failed (result -32) [ 48.085958][ T51] block nbd3: Dead connection, failed to find a fallback [ 48.087880][ T51] block nbd3: shutting down sockets [ 48.089614][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.092184][ T51] Buffer I/O error on dev nbd3, logical block 0, async page read [ 48.095203][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.097690][ T51] Buffer I/O error on dev nbd3, logical block 0, async page read [ 48.101026][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.103684][ T51] Buffer I/O error on dev nbd3, logical block 0, async page read [ 48.106114][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.108611][ T51] Buffer I/O error on dev nbd3, logical block 0, async page read [ 48.111802][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.114280][ T51] Buffer I/O error on dev nbd3, logical block 0, async page read [ 48.116754][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.119328][ T51] Buffer I/O error on dev nbd3, logical block 0, async page read [ 48.122909][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.125569][ T51] Buffer I/O error on dev nbd3, logical block 0, async page read [ 48.127949][ T4461] XFS (loop4): Mounting V5 Filesystem [ 48.130144][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.132669][ T51] Buffer I/O error on dev nbd3, logical block 0, async page read [ 48.134772][ T4299] ldm_validate_partition_table(): Disk read failed. [ 48.136905][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.139505][ T51] Buffer I/O error on dev nbd3, logical block 0, async page read [ 48.156263][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.158789][ T51] Buffer I/O error on dev nbd3, logical block 0, async page read [ 48.161723][ T4299] Dev nbd3: unable to read RDB block 0 [ 48.163717][ T4299] nbd3: unable to read partition table [ 48.165312][ T4299] nbd3: partition table beyond EOD, truncated [ 48.173121][ T4496] ldm_validate_partition_table(): Disk read failed. [ 48.177696][ T4496] Dev nbd3: unable to read RDB block 0 [ 48.227734][ T4461] XFS (loop4): Ending clean mount [ 48.333476][ T4496] nbd3: unable to read partition table [ 48.355997][ T4496] nbd3: partition table beyond EOD, truncated [ 48.359141][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 48.376529][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=4, location=4 [ 48.389532][ T4299] ldm_validate_partition_table(): Disk read failed. [ 48.392750][ T4299] Dev nbd3: unable to read RDB block 0 [ 48.395162][ T4299] nbd3: unable to read partition table [ 48.396924][ T4299] nbd3: partition table beyond EOD, truncated [ 48.403800][ T4463] vhci_hcd: connection closed [ 48.405663][ T4451] vhci_hcd: stop threads [ 48.422814][ T4451] vhci_hcd: release socket [ 48.424710][ T4451] vhci_hcd: disconnect device [ 49.033123][ T24] vhci_hcd: vhci_device speed not set [ 49.090189][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3, location=3 [ 49.139778][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2, location=2 [ 49.154156][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 49.170902][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=4, location=4 [ 49.186015][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3, location=3 [ 49.200406][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2, location=2 [ 49.210681][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=4, location=4 [ 49.218583][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3, location=3 [ 49.232484][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2, location=2 [ 49.245269][ T4496] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 49.268108][ T4496] UDF-fs: Scanning with blocksize 1024 failed [ 49.279704][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 49.298780][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 49.304266][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 49.306970][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 49.322907][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 49.326114][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 49.328881][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 49.331876][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 49.334542][ T4496] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 49.336723][ T4496] UDF-fs: Scanning with blocksize 2048 failed [ 49.338796][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 49.341786][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 49.344924][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 49.347656][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 49.355922][ T4496] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 49.358564][ T4496] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 49.361234][ T4496] UDF-fs: Scanning with blocksize 4096 failed [ 49.362962][ T4496] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 49.369156][ T4515] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 49.383405][ T4516] loop2: detected capacity change from 0 to 256 [ 49.394063][ T4516] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 50.162780][ T4516] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 50.170256][ T4516] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 50.172397][ T4516] UDF-fs: Scanning with blocksize 512 failed [ 50.204034][ T4516] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 50.221631][ T4313] XFS (loop4): Unmounting Filesystem [ 50.246661][ T4516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 51.448111][ T4530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 51.558312][ T4533] netlink: 'syz.2.23': attribute type 1 has an invalid length. [ 51.566470][ T4533] netlink: 'syz.2.23': attribute type 2 has an invalid length. [ 52.511462][ T4536] device bpq0 entered promiscuous mode [ 52.888257][ T4542] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 52.890296][ T4542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 53.232469][ T4554] netlink: 44 bytes leftover after parsing attributes in process `syz.2.26'. [ 53.437240][ T4542] vhci_hcd vhci_hcd.0: Device attached [ 53.699368][ T4415] usb 4-1: new low-speed USB device number 2 using vhci_hcd [ 53.754726][ T4557] bond0: (slave bond_slave_0): Releasing backup interface [ 53.918862][ T4545] loop1: detected capacity change from 0 to 32768 [ 54.067475][ T4571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 54.721664][ T4545] XFS (loop1): Mounting V5 Filesystem [ 54.734026][ T4564] loop4: detected capacity change from 0 to 32768 [ 54.736588][ T4564] ======================================================= [ 54.736588][ T4564] WARNING: The mand mount option has been deprecated and [ 54.736588][ T4564] and is ignored by this kernel. Remove the mand [ 54.736588][ T4564] option from the mount to silence this warning. [ 54.736588][ T4564] ======================================================= [ 54.768529][ T4560] device bpq0 left promiscuous mode [ 54.771702][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 54.841074][ T4545] XFS (loop1): Ending clean mount [ 54.899345][ T4564] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 54.959706][ T4546] vhci_hcd: connection closed [ 54.960716][ T39] vhci_hcd: stop threads [ 54.963363][ T39] vhci_hcd: release socket [ 54.964657][ T39] vhci_hcd: disconnect device [ 55.029770][ T4415] vhci_hcd: vhci_device speed not set [ 55.163990][ T4587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.166620][ T4587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.182037][ T4587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.184553][ T4587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.188950][ T4313] ocfs2: Unmounting device (7,4) on (node local) [ 55.264821][ T4589] netlink: 'syz.4.36': attribute type 1 has an invalid length. [ 55.267115][ T4589] netlink: 'syz.4.36': attribute type 2 has an invalid length. [ 55.303469][ T4577] loop0: detected capacity change from 0 to 32768 [ 55.391002][ T4577] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.31 (4577) [ 55.582521][ T4577] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 55.682676][ T4577] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 55.867712][ T4577] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 56.102124][ T4577] BTRFS info (device loop0): use zstd compression, level 3 [ 56.138141][ T4577] BTRFS info (device loop0): using free space tree [ 56.144271][ T4591] device bpq0 entered promiscuous mode [ 56.208830][ T4318] XFS (loop1): Unmounting Filesystem [ 56.436402][ T4577] BTRFS info (device loop0): enabling ssd optimizations [ 56.472296][ T4586] loop3: detected capacity change from 0 to 32768 [ 56.556942][ T4586] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 56.705608][ T4314] ocfs2: Unmounting device (7,3) on (node local) [ 56.886830][ T4305] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 57.644546][ T4297] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop0 scanned by udevd (4297) [ 58.126148][ T4633] netlink: 44 bytes leftover after parsing attributes in process `syz.4.41'. [ 58.141875][ T4633] Cache volume key already in use (9p,(null),) [ 58.390667][ T4638] netlink: 'syz.2.42': attribute type 1 has an invalid length. [ 59.490598][ T4650] netlink: 44 bytes leftover after parsing attributes in process `syz.3.43'. [ 60.074731][ T4659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 60.629211][ C1] sched: RT throttling activated [ 64.181876][ T4695] netlink: 'syz.2.55': attribute type 1 has an invalid length. [ 64.416104][ T4699] netlink: 44 bytes leftover after parsing attributes in process `syz.0.54'. [ 64.501926][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.503956][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.002332][ T4703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.005010][ T4703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.047470][ T4703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.069616][ T4703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.102585][ T4695] team0: Port device team_slave_0 removed [ 65.273354][ T4704] loop4: detected capacity change from 0 to 32768 [ 66.059023][ T4704] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 66.383874][ T4715] netlink: 44 bytes leftover after parsing attributes in process `syz.0.58'. [ 66.756739][ T4313] ocfs2: Unmounting device (7,4) on (node local) [ 67.694863][ T4724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 67.887527][ T4712] loop2: detected capacity change from 0 to 32768 [ 67.940137][ T4712] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.59 (4712) [ 68.010531][ T4712] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.013743][ T4712] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 68.016172][ T4712] BTRFS info (device loop2): force clearing of disk cache [ 68.028551][ T4712] BTRFS info (device loop2): enabling auto defrag [ 68.030544][ T4712] BTRFS info (device loop2): max_inline at 0 [ 68.032209][ T4712] BTRFS info (device loop2): enabling disk space caching [ 68.034127][ T4712] BTRFS info (device loop2): disk space caching is enabled [ 68.700374][ T4739] netlink: 44 bytes leftover after parsing attributes in process `syz.3.62'. [ 68.711278][ T4743] netlink: 44 bytes leftover after parsing attributes in process `syz.0.65'. [ 68.723554][ T4743] Cache volume key already in use (9p,(null),) [ 69.004578][ T4712] BTRFS info (device loop2): enabling ssd optimizations [ 69.007696][ T4712] BTRFS info (device loop2): rebuilding free space tree [ 69.047313][ T4728] loop4: detected capacity change from 0 to 32768 [ 69.066003][ T4728] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.64 (4728) [ 69.066117][ T4712] BTRFS info (device loop2): disabling free space tree [ 69.076487][ T4712] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 69.080327][ T4766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.081705][ T4712] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 69.082905][ T4766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.096436][ T4728] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 69.099715][ T4728] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 69.110187][ T4728] BTRFS info (device loop4): using free space tree [ 69.141985][ T4306] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 69.361340][ T4766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.391864][ T4766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.609475][ T4773] syz.0.70 uses obsolete (PF_INET,SOCK_PACKET) [ 70.109650][ T1515] cfg80211: failed to load regulatory.db [ 70.522781][ T4728] BTRFS info (device loop4): enabling ssd optimizations [ 70.592872][ T4804] nbd0: detected capacity change from 0 to 10 [ 70.825825][ T4807] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 71.750261][ T4799] block nbd0: shutting down sockets [ 71.844391][ T4313] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 71.865575][ T4812] netlink: 'syz.2.74': attribute type 1 has an invalid length. [ 72.340716][ T4824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.343683][ T4824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.985866][ T4824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.999597][ T4824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.047927][ T4812] device hsr_slave_0 left promiscuous mode [ 74.156158][ T4839] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 74.295105][ T4842] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 75.304273][ T4852] loop4: detected capacity change from 0 to 256 [ 75.331538][ T4852] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 75.340702][ T4856] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 75.359651][ T4852] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 75.367390][ T4852] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 75.387450][ T4852] UDF-fs: Scanning with blocksize 512 failed [ 75.419151][ T4852] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 75.429036][ T4852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.342862][ T4862] loop3: detected capacity change from 0 to 256 [ 76.401004][ T4862] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 76.406704][ T4862] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 76.413999][ T4862] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 76.416082][ T4862] UDF-fs: Scanning with blocksize 512 failed [ 76.426191][ T4862] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 76.486916][ T4862] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.258157][ T4858] loop1: detected capacity change from 0 to 32768 [ 78.307877][ T4854] loop0: detected capacity change from 0 to 32768 [ 78.323474][ T4858] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 78.499274][ T4874] netlink: 44 bytes leftover after parsing attributes in process `syz.3.88'. [ 79.177912][ T4880] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 79.179854][ T4880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.214220][ T4880] vhci_hcd vhci_hcd.0: Device attached [ 79.228352][ T4885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.251485][ T4885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.268296][ T4885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.306827][ T4885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.533801][ T4888] netlink: 44 bytes leftover after parsing attributes in process `syz.0.89'. [ 79.889572][ T4625] usb 8-1: new low-speed USB device number 2 using vhci_hcd [ 80.165971][ T4299] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4299) [ 80.198156][ T4869] loop4: detected capacity change from 0 to 32768 [ 80.210322][ T4869] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.87 (4869) [ 80.222551][ T4869] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 80.225418][ T4869] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 80.227934][ T4869] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 80.243654][ T4869] BTRFS info (device loop4): use zstd compression, level 3 [ 80.251141][ T4869] BTRFS info (device loop4): using free space tree [ 81.115054][ T4297] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4297) [ 81.209679][ T4880] loop3: detected capacity change from 0 to 32768 [ 81.218555][ T4869] BTRFS error (device loop4): open_ctree failed: -12 [ 81.262877][ T4925] netlink: 'syz.0.93': attribute type 1 has an invalid length. [ 81.311932][ T4880] XFS (loop3): Mounting V5 Filesystem [ 81.377464][ T4880] XFS (loop3): Ending clean mount [ 81.390894][ T4930] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 81.421422][ T4881] vhci_hcd: connection closed [ 81.422503][ T4660] vhci_hcd: stop threads [ 81.425363][ T4660] vhci_hcd: release socket [ 81.428989][ T4660] vhci_hcd: disconnect device [ 81.441164][ T4936] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 81.461022][ T4622] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by udevd (4622) [ 81.523264][ T4936] bond1 (unregistering): Released all slaves [ 81.624619][ T4625] vhci_hcd: vhci_device speed not set [ 82.634604][ T4942] loop4: detected capacity change from 0 to 256 [ 82.662228][ T4314] XFS (loop3): Unmounting Filesystem [ 82.665586][ T4942] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 82.701939][ T4942] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 82.716434][ T4942] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 82.718540][ T4942] UDF-fs: Scanning with blocksize 512 failed [ 82.730469][ T4947] netlink: 'syz.1.99': attribute type 1 has an invalid length. [ 82.744559][ T4942] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 82.751749][ T4942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.792926][ T4949] loop2: detected capacity change from 0 to 256 [ 82.805613][ T4949] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 82.860710][ T4949] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 82.864779][ T4949] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 82.867102][ T4949] UDF-fs: Scanning with blocksize 512 failed [ 82.899525][ T4949] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 82.912898][ T4949] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.928581][ T4951] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 82.930433][ T4951] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 82.944372][ T4951] vhci_hcd vhci_hcd.0: Device attached [ 84.779356][ T4916] usb 4-1: new low-speed USB device number 3 using vhci_hcd [ 84.932999][ T4945] loop0: detected capacity change from 0 to 32768 [ 84.970052][ T4945] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 84.973015][ T4945] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 84.975506][ T4945] BTRFS info (device loop0): force clearing of disk cache [ 84.987552][ T4965] device bpq0 left promiscuous mode [ 84.998470][ T4945] BTRFS info (device loop0): enabling auto defrag [ 85.004401][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 85.009602][ T4945] BTRFS info (device loop0): max_inline at 0 [ 85.018675][ T4945] BTRFS info (device loop0): enabling disk space caching [ 85.026732][ T4945] BTRFS info (device loop0): disk space caching is enabled [ 85.202678][ T4951] loop1: detected capacity change from 0 to 32768 [ 85.244844][ T4945] BTRFS info (device loop0): enabling ssd optimizations [ 85.248146][ T4945] BTRFS info (device loop0): rebuilding free space tree [ 85.269857][ T4945] BTRFS info (device loop0): disabling free space tree [ 85.276540][ T4945] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 85.283631][ T4951] XFS (loop1): Mounting V5 Filesystem [ 85.289023][ T4945] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 85.323037][ T4961] loop4: detected capacity change from 0 to 32768 [ 85.342728][ T4961] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.102 (4961) [ 85.348954][ T4951] XFS (loop1): Ending clean mount [ 85.400058][ T4963] loop2: detected capacity change from 0 to 32768 [ 85.407681][ T4963] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.103 (4963) [ 85.447689][ T4952] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 85.457648][ T4725] vhci_hcd: stop threads [ 85.459001][ T4725] vhci_hcd: release socket [ 85.468419][ T4725] vhci_hcd: disconnect device [ 85.486434][ T4401] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 85.489337][ T4299] blk_print_req_error: 118 callbacks suppressed [ 85.489352][ T4299] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 85.561787][ T4993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.565864][ T4993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.589101][ T4993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.603180][ T4993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.618287][ T4305] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.569110][ T4318] XFS (loop1): Unmounting Filesystem [ 86.619893][ T4297] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4297) [ 86.961008][ T5011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.965915][ T5011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.082951][ T5012] Zero length message leads to an empty skb [ 87.885757][ T5008] loop0: detected capacity change from 0 to 32768 [ 87.892044][ T5008] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.105 (5008) [ 87.904715][ T5008] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 87.910934][ T5008] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 87.917631][ T5008] BTRFS info (device loop0): using free space tree [ 87.939001][ T5020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.944806][ T5020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.952686][ T5020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.957343][ T5020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.136943][ T5008] BTRFS info (device loop0): enabling ssd optimizations [ 89.032720][ T4305] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 89.247914][ T5044] netlink: 56 bytes leftover after parsing attributes in process `syz.2.111'. [ 89.987248][ T5050] tipc: Enabling of bearer rejected, failed to enable media [ 89.990178][ T4916] vhci_hcd: vhci_device speed not set [ 91.165628][ T5070] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 91.167448][ T5070] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 91.183794][ T5070] vhci_hcd vhci_hcd.0: Device attached [ 91.241590][ T5072] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 91.244214][ T4401] vhci_hcd: stop threads [ 91.246190][ T4401] vhci_hcd: release socket [ 91.247669][ T4401] vhci_hcd: disconnect device [ 91.741984][ T5078] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 91.790493][ T5076] loop3: detected capacity change from 0 to 32768 [ 91.836272][ T5076] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.119 (5076) [ 91.853073][ T5076] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.862619][ T5076] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 91.868226][ T5076] BTRFS info (device loop3): force clearing of disk cache [ 91.873614][ T5076] BTRFS info (device loop3): enabling auto defrag [ 91.875809][ T5076] BTRFS info (device loop3): max_inline at 0 [ 91.881810][ T5076] BTRFS info (device loop3): enabling disk space caching [ 91.886036][ T5076] BTRFS info (device loop3): disk space caching is enabled [ 91.958220][ T5068] loop1: detected capacity change from 0 to 32768 [ 91.962148][ T5068] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.117 (5068) [ 91.967622][ T5068] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 91.980930][ T5068] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 91.984113][ T5068] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 91.986914][ T5068] BTRFS info (device loop1): use zstd compression, level 3 [ 91.989162][ T5068] BTRFS info (device loop1): using free space tree [ 92.649364][ T5076] BTRFS info (device loop3): enabling ssd optimizations [ 92.653063][ T5076] BTRFS info (device loop3): rebuilding free space tree [ 92.668206][ T5076] BTRFS info (device loop3): disabling free space tree [ 92.687052][ T5076] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 92.701053][ T5076] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 92.768249][ T5068] BTRFS info (device loop1): enabling ssd optimizations [ 92.881660][ T174] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 92.943306][ T4318] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 93.134735][ T4299] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop1 scanned by udevd (4299) [ 93.145181][ T4314] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.926205][ T5124] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 94.169365][ T5124] usb 1-1: Invalid ep0 maxpacket: 32 [ 94.215613][ T5104] loop2: detected capacity change from 0 to 32768 [ 94.225475][ T5104] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.121 (5104) [ 94.278915][ T5104] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 94.289351][ T5104] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 94.291999][ T5104] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 94.294637][ T5104] BTRFS info (device loop2): use zstd compression, level 3 [ 94.320913][ T5104] BTRFS info (device loop2): using free space tree [ 94.404346][ T5138] netlink: 56 bytes leftover after parsing attributes in process `syz.3.125'. [ 95.080214][ T5124] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 95.165958][ T5157] tipc: Enabling of bearer rejected, failed to enable media [ 95.189438][ T5115] loop4: detected capacity change from 0 to 32768 [ 95.264445][ T5104] BTRFS error (device loop2): open_ctree failed: -12 [ 95.267674][ T5115] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.122 (5115) [ 95.726250][ T5115] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 95.739328][ T5124] usb 1-1: Invalid ep0 maxpacket: 32 [ 95.741126][ T5124] usb usb1-port1: attempt power cycle [ 95.749748][ T5115] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 95.752670][ T5115] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 95.756507][ T5115] BTRFS info (device loop4): use zstd compression, level 3 [ 95.770330][ T5115] BTRFS info (device loop4): using free space tree [ 96.062878][ T5183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 96.655144][ T5115] BTRFS error (device loop4): open_ctree failed: -12 [ 96.799868][ T5124] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 96.963324][ T4622] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by udevd (4622) [ 96.963927][ T5124] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.113429][ T5124] usb 1-1: Using ep0 maxpacket: 32 [ 97.118201][ T5124] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 97.121029][ T5124] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.123746][ T5124] usb 1-1: config 0 has no interface number 0 [ 97.125344][ T5124] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.135028][ T5124] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 97.137623][ T5124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.142818][ T5124] usb 1-1: Product: syz [ 97.144037][ T5124] usb 1-1: Manufacturer: syz [ 97.145309][ T5124] usb 1-1: SerialNumber: syz [ 97.158028][ T5124] usb 1-1: config 0 descriptor?? [ 97.163798][ T5124] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 97.469846][ T5190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.483822][ T5190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.512185][ T5207] netlink: 44 bytes leftover after parsing attributes in process `syz.2.137'. [ 97.531544][ T5124] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 97.533883][ T5124] quatech2: probe of 1-1:0.51 failed with error -8 [ 99.243999][ T5220] netlink: 56 bytes leftover after parsing attributes in process `syz.2.139'. [ 99.906548][ T4621] usb 1-1: USB disconnect, device number 5 [ 100.098022][ T5225] tipc: Started in network mode [ 100.099637][ T5225] tipc: Node identity b2d6b3688afa, cluster identity 4711 [ 100.101638][ T5225] tipc: Enabled bearer , priority 0 [ 100.176232][ T5228] loop3: detected capacity change from 0 to 256 [ 100.245172][ T5228] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 100.249046][ T5228] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 100.266535][ T5228] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 100.268683][ T5228] UDF-fs: Scanning with blocksize 512 failed [ 100.277454][ T5221] tipc: Disabling bearer [ 100.301993][ T5228] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 101.260032][ T4922] tipc: Node number set to 942453608 [ 101.285608][ T5228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.835730][ T5238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'. [ 102.249634][ T4919] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 103.855451][ T4919] usb 1-1: device not accepting address 6, error -71 [ 103.905355][ T5260] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 105.011618][ T5285] netlink: 'syz.0.155': attribute type 1 has an invalid length. [ 105.018426][ T5285] netlink: 'syz.0.155': attribute type 2 has an invalid length. [ 105.152133][ T5292] device bpq0 entered promiscuous mode [ 105.769365][ T5295] netlink: 40 bytes leftover after parsing attributes in process `syz.1.158'. [ 107.590049][ T5310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.592670][ T5310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.036411][ T5307] netlink: 44 bytes leftover after parsing attributes in process `syz.1.163'. [ 108.051590][ T5303] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 108.053564][ T5303] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 108.914597][ T5303] vhci_hcd vhci_hcd.0: Device attached [ 109.179429][ T4919] usb 10-1: new low-speed USB device number 3 using vhci_hcd [ 110.102555][ T5304] vhci_hcd: connection reset by peer [ 110.104517][ T271] vhci_hcd: stop threads [ 110.105727][ T271] vhci_hcd: release socket [ 110.107132][ T271] vhci_hcd: disconnect device [ 111.414983][ T5339] netlink: 'syz.0.173': attribute type 1 has an invalid length. [ 111.417314][ T5339] netlink: 'syz.0.173': attribute type 2 has an invalid length. [ 112.433591][ T5365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.436186][ T5365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.445192][ T5365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.451269][ T5365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.366613][ T4919] vhci_hcd: vhci_device speed not set [ 114.846319][ T4777] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 116.040113][ T5396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.184'. [ 116.908724][ T5411] netlink: 'syz.1.190': attribute type 1 has an invalid length. [ 116.917826][ T5411] netlink: 'syz.1.190': attribute type 2 has an invalid length. [ 117.044381][ T5415] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 118.313817][ T5433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.317454][ T5433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.355866][ T5452] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 120.357804][ T5452] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.508316][ T5452] vhci_hcd vhci_hcd.0: Device attached [ 120.672068][ T5463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.201'. [ 121.425924][ T5468] netlink: 'syz.2.205': attribute type 1 has an invalid length. [ 121.428061][ T5468] netlink: 'syz.2.205': attribute type 2 has an invalid length. [ 121.974627][ T5124] usb 8-1: new low-speed USB device number 3 using vhci_hcd [ 122.774599][ T5458] loop3: detected capacity change from 0 to 32768 [ 122.903275][ T5458] XFS (loop3): Mounting V5 Filesystem [ 123.060962][ T5458] XFS (loop3): Ending clean mount [ 123.064786][ T5499] device syzkaller0 entered promiscuous mode [ 124.704915][ T5455] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 124.707248][ T9] vhci_hcd: stop threads [ 124.708493][ T9] vhci_hcd: release socket [ 124.711749][ T9] vhci_hcd: disconnect device [ 128.133994][ T4314] XFS (loop3): Unmounting Filesystem [ 128.460304][ T5523] netlink: 44 bytes leftover after parsing attributes in process `syz.4.214'. [ 128.599946][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.601630][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.732529][ T5124] vhci_hcd: vhci_device speed not set [ 130.359148][ T5535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 130.363200][ T4365] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 130.492776][ T5538] loop3: detected capacity change from 0 to 256 [ 130.503418][ T5538] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 130.514702][ T5538] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 130.523090][ T5538] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 130.527456][ T5538] UDF-fs: Scanning with blocksize 512 failed [ 130.536969][ T5538] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 130.544411][ T5538] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.559440][ T4365] usb 1-1: Invalid ep0 maxpacket: 32 [ 130.809477][ T4365] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 131.009684][ T4365] usb 1-1: Invalid ep0 maxpacket: 32 [ 131.012960][ T4365] usb usb1-port1: attempt power cycle [ 131.679453][ T4365] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 131.711113][ T4365] usb 1-1: Invalid ep0 maxpacket: 32 [ 131.725709][ T5548] netlink: 'syz.1.221': attribute type 1 has an invalid length. [ 131.727842][ T5548] netlink: 'syz.1.221': attribute type 2 has an invalid length. [ 131.995518][ T5555] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 131.997347][ T5555] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 132.047140][ T5555] vhci_hcd vhci_hcd.0: Device attached [ 132.399351][ T4922] usb 2-1: new low-speed USB device number 3 using vhci_hcd [ 132.505443][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 132.658912][ T5552] loop2: detected capacity change from 0 to 32768 [ 132.736354][ T5552] XFS (loop2): Mounting V5 Filesystem [ 132.811217][ T5558] loop0: detected capacity change from 0 to 32768 [ 132.827901][ T5552] XFS (loop2): Ending clean mount [ 132.873796][ T4306] XFS (loop2): Unmounting Filesystem [ 132.949621][ T5575] loop1: detected capacity change from 0 to 256 [ 132.958358][ T5575] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 132.977710][ T5575] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 133.008383][ T5575] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 133.012296][ T5558] XFS (loop0): Mounting V5 Filesystem [ 133.014294][ T5575] UDF-fs: Scanning with blocksize 512 failed [ 133.017327][ T5575] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 133.023802][ T5575] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.115039][ T5584] netlink: 44 bytes leftover after parsing attributes in process `syz.4.227'. [ 133.138325][ T5558] XFS (loop0): Ending clean mount [ 134.099363][ T5556] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 134.129569][ T174] vhci_hcd: stop threads [ 134.130869][ T174] vhci_hcd: release socket [ 134.132369][ T174] vhci_hcd: disconnect device [ 134.431632][ T5591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 135.219779][ T4305] XFS (loop0): Unmounting Filesystem [ 135.248963][ T5591] bond2 (unregistering): Released all slaves [ 135.799085][ T5604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.803785][ T5604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.830623][ T5614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.833989][ T5612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 136.849939][ T5614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.866443][ T5614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.873154][ T5616] netlink: 'syz.3.238': attribute type 1 has an invalid length. [ 136.873341][ T5614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.886268][ T5616] netlink: 'syz.3.238': attribute type 2 has an invalid length. [ 137.558143][ T4922] vhci_hcd: vhci_device speed not set [ 139.921061][ T5644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.948966][ T5644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.963852][ T5644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.966254][ T5644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.572165][ T5650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 140.583522][ T5655] netlink: 'syz.0.251': attribute type 1 has an invalid length. [ 140.597746][ T5655] netlink: 'syz.0.251': attribute type 2 has an invalid length. [ 140.708824][ T5660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.711658][ T5660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.656114][ T5689] netlink: 44 bytes leftover after parsing attributes in process `syz.1.257'. [ 144.713121][ T5699] netlink: 44 bytes leftover after parsing attributes in process `syz.3.258'. [ 146.038623][ T5710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.261'. [ 146.615251][ T5713] device syzkaller0 entered promiscuous mode [ 147.949583][ T4920] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 148.139462][ T4920] usb 1-1: Invalid ep0 maxpacket: 32 [ 148.289479][ T4920] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 148.469357][ T4920] usb 1-1: Invalid ep0 maxpacket: 32 [ 148.471123][ T4920] usb usb1-port1: attempt power cycle [ 150.240191][ T5752] netlink: 20 bytes leftover after parsing attributes in process `syz.1.276'. [ 152.008508][ T5769] device syzkaller0 entered promiscuous mode [ 153.685573][ T5783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 154.806320][ T4358] libceph: connect (1)[c::]:6789 error -101 [ 154.808472][ T4358] libceph: mon0 (1)[c::]:6789 connect error [ 154.911372][ T5798] netlink: 44 bytes leftover after parsing attributes in process `syz.4.289'. [ 155.106244][ T4358] libceph: connect (1)[c::]:6789 error -101 [ 155.142219][ T4358] libceph: mon0 (1)[c::]:6789 connect error [ 155.504634][ T5794] ceph: No mds server is up or the cluster is laggy [ 155.812591][ T5805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.815145][ T5805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.281687][ T5807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.290'. [ 157.767173][ T4428] libceph: connect (1)[c::]:6789 error -101 [ 157.768986][ T4428] libceph: mon0 (1)[c::]:6789 connect error [ 158.169861][ T5824] netlink: 44 bytes leftover after parsing attributes in process `syz.4.294'. [ 158.484440][ T5828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 158.739798][ T5813] ceph: No mds server is up or the cluster is laggy [ 158.745102][ T4428] libceph: connect (1)[c::]:6789 error -101 [ 158.747135][ T4428] libceph: mon0 (1)[c::]:6789 connect error [ 159.026359][ T5836] device syzkaller0 entered promiscuous mode [ 159.251915][ T5842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 159.686257][ T5850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'. [ 160.588038][ T5854] loop4: detected capacity change from 0 to 4096 [ 160.637459][ T5854] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 160.689522][ T5854] ntfs3: loop4: volume is dirty and "force" flag is not set! [ 160.977118][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 164.408061][ T4316] Bluetooth: hci4: command 0x0406 tx timeout [ 164.415049][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 164.417303][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 164.419052][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 164.538918][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'. [ 166.170874][ T4428] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 166.507819][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'. [ 166.543451][ T5908] device syzkaller0 entered promiscuous mode [ 166.549923][ T4428] usb 1-1: Invalid ep0 maxpacket: 32 [ 166.729465][ T4428] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 167.119328][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'. [ 167.695770][ T4428] usb 1-1: device not accepting address 17, error -71 [ 167.701626][ T4428] usb usb1-port1: attempt power cycle [ 167.926943][ T5929] loop2: detected capacity change from 0 to 4096 [ 167.936752][ T5929] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 169.721105][ T5929] ntfs3: loop2: Failed to load $Extend. [ 169.816308][ T5948] device syzkaller0 entered promiscuous mode [ 170.860028][ T5960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.862663][ T5960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.336241][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.336'. [ 172.002746][ T5975] netlink: 44 bytes leftover after parsing attributes in process `syz.0.339'. [ 174.821714][ T6004] device syzkaller0 entered promiscuous mode [ 174.971520][ T6010] netlink: 'syz.2.352': attribute type 1 has an invalid length. [ 175.052453][ T6010] netlink: 'syz.2.352': attribute type 2 has an invalid length. [ 175.147694][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'. [ 175.586045][ T6015] netlink: 44 bytes leftover after parsing attributes in process `syz.1.353'. [ 177.241654][ T6037] netlink: 44 bytes leftover after parsing attributes in process `syz.3.357'. [ 178.201767][ T6041] loop1: detected capacity change from 0 to 256 [ 178.215303][ T6041] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 178.227302][ T6041] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 178.236158][ T6041] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 178.238329][ T6041] UDF-fs: Scanning with blocksize 512 failed [ 178.243472][ T6041] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 178.258428][ T6041] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.302280][ T4919] libceph: connect (1)[c::]:6789 error -101 [ 178.304088][ T4919] libceph: mon0 (1)[c::]:6789 connect error [ 178.659308][ T6056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.365'. [ 179.629441][ T5124] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 179.646788][ T6051] ceph: No mds server is up or the cluster is laggy [ 179.674771][ T4919] libceph: connect (1)[c::]:6789 error -101 [ 179.676646][ T4919] libceph: mon0 (1)[c::]:6789 connect error [ 179.706570][ T6059] netlink: 'syz.4.366': attribute type 1 has an invalid length. [ 179.708832][ T6059] netlink: 'syz.4.366': attribute type 2 has an invalid length. [ 179.839543][ T5124] usb 1-1: Invalid ep0 maxpacket: 32 [ 180.509293][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'. [ 180.532850][ T5124] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 181.948520][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.372'. [ 183.010798][ T6097] netlink: 44 bytes leftover after parsing attributes in process `syz.0.376'. [ 184.159901][ T6114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.166357][ T6114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.622046][ T6112] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 184.625525][ T6112] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 185.524394][ T6111] netlink: 44 bytes leftover after parsing attributes in process `syz.0.380'. [ 185.645200][ T6124] netlink: 'syz.1.383': attribute type 1 has an invalid length. [ 185.647605][ T6124] netlink: 'syz.1.383': attribute type 2 has an invalid length. [ 185.896175][ T6127] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 185.899115][ T6127] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 188.076703][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.388'. [ 188.563645][ T6152] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 188.566387][ T6152] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 189.262155][ T4777] libceph: connect (1)[c::]:6789 error -101 [ 189.264012][ T4777] libceph: mon0 (1)[c::]:6789 connect error [ 189.267096][ T4777] libceph: connect (1)[c::]:6789 error -101 [ 189.268964][ T4777] libceph: mon0 (1)[c::]:6789 connect error [ 189.887088][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 189.959116][ T4777] libceph: connect (1)[c::]:6789 error -101 [ 189.961190][ T4777] libceph: mon0 (1)[c::]:6789 connect error [ 189.968327][ T6155] ceph: No mds server is up or the cluster is laggy [ 190.041310][ T6170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.044166][ T6170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.052497][ T6170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.056784][ T6170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.272930][ T6174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.275998][ T6174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.280236][ T6173] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 190.288496][ T6174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.309574][ T6173] netlink: 'syz.0.397': attribute type 2 has an invalid length. [ 190.480438][ T6174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.490098][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.492001][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.510834][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 192.927500][ T6206] loop1: detected capacity change from 0 to 764 [ 193.050428][ T6209] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 193.053206][ T6209] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 193.772552][ T6206] rock: directory entry would overflow storage [ 193.774364][ T6206] rock: sig=0x5245, size=8, remaining=5 [ 196.579175][ T6234] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 196.582160][ T6234] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 196.606510][ T4922] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 197.407228][ T6238] netlink: 'syz.1.417': attribute type 1 has an invalid length. [ 197.436171][ T6238] netlink: 'syz.1.417': attribute type 2 has an invalid length. [ 197.573746][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.419'. [ 199.195275][ T6264] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 199.197873][ T6264] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 199.203135][ T6265] loop3: detected capacity change from 0 to 764 [ 199.267384][ T6265] rock: directory entry would overflow storage [ 199.269260][ T6265] rock: sig=0x5245, size=8, remaining=5 [ 202.098933][ T6277] loop4: detected capacity change from 0 to 256 [ 202.177781][ T6277] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 202.182579][ T6277] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 202.216719][ T6277] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 202.218809][ T6277] UDF-fs: Scanning with blocksize 512 failed [ 202.242219][ T6277] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 202.273127][ T6277] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.426356][ T6286] process 'syz.3.430' launched '/dev/fd/-1' with NULL argv: empty string added [ 202.599849][ T6286] loop3: detected capacity change from 0 to 1764 [ 202.866348][ T6286] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 203.277735][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'. [ 203.307668][ T6292] netlink: 'syz.1.432': attribute type 1 has an invalid length. [ 203.323801][ T6292] netlink: 'syz.1.432': attribute type 2 has an invalid length. [ 206.368087][ T6320] wg1 speed is unknown, defaulting to 1000 [ 206.389358][ T6320] wg1 speed is unknown, defaulting to 1000 [ 206.393008][ T6320] wg1 speed is unknown, defaulting to 1000 [ 206.396856][ T6320] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 206.436933][ T6320] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 206.440926][ T6326] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 206.442953][ T6326] netlink: 'syz.0.446': attribute type 2 has an invalid length. [ 206.620658][ T6320] wg1 speed is unknown, defaulting to 1000 [ 206.623439][ T6320] wg1 speed is unknown, defaulting to 1000 [ 206.627936][ T6320] wg1 speed is unknown, defaulting to 1000 [ 206.641247][ T6320] wg1 speed is unknown, defaulting to 1000 [ 206.643381][ T6320] wg1 speed is unknown, defaulting to 1000 [ 206.713710][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'. [ 206.731712][ T6331] netlink: 16 bytes leftover after parsing attributes in process `syz.4.447'. [ 207.313617][ T6350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.317455][ T6350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.079570][ T6358] netlink: 'syz.3.456': attribute type 1 has an invalid length. [ 208.176060][ T6360] bond1 (unregistering): Released all slaves [ 209.136099][ T6373] netlink: 'syz.4.459': attribute type 1 has an invalid length. [ 209.138504][ T6373] netlink: 'syz.4.459': attribute type 2 has an invalid length. [ 209.619069][ T6383] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 209.622000][ T6383] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 211.313625][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 212.346720][ T6403] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 212.348652][ T6403] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 212.361693][ T6404] netlink: 'syz.3.470': attribute type 1 has an invalid length. [ 212.378148][ T6404] netlink: 'syz.3.470': attribute type 2 has an invalid length. [ 212.378947][ T6403] vhci_hcd vhci_hcd.0: Device attached [ 212.789375][ T4777] usb 4-1: new low-speed USB device number 4 using vhci_hcd [ 212.941701][ T6424] loop2: detected capacity change from 0 to 764 [ 212.987904][ T6424] rock: directory entry would overflow storage [ 212.989810][ T6424] rock: sig=0x5245, size=8, remaining=5 [ 213.682192][ T6409] loop1: detected capacity change from 0 to 32768 [ 214.249470][ T4922] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 214.429821][ T4922] usb 1-1: Invalid ep0 maxpacket: 32 [ 214.467493][ T6409] XFS (loop1): Mounting V5 Filesystem [ 214.579481][ T4922] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 214.648493][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 214.653460][ T6409] XFS (loop1): log mount failed [ 214.879308][ T4922] usb 1-1: Invalid ep0 maxpacket: 32 [ 214.881004][ T4922] usb usb1-port1: attempt power cycle [ 215.289480][ T4922] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 215.354785][ T4922] usb 1-1: Invalid ep0 maxpacket: 32 [ 215.570864][ T4922] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 215.639280][ T4922] usb 1-1: Invalid ep0 maxpacket: 32 [ 215.641160][ T4922] usb usb1-port1: unable to enumerate USB device [ 215.650904][ T6406] vhci_hcd: connection reset by peer [ 215.659584][ T4349] vhci_hcd: stop threads [ 215.660787][ T4349] vhci_hcd: release socket [ 215.662420][ T4349] vhci_hcd: disconnect device [ 215.994382][ T6458] netlink: 'syz.4.487': attribute type 1 has an invalid length. [ 215.996620][ T6458] netlink: 'syz.4.487': attribute type 2 has an invalid length. [ 216.510403][ T6468] loop1: detected capacity change from 0 to 764 [ 216.554949][ T6468] rock: directory entry would overflow storage [ 216.556777][ T6468] rock: sig=0x5245, size=8, remaining=5 [ 217.942282][ T6484] loop4: detected capacity change from 0 to 1764 [ 219.057904][ T6484] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 219.259324][ T4777] vhci_hcd: vhci_device speed not set [ 219.320151][ T6486] loop3: detected capacity change from 0 to 256 [ 219.342215][ T6486] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 219.356834][ T6486] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 219.378027][ T6486] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 219.384008][ T6486] UDF-fs: Scanning with blocksize 512 failed [ 219.404744][ T6486] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 219.410499][ T6486] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.623318][ T6498] netlink: 'syz.0.499': attribute type 1 has an invalid length. [ 219.632247][ T6498] netlink: 'syz.0.499': attribute type 2 has an invalid length. [ 220.775825][ T6503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.779881][ T6503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.815134][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 221.901774][ T6507] loop3: detected capacity change from 0 to 32768 [ 221.923875][ T6507] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.502 (6507) [ 221.941797][ T6507] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 221.950333][ T6507] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 221.957610][ T6507] BTRFS info (device loop3): force clearing of disk cache [ 221.963967][ T6507] BTRFS info (device loop3): enabling auto defrag [ 221.965885][ T6507] BTRFS info (device loop3): max_inline at 0 [ 221.967506][ T6507] BTRFS info (device loop3): enabling disk space caching [ 221.989594][ T6507] BTRFS info (device loop3): disk space caching is enabled [ 223.975556][ T6543] loop2: detected capacity change from 0 to 1764 [ 224.073734][ T6542] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 224.131523][ T6507] BTRFS info (device loop3): enabling ssd optimizations [ 224.136509][ T6507] BTRFS info (device loop3): rebuilding free space tree [ 224.149831][ T6507] BTRFS info (device loop3): disabling free space tree [ 224.151802][ T6507] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 224.154523][ T6507] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 224.453520][ T5886] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 224.527534][ T6554] netlink: 'syz.2.513': attribute type 1 has an invalid length. [ 224.586312][ T6554] netlink: 'syz.2.513': attribute type 2 has an invalid length. [ 224.628536][ T4314] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 224.913742][ T6558] loop4: detected capacity change from 0 to 764 [ 225.065273][ T6558] rock: directory entry would overflow storage [ 225.067046][ T6558] rock: sig=0x5245, size=8, remaining=5 [ 226.149441][ T6576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.152051][ T6576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.121128][ T6590] loop3: detected capacity change from 0 to 764 [ 228.151201][ T6590] rock: directory entry would overflow storage [ 228.153092][ T6590] rock: sig=0x5245, size=8, remaining=5 [ 228.824446][ T6595] netlink: 'syz.1.525': attribute type 1 has an invalid length. [ 228.826606][ T6595] netlink: 'syz.1.525': attribute type 2 has an invalid length. [ 228.910638][ T6596] loop0: detected capacity change from 0 to 1764 [ 229.024767][ T6596] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 229.741460][ T6607] syz.2.526 (6607): drop_caches: 2 [ 230.817809][ T6609] loop3: detected capacity change from 0 to 764 [ 230.824198][ T6609] rock: directory entry would overflow storage [ 230.825984][ T6609] rock: sig=0x5245, size=8, remaining=5 [ 232.285383][ T6619] loop0: detected capacity change from 0 to 764 [ 232.355229][ T6616] loop2: detected capacity change from 0 to 764 [ 232.413545][ T6616] rock: directory entry would overflow storage [ 232.415420][ T6616] rock: sig=0x5245, size=8, remaining=5 [ 232.428646][ T6619] rock: directory entry would overflow storage [ 232.430483][ T6619] rock: sig=0x5245, size=8, remaining=5 [ 233.733580][ T6636] netlink: 'syz.4.538': attribute type 1 has an invalid length. [ 233.751607][ T6636] netlink: 'syz.4.538': attribute type 2 has an invalid length. [ 234.319639][ T4915] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 234.499451][ T4915] usb 1-1: Invalid ep0 maxpacket: 32 [ 234.659527][ T4915] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 234.693305][ T6641] loop3: detected capacity change from 0 to 1764 [ 234.784643][ T6641] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 234.846237][ T4915] usb 1-1: Invalid ep0 maxpacket: 32 [ 234.848232][ T4915] usb usb1-port1: attempt power cycle [ 235.232164][ T6653] loop2: detected capacity change from 0 to 764 [ 235.324370][ T6653] rock: directory entry would overflow storage [ 235.326216][ T6653] rock: sig=0x5245, size=8, remaining=5 [ 235.841687][ T6654] netlink: 20 bytes leftover after parsing attributes in process `syz.4.542'. [ 237.191307][ T6659] syz.2.544 (6659): drop_caches: 2 [ 237.246223][ T4915] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 237.280893][ T4915] usb 1-1: Invalid ep0 maxpacket: 32 [ 238.990725][ T6672] loop4: detected capacity change from 0 to 764 [ 239.429915][ T6672] rock: directory entry would overflow storage [ 239.431718][ T6672] rock: sig=0x5245, size=8, remaining=5 [ 239.687009][ T4915] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 239.919363][ T4915] usb 1-1: device not accepting address 29, error -71 [ 239.921667][ T4915] usb usb1-port1: unable to enumerate USB device [ 239.941459][ T6683] netlink: 'syz.0.552': attribute type 1 has an invalid length. [ 239.947714][ T6683] netlink: 'syz.0.552': attribute type 2 has an invalid length. [ 241.176367][ T6690] loop2: detected capacity change from 0 to 1764 [ 241.216486][ T6695] netlink: 32 bytes leftover after parsing attributes in process `syz.3.555'. [ 241.219009][ T6690] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 241.266914][ T6697] loop0: detected capacity change from 0 to 4096 [ 241.341387][ T6698] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.539677][ T6703] loop2: detected capacity change from 0 to 4096 [ 241.762700][ T6708] loop3: detected capacity change from 0 to 764 [ 241.822536][ T6708] rock: directory entry would overflow storage [ 241.824218][ T6708] rock: sig=0x5245, size=8, remaining=5 [ 242.497243][ T6703] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 242.572284][ T6712] loop3: detected capacity change from 0 to 256 [ 242.949526][ T4915] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 243.139378][ T4915] usb 1-1: Invalid ep0 maxpacket: 32 [ 243.299626][ T4915] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 243.329784][ T6712] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 243.336964][ T6712] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 243.337107][ T6702] fs-verity: sha512 using implementation "sha512-arm64" [ 243.363785][ T6712] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 243.366258][ T6712] UDF-fs: Scanning with blocksize 512 failed [ 243.392941][ T6712] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 243.397373][ T6712] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.494181][ T4915] usb 1-1: Invalid ep0 maxpacket: 32 [ 243.495996][ T4915] usb usb1-port1: attempt power cycle [ 244.445686][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 244.472240][ T4915] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 244.500571][ T4915] usb 1-1: Invalid ep0 maxpacket: 32 [ 245.408066][ T6729] netlink: 'syz.0.567': attribute type 1 has an invalid length. [ 245.411548][ T6729] netlink: 'syz.0.567': attribute type 2 has an invalid length. [ 250.195953][ T6765] loop1: detected capacity change from 0 to 1764 [ 250.790618][ T6765] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 250.959405][ T6769] binder: 6768:6769 got transaction to invalid handle, 1 [ 251.018393][ T6769] binder: 6769:6768 cannot find target node [ 251.062462][ T6772] binder: 6768:6772 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 251.065286][ T6769] binder: 6768:6769 transaction call to 0:0 failed 4/29201/-22, size 104-24 line 3054 [ 251.066142][ T6772] binder: 6772 RLIMIT_NICE not set [ 253.289636][ T4922] binder: undelivered TRANSACTION_ERROR: 29201 [ 253.401336][ T4915] libceph: connect (1)[c::]:6789 error -101 [ 253.403224][ T4915] libceph: mon0 (1)[c::]:6789 connect error [ 253.659588][ T4922] libceph: connect (1)[c::]:6789 error -101 [ 253.661470][ T4922] libceph: mon0 (1)[c::]:6789 connect error [ 254.462480][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.464325][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.478077][ T4915] libceph: connect (1)[c::]:6789 error -101 [ 254.519487][ T6783] ceph: No mds server is up or the cluster is laggy [ 254.659355][ T4358] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 254.840439][ T4358] usb 1-1: Invalid ep0 maxpacket: 32 [ 254.990239][ T4358] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 255.169916][ T4358] usb 1-1: Invalid ep0 maxpacket: 32 [ 255.173928][ T4358] usb usb1-port1: attempt power cycle [ 255.422286][ T4915] libceph: mon0 (1)[c::]:6789 connect error [ 255.579386][ T4358] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 255.604998][ T6802] netlink: 'syz.4.585': attribute type 1 has an invalid length. [ 255.607380][ T6802] netlink: 'syz.4.585': attribute type 2 has an invalid length. [ 255.611574][ T4358] usb 1-1: Invalid ep0 maxpacket: 32 [ 256.524206][ T4358] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 256.875955][ T6818] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 256.878607][ T6818] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 257.056235][ T4358] usb 1-1: device not accepting address 37, error -71 [ 257.059868][ T4358] usb usb1-port1: unable to enumerate USB device [ 260.130393][ T6852] loop4: detected capacity change from 0 to 764 [ 260.183251][ T6852] rock: directory entry would overflow storage [ 260.185201][ T6852] rock: sig=0x5245, size=8, remaining=5 [ 261.970052][ T6873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.972599][ T6873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.567001][ T6877] loop2: detected capacity change from 0 to 764 [ 263.193102][ T6877] rock: directory entry would overflow storage [ 263.195097][ T6877] rock: sig=0x5245, size=8, remaining=5 [ 264.341945][ T6885] syz.1.606 (6885): drop_caches: 2 [ 264.360364][ T6885] syz.1.606 (6885): drop_caches: 2 [ 264.712340][ T6893] loop4: detected capacity change from 0 to 4096 [ 264.952765][ T6897] syz.2.607 (6897): drop_caches: 2 [ 264.957974][ T6897] syz.2.607 (6897): drop_caches: 2 [ 265.483900][ T6898] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 265.768083][ T4915] libceph: connect (1)[c::]:6789 error -101 [ 265.770090][ T4915] libceph: mon0 (1)[c::]:6789 connect error [ 265.780961][ T4915] libceph: connect (1)[c::]:6789 error -101 [ 265.782763][ T4915] libceph: mon0 (1)[c::]:6789 connect error [ 265.945163][ T6915] netlink: 'syz.3.616': attribute type 1 has an invalid length. [ 265.977105][ T6915] netlink: 52 bytes leftover after parsing attributes in process `syz.3.616'. [ 266.005553][ T6915] bond1 (unregistering): Released all slaves [ 266.039770][ T4915] libceph: connect (1)[c::]:6789 error -101 [ 266.041623][ T4915] libceph: mon0 (1)[c::]:6789 connect error [ 267.009505][ T6923] loop3: detected capacity change from 0 to 764 [ 267.096093][ T4916] libceph: connect (1)[c::]:6789 error -101 [ 267.176832][ T4916] libceph: mon0 (1)[c::]:6789 connect error [ 267.629132][ T6908] ceph: No mds server is up or the cluster is laggy [ 267.649000][ T6923] rock: directory entry would overflow storage [ 267.650966][ T6923] rock: sig=0x5245, size=8, remaining=5 [ 269.543769][ T6943] loop2: detected capacity change from 0 to 1764 [ 269.629053][ T6942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.637959][ T6942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.783563][ C1] ================================================================== [ 269.786015][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x404/0x45c [ 269.788080][ C1] Read of size 2 at addr ffff0000f37f982a by task ksoftirqd/1/21 [ 269.790232][ C1] [ 269.790868][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.1.147-syzkaller #0 [ 269.792995][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.795762][ C1] Call trace: [ 269.796627][ C1] dump_backtrace+0x1c8/0x1f4 [ 269.797961][ C1] show_stack+0x2c/0x3c [ 269.799113][ C1] __dump_stack+0x30/0x40 [ 269.800355][ C1] dump_stack_lvl+0xf8/0x160 [ 269.801574][ C1] print_address_description+0x88/0x200 [ 269.803078][ C1] print_report+0x50/0x68 [ 269.804314][ C1] kasan_report+0xa8/0x100 [ 269.805516][ C1] __asan_report_load2_noabort+0x2c/0x38 [ 269.807031][ C1] rose_timer_expiry+0x404/0x45c [ 269.808358][ C1] call_timer_fn+0x1b8/0x964 [ 269.809587][ C1] __run_timers+0x460/0x6bc [ 269.810894][ C1] run_timer_softirq+0x7c/0x114 [ 269.812222][ C1] handle_softirqs+0x318/0xc6c [ 269.813496][ C1] run_ksoftirqd+0x7c/0x2a0 [ 269.814764][ C1] smpboot_thread_fn+0x4b0/0x964 [ 269.816107][ C1] kthread+0x250/0x2d8 [ 269.817256][ C1] ret_from_fork+0x10/0x20 [ 269.818604][ C1] [ 269.819197][ C1] Allocated by task 6774: [ 269.820448][ C1] kasan_set_track+0x4c/0x80 [ 269.821763][ C1] kasan_save_alloc_info+0x28/0x34 [ 269.823208][ C1] __kasan_kmalloc+0xa0/0xb8 [ 269.824466][ C1] __kmalloc_node_track_caller+0xe0/0x16c [ 269.826032][ C1] __alloc_skb+0x264/0x718 [ 269.827287][ C1] __netdev_alloc_skb+0xb8/0x3c4 [ 269.828608][ C1] __ieee80211_beacon_get+0x71c/0x19cc [ 269.830071][ C1] ieee80211_beacon_get_tim+0x68/0x444 [ 269.831607][ C1] mac80211_hwsim_beacon_tx+0x1e8/0x914 [ 269.833131][ C1] __iterate_interfaces+0x204/0x484 [ 269.834543][ C1] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 269.836496][ C1] mac80211_hwsim_beacon+0xc8/0x1b8 [ 269.837916][ C1] __hrtimer_run_queues+0x44c/0xc64 [ 269.839299][ C1] hrtimer_run_softirq+0x160/0x400 [ 269.840686][ C1] handle_softirqs+0x318/0xc6c [ 269.841968][ C1] __do_softirq+0x14/0x20 [ 269.843164][ C1] [ 269.843792][ C1] Freed by task 6774: [ 269.844878][ C1] kasan_set_track+0x4c/0x80 [ 269.846190][ C1] kasan_save_free_info+0x3c/0x60 [ 269.847567][ C1] ____kasan_slab_free+0x148/0x1b0 [ 269.848922][ C1] __kasan_slab_free+0x18/0x28 [ 269.850188][ C1] slab_free_freelist_hook+0x16c/0x1ec [ 269.851737][ C1] __kmem_cache_free+0xc0/0x224 [ 269.853084][ C1] kfree+0xd0/0x1ac [ 269.854077][ C1] skb_release_data+0x43c/0x648 [ 269.855409][ C1] consume_skb+0xa0/0x104 [ 269.856631][ C1] mac80211_hwsim_tx_frame+0x1c8/0x1f4 [ 269.858137][ C1] mac80211_hwsim_beacon_tx+0x4c8/0x914 [ 269.859743][ C1] __iterate_interfaces+0x204/0x484 [ 269.861146][ C1] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 269.863071][ C1] mac80211_hwsim_beacon+0xc8/0x1b8 [ 269.864491][ C1] __hrtimer_run_queues+0x44c/0xc64 [ 269.865892][ C1] hrtimer_run_softirq+0x160/0x400 [ 269.867220][ C1] handle_softirqs+0x318/0xc6c [ 269.868531][ C1] __do_softirq+0x14/0x20 [ 269.869674][ C1] [ 269.870292][ C1] The buggy address belongs to the object at ffff0000f37f9800 [ 269.870292][ C1] which belongs to the cache kmalloc-512 of size 512 [ 269.874084][ C1] The buggy address is located 42 bytes inside of [ 269.874084][ C1] 512-byte region [ffff0000f37f9800, ffff0000f37f9a00) [ 269.877617][ C1] [ 269.878217][ C1] The buggy address belongs to the physical page: [ 269.879921][ C1] page:0000000078d859a2 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1337f8 [ 269.882818][ C1] head:0000000078d859a2 order:2 compound_mapcount:0 compound_pincount:0 [ 269.885122][ C1] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 269.887330][ C1] raw: 05ffc00000010200 fffffc0003c89e00 dead000000000002 ffff0000c0002600 [ 269.889741][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 269.892111][ C1] page dumped because: kasan: bad access detected [ 269.894055][ C1] [ 269.894738][ C1] Memory state around the buggy address: [ 269.896336][ C1] ffff0000f37f9700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 269.898513][ C1] ffff0000f37f9780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 269.900704][ C1] >ffff0000f37f9800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 269.902915][ C1] ^ [ 269.904448][ C1] ffff0000f37f9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 269.906638][ C1] ffff0000f37f9900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 269.908808][ C1] ================================================================== [ 269.911048][ C1] Disabling lock debugging due to kernel taint [ 269.953024][ T6947] binder: BINDER_SET_CONTEXT_MGR already set [ 269.958168][ T6947] binder: 6946:6947 ioctl 4018620d 20000040 returned -16 [ 269.965734][ T6947] binder: 6946:6947 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 269.969674][ T6947] binder: 6947 RLIMIT_NICE not set [ 269.971228][ T6947] binder: 6946:6947 ioctl c0306201 20000280 returned -11 [ 270.020912][ T6941] iso9660: Corrupted directory entry in block 2 of inode 1920