last executing test programs: 5.727235079s ago: executing program 4 (id=152): r0 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000000)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c71756965742c756e695f786c6174653d152c696f636861727365743d63703835352c35302c73686f72746e616d653d6d697865642c6e6f6e756d7461666c7573682c8d686f72746e616d653d77696e39352c757466383d302c696f63681661727365743d63703835352c001100"/163], 0x1, 0x369, &(0x7f0000000c80)="$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") openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff2}, {0x480bd72125a0c189, 0x5}, {0x10, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x880) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount(&(0x7f0000000180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='pvfs2\x00', 0x11, 0x0) 5.267900656s ago: executing program 1 (id=155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x703, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) 5.195221028s ago: executing program 0 (id=156): syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0xaa01, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 5.064532259s ago: executing program 1 (id=157): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='sys_enter\x00', r0, 0x0, 0xfffffffffffffffa}, 0xf) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018001b6c2e04000000000000000000000a0000000061005f616158300000"], 0x0, 0x22}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000038000107fcffffff0000000006000000cfed860235d618f5811a5da23e45dc378203f42eeb19409f747a1ebe0a05f28719da075f8d1af69b683d7b534a7f9daedcad6bcb94343d36d3373960e5a5df732ef9039d1d1444d1eacbbd9b5115eda762adf7ae3fbc15c9d54e280d7e2e"], 0x14}}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r4, 0x0, &(0x7f0000000200)) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="28144000", @ANYRESOCT=r7, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000010000009500"/24], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x9, &(0x7f0000000000)={0xfffffffe}, 0x8}, 0x94) r9 = epoll_create1(0x80000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001900010000000000ff000000802000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r4, &(0x7f0000000300)={0x1000000a}) 4.988526591s ago: executing program 3 (id=158): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @multicast2}, &(0x7f0000000040)=0xc) sendmsg$nl_xfrm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x81) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002380)={0x48, 0x0, &(0x7f0000001300)=[@register_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001380)='r'}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x50, 0x0, &(0x7f0000000200)=[@register_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x40000) 4.698467295s ago: executing program 4 (id=161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4010) 4.015680906s ago: executing program 4 (id=162): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) unshare(0x24020400) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) 3.939678887s ago: executing program 1 (id=163): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0xfdffffb1, @private0, 0x5}, {0xa, 0x4e23, 0x7, @mcast2, 0x56500}, 0xfffe, {[0x5447, 0x3, 0x7, 0x1, 0x3, 0xffffffff, 0x9, 0xfffffffa]}}, 0x5c) 3.920966667s ago: executing program 3 (id=164): getpid() r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x8000, 0x8) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) r2 = syz_pidfd_open(r1, 0x0) process_mrelease(r2, 0x700000000000000) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xa4, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r8 = landlock_create_ruleset(&(0x7f0000000040)={0xc009, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 3.891237788s ago: executing program 2 (id=165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500c00108005400009160ec9700"], 0xfdef) 3.79570553s ago: executing program 4 (id=166): syz_open_dev$vim2m(0x0, 0x1, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000000b01000000000000000003000008"], 0x14}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0xfffc, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="f7b920", 0x3) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000c, 0x40010, 0xffffffffffffffff, 0x80000000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000a40), 0x0}, 0x20) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f000003e880)={&(0x7f000003e700)=ANY=[@ANYBLOB="600100", @ANYRES16, @ANYRESDEC=r0], 0x160}, 0x1, 0x0, 0x0, 0x4004800}, 0x800) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000200)=0xf0) r6 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000200)=0xf0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000100)) 3.679822962s ago: executing program 1 (id=167): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1d}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@rthdr={{0x28, 0x29, 0x39, {0x21, 0x2, 0x2, 0xf1, 0x0, [@loopback]}}}], 0x28}, 0x440d0) 3.545534194s ago: executing program 1 (id=168): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000c40), 0x2, 0x4a7, &(0x7f0000001140)="$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") mkdir(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x21) syz_emit_ethernet(0x50, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe}]}}}}}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="6a47b21b437941e7f3cddb6db1471a49343f411c20f90b380d5e85d8a1b9839c50609538d2b1cb363c70e6a1fb1fc1a4918f5df2af1e67068243ced91d6dfa51273c7b61b80486cfb97ec3cec8c80831425ad33758fa8795f76ff600a3ba60fa0c3983e83b1096531d0c39701ea6a3597c81c144fbd531f9aa0f2578d9abf7", 0x7f, 0x40, &(0x7f00000002c0)={0xa, 0x4e25, 0xa0000, @rand_addr=' \x01\x00', 0x8}, 0x1c) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0xca, &(0x7f0000000080)="7fdd09ea82a6cf6d06b7f6d102c5682edbf5f2c2dabaf331d046b1bc4cbda504c07de7737cbb6d8c6ceeee9fa4ec5685e06d8abef7eb00e487437ba211ce99e02fc0aac08d8d0f15665b177404e2a1d9568b2a671d9e94fe12f215bae69c77eefd7e794e2bb06c2f4b010e33edc5c0d54b4903155ff2a7f6a4b6a76d612acaca5b85ca18e6c358c53f98f55644904b74061bdfbb6c803a9fe60b2c202b8e8eed28c1ebf846ffdd6232cbc7fcfe1d651a21db36fa3118ae59b6f194ba386ee5883d095a5b4e99575055fa", 0x36, 0x0, &(0x7f0000000180)="34b0e747e039b7a712b0bea4f1b40b1e4c68f7db6adbb9768491c2c8ca3b7a8b6c5fd58da59d21923015aa5c8ba032a93bc7dfe0bbf5"}) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003afe0620e60405000001010203010902240001000010000904140002a024260009050602ff0300000009058202"], 0x0) 3.536746494s ago: executing program 2 (id=169): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000040), 0x4) 3.391827036s ago: executing program 0 (id=170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) 3.207978039s ago: executing program 0 (id=171): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f0000000000000000020000000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.013754252s ago: executing program 0 (id=172): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x400) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 2.750440697s ago: executing program 4 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000400)='ns\x00') 2.559706079s ago: executing program 2 (id=174): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='sys_enter\x00', r0, 0x0, 0xfffffffffffffffa}, 0xf) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018001b6c2e04000000000000000000000a0000000061005f616158300000"], 0x0, 0x22}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000038000107fcffffff0000000006000000cfed860235d618f5811a5da23e45dc378203f42eeb19409f747a1ebe0a05f28719da075f8d1af69b683d7b534a7f9daedcad6bcb94343d36d3373960e5a5df732ef9039d1d1444d1eacbbd9b5115eda762adf7ae3fbc15c9d54e280d7e2e"], 0x14}}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r4, 0x0, &(0x7f0000000200)) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="28144000", @ANYRESOCT=r7, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000010000009500"/24], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x9, &(0x7f0000000000)={0xfffffffe}, 0x8}, 0x94) r9 = epoll_create1(0x80000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001900010000000000ff000000802000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r4, &(0x7f0000000300)={0x1000000a}) 2.476572381s ago: executing program 3 (id=175): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @multicast2}, &(0x7f0000000040)=0xc) sendmsg$nl_xfrm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002380)={0x48, 0x0, &(0x7f0000001300)=[@register_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001380)='r'}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x50, 0x0, &(0x7f0000000200)=[@register_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x40000) 2.381038242s ago: executing program 2 (id=176): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, &(0x7f00000001c0)="3a6dc28ec0", 0x5, 0x14048814, &(0x7f0000000280)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0xe}, 0x7}, 0x1c) 2.203913275s ago: executing program 2 (id=177): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)={0x1c8, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}, @generic="5dd7a330dc7b7690c8d9ecb51d93a6ce9bf7e22ff148b337253c2bbf8531d6d29d648ccceaefeb37ddaef1902679db03c88d99e59b98835d1331d8c64647bafcbafd0e167fa910ae08be3a53f5e9f0dc215d708c645f19318835567c9539f3b5954833e18e3fa9e36fbd26f762a31025e65c222315b1d189eedbdd76a2a46ca20f38e64f4d1456d62e671b2a9a26c5dcb693c1a5b9b26f53bcf3d95067e11609228df5f0c67fd5ddc3cd3bf5514ac370f0a1"]}, 0x1c8}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.778088592s ago: executing program 0 (id=178): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.517597546s ago: executing program 3 (id=179): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004"], 0x50) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 1.471901577s ago: executing program 2 (id=180): syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0xaa01, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 1.442489027s ago: executing program 0 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x0) 1.054560683s ago: executing program 3 (id=182): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x39f2, 0x1000, 0xfffffffd, 0xbfe02000}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf9b3036f9c1c91d7}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_procfs$pagemap(r3, &(0x7f0000000100)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="2656d442aaaabe9689ce9f888100200008004805006400660000052f907864010102ac1414aa89073de000000186020000000c20880b0000000305000800080086dd080088be000000041107460c0100000000000001080022eb0000000629064b000200000000000001010081190800655800000001"], 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x200080, &(0x7f0000000200), 0x4, 0x569, &(0x7f0000000580)="$eJzs3c+PG1cdAPDvzP6wk6bdBHqAqpAAhYCieLNOG1W9NLmAUFUJUXFAHNJl11ktseMQe0t3icT2bwAJBCf4EzggcUDqiQM3jkgcEFI5IAWIQAkCJKMZz26crK068a9m9/ORJvPjzZvve3HG782z4xfAkXUmInYjYjEi3o6IpeJ4Uixxubtk5927e3vt/t3ba0l0Om/9PcnTs2PRkyfzTHHNckR8/SsR304Oxm1t71xfrddrt4r95Xbj5nJre+f8ZmN1o7ZRu1GtXlq5dOHVi69Ux1bX041f3vny5hvf+M2vP/XB73e/9P2sWCeKtN56jFO36gv7cTLzEfHGJILNwFyxXjyQ8mL/DJcnWx4eTxoRH4uIz+b3/1LM5f86AYDDrNP5aXSWevcBgMMue/4/UU7SSkSkadEJqHTH8J6P42m92Wqfu9bcurHeHSs7GQvptc167cKp0h+/m5+8kGT7K3lanp7vVx/ZvxgRpyLiR6Vj+X5lrVlfn02XBwCOvGfyz8CK9j8i/lVK00plqKx9PtUDAJ4a5VkXAACYut72vzTDcgAA0+P5HwCOniHa/+LD/t2JlwUAmA7P/wBw9Gj/AeDoedz233cEAeCp9rU338yWzv3i96/X39neut585/x6rXW90thaq6w1b92sbDSbG/lv9jQeynysZ7voE9SbzZsrL8fWu8vtWqu93Nreudpobt1oX81/1/tqbWGqtQMA+jl1+v0/JBGx+9qxfImeuRy01XC4pbMuADAzc6Nk1kGAp9qTzfb1n7GXA5i+oZrwvJPwu4mXBZiNvj/mXe67+bCfPEYQ3zOGj5Sznxx+/P/gHM/A08z4PxxdTzb+//rYywFM35ON/wOHQaeTPDrn/+J+EgBwKI3wFb7OD8bVCQFm6sMm8x7L5/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwyJyIiO9EklbyucDT7M+0Uol4NiJOxkJybbNeuxARz8XpiFgoZfsrsy40ADCi9K9JMf/X2aWXTjyaupj8u5SvI+J7P3vrx++uttu3VrLj/9g/XtqbPqz6IN8I8woCAMPplIY8MW+/q8W650H+3t3ba3vLpArZz50r8b9iKuK1+3dv50s3ZT6ygxHlvC9x/J9JzBd5yhHxQkTMjSH+7nsR8Yl+9U/ysZGTxcynvfGjiP3sVOOnD8VP87TuOut8fXwMZYGj5v0rEXG53/2Xxpl83f/+L+fvUKO7c6V7sb33vvs98eeLSHN94mf3/JlhY7z8268eONhZ6qa9F/HCfL/4yX78ZED8l4aM/6cXP/3D1wekdX4ecTb6x++Ntdxu3Fxube+c32ysbtQ2ylGtXlq5dOHVi69Ul/Mx6uW9keqD/vbauecGlS2r//EB8ct967+4n/fzQ9b/F/99+1ufebBbejT+Fz/X//V/vm/8rqxN/MLDYTqD4q8e/9XA6buz+OsD6v9hr/+5YSofER/8ZWd9yFMBgClobe9cX63Xa7dG2sieQsdxnQMbWRGHO3mvuzha0D/HJGrxhBsLk/pbnfjG/H5fcbxX/mZ2xSlXJx17LUbauDetWLN7TwKm48FNP+uSAAAAAAAAAAAAAAAAg0zjvy7Nuo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcXv8PAAD//4vC0Ck=") 100.473888ms ago: executing program 1 (id=183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x2c, r1, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 639.72µs ago: executing program 4 (id=184): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r1) 0s ago: executing program 3 (id=185): getpid() r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x8000, 0x8) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) r2 = syz_pidfd_open(r1, 0x0) process_mrelease(r2, 0x700000000000000) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xa4, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r8 = landlock_create_ruleset(&(0x7f0000000040)={0xc009, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. [ 50.594213][ T4170] cgroup: Unknown subsys name 'net' [ 50.729705][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.983901][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.660590][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 53.769069][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 53.813044][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.820514][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.829416][ T4182] device bridge_slave_0 entered promiscuous mode [ 53.842983][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.850133][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.858248][ T4182] device bridge_slave_1 entered promiscuous mode [ 53.900129][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 53.932035][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.950010][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 53.962490][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.021835][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 54.033471][ T4182] team0: Port device team_slave_0 added [ 54.055789][ T4182] team0: Port device team_slave_1 added [ 54.068164][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.075635][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.083603][ T4186] device bridge_slave_0 entered promiscuous mode [ 54.116895][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.124035][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.131721][ T4186] device bridge_slave_1 entered promiscuous mode [ 54.156129][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.163279][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.171287][ T4193] device bridge_slave_0 entered promiscuous mode [ 54.195304][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.202791][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.230134][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.246507][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.254085][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.261851][ T4193] device bridge_slave_1 entered promiscuous mode [ 54.282762][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.290383][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.320435][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.345630][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.357878][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.367817][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.376201][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.384249][ T4181] device bridge_slave_0 entered promiscuous mode [ 54.415922][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.422995][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.431012][ T4181] device bridge_slave_1 entered promiscuous mode [ 54.464669][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.493661][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.505189][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.512463][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.520799][ T4190] device bridge_slave_0 entered promiscuous mode [ 54.530035][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.541647][ T4186] team0: Port device team_slave_0 added [ 54.549581][ T4186] team0: Port device team_slave_1 added [ 54.564060][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.573453][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.580993][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.589503][ T4190] device bridge_slave_1 entered promiscuous mode [ 54.610208][ T4182] device hsr_slave_0 entered promiscuous mode [ 54.618605][ T4182] device hsr_slave_1 entered promiscuous mode [ 54.675158][ T4181] team0: Port device team_slave_0 added [ 54.696106][ T4193] team0: Port device team_slave_0 added [ 54.705823][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.718660][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.730765][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.767551][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.781721][ T4181] team0: Port device team_slave_1 added [ 54.800118][ T4193] team0: Port device team_slave_1 added [ 54.814566][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.825203][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.835504][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.866533][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.915666][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.923692][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.954978][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.978918][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.990332][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.021556][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.038101][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.045930][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.072604][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.085739][ T4190] team0: Port device team_slave_0 added [ 55.095546][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.102508][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.128885][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.147445][ T4190] team0: Port device team_slave_1 added [ 55.207982][ T4186] device hsr_slave_0 entered promiscuous mode [ 55.215192][ T4186] device hsr_slave_1 entered promiscuous mode [ 55.222947][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.233451][ T4186] Cannot create hsr debugfs directory [ 55.265266][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.276757][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.316038][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.330534][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.339920][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.372559][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.391417][ T4193] device hsr_slave_0 entered promiscuous mode [ 55.401728][ T4193] device hsr_slave_1 entered promiscuous mode [ 55.409656][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.419886][ T4193] Cannot create hsr debugfs directory [ 55.436526][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 55.444094][ T1324] Bluetooth: hci0: command 0x0409 tx timeout [ 55.444932][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 55.451824][ T1324] Bluetooth: hci3: command 0x0409 tx timeout [ 55.463480][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 55.472535][ T4181] device hsr_slave_0 entered promiscuous mode [ 55.482393][ T4181] device hsr_slave_1 entered promiscuous mode [ 55.490175][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.500340][ T4181] Cannot create hsr debugfs directory [ 55.608641][ T4190] device hsr_slave_0 entered promiscuous mode [ 55.615374][ T4190] device hsr_slave_1 entered promiscuous mode [ 55.622254][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.634145][ T4190] Cannot create hsr debugfs directory [ 55.845360][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.864688][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.875588][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.885554][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.928116][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.945306][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.961828][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.975563][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.016015][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.031960][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.058773][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.068893][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.147094][ T4181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.174751][ T4181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.199459][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.210109][ T4181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.220927][ T4181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.264901][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.276134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.293125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.310736][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.320724][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.333377][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.344696][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.356741][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.366995][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.376473][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.383669][ T4225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.396650][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.407927][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.438379][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.458300][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.469449][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.479713][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.487103][ T4225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.497032][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.506208][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.515103][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.532720][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.561488][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.571714][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.581248][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.588535][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.599729][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.609977][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.618968][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.627805][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.634923][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.642591][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.652121][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.661492][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.670713][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.679466][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.688548][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.697881][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.706914][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.729340][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.739698][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.749994][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.775649][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.784475][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.793616][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.803429][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.812216][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.821539][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.834731][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.844602][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.868932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.879257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.909798][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.926193][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.944767][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.965551][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.975612][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.982716][ T4225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.990965][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.000604][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.009809][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.018614][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.027595][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.037870][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.048188][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.080504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.091512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.114894][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.122090][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.137810][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.148526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.165262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.184228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.211648][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.219375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.229879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.238833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.255757][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.276841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.286368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.294555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.303176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.312108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.321738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.330599][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.337723][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.345885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.355113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.366224][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.373338][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.381396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.391310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.399590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.411292][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.422027][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.434738][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.443416][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.452728][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.462450][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.471602][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.478990][ T4267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.497687][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.514960][ T4255] Bluetooth: hci2: command 0x041b tx timeout [ 57.521069][ T4255] Bluetooth: hci3: command 0x041b tx timeout [ 57.527992][ T4255] Bluetooth: hci4: command 0x041b tx timeout [ 57.533917][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.534692][ T4255] Bluetooth: hci0: command 0x041b tx timeout [ 57.541925][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.555323][ T4255] Bluetooth: hci1: command 0x041b tx timeout [ 57.563684][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.571959][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.581646][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.590928][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.600696][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.609979][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.618687][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.627237][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.634342][ T4267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.641906][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.650741][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.659411][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.669780][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.680113][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.688651][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.702248][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.727136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.741330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.751227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.766104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.781637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.791449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.818311][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.830072][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.848694][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.861203][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.874062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.883222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.898069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.907250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.921287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.931380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.940561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.950670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.959573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.968923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.978627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.987607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.996826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.040741][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.063145][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.084750][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.092699][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.116184][ T4182] device veth0_vlan entered promiscuous mode [ 58.138952][ T4193] device veth0_vlan entered promiscuous mode [ 58.152012][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.163567][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.172991][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.182421][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.200032][ T4182] device veth1_vlan entered promiscuous mode [ 58.211069][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.231651][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.241867][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.250066][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.266647][ T4193] device veth1_vlan entered promiscuous mode [ 58.295959][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.309254][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.322032][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.330749][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.338959][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.356810][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.367153][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.381189][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.412055][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.422003][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.437953][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.450767][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.460386][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.468571][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.479172][ T4182] device veth0_macvtap entered promiscuous mode [ 58.491257][ T4193] device veth0_macvtap entered promiscuous mode [ 58.507321][ T4182] device veth1_macvtap entered promiscuous mode [ 58.524739][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.547089][ T4193] device veth1_macvtap entered promiscuous mode [ 58.580604][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.591318][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.600355][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.609212][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.619143][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.629968][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.639488][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.647511][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.672859][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.688393][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.702789][ T4186] device veth0_vlan entered promiscuous mode [ 58.717598][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.739672][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.756543][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.768849][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.777863][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.787610][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.797585][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.808356][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.817622][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.837293][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.846861][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.856463][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.865752][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.881321][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.892569][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.905128][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.913266][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.923105][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.933356][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.942906][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.972946][ T4181] device veth0_vlan entered promiscuous mode [ 58.992239][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.001925][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.011422][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.019720][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.031894][ T4186] device veth1_vlan entered promiscuous mode [ 59.044157][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.055606][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.064619][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.073428][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.088389][ T4181] device veth1_vlan entered promiscuous mode [ 59.128849][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.140944][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.151509][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.237524][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.249855][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.258904][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.267683][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.278391][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.288370][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.296928][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.305753][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.315613][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.338047][ T4190] device veth0_vlan entered promiscuous mode [ 59.350651][ T4181] device veth0_macvtap entered promiscuous mode [ 59.362532][ T4186] device veth0_macvtap entered promiscuous mode [ 59.390267][ T4181] device veth1_macvtap entered promiscuous mode [ 59.399637][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.416788][ T4186] device veth1_macvtap entered promiscuous mode [ 59.423314][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.426021][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.435705][ T4190] device veth1_vlan entered promiscuous mode [ 59.445421][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.472512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.481383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.489645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.498155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.507144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.515888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.524803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.550207][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.561398][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.572303][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.585791][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.596272][ T4241] Bluetooth: hci1: command 0x040f tx timeout [ 59.602893][ T4241] Bluetooth: hci0: command 0x040f tx timeout [ 59.605775][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.609362][ T4241] Bluetooth: hci4: command 0x040f tx timeout [ 59.626024][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.636870][ T4241] Bluetooth: hci3: command 0x040f tx timeout [ 59.638653][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.643614][ T4241] Bluetooth: hci2: command 0x040f tx timeout [ 59.653824][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.653845][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.653856][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.653866][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.660159][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.719217][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.721573][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.731736][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.735352][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.748244][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.762834][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.771839][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.781261][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.792068][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.802664][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.813060][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.824205][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.835888][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.846213][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.855662][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.865339][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.875650][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.895986][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.905362][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.915240][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.927547][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.937994][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.949634][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.959854][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.970890][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.983578][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.002244][ T4181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.011494][ T4181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.020531][ T4181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.029298][ T4181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.047574][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.056986][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.066647][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.076994][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.092183][ T4190] device veth0_macvtap entered promiscuous mode [ 60.106150][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.126927][ T4190] device veth1_macvtap entered promiscuous mode [ 60.147916][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.162875][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.194302][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.202763][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.263439][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.285056][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.301054][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.311942][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.329835][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.342107][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.357586][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.370373][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.389493][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.425938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.445601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.464943][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.494609][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.504874][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.523762][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.534603][ T4305] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.541038][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.561706][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.581195][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.592340][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.609511][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.626997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.642359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.675904][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.678526][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.690757][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.703656][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.714574][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.720242][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.740580][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.754946][ T4241] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.758091][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.786142][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.800185][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.817130][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.830521][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.841496][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.893846][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.913454][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.924742][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.978265][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.000084][ T4241] usb 1-1: Using ep0 maxpacket: 16 [ 61.014024][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.024146][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.057376][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.066533][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.087233][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.137951][ T4241] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 61.158262][ T4241] usb 1-1: config 0 has no interface number 0 [ 61.168420][ T4241] usb 1-1: config 0 interface 251 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 16 [ 61.184158][ T4241] usb 1-1: config 0 interface 251 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 64 [ 61.205142][ T4241] usb 1-1: config 0 interface 251 has no altsetting 0 [ 61.369765][ T4241] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 61.384636][ T4241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.394493][ T4241] usb 1-1: Product: syz [ 61.398906][ T4241] usb 1-1: Manufacturer: syz [ 61.404812][ T4241] usb 1-1: SerialNumber: syz [ 61.414353][ T1107] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.422374][ T4241] usb 1-1: config 0 descriptor?? [ 61.445894][ T4303] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.453506][ T4303] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.516620][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 61.592302][ T4327] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 61.630789][ T4327] kvm: pic: non byte read [ 61.674880][ T1324] Bluetooth: hci3: command 0x0419 tx timeout [ 61.681883][ T1324] Bluetooth: hci4: command 0x0419 tx timeout [ 61.684600][ T4248] Bluetooth: hci1: command 0x0419 tx timeout [ 61.688546][ T1324] Bluetooth: hci0: command 0x0419 tx timeout [ 61.710571][ T4303] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.729013][ T4303] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.754221][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 61.834584][ T1107] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.853819][ T1107] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 61.869099][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.891712][ T1107] usb 3-1: config 0 descriptor?? [ 61.944026][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.963817][ T1107] pwc: Askey VC010 type 2 USB webcam detected. [ 61.972596][ T7] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 61.982879][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.002306][ T7] usb 5-1: config 0 descriptor?? [ 62.046205][ T7] pwc: Askey VC010 type 2 USB webcam detected. [ 62.174052][ T1107] pwc: send_video_command error -71 [ 62.180616][ T1107] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 62.189402][ T4235] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.204280][ T4241] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 62.204312][ T1107] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 62.223878][ T4241] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 62.248687][ T4241] asix: probe of 1-1:0.251 failed with error -71 [ 62.260635][ T1107] usb 3-1: USB disconnect, device number 2 [ 62.267017][ T7] pwc: send_video_command error -71 [ 62.272300][ T7] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 62.281828][ T4241] usb 1-1: USB disconnect, device number 2 [ 62.284310][ T7] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 62.318404][ T7] usb 5-1: USB disconnect, device number 2 [ 62.453876][ T4235] usb 4-1: Using ep0 maxpacket: 32 [ 62.624598][ T4235] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 62.640568][ T4235] usb 4-1: config 0 has no interface number 0 [ 62.648214][ T4235] usb 4-1: config 0 interface 184 has no altsetting 0 [ 62.773960][ T1107] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 62.893822][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 63.623938][ T4235] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 63.633015][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.648702][ T4235] usb 4-1: config 0 descriptor?? [ 63.660667][ T4344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 63.675950][ T4235] usb 4-1: can't set config #0, error -71 [ 63.692977][ T4235] usb 4-1: USB disconnect, device number 2 [ 63.814167][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 64.224312][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.238258][ T4372] loop3: detected capacity change from 0 to 256 [ 64.248099][ T4368] loop1: detected capacity change from 0 to 8 [ 64.257566][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.268683][ T13] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 64.277842][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.287111][ T13] usb 1-1: config 0 descriptor?? [ 64.319632][ T4368] SQUASHFS error: zstd decompression error: 2 [ 64.325967][ T4368] SQUASHFS error: zstd decompression failed, data probably corrupt [ 64.334200][ T4368] SQUASHFS error: Failed to read block 0x62b: -5 [ 64.340543][ T4368] SQUASHFS error: Unable to read metadata cache entry [629] [ 64.347944][ T4368] SQUASHFS error: Unable to read directory block [629:ff26] [ 64.355990][ T4372] ======================================================= [ 64.355990][ T4372] WARNING: The mand mount option has been deprecated and [ 64.355990][ T4372] and is ignored by this kernel. Remove the mand [ 64.355990][ T4372] option from the mount to silence this warning. [ 64.355990][ T4372] ======================================================= [ 64.403673][ T4372] FAT-fs (loop3): Unrecognized mount option "uni_xlate=" or missing value [ 64.474121][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 64.483198][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 64.492211][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 64.501259][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.510250][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.519157][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.529346][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.538867][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.548075][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.557066][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.681144][ T4377] netlink: 'syz.1.29': attribute type 10 has an invalid length. [ 64.762194][ T4377] team0: Port device dummy0 added [ 64.775682][ T4379] netlink: 'syz.1.29': attribute type 10 has an invalid length. [ 64.823684][ T4379] team0: Port device dummy0 removed [ 64.833589][ T4379] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 64.853308][ T13] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 64.860942][ T13] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 64.884057][ T13] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 64.901779][ T13] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 64.912794][ T4379] syz.1.29 (4379) used greatest stack depth: 20640 bytes left [ 64.925674][ T13] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 64.945128][ T13] cm6533_jd 0003:0D8C:0022.0001: No inputs registered, leaving [ 64.974198][ T13] cm6533_jd 0003:0D8C:0022.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 65.069188][ T4378] orangefs_mount: mount request failed with -4 [ 65.155122][ T13] usb 1-1: USB disconnect, device number 3 [ 66.138569][ T4409] loop0: detected capacity change from 0 to 512 [ 66.263684][ T4409] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.39: bad orphan inode 13 [ 66.275244][ T4409] ext4_test_bit(bit=12, block=4) = 1 [ 66.280601][ T4409] is_bad_inode(inode)=0 [ 66.284864][ T4409] NEXT_ORPHAN(inode)=0 [ 66.288963][ T4409] max_ino=32 [ 66.292261][ T4409] i_nlink=1 [ 66.295495][ T4409] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.309084][ T4409] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.39: Unrecognised inode hash code 20 [ 66.321032][ T4409] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.39: Corrupt directory, running e2fsck is recommended [ 66.334417][ T4409] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.39: Unrecognised inode hash code 20 [ 66.345774][ T4409] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.39: Corrupt directory, running e2fsck is recommended [ 66.358567][ T4409] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.39: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 66.475303][ T4413] loop2: detected capacity change from 0 to 256 [ 66.565635][ T4413] FAT-fs (loop2): Unrecognized mount option "uni_xlate=" or missing value [ 66.836948][ T4273] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 66.879849][ T4428] device wg1 entered promiscuous mode [ 66.993843][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 67.126573][ T4435] syz.4.49 uses obsolete (PF_INET,SOCK_PACKET) [ 67.168509][ T4430] orangefs_mount: mount request failed with -4 [ 67.204459][ T4273] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 67.226223][ T4273] usb 1-1: config 0 has no interface number 0 [ 67.233694][ T4273] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 67.259194][ T4273] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 67.373988][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.390674][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.402559][ T13] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 67.412995][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.425434][ T4273] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 67.459997][ T13] usb 4-1: config 0 descriptor?? [ 67.471360][ T4273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.486779][ T4273] usb 1-1: Product: syz [ 67.491184][ T4273] usb 1-1: Manufacturer: syz [ 67.496670][ T4273] usb 1-1: SerialNumber: syz [ 67.513276][ T4273] usb 1-1: config 0 descriptor?? [ 67.534180][ T4414] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 67.555118][ T4273] ums-sddr09 1-1:0.20: USB Mass Storage device detected [ 67.708697][ T4273] ums-sddr09: probe of 1-1:0.20 failed with error -22 [ 67.796640][ T4450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.840704][ T4449] netlink: 'syz.2.53': attribute type 13 has an invalid length. [ 67.859204][ T4449] netlink: 'syz.2.53': attribute type 17 has an invalid length. [ 67.889089][ T4447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.960292][ T4447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.966214][ T13] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 67.994517][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 68.002471][ T13] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 68.028604][ T13] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 68.039362][ T4449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.041950][ T4445] syz.2.53 (4445) used greatest stack depth: 20592 bytes left [ 68.073544][ T13] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 68.091581][ T13] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 68.100522][ T13] cm6533_jd 0003:0D8C:0022.0002: No inputs registered, leaving [ 68.137136][ T13] cm6533_jd 0003:0D8C:0022.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 68.335286][ T4241] usb 4-1: USB disconnect, device number 3 [ 68.944915][ T4241] usb 1-1: USB disconnect, device number 4 [ 69.154214][ T4479] netlink: 'syz.4.60': attribute type 21 has an invalid length. [ 69.555204][ T4479] netlink: 156 bytes leftover after parsing attributes in process `syz.4.60'. [ 70.368699][ T4489] overlayfs: unrecognized mount option "/" or missing value [ 70.415317][ T4489] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 70.429333][ T4495] Zero length message leads to an empty skb [ 70.593025][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 70.620796][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 70.805888][ T4481] loop4: detected capacity change from 0 to 40427 [ 70.822727][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 70.852073][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 70.901720][ T4501] loop0: detected capacity change from 0 to 256 [ 70.909011][ T4481] F2FS-fs (loop4): invalid crc value [ 70.915464][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 70.934470][ T4501] FAT-fs (loop0): Unrecognized mount option "uni_xlate=" or missing value [ 70.947656][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 70.958377][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 70.984639][ T4481] F2FS-fs (loop4): Found nat_bits in checkpoint [ 71.011844][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 71.073987][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 71.216426][ T4506] loop3: detected capacity change from 0 to 40427 [ 71.281071][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.290241][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.303495][ T4481] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 71.317469][ T4506] F2FS-fs (loop3): invalid crc value [ 71.327494][ T4481] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 71.338820][ T4506] F2FS-fs (loop3): Found nat_bits in checkpoint [ 71.376198][ T4506] F2FS-fs (loop3): Start checkpoint disabled! [ 71.403628][ T4506] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 73.816673][ T4190] attempt to access beyond end of device [ 73.816673][ T4190] loop4: rw=2049, want=45104, limit=40427 [ 74.179614][ T1157] attempt to access beyond end of device [ 74.179614][ T1157] loop3: rw=2049, want=40976, limit=40427 [ 74.481226][ T4526] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 74.579507][ T4529] loop0: detected capacity change from 0 to 512 [ 74.817296][ T4529] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.70: bad orphan inode 13 [ 74.828510][ T4529] ext4_test_bit(bit=12, block=4) = 1 [ 74.833957][ T4529] is_bad_inode(inode)=0 [ 74.838155][ T4529] NEXT_ORPHAN(inode)=0 [ 74.842220][ T4529] max_ino=32 [ 74.845500][ T4529] i_nlink=1 [ 74.848679][ T4529] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.862270][ T4529] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.70: Unrecognised inode hash code 20 [ 74.873881][ T4529] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.70: Corrupt directory, running e2fsck is recommended [ 74.887076][ T4529] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.70: Unrecognised inode hash code 20 [ 74.898533][ T4529] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.70: Corrupt directory, running e2fsck is recommended [ 74.911669][ T4529] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.70: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 75.358757][ T4539] __nla_validate_parse: 45 callbacks suppressed [ 75.358775][ T4539] netlink: 14 bytes leftover after parsing attributes in process `syz.1.74'. [ 75.504476][ T4539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.561907][ T4539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.682165][ T4539] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 75.701368][ T4552] xt_recent: Unsupported userspace flags (00000048) [ 75.766983][ T4539] bond0 (unregistering): Released all slaves [ 76.110306][ T4558] loop3: detected capacity change from 0 to 40427 [ 76.185245][ T4558] F2FS-fs (loop3): invalid crc value [ 76.206004][ T4558] F2FS-fs (loop3): Found nat_bits in checkpoint [ 76.241971][ T4558] F2FS-fs (loop3): Start checkpoint disabled! [ 76.294745][ T4558] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 76.318515][ T4562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 76.396349][ T21] cfg80211: failed to load regulatory.db [ 76.736421][ T4566] loop1: detected capacity change from 0 to 256 [ 76.925729][ T4566] FAT-fs (loop1): Unrecognized mount option "uni_xlate=" or missing value [ 77.069979][ T4567] attempt to access beyond end of device [ 77.069979][ T4567] loop3: rw=2049, want=40976, limit=40427 [ 77.304487][ T4566] orangefs_mount: mount request failed with -4 [ 77.606651][ T4578] loop4: detected capacity change from 0 to 512 [ 79.143730][ C0] sched: RT throttling activated [ 79.345568][ T4578] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.83: bad orphan inode 13 [ 79.356597][ T4578] ext4_test_bit(bit=12, block=4) = 1 [ 79.361928][ T4578] is_bad_inode(inode)=0 [ 79.367253][ T4578] NEXT_ORPHAN(inode)=0 [ 79.371339][ T4578] max_ino=32 [ 79.374653][ T4578] i_nlink=1 [ 79.377816][ T4578] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.396206][ T4575] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.83: Unrecognised inode hash code 20 [ 79.407612][ T4575] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.83: Corrupt directory, running e2fsck is recommended [ 79.420748][ T4575] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.83: Unrecognised inode hash code 20 [ 79.432804][ T4575] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.83: Corrupt directory, running e2fsck is recommended [ 79.445874][ T4575] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.83: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 79.646637][ T4600] loop2: detected capacity change from 0 to 40427 [ 79.689426][ T4600] F2FS-fs (loop2): invalid crc value [ 79.804061][ T4172] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 79.967304][ T4600] F2FS-fs (loop2): Found nat_bits in checkpoint [ 80.023669][ T4600] F2FS-fs (loop2): Start checkpoint disabled! [ 80.104046][ T4600] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 80.572336][ T4614] loop0: detected capacity change from 0 to 256 [ 80.579110][ T4172] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 80.586921][ T4172] usb 5-1: can't read configurations, error -71 [ 80.635084][ T4614] FAT-fs (loop0): Unrecognized mount option "uni_xlate=" or missing value [ 80.825369][ T4581] attempt to access beyond end of device [ 80.825369][ T4581] loop2: rw=2049, want=40976, limit=40427 [ 81.355209][ T4621] loop3: detected capacity change from 0 to 512 [ 81.403070][ T4614] orangefs_mount: mount request failed with -4 [ 81.546536][ T4628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.100'. [ 81.555964][ T4621] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.556104][ T4621] ext4 filesystem being mounted at /19/control supports timestamps until 2038-01-19 (0x7fffffff) [ 81.899657][ T4632] device vlan2 entered promiscuous mode [ 81.933004][ T4632] device bridge0 entered promiscuous mode [ 83.023301][ T4653] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.198782][ T4656] loop3: detected capacity change from 0 to 512 [ 83.213546][ T4662] loop1: detected capacity change from 0 to 256 [ 83.278463][ T4662] FAT-fs (loop1): Unrecognized mount option "uni_xlate=" or missing value [ 83.310644][ T4656] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.107: bad orphan inode 13 [ 83.328112][ T4656] ext4_test_bit(bit=12, block=4) = 1 [ 83.333494][ T4656] is_bad_inode(inode)=0 [ 83.337913][ T4656] NEXT_ORPHAN(inode)=0 [ 83.341989][ T4656] max_ino=32 [ 83.345393][ T4656] i_nlink=1 [ 83.348559][ T4656] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.365205][ T4656] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.107: Unrecognised inode hash code 20 [ 83.376609][ T4656] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.107: Corrupt directory, running e2fsck is recommended [ 83.389786][ T4656] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.107: Unrecognised inode hash code 20 [ 83.401322][ T4656] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.107: Corrupt directory, running e2fsck is recommended [ 83.414253][ T4656] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.107: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 83.441473][ T4668] loop4: detected capacity change from 0 to 512 [ 83.714600][ T21] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 84.254456][ T21] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 84.262708][ T4668] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.275111][ T4668] ext4 filesystem being mounted at /14/control supports timestamps until 2038-01-19 (0x7fffffff) [ 84.296790][ T21] usb 4-1: config 0 has no interface number 0 [ 84.337509][ T21] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 84.370449][ T21] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 84.381255][ T4662] orangefs_mount: mount request failed with -4 [ 84.653964][ T21] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 84.690151][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.734093][ T21] usb 4-1: Product: syz [ 84.753816][ T21] usb 4-1: Manufacturer: syz [ 84.788052][ T21] usb 4-1: SerialNumber: syz [ 84.836816][ T21] usb 4-1: config 0 descriptor?? [ 84.854144][ T4667] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.883535][ T21] ums-sddr09 4-1:0.20: USB Mass Storage device detected [ 85.292699][ T21] ums-sddr09: probe of 4-1:0.20 failed with error -22 [ 85.676568][ T4695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 85.872568][ T4699] loop0: detected capacity change from 0 to 40427 [ 85.943449][ T4699] F2FS-fs (loop0): invalid crc value [ 85.955573][ T4699] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.991923][ T4699] F2FS-fs (loop0): Start checkpoint disabled! [ 86.010313][ T4699] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 86.132929][ T4248] usb 4-1: USB disconnect, device number 4 [ 86.600534][ T4711] netlink: 'syz.4.124': attribute type 21 has an invalid length. [ 86.620528][ T4711] netlink: 156 bytes leftover after parsing attributes in process `syz.4.124'. [ 86.686850][ T4714] loop3: detected capacity change from 0 to 256 [ 86.737624][ T144] attempt to access beyond end of device [ 86.737624][ T144] loop0: rw=2049, want=40976, limit=40427 [ 86.744985][ T4714] FAT-fs (loop3): Unrecognized mount option "uni_xlate=" or missing value [ 87.499609][ T4715] orangefs_mount: mount request failed with -4 [ 87.647516][ T4717] loop2: detected capacity change from 0 to 512 [ 87.672461][ T4720] device dummy0 entered promiscuous mode [ 87.689935][ T4720] device vlan2 entered promiscuous mode [ 87.751845][ T4717] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.763242][ T4717] ext4 filesystem being mounted at /9/control supports timestamps until 2038-01-19 (0x7fffffff) [ 87.812348][ T4727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 88.325475][ T4711] loop4: detected capacity change from 0 to 40427 [ 88.993868][ T4711] F2FS-fs (loop4): invalid crc value [ 89.116788][ T4711] F2FS-fs (loop4): Found nat_bits in checkpoint [ 89.284184][ T4711] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 89.296434][ T4753] loop3: detected capacity change from 0 to 512 [ 89.313869][ T4711] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 89.350265][ T4759] loop2: detected capacity change from 0 to 256 [ 89.445828][ T4759] FAT-fs (loop2): Unrecognized mount option "uni_xlate=" or missing value [ 89.485174][ T4753] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.136: bad orphan inode 13 [ 89.495851][ T4753] ext4_test_bit(bit=12, block=4) = 1 [ 89.501284][ T4753] is_bad_inode(inode)=0 [ 89.505597][ T4753] NEXT_ORPHAN(inode)=0 [ 89.509923][ T4753] max_ino=32 [ 89.513118][ T4753] i_nlink=1 [ 89.516351][ T4753] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.537336][ T4753] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.136: Unrecognised inode hash code 20 [ 89.548810][ T4753] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.136: Corrupt directory, running e2fsck is recommended [ 89.562631][ T4753] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.136: Unrecognised inode hash code 20 [ 89.574327][ T4753] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.136: Corrupt directory, running e2fsck is recommended [ 89.587371][ T4753] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.136: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 90.004477][ T4190] attempt to access beyond end of device [ 90.004477][ T4190] loop4: rw=2049, want=45104, limit=40427 [ 90.184823][ T4768] orangefs_mount: mount request failed with -4 [ 90.300681][ T4172] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 90.678472][ T4781] device macvlan0 entered promiscuous mode [ 91.007256][ T4781] device macvlan0 left promiscuous mode [ 91.332491][ T4241] Bluetooth: hci4: command 0x0405 tx timeout [ 91.373937][ T4172] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 91.382179][ T4172] usb 4-1: config 0 has no interface number 0 [ 91.404595][ T4172] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 91.434880][ T4172] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 91.501381][ T4791] tipc: Started in network mode [ 91.524627][ T4791] tipc: Node identity 6a3908f6a9fc, cluster identity 4711 [ 91.532951][ T4791] tipc: Enabled bearer , priority 0 [ 91.567267][ T4797] device syzkaller0 entered promiscuous mode [ 91.644069][ T4172] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 91.662321][ T4172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.680530][ T4172] usb 4-1: Product: syz [ 91.691780][ T4172] usb 4-1: Manufacturer: syz [ 91.702145][ T4172] usb 4-1: SerialNumber: syz [ 91.715938][ T4172] usb 4-1: config 0 descriptor?? [ 91.744047][ T4763] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.764812][ T4172] ums-sddr09 4-1:0.20: USB Mass Storage device detected [ 91.791651][ T4800] tipc: Resetting bearer [ 91.923976][ T4172] ums-sddr09: probe of 4-1:0.20 failed with error -22 [ 91.942519][ T4803] tipc: Resetting bearer [ 91.961343][ T4803] tipc: Disabling bearer [ 92.088223][ T4808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.118709][ T4808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.140740][ T4808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.156748][ T4808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.411020][ T4817] loop4: detected capacity change from 0 to 256 [ 92.501728][ T4817] FAT-fs (loop4): Unrecognized mount option "uni_xlate=" or missing value [ 92.571483][ T4824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 92.623813][ T4824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.154'. [ 93.055915][ T4172] usb 4-1: USB disconnect, device number 5 [ 93.158762][ T4832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 93.207029][ T4825] orangefs_mount: mount request failed with -4 [ 94.487711][ T4857] loop4: detected capacity change from 0 to 40427 [ 94.693320][ T4857] F2FS-fs (loop4): invalid crc value [ 94.713569][ T4857] F2FS-fs (loop4): Found nat_bits in checkpoint [ 94.725007][ T4864] loop1: detected capacity change from 0 to 512 [ 94.758318][ T4857] F2FS-fs (loop4): Start checkpoint disabled! [ 94.812062][ T4857] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 94.882860][ T4864] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.168: bad orphan inode 13 [ 94.899383][ T4864] ext4_test_bit(bit=12, block=4) = 1 [ 94.904876][ T4864] is_bad_inode(inode)=0 [ 94.909044][ T4864] NEXT_ORPHAN(inode)=0 [ 94.913113][ T4864] max_ino=32 [ 94.916388][ T4864] i_nlink=1 [ 94.919589][ T4864] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.933061][ T4864] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.168: Unrecognised inode hash code 20 [ 94.944444][ T4864] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.168: Corrupt directory, running e2fsck is recommended [ 94.957852][ T4864] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.168: Unrecognised inode hash code 20 [ 94.969198][ T4864] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.168: Corrupt directory, running e2fsck is recommended [ 94.982047][ T4864] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.168: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 95.335565][ T144] attempt to access beyond end of device [ 95.335565][ T144] loop4: rw=1048577, want=45104, limit=40427 [ 95.431005][ T144] attempt to access beyond end of device [ 95.431005][ T144] loop4: rw=2049, want=45112, limit=40427 [ 95.444173][ T4248] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 95.608722][ T4883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'. [ 95.871697][ T4890] binder: 4885:4890 ioctl 40046205 0 returned -22 [ 96.794277][ T4897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 96.804079][ T4248] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 96.832858][ T4248] usb 2-1: config 0 has no interface number 0 [ 96.850646][ T4248] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 96.906511][ T4248] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 97.164775][ T4248] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 97.181692][ T4248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.212300][ T4248] usb 2-1: Product: syz [ 97.226107][ T4248] usb 2-1: Manufacturer: syz [ 97.248697][ T4248] usb 2-1: SerialNumber: syz [ 97.294434][ T4248] usb 2-1: config 0 descriptor?? [ 97.324145][ T4875] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.390828][ T4912] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 97.426253][ T4912] loop3: detected capacity change from 0 to 512 [ 97.809295][ T4912] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.822374][ T4912] ext4 filesystem being mounted at /30/control supports timestamps until 2038-01-19 (0x7fffffff) [ 97.883778][ T4248] ums-sddr09 2-1:0.20: USB Mass Storage device detected [ 98.073620][ T4918] [ 98.073755][ T4248] ums-sddr09: probe of 2-1:0.20 failed with error -22 [ 98.075989][ T4918] ====================================================== [ 98.075996][ T4918] WARNING: possible circular locking dependency detected [ 98.093981][ T4248] usb 2-1: USB disconnect, device number 2 [ 98.096770][ T4918] 5.15.188-syzkaller #0 Not tainted [ 98.096782][ T4918] ------------------------------------------------------ [ 98.096788][ T4918] syz.4.184/4918 is trying to acquire lock: [ 98.096796][ T4918] ffff888079ab8120 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xef6/0x1b50 [ 98.130441][ T4918] [ 98.130441][ T4918] but task is already holding lock: [ 98.137880][ T4918] ffffc90001843e88 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 98.147430][ T4918] [ 98.147430][ T4918] which lock already depends on the new lock. [ 98.147430][ T4918] [ 98.157815][ T4918] [ 98.157815][ T4918] the existing dependency chain (in reverse order) is: [ 98.166918][ T4918] [ 98.166918][ T4918] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 98.174815][ T4918] _raw_spin_lock+0x2a/0x40 [ 98.179921][ T4918] __inet_hash+0xe3/0x960 [ 98.184754][ T4918] inet_csk_listen_start+0x22f/0x320 [ 98.190541][ T4918] inet_listen+0x350/0x7e0 [ 98.195467][ T4918] __sys_listen+0x19d/0x220 [ 98.200513][ T4918] __x64_sys_listen+0x56/0x60 [ 98.205703][ T4918] do_syscall_64+0x4c/0xa0 [ 98.210628][ T4918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.217119][ T4918] [ 98.217119][ T4918] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 98.224837][ T4918] __lock_acquire+0x2c33/0x7c60 [ 98.230200][ T4918] lock_acquire+0x197/0x3f0 [ 98.235208][ T4918] mptcp_diag_get_info+0x1db/0x990 [ 98.240827][ T4918] inet_sk_diag_fill+0xef6/0x1b50 [ 98.246359][ T4918] mptcp_diag_dump+0xcca/0x1290 [ 98.251728][ T4918] __inet_diag_dump+0x1f6/0x380 [ 98.257108][ T4918] netlink_dump+0x5ab/0xcb0 [ 98.262126][ T4918] __netlink_dump_start+0x523/0x700 [ 98.267832][ T4918] inet_diag_handler_cmd+0x1be/0x290 [ 98.273622][ T4918] sock_diag_rcv_msg+0x164/0x3e0 [ 98.279074][ T4918] netlink_rcv_skb+0x1e0/0x430 [ 98.284347][ T4918] sock_diag_rcv+0x26/0x40 [ 98.289285][ T4918] netlink_unicast+0x77c/0x920 [ 98.294716][ T4918] netlink_sendmsg+0x8ab/0xbc0 [ 98.299990][ T4918] sock_write_iter+0x29c/0x380 [ 98.305286][ T4918] do_iter_readv_writev+0x497/0x600 [ 98.310996][ T4918] do_iter_write+0x205/0x7b0 [ 98.316185][ T4918] do_writev+0x254/0x410 [ 98.321469][ T4918] do_syscall_64+0x4c/0xa0 [ 98.326391][ T4918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.333003][ T4918] [ 98.333003][ T4918] other info that might help us debug this: [ 98.333003][ T4918] [ 98.344774][ T4918] Possible unsafe locking scenario: [ 98.344774][ T4918] [ 98.352851][ T4918] CPU0 CPU1 [ 98.359003][ T4918] ---- ---- [ 98.364438][ T4918] lock(&h->lhash2[i].lock); [ 98.369101][ T4918] lock(sk_lock-AF_INET6); [ 98.376458][ T4918] lock(&h->lhash2[i].lock); [ 98.383748][ T4918] lock(sk_lock-AF_INET6); [ 98.388522][ T4918] [ 98.388522][ T4918] *** DEADLOCK *** [ 98.388522][ T4918] [ 98.396738][ T4918] 6 locks held by syz.4.184/4918: [ 98.401743][ T4918] #0: ffffffff8d2410a8 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 98.411240][ T4918] #1: ffffffff8d240f68 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x217/0x3e0 [ 98.422422][ T4918] #2: ffff8880618c5690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 98.433805][ T4918] #3: ffffffff8d31b388 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 98.444827][ T4918] #4: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 98.454938][ T4918] #5: ffffc90001843e88 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 98.465026][ T4918] [ 98.465026][ T4918] stack backtrace: [ 98.470938][ T4918] CPU: 1 PID: 4918 Comm: syz.4.184 Not tainted 5.15.188-syzkaller #0 [ 98.479275][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.489424][ T4918] Call Trace: [ 98.492696][ T4918] [ 98.495611][ T4918] dump_stack_lvl+0x168/0x230 [ 98.500278][ T4918] ? load_image+0x3b0/0x3b0 [ 98.504767][ T4918] ? show_regs_print_info+0x20/0x20 [ 98.510098][ T4918] ? print_circular_bug+0x12b/0x1a0 [ 98.515296][ T4918] check_noncircular+0x274/0x310 [ 98.520314][ T4918] ? add_chain_block+0x940/0x940 [ 98.525250][ T4918] ? lockdep_lock+0xdc/0x1e0 [ 98.529987][ T4918] ? mark_lock+0x94/0x320 [ 98.534324][ T4918] __lock_acquire+0x2c33/0x7c60 [ 98.539270][ T4918] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 98.545248][ T4918] ? verify_lock_unused+0x140/0x140 [ 98.550436][ T4918] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 98.556421][ T4918] ? verify_lock_unused+0x140/0x140 [ 98.561633][ T4918] ? __local_bh_enable_ip+0xcb/0x1b0 [ 98.566922][ T4918] ? __local_bh_enable_ip+0x12a/0x1b0 [ 98.572470][ T4918] ? lockdep_hardirqs_on+0x94/0x140 [ 98.577668][ T4918] ? __local_bh_enable_ip+0x12a/0x1b0 [ 98.583041][ T4918] ? _local_bh_enable+0xa0/0xa0 [ 98.587873][ T4918] ? skb_put+0x117/0x210 [ 98.592103][ T4918] lock_acquire+0x197/0x3f0 [ 98.596679][ T4918] ? inet_sk_diag_fill+0xef6/0x1b50 [ 98.602065][ T4918] ? read_lock_is_recursive+0x10/0x10 [ 98.608420][ T4918] ? rcu_lock_release+0x5/0x20 [ 98.613180][ T4918] ? __lock_acquire+0x7c60/0x7c60 [ 98.618316][ T4918] ? inet_sk_diag_fill+0xef6/0x1b50 [ 98.623503][ T4918] mptcp_diag_get_info+0x1db/0x990 [ 98.628600][ T4918] ? inet_sk_diag_fill+0xef6/0x1b50 [ 98.633785][ T4918] inet_sk_diag_fill+0xef6/0x1b50 [ 98.639230][ T4918] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 98.644932][ T4918] ? do_raw_spin_lock+0x11d/0x280 [ 98.649942][ T4918] ? inet_diag_bc_sk+0x187/0x10c0 [ 98.654950][ T4918] mptcp_diag_dump+0xcca/0x1290 [ 98.659790][ T4918] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 98.666481][ T4918] __inet_diag_dump+0x1f6/0x380 [ 98.671322][ T4918] netlink_dump+0x5ab/0xcb0 [ 98.675817][ T4918] ? netlink_lookup+0x1d0/0x1d0 [ 98.680658][ T4918] ? __inet_diag_dump_start+0x805/0x970 [ 98.686231][ T4918] __netlink_dump_start+0x523/0x700 [ 98.691438][ T4918] inet_diag_handler_cmd+0x1be/0x290 [ 98.696762][ T4918] ? rcu_lock_release+0x20/0x20 [ 98.701620][ T4918] ? inet_diag_handler_get_info+0xb80/0xb80 [ 98.707510][ T4918] ? inet_diag_dump_start+0x20/0x20 [ 98.712698][ T4918] ? inet_diag_dump+0x50/0x50 [ 98.717359][ T4918] ? dev_queue_xmit+0x20/0x20 [ 98.722018][ T4918] ? memcpy+0x3c/0x60 [ 98.725990][ T4918] ? sock_diag_rcv+0x17/0x40 [ 98.730569][ T4918] ? sock_diag_rcv+0x17/0x40 [ 98.735155][ T4918] ? rcu_lock_release+0x20/0x20 [ 98.740095][ T4918] sock_diag_rcv_msg+0x164/0x3e0 [ 98.745208][ T4918] netlink_rcv_skb+0x1e0/0x430 [ 98.750046][ T4918] ? sock_diag_bind+0xa0/0xa0 [ 98.755151][ T4918] ? netlink_ack+0xb60/0xb60 [ 98.759871][ T4918] ? __lock_acquire+0x7c60/0x7c60 [ 98.765399][ T4918] sock_diag_rcv+0x26/0x40 [ 98.770046][ T4918] netlink_unicast+0x77c/0x920 [ 98.774963][ T4918] netlink_sendmsg+0x8ab/0xbc0 [ 98.779902][ T4918] ? netlink_getsockopt+0x560/0x560 [ 98.785322][ T4918] ? aa_sock_msg_perm+0x94/0x150 [ 98.790435][ T4918] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 98.795797][ T4918] ? security_socket_sendmsg+0x7c/0xa0 [ 98.801239][ T4918] sock_write_iter+0x29c/0x380 [ 98.806001][ T4918] ? sock_read_iter+0x340/0x340 [ 98.810858][ T4918] do_iter_readv_writev+0x497/0x600 [ 98.816255][ T4918] ? generic_file_rw_checks+0x280/0x280 [ 98.821791][ T4918] ? common_file_perm+0x171/0x1c0 [ 98.826804][ T4918] ? fsnotify_perm+0x5d/0x560 [ 98.831465][ T4918] ? security_file_permission+0x75/0xa0 [ 98.836996][ T4918] do_iter_write+0x205/0x7b0 [ 98.841579][ T4918] ? import_iovec+0x6f/0xa0 [ 98.846154][ T4918] do_writev+0x254/0x410 [ 98.850906][ T4918] ? do_readv+0x3e0/0x3e0 [ 98.855228][ T4918] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 98.861194][ T4918] ? lock_chain_count+0x20/0x20 [ 98.866115][ T4918] ? vtime_user_exit+0x2dc/0x400 [ 98.871148][ T4918] ? lockdep_hardirqs_on+0x94/0x140 [ 98.876347][ T4918] do_syscall_64+0x4c/0xa0 [ 98.880749][ T4918] ? clear_bhb_loop+0x30/0x80 [ 98.885422][ T4918] ? clear_bhb_loop+0x30/0x80 [ 98.890102][ T4918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.896451][ T4918] RIP: 0033:0x7f8362474929 [ 98.900865][ T4918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.920728][ T4918] RSP: 002b:00007f83602dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 98.929219][ T4918] RAX: ffffffffffffffda RBX: 00007f836269bfa0 RCX: 00007f8362474929 [ 98.937370][ T4918] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 98.945335][ T4918] RBP: 00007f83624f6b39 R08: 0000000000000000 R09: 0000000000000000 [ 98.953300][ T4918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.961291][ T4918] R13: 0000000000000000 R14: 00007f836269bfa0 R15: 00007fff843f45c8 [ 98.969342][ T4918] [ 98.973415][ T4918] BUG: sleeping function called from invalid context at net/core/sock.c:3283 [ 98.982763][ T4918] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4918, name: syz.4.184 [ 98.991989][ T4918] INFO: lockdep is turned off. [ 98.997003][ T4918] Preemption disabled at: [ 98.997012][ T4918] [<0000000000000000>] 0x0 [ 99.006026][ T4918] CPU: 1 PID: 4918 Comm: syz.4.184 Not tainted 5.15.188-syzkaller #0 [ 99.014086][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.024225][ T4918] Call Trace: [ 99.027951][ T4918] [ 99.030881][ T4918] dump_stack_lvl+0x168/0x230 [ 99.035573][ T4918] ? show_regs_print_info+0x20/0x20 [ 99.040774][ T4918] ? load_image+0x3b0/0x3b0 [ 99.045277][ T4918] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 99.051444][ T4918] ___might_sleep+0x47c/0x600 [ 99.056126][ T4918] ? __might_sleep+0xf0/0xf0 [ 99.060736][ T4918] ? read_lock_is_recursive+0x10/0x10 [ 99.066116][ T4918] ? rcu_lock_release+0x5/0x20 [ 99.070886][ T4918] __lock_sock_fast+0x2f/0xe0 [ 99.075575][ T4918] ? inet_sk_diag_fill+0xef6/0x1b50 [ 99.080783][ T4918] mptcp_diag_get_info+0x1e7/0x990 [ 99.085901][ T4918] inet_sk_diag_fill+0xef6/0x1b50 [ 99.090952][ T4918] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 99.096681][ T4918] ? do_raw_spin_lock+0x11d/0x280 [ 99.101720][ T4918] ? inet_diag_bc_sk+0x187/0x10c0 [ 99.106762][ T4918] mptcp_diag_dump+0xcca/0x1290 [ 99.111624][ T4918] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 99.118318][ T4918] __inet_diag_dump+0x1f6/0x380 [ 99.123280][ T4918] netlink_dump+0x5ab/0xcb0 [ 99.127799][ T4918] ? netlink_lookup+0x1d0/0x1d0 [ 99.132657][ T4918] ? __inet_diag_dump_start+0x805/0x970 [ 99.138212][ T4918] __netlink_dump_start+0x523/0x700 [ 99.143414][ T4918] inet_diag_handler_cmd+0x1be/0x290 [ 99.148688][ T4918] ? rcu_lock_release+0x20/0x20 [ 99.153526][ T4918] ? inet_diag_handler_get_info+0xb80/0xb80 [ 99.159840][ T4918] ? inet_diag_dump_start+0x20/0x20 [ 99.165196][ T4918] ? inet_diag_dump+0x50/0x50 [ 99.169870][ T4918] ? dev_queue_xmit+0x20/0x20 [ 99.174683][ T4918] ? memcpy+0x3c/0x60 [ 99.178656][ T4918] ? sock_diag_rcv+0x17/0x40 [ 99.183237][ T4918] ? sock_diag_rcv+0x17/0x40 [ 99.187993][ T4918] ? rcu_lock_release+0x20/0x20 [ 99.192964][ T4918] sock_diag_rcv_msg+0x164/0x3e0 [ 99.197893][ T4918] netlink_rcv_skb+0x1e0/0x430 [ 99.202641][ T4918] ? sock_diag_bind+0xa0/0xa0 [ 99.207321][ T4918] ? netlink_ack+0xb60/0xb60 [ 99.212128][ T4918] ? __lock_acquire+0x7c60/0x7c60 [ 99.217158][ T4918] sock_diag_rcv+0x26/0x40 [ 99.221571][ T4918] netlink_unicast+0x77c/0x920 [ 99.226458][ T4918] netlink_sendmsg+0x8ab/0xbc0 [ 99.231666][ T4918] ? netlink_getsockopt+0x560/0x560 [ 99.236859][ T4918] ? aa_sock_msg_perm+0x94/0x150 [ 99.241800][ T4918] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 99.247076][ T4918] ? security_socket_sendmsg+0x7c/0xa0 [ 99.252526][ T4918] sock_write_iter+0x29c/0x380 [ 99.257275][ T4918] ? sock_read_iter+0x340/0x340 [ 99.262126][ T4918] do_iter_readv_writev+0x497/0x600 [ 99.267350][ T4918] ? generic_file_rw_checks+0x280/0x280 [ 99.272886][ T4918] ? common_file_perm+0x171/0x1c0 [ 99.277891][ T4918] ? fsnotify_perm+0x5d/0x560 [ 99.282543][ T4918] ? security_file_permission+0x75/0xa0 [ 99.288073][ T4918] do_iter_write+0x205/0x7b0 [ 99.292649][ T4918] ? import_iovec+0x6f/0xa0 [ 99.297127][ T4918] do_writev+0x254/0x410 [ 99.301349][ T4918] ? do_readv+0x3e0/0x3e0 [ 99.305676][ T4918] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 99.311636][ T4918] ? lock_chain_count+0x20/0x20 [ 99.316584][ T4918] ? vtime_user_exit+0x2dc/0x400 [ 99.321507][ T4918] ? lockdep_hardirqs_on+0x94/0x140 [ 99.326858][ T4918] do_syscall_64+0x4c/0xa0 [ 99.331268][ T4918] ? clear_bhb_loop+0x30/0x80 [ 99.335940][ T4918] ? clear_bhb_loop+0x30/0x80 [ 99.340826][ T4918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.346707][ T4918] RIP: 0033:0x7f8362474929 [ 99.351104][ T4918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.370781][ T4918] RSP: 002b:00007f83602dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 99.379379][ T4918] RAX: ffffffffffffffda RBX: 00007f836269bfa0 RCX: 00007f8362474929 [ 99.387342][ T4918] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 99.395304][ T4918] RBP: 00007f83624f6b39 R08: 0000000000000000 R09: 0000000000000000 [ 99.403266][ T4918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.411283][ T4918] R13: 0000000000000000 R14: 00007f836269bfa0 R15: 00007fff843f45c8 [ 99.419247][ T4918] [ 99.422325][ T4918] BUG: scheduling while atomic: syz.4.184/4918/0x00000002 [ 99.429431][ T4918] INFO: lockdep is turned off. [ 99.434199][ T4918] Modules linked in: [ 99.438075][ T4918] Preemption disabled at: [ 99.438079][ T4918] [<0000000000000000>] 0x0 [ 99.446893][ T4918] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 99.455636][ T4918] CPU: 1 PID: 4918 Comm: syz.4.184 Tainted: G W 5.15.188-syzkaller #0 [ 99.465068][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.475189][ T4918] Call Trace: [ 99.478453][ T4918] [ 99.481372][ T4918] dump_stack_lvl+0x168/0x230 [ 99.486116][ T4918] ? show_regs_print_info+0x20/0x20 [ 99.491303][ T4918] ? load_image+0x3b0/0x3b0 [ 99.495877][ T4918] panic+0x2c9/0x7f0 [ 99.499756][ T4918] ? bpf_jit_dump+0xd0/0xd0 [ 99.504263][ T4918] ? vprintk_emit+0xf9/0x150 [ 99.508841][ T4918] ? _printk+0xcc/0x110 [ 99.512976][ T4918] check_panic_on_warn+0x80/0xa0 [ 99.517895][ T4918] __schedule_bug+0x184/0x1e0 [ 99.522550][ T4918] ? raw_spin_rq_unlock_irq+0x90/0x90 [ 99.527925][ T4918] __schedule+0x12e4/0x43b0 [ 99.532687][ T4918] ? trace_hardirqs_off_finish+0xca/0x1f0 [ 99.538397][ T4918] ? prepare_to_wait_exclusive+0xc5/0x220 [ 99.544104][ T4918] ? do_raw_spin_lock+0x11d/0x280 [ 99.549130][ T4918] ? lock_chain_count+0x20/0x20 [ 99.553962][ T4918] ? __kthread_should_park+0xa2/0xe0 [ 99.559321][ T4918] ? lock_release+0xba/0x870 [ 99.563899][ T4918] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 99.569954][ T4918] ? __lock_sock+0x145/0x2a0 [ 99.574525][ T4918] ? release_firmware_map_entry+0x190/0x190 [ 99.580403][ T4918] ? __lock_sock+0x145/0x2a0 [ 99.584971][ T4918] ? __local_bh_enable_ip+0x12a/0x1b0 [ 99.590408][ T4918] ? _local_bh_enable+0xa0/0xa0 [ 99.595236][ T4918] schedule+0x11b/0x1e0 [ 99.599379][ T4918] __lock_sock+0x14a/0x2a0 [ 99.603774][ T4918] ? sk_page_frag_refill+0x200/0x200 [ 99.609037][ T4918] ? do_raw_spin_lock+0x11d/0x280 [ 99.614060][ T4918] ? init_wait_entry+0xd0/0xd0 [ 99.618914][ T4918] ? __rwlock_init+0x140/0x140 [ 99.623753][ T4918] ? read_lock_is_recursive+0x10/0x10 [ 99.629208][ T4918] ? rcu_lock_release+0x5/0x20 [ 99.634025][ T4918] ? __lock_sock_fast+0x43/0xe0 [ 99.638950][ T4918] __lock_sock_fast+0x78/0xe0 [ 99.643712][ T4918] ? inet_sk_diag_fill+0xef6/0x1b50 [ 99.649161][ T4918] mptcp_diag_get_info+0x1e7/0x990 [ 99.654436][ T4918] inet_sk_diag_fill+0xef6/0x1b50 [ 99.659553][ T4918] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 99.665287][ T4918] ? do_raw_spin_lock+0x11d/0x280 [ 99.670391][ T4918] ? inet_diag_bc_sk+0x187/0x10c0 [ 99.675683][ T4918] mptcp_diag_dump+0xcca/0x1290 [ 99.681669][ T4918] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 99.688368][ T4918] __inet_diag_dump+0x1f6/0x380 [ 99.693831][ T4918] netlink_dump+0x5ab/0xcb0 [ 99.698557][ T4918] ? netlink_lookup+0x1d0/0x1d0 [ 99.704770][ T4918] ? __inet_diag_dump_start+0x805/0x970 [ 99.710846][ T4918] __netlink_dump_start+0x523/0x700 [ 99.716412][ T4918] inet_diag_handler_cmd+0x1be/0x290 [ 99.723032][ T4918] ? rcu_lock_release+0x20/0x20 [ 99.727915][ T4918] ? inet_diag_handler_get_info+0xb80/0xb80 [ 99.734140][ T4918] ? inet_diag_dump_start+0x20/0x20 [ 99.739382][ T4918] ? inet_diag_dump+0x50/0x50 [ 99.744052][ T4918] ? dev_queue_xmit+0x20/0x20 [ 99.748716][ T4918] ? memcpy+0x3c/0x60 [ 99.752676][ T4918] ? sock_diag_rcv+0x17/0x40 [ 99.757245][ T4918] ? sock_diag_rcv+0x17/0x40 [ 99.761919][ T4918] ? rcu_lock_release+0x20/0x20 [ 99.766836][ T4918] sock_diag_rcv_msg+0x164/0x3e0 [ 99.771755][ T4918] netlink_rcv_skb+0x1e0/0x430 [ 99.776500][ T4918] ? sock_diag_bind+0xa0/0xa0 [ 99.781156][ T4918] ? netlink_ack+0xb60/0xb60 [ 99.785724][ T4918] ? __lock_acquire+0x7c60/0x7c60 [ 99.790896][ T4918] sock_diag_rcv+0x26/0x40 [ 99.795290][ T4918] netlink_unicast+0x77c/0x920 [ 99.800034][ T4918] netlink_sendmsg+0x8ab/0xbc0 [ 99.804776][ T4918] ? netlink_getsockopt+0x560/0x560 [ 99.809953][ T4918] ? aa_sock_msg_perm+0x94/0x150 [ 99.814871][ T4918] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 99.820141][ T4918] ? security_socket_sendmsg+0x7c/0xa0 [ 99.825584][ T4918] sock_write_iter+0x29c/0x380 [ 99.830563][ T4918] ? sock_read_iter+0x340/0x340 [ 99.835425][ T4918] do_iter_readv_writev+0x497/0x600 [ 99.840621][ T4918] ? generic_file_rw_checks+0x280/0x280 [ 99.846152][ T4918] ? common_file_perm+0x171/0x1c0 [ 99.851168][ T4918] ? fsnotify_perm+0x5d/0x560 [ 99.855841][ T4918] ? security_file_permission+0x75/0xa0 [ 99.861381][ T4918] do_iter_write+0x205/0x7b0 [ 99.866050][ T4918] ? import_iovec+0x6f/0xa0 [ 99.870622][ T4918] do_writev+0x254/0x410 [ 99.874848][ T4918] ? do_readv+0x3e0/0x3e0 [ 99.879157][ T4918] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 99.885115][ T4918] ? lock_chain_count+0x20/0x20 [ 99.889948][ T4918] ? vtime_user_exit+0x2dc/0x400 [ 99.894863][ T4918] ? lockdep_hardirqs_on+0x94/0x140 [ 99.900043][ T4918] do_syscall_64+0x4c/0xa0 [ 99.904437][ T4918] ? clear_bhb_loop+0x30/0x80 [ 99.909097][ T4918] ? clear_bhb_loop+0x30/0x80 [ 99.913756][ T4918] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.919637][ T4918] RIP: 0033:0x7f8362474929 [ 99.924033][ T4918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.943626][ T4918] RSP: 002b:00007f83602dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 99.952022][ T4918] RAX: ffffffffffffffda RBX: 00007f836269bfa0 RCX: 00007f8362474929 [ 99.960163][ T4918] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 99.968665][ T4918] RBP: 00007f83624f6b39 R08: 0000000000000000 R09: 0000000000000000 [ 99.976752][ T4918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.984922][ T4918] R13: 0000000000000000 R14: 00007f836269bfa0 R15: 00007fff843f45c8 [ 99.992882][ T4918] [ 99.996134][ T4918] Kernel Offset: disabled [ 100.000563][ T4918] Rebooting in 86400 seconds..