last executing test programs: 29.845009457s ago: executing program 4 (id=1575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 29.778984522s ago: executing program 4 (id=1576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x0, 0x300}, 0x10) 28.076994977s ago: executing program 4 (id=1578): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) 27.408370496s ago: executing program 4 (id=1583): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x15d}) epoll_create1(0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x80401) pselect6(0x40, &(0x7f00000045c0)={0x1, 0x7, 0x0, 0x0, 0x0, 0x30}, 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0) 16.840352283s ago: executing program 3 (id=1613): syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file0\x00', 0xa0000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50}, 0x50) write$FUSE_CREATE_OPEN(r2, &(0x7f00000004c0)={0xa0}, 0xa0) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50}, 0x50) write$FUSE_OPEN(r2, &(0x7f0000000380)={0x20}, 0x20) write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) 15.302327066s ago: executing program 4 (id=1583): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x15d}) epoll_create1(0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x80401) pselect6(0x40, &(0x7f00000045c0)={0x1, 0x7, 0x0, 0x0, 0x0, 0x30}, 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0) 15.078160562s ago: executing program 3 (id=1617): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, 0x0, 0x107242, 0x0) openat(0xffffffffffffff9c, 0x0, 0x187842, 0x147) openat$dir(0xffffffffffffff9c, 0x0, 0x709102, 0x108) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e000100000000000000000200"], 0x50}}, 0x0) 12.11345338s ago: executing program 1 (id=1620): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfed7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(0xffffffffffffffff) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006140)={0x2020}, 0x2020) r8 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r8, &(0x7f0000000100)={0x0, 0x2d, 0x0, 0xa, 0x0, 0x2c}, 0x48) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0) 12.014840298s ago: executing program 0 (id=1621): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) 10.534658526s ago: executing program 1 (id=1623): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) io_setup(0x1, &(0x7f0000000b80)) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[], 0xb0) ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x40000000004) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{}, {}], {}, [{}], {}, {0x20, 0x1}}, 0x3c, 0x0) 8.128930153s ago: executing program 3 (id=1624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) timer_create(0x5, &(0x7f0000000280)={0x0, 0x1f, 0x4, @thr={&(0x7f0000000080)="d802ef315aea5ea3bdc08f24c7d623ddab9c00013f6b1d237b107e3f297293fc34be40836eaf66422d0e52823c997f66fe099c76a0476eefda6e0ff10000", 0x0}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) mknodat$loop(r2, &(0x7f0000000380)='./file0\x00', 0x0, 0x1) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x2, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0xffefffff}, 0x90) waitid(0x0, r1, 0x0, 0x5, &(0x7f0000000500)) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x0, r5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, 0x0) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)='bdev\x00', 0x3001, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) syz_open_dev$tty1(0xc, 0x4, 0x1) 7.88968408s ago: executing program 2 (id=1625): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) read$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x1ff}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x8}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x6}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x80}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x5}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8884}, 0x40000) 7.640647889s ago: executing program 0 (id=1626): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f0000000100)={[{@utf8}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@uni_xlate}, {@uni_xlateno}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@rodir}, {@utf8no}]}, 0x3, 0x350, &(0x7f0000000580)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=") ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002100)=""/4107, 0x100b) 5.596968169s ago: executing program 1 (id=1627): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 5.505003876s ago: executing program 2 (id=1628): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 5.352839087s ago: executing program 1 (id=1629): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5.289055821s ago: executing program 2 (id=1630): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20022, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000240)) close(r1) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000280)="fa8e", 0x2}], 0x1) 5.105559935s ago: executing program 1 (id=1631): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @local, [], "1e520b4c951ee12e"}}}}}}}, 0x0) recvmmsg(r5, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2140, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x24, 0x60000000, &(0x7f0000000100)="b9ff03076044238cb89e14f0080047e0ffff00004000633277fbac14140cac14140c07029f89052f87e577ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0243461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@userxattr}, {@index_on}], [], 0x2c}) 5.04245445s ago: executing program 2 (id=1632): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x48, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x1ff}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x8}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x6}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x5}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8884}, 0x40000) 4.617110341s ago: executing program 0 (id=1633): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000240)={0x0, 'xfrm0\x00'}) 4.506557189s ago: executing program 3 (id=1634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x0, @dev, 'lo\x00'}}, 0x1e) 4.402382477s ago: executing program 0 (id=1635): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_open_dev$usbfs(0x0, 0x20076, 0x24000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x1}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}, @fda={0x66646185, 0x1, 0x2, 0x39}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.678099003s ago: executing program 3 (id=1636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) 2.628837847s ago: executing program 0 (id=1637): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x18, 0x0, 0x2) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="080005000200000013113519da1421cfaf3528608745e3d886ababba7af395"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000600004f624d7a757c3d39ddc689e8aa94dd3102479d45e2cd3df5e47d99db3fcad9ce8e61a71069d421b0068116f5a82b8c046ad6ebf85b26feae6d092ac3802ef05b92c32134ca0538f8474a042dafbf03a4b40fe38897"], &(0x7f0000000380)='GPL\x00', 0x0, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7}, 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006112001c0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x2}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x8040) socket$nl_generic(0x10, 0x3, 0x10) 2.367151946s ago: executing program 0 (id=1638): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x29) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountstats\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendfile(r1, r2, 0x0, 0x35) 2.181146s ago: executing program 4 (id=1583): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x15d}) epoll_create1(0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x80401) pselect6(0x40, &(0x7f00000045c0)={0x1, 0x7, 0x0, 0x0, 0x0, 0x30}, 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0) 1.136027476s ago: executing program 1 (id=1639): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x37f, &(0x7f0000000440)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x14f042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r2, 0x0, 0xb8) 976.945088ms ago: executing program 2 (id=1640): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) io_setup(0x1, &(0x7f0000000b80)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000380)={{}, {0x1, 0x2}, [{}, {}], {}, [{}], {}, {0x20, 0x1}}, 0x3c, 0x0) 28.500368ms ago: executing program 3 (id=1641): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107242, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r8, &(0x7f0000000200)=[{&(0x7f0000001b40)="a7", 0x1}], 0x1, 0x8000, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0}) 0s ago: executing program 2 (id=1642): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x298, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="4e2bdf9815ff7fe18f180000000000000000000000000000007919b8000000000095000000ff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x4, 0x1000, &(0x7f0000000200)=""/4096}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) kernel console output (not intermixed with test programs): T2699] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.775337][ T3583] device veth1_macvtap entered promiscuous mode [ 47.792269][ T2699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.801083][ T2699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.818558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.832151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.841652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.851391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.873284][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.884282][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.894746][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.906654][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.919107][ T3583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.928894][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.939874][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.950364][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.963510][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.974742][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.986744][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.998343][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.023176][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.032853][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.042941][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.051987][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.064587][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.077577][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.087955][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.098743][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.111188][ T3583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.125190][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.136474][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.148143][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.160707][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.171391][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.185395][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.196840][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.212472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.222052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.231811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.234258][ T3610] Bluetooth: hci0: command 0x040f tx timeout [ 48.241646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.257109][ T3583] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.265908][ T3583] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.275263][ T3583] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.284245][ T3583] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.307031][ T3570] device veth0_vlan entered promiscuous mode [ 48.314254][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.320314][ T3610] Bluetooth: hci2: command 0x040f tx timeout [ 48.322284][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.329742][ T3610] Bluetooth: hci4: command 0x040f tx timeout [ 48.345498][ T3610] Bluetooth: hci3: command 0x040f tx timeout [ 48.346479][ T3571] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.354389][ T3610] Bluetooth: hci1: command 0x040f tx timeout [ 48.361139][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.372639][ T3571] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.375950][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.383499][ T3571] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.400576][ T3571] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.415592][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.425094][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.433036][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.441726][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.453527][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.462426][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.485937][ T3570] device veth1_vlan entered promiscuous mode [ 48.534802][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.543536][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.602267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.619814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.632358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.703249][ T3570] device veth0_macvtap entered promiscuous mode [ 48.739401][ T1461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.762577][ T1461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.773115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.791110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.801459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.823654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.839819][ T3570] device veth1_macvtap entered promiscuous mode [ 48.906095][ T2699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.915801][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.923877][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.940796][ T2699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.974370][ T3646] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6'. [ 48.991422][ T3646] device bridge_slave_1 left promiscuous mode [ 48.999616][ T3646] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.021979][ T3646] device bridge_slave_0 left promiscuous mode [ 49.037340][ T3646] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.272758][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.403793][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.496196][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.610841][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.636839][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.647195][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.658013][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.669848][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.680671][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.691132][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.701821][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.715574][ T3570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.758639][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.772757][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.820433][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.847955][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.858729][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.880048][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.895341][ T3653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.904952][ T3653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.914998][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.927738][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.939883][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.951604][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.965194][ T3570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.014446][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.057622][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.086047][ T3660] loop4: detected capacity change from 0 to 512 [ 50.095417][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.113001][ T3570] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.123405][ T3570] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.133222][ T3570] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.142302][ T3570] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.203610][ T3660] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 50.305773][ T3622] Bluetooth: hci0: command 0x0419 tx timeout [ 50.342144][ T3660] Quota error (device loop4): v2_read_file_info: Free block number too big (58381 >= 6). [ 50.383309][ T3660] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 50.404734][ T3611] Bluetooth: hci1: command 0x0419 tx timeout [ 50.414942][ T2699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.422979][ T2699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.440482][ T3611] Bluetooth: hci3: command 0x0419 tx timeout [ 50.447656][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.474010][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.483225][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.492364][ T3611] Bluetooth: hci4: command 0x0419 tx timeout [ 50.510238][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.522470][ T3611] Bluetooth: hci2: command 0x0419 tx timeout [ 50.850277][ T3678] overlayfs: missing 'lowerdir' [ 51.439901][ T3704] overlayfs: missing 'lowerdir' [ 51.683845][ T3716] capability: warning: `syz.3.32' uses 32-bit capabilities (legacy support in use) [ 52.755971][ T3770] loop2: detected capacity change from 0 to 512 [ 52.815102][ T3770] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 53.732107][ T3809] loop2: detected capacity change from 0 to 512 [ 53.873115][ T3809] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 54.578896][ T3836] loop2: detected capacity change from 0 to 512 [ 54.656987][ T3836] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 55.414158][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 55.490593][ T3889] binder: 3888:3889 ioctl 4018620d 0 returned -22 [ 55.794051][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 56.155128][ T13] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 56.255420][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.383968][ T13] usb 3-1: Product: syz [ 56.425608][ T13] usb 3-1: Manufacturer: syz [ 56.467413][ T13] usb 3-1: SerialNumber: syz [ 56.479978][ T13] usb 3-1: config 0 descriptor?? [ 56.748388][ T3866] udc-core: couldn't find an available UDC or it's busy [ 56.761508][ T3866] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 56.777677][ T3927] binder: 3926:3927 ioctl 4018620d 0 returned -22 [ 56.926918][ T13] usb_8dev 3-1:0.0 can0: sending command message failed [ 56.954008][ T13] usb_8dev 3-1:0.0 can0: can't get firmware version [ 57.053260][ T3933] overlayfs: missing 'lowerdir' [ 57.077981][ T13] usb_8dev: probe of 3-1:0.0 failed with error -22 [ 57.166344][ T13] usb 3-1: USB disconnect, device number 2 [ 57.685292][ T3945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.898802][ T3957] overlayfs: missing 'lowerdir' [ 58.182311][ T3978] Zero length message leads to an empty skb [ 58.973807][ T3997] loop0: detected capacity change from 0 to 512 [ 59.095361][ T3997] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.269793][ T3997] Quota error (device loop0): v2_read_file_info: Free block number too big (58381 >= 6). [ 59.311396][ T3997] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.924914][ T4029] binder: 4028:4029 ioctl 4018620d 0 returned -22 [ 60.060865][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 60.074213][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 60.084157][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 61.096597][ T4043] loop2: detected capacity change from 0 to 512 [ 61.345161][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 61.355652][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 61.373955][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 61.383773][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 61.392914][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 61.402520][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 61.411662][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 61.629510][ T4043] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 61.676974][ T4043] Quota error (device loop2): v2_read_file_info: Free block number too big (58381 >= 6). [ 61.734107][ T4043] EXT4-fs warning (device loop2): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 62.032160][ T4060] binder: 4059:4060 ioctl 4018620d 0 returned -22 [ 63.034091][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 63.274152][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 63.411994][ T4104] binder: 4103:4104 ioctl 4018620d 0 returned -22 [ 63.554694][ T23] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 63.574500][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.582541][ T23] usb 3-1: Product: syz [ 64.345172][ T23] usb 3-1: Manufacturer: syz [ 64.357520][ T23] usb 3-1: SerialNumber: syz [ 64.397510][ T23] usb 3-1: config 0 descriptor?? [ 64.504184][ T1075] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 64.635966][ T4061] udc-core: couldn't find an available UDC or it's busy [ 64.643032][ T4061] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 64.700798][ T23] usb_8dev 3-1:0.0 can0: sending command message failed [ 64.717484][ T4116] loop1: detected capacity change from 0 to 512 [ 64.731050][ T23] usb_8dev 3-1:0.0 can0: can't get firmware version [ 64.804345][ T23] usb_8dev: probe of 3-1:0.0 failed with error -22 [ 64.813537][ T4116] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.855010][ T23] usb 3-1: USB disconnect, device number 3 [ 64.862624][ T4116] Quota error (device loop1): v2_read_file_info: Free block number too big (58381 >= 6). [ 64.910175][ T4116] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.935381][ T1075] usb 1-1: config 1 interface 0 altsetting 11 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 64.947319][ T1075] usb 1-1: config 1 interface 0 altsetting 11 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 64.958374][ T1075] usb 1-1: config 1 interface 0 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.971783][ T1075] usb 1-1: config 1 interface 0 has no altsetting 0 [ 65.119583][ T4129] binder: 4128:4129 ioctl 4018620d 0 returned -22 [ 65.306134][ T1075] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.320588][ T1075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.329191][ T1075] usb 1-1: Product: syz [ 65.333576][ T1075] usb 1-1: Manufacturer: syz [ 65.338580][ T1075] usb 1-1: SerialNumber: syz [ 65.385700][ T4102] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 65.397656][ T4102] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 65.790678][ T4102] udc-core: couldn't find an available UDC or it's busy [ 65.912011][ T4102] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 66.114898][ T1075] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 66.173414][ T1075] usb 1-1: USB disconnect, device number 2 [ 66.449320][ T4155] loop3: detected capacity change from 0 to 512 [ 66.528922][ T4155] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.598164][ T4155] Quota error (device loop3): v2_read_file_info: Free block number too big (58381 >= 6). [ 66.670946][ T4155] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.018446][ T4172] binder: 4171:4172 ioctl 4018620d 0 returned -22 [ 67.499556][ T4188] loop2: detected capacity change from 0 to 512 [ 67.590309][ T4188] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.627534][ T4188] Quota error (device loop2): v2_read_file_info: Free block number too big (58381 >= 6). [ 67.658263][ T4188] EXT4-fs warning (device loop2): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.238303][ T4221] nbd0: detected capacity change from 0 to 8388607 [ 68.329462][ T4225] loop1: detected capacity change from 0 to 512 [ 68.425203][ T4225] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.636710][ T4225] Quota error (device loop1): v2_read_file_info: Free block number too big (58381 >= 6). [ 68.685507][ T4225] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.001318][ T3576] block nbd0: Receive control failed (result -104) [ 69.433871][ T4259] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.685106][ T4270] binder: 4267:4270 ioctl 4018620d 0 returned -22 [ 69.958866][ T4280] loop2: detected capacity change from 0 to 512 [ 70.017830][ T4254] chnl_net:caif_netlink_parms(): no params data found [ 70.064694][ T2126] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.077760][ T4280] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.160985][ T4280] Quota error (device loop2): v2_read_file_info: Free block number too big (58381 >= 6). [ 70.186935][ T4280] EXT4-fs warning (device loop2): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.204962][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.215374][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.255533][ T4254] device bridge_slave_0 entered promiscuous mode [ 70.314558][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.322208][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.392961][ T4254] device bridge_slave_1 entered promiscuous mode [ 70.488158][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.504491][ T2126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.509673][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.534177][ T2126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.564067][ T2126] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 70.573755][ T2126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.622725][ T4254] team0: Port device team_slave_0 added [ 70.648944][ T2126] usb 4-1: config 0 descriptor?? [ 70.657066][ T4254] team0: Port device team_slave_1 added [ 70.717004][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.737829][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.824002][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.864557][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.890517][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.964227][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.122622][ T4254] device hsr_slave_0 entered promiscuous mode [ 71.152777][ T4254] device hsr_slave_1 entered promiscuous mode [ 71.181059][ T4254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.192131][ T4254] Cannot create hsr debugfs directory [ 71.198398][ T2126] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 71.226214][ T2126] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 71.245479][ T2126] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 71.260856][ T2126] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 71.281709][ T2126] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 71.309610][ T2126] cm6533_jd 0003:0D8C:0022.0001: No inputs registered, leaving [ 71.352097][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.359139][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.397405][ T3612] Bluetooth: hci5: command 0x0409 tx timeout [ 71.448750][ T2126] cm6533_jd 0003:0D8C:0022.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 72.459185][ T2126] usb 4-1: USB disconnect, device number 2 [ 72.550370][ T3583] syz-executor (3583) used greatest stack depth: 19384 bytes left [ 72.670007][ T3652] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.832643][ T3652] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.971700][ T3652] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.059075][ T3652] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.424847][ T3612] Bluetooth: hci5: command 0x041b tx timeout [ 73.656118][ T4327] binder: 4326:4327 ioctl 4018620d 0 returned -22 [ 74.448311][ T4254] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.545869][ T4254] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.566128][ T4254] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.636306][ T4254] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.924601][ T4327] sched: RT throttling activated [ 75.106130][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.199228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.231007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.252648][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.328970][ T3652] device hsr_slave_0 left promiscuous mode [ 75.353083][ T3652] device hsr_slave_1 left promiscuous mode [ 75.390042][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.431419][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.464828][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.504304][ T3613] Bluetooth: hci5: command 0x040f tx timeout [ 75.512315][ T3652] device bridge_slave_1 left promiscuous mode [ 75.545545][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.594524][ T3652] device bridge_slave_0 left promiscuous mode [ 75.616025][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.679209][ T3652] device veth1_macvtap left promiscuous mode [ 75.708652][ T3652] device veth0_macvtap left promiscuous mode [ 75.718584][ T3652] device veth1_vlan left promiscuous mode [ 75.727395][ T3652] device veth0_vlan left promiscuous mode [ 76.467963][ T1078] cfg80211: failed to load regulatory.db [ 76.505700][ T3652] team0 (unregistering): Port device team_slave_1 removed [ 76.529191][ T3652] team0 (unregistering): Port device team_slave_0 removed [ 76.567487][ T3652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.591308][ T3652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.424083][ T2126] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.490858][ T4397] binder: 4396:4397 ioctl 4018620d 0 returned -22 [ 77.549211][ T3652] bond0 (unregistering): Released all slaves [ 77.584493][ T3613] Bluetooth: hci5: command 0x0419 tx timeout [ 78.814320][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.862778][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.879136][ T449] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.886367][ T449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.034051][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.043193][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.069027][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.082315][ T449] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.089491][ T449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.094449][ T2126] usb 2-1: device not accepting address 2, error -71 [ 79.109546][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.125958][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.158889][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.189478][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.239300][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.293616][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.304153][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.313026][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.322361][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.336206][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.345310][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.366253][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.650201][ T4433] chnl_net:caif_netlink_parms(): no params data found [ 79.741165][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.755667][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.794959][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.926679][ T4433] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.944319][ T4433] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.978493][ T4433] device bridge_slave_0 entered promiscuous mode [ 80.008053][ T4433] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.046465][ T4433] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.075059][ T4433] device bridge_slave_1 entered promiscuous mode [ 80.172750][ T4433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.237232][ T4433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.294107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.310180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.442871][ T4433] team0: Port device team_slave_0 added [ 80.447566][ T4461] binder: 4460:4461 ioctl 4018620d 0 returned -22 [ 80.487339][ T4254] device veth0_vlan entered promiscuous mode [ 80.590529][ T4433] team0: Port device team_slave_1 added [ 81.722240][ T3614] Bluetooth: hci4: command 0x0409 tx timeout [ 81.876820][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.909504][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.983149][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.027908][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.099718][ T4254] device veth1_vlan entered promiscuous mode [ 82.227288][ T4433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.256468][ T4433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.391608][ T4433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.417969][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.442324][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.459258][ T4254] device veth0_macvtap entered promiscuous mode [ 82.471360][ T4433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.482642][ T4433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.539766][ T4433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.583380][ T4254] device veth1_macvtap entered promiscuous mode [ 82.756771][ T4433] device hsr_slave_0 entered promiscuous mode [ 82.792718][ T4433] device hsr_slave_1 entered promiscuous mode [ 82.821697][ T4433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.842977][ T4433] Cannot create hsr debugfs directory [ 83.028146][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.045810][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.935073][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.952472][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.429781][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.441875][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.458903][ T3615] Bluetooth: hci4: command 0x041b tx timeout [ 84.462297][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.493505][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.505697][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.547101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.556184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.568582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.577548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.619247][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.674192][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.693761][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.723275][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.764273][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.776412][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.794046][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.806394][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.893471][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.901791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.918892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.943112][ T4254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.959531][ T4254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.969661][ T4254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.991572][ T4254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.191785][ T3649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.241260][ T3649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.312044][ T4433] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.343808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.375528][ T4107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.393286][ T4107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.431219][ T4433] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.462084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.554260][ T4433] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.137585][ T4433] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.418450][ T3613] Bluetooth: hci4: command 0x040f tx timeout [ 87.571702][ T4536] loop3: detected capacity change from 0 to 512 [ 87.684237][ T4536] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.740451][ T4433] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.800332][ T4433] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.972121][ T4536] Quota error (device loop3): v2_read_file_info: Free block number too big (58381 >= 6). [ 88.020754][ T4433] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.029131][ T4536] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.046920][ T4433] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.992486][ T4433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.073812][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.088460][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.152785][ T4433] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.188414][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.230688][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.336996][ T1461] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.344563][ T1461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.365908][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.390158][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.399670][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.413985][ T1461] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.421351][ T1461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.434545][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.453462][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.465494][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.480884][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.498648][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.507765][ T3613] Bluetooth: hci4: command 0x0419 tx timeout [ 89.528684][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.546157][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.596627][ T4433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.638015][ T4433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.786465][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.803316][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.818727][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.936078][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.958020][ T1461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.509315][ T4433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.531350][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.540351][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.713718][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.751461][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.981106][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.042355][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.109988][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.150406][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.367296][ T4433] device veth0_vlan entered promiscuous mode [ 92.440379][ T4433] device veth1_vlan entered promiscuous mode [ 92.551091][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.570080][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.597623][ T4433] device veth0_macvtap entered promiscuous mode [ 92.618741][ T4433] device veth1_macvtap entered promiscuous mode [ 92.675506][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.705690][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.760952][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.789572][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.820134][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.850488][ T4654] capability: warning: `syz.4.391' uses deprecated v2 capabilities in a way that may be insecure [ 92.884061][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.908853][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.029072][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.086813][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.141250][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.201035][ T4433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.220128][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.238248][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.253814][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.271717][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.282174][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.301463][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.312336][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.330273][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.340625][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.361776][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.413272][ T4433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.447719][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.479299][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.560710][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.598111][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.652724][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.706710][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.924752][ T4433] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.994523][ T4433] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.003883][ T4433] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.044898][ T4696] syz.3.409 uses obsolete (PF_INET,SOCK_PACKET) [ 95.059881][ T4433] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.376804][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.625939][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.673261][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.720642][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.739771][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.769163][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.342598][ T4635] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.614007][ T4635] usb 1-1: Using ep0 maxpacket: 16 [ 97.894310][ T4635] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 97.930343][ T4635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.959500][ T4635] usb 1-1: Product: syz [ 97.974036][ T4635] usb 1-1: Manufacturer: syz [ 97.978659][ T4635] usb 1-1: SerialNumber: syz [ 98.024947][ T4635] usb 1-1: config 0 descriptor?? [ 98.265529][ T4742] udc-core: couldn't find an available UDC or it's busy [ 98.283024][ T4742] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 98.385473][ T4635] usb_8dev 1-1:0.0 can0: sending command message failed [ 98.392508][ T4635] usb_8dev 1-1:0.0 can0: can't get firmware version [ 98.864874][ T1059] block nbd0: Possible stuck request ffff888020ef0000: control (read@0,4096B). Runtime 30 seconds [ 99.005851][ T4635] usb_8dev: probe of 1-1:0.0 failed with error -22 [ 99.047598][ T4635] usb 1-1: USB disconnect, device number 3 [ 100.370695][ T3612] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.316126][ T3612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.341729][ T3612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.362562][ T3612] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.410887][ T3612] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.443997][ T3612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.490962][ T3612] usb 1-1: config 0 descriptor?? [ 101.603283][ T4833] binder: 4831:4833 ioctl 4018620d 0 returned -22 [ 101.802767][ T4842] loop3: detected capacity change from 0 to 512 [ 102.951681][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.000134][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.025503][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.040668][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.052598][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.062851][ T4842] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.081940][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.104649][ T4842] Quota error (device loop3): v2_read_file_info: Free block number too big (58381 >= 6). [ 103.121614][ T4842] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 103.126901][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.181415][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.244170][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.289783][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.354080][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.382545][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.406717][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.424017][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.444172][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.461581][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.496510][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.527232][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.552211][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.555564][ T4869] binder: 4868:4869 ioctl 4018620d 0 returned -22 [ 103.570230][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.590517][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.603368][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.610939][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.618507][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.626275][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.633686][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.642818][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.650317][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.658061][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.665701][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.673343][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.680839][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.722761][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.730736][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.741426][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.753495][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.779185][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.796946][ T3612] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 103.823216][ T3612] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 103.876871][ T3612] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 105.031648][ T3612] usb 1-1: USB disconnect, device number 4 [ 107.230735][ T5053] binder: 5050:5053 ioctl 4018620d 0 returned -22 [ 108.544159][ T2126] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 108.587395][ T5109] binder: 5107:5109 ioctl 4018620d 0 returned -22 [ 109.624316][ T2126] usb 4-1: not running at top speed; connect to a high speed hub [ 109.734777][ T2126] usb 4-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.770068][ T2126] usb 4-1: config 1 interface 0 has no altsetting 0 [ 109.964395][ T2126] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 109.972015][ T5161] loop0: detected capacity change from 0 to 512 [ 109.986401][ T2126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.005154][ T2126] usb 4-1: Product: syz [ 110.009387][ T2126] usb 4-1: Manufacturer: syz [ 110.034032][ T2126] usb 4-1: SerialNumber: syz [ 110.057766][ T5161] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.120794][ T5161] Quota error (device loop0): v2_read_file_info: Free block number too big (58381 >= 6). [ 110.185130][ T5161] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 110.374594][ T2126] usb 4-1: USB disconnect, device number 3 [ 111.331905][ T5245] loop0: detected capacity change from 0 to 512 [ 111.453555][ T5245] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.546531][ T5245] Quota error (device loop0): v2_read_file_info: Free block number too big (58381 >= 6). [ 111.574470][ T5245] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 112.580661][ T5306] input: syz1 as /devices/virtual/input/input8 [ 114.409365][ T3615] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.664092][ T3615] usb 3-1: Using ep0 maxpacket: 16 [ 114.784219][ T3615] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.847821][ T3615] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 114.869567][ T3615] usb 3-1: can't read configurations, error -71 [ 115.631486][ T5403] sctp: [Deprecated]: syz.4.724 (pid 5403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.631486][ T5403] Use struct sctp_sack_info instead [ 116.254215][ T3615] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 116.644114][ T3615] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.686395][ T3615] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.717286][ T3615] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 116.731694][ T3615] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 116.750908][ T3615] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 116.762777][ T3615] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 116.929860][ T5480] input: syz1 as /devices/virtual/input/input9 [ 117.014333][ T3615] usb 3-1: string descriptor 0 read error: -22 [ 117.022158][ T3615] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.070084][ T3615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.199793][ T5494] loop0: detected capacity change from 0 to 512 [ 117.275304][ T5494] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.365160][ T5494] Quota error (device loop0): v2_read_file_info: Free block number too big (58381 >= 6). [ 117.401586][ T5494] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 117.417201][ T3615] cdc_ncm 3-1:1.0: bind() failure [ 117.451174][ T3615] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 117.476896][ T3615] cdc_ncm 3-1:1.1: bind() failure [ 117.497864][ T3615] usb 3-1: USB disconnect, device number 6 [ 117.804020][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.008435][ T5526] loop0: detected capacity change from 0 to 512 [ 118.074587][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 118.089187][ T5526] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.222087][ T5526] Quota error (device loop0): v2_read_file_info: Free block number too big (58381 >= 6). [ 118.224257][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.266952][ T5526] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.277603][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.316730][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.354216][ T13] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.383980][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.397924][ T5546] IPVS: set_ctl: invalid protocol: 58 172.20.20.3:20001 [ 118.419769][ T13] usb 5-1: config 0 descriptor?? [ 119.644044][ T3612] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.827758][ T13] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 119.874421][ T13] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 119.884119][ T3612] usb 3-1: Using ep0 maxpacket: 16 [ 119.920103][ T13] microsoft 0003:045E:07DA.0003: no inputs found [ 119.944007][ T13] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 119.995473][ T13] usb 5-1: USB disconnect, device number 2 [ 120.174399][ T3612] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 120.183601][ T3612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.199875][ T3612] usb 3-1: Product: syz [ 120.228674][ T3612] usb 3-1: Manufacturer: syz [ 120.243567][ T3612] usb 3-1: SerialNumber: syz [ 120.270383][ T3612] usb 3-1: config 0 descriptor?? [ 120.579208][ T3612] usb_8dev 3-1:0.0 can0: sending command message failed [ 120.607552][ T3612] usb_8dev 3-1:0.0 can0: can't get firmware version [ 120.754642][ T3612] usb_8dev: probe of 3-1:0.0 failed with error -22 [ 120.782706][ T3612] usb 3-1: USB disconnect, device number 7 [ 121.749030][ T5671] loop1: detected capacity change from 0 to 512 [ 121.916296][ T5671] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.038599][ T5671] Quota error (device loop1): v2_read_file_info: Free block number too big (58381 >= 6). [ 122.127879][ T5671] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.047239][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 126.170543][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.181207][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.191291][ T5842] device bridge_slave_0 entered promiscuous mode [ 126.209157][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.220791][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.231798][ T5842] device bridge_slave_1 entered promiscuous mode [ 126.302927][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.387250][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.510143][ T5867] loop1: detected capacity change from 0 to 512 [ 126.544862][ T5842] team0: Port device team_slave_0 added [ 126.575840][ T5842] team0: Port device team_slave_1 added [ 126.650341][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.684046][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.684416][ T5867] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.710502][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.734807][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.745503][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.778482][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.999016][ T5867] Quota error (device loop1): v2_read_file_info: Free block number too big (58381 >= 6). [ 127.024593][ T5867] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 127.058763][ T5842] device hsr_slave_0 entered promiscuous mode [ 127.092734][ T5842] device hsr_slave_1 entered promiscuous mode [ 127.129711][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.170063][ T5842] Cannot create hsr debugfs directory [ 127.317304][ T1461] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.480568][ T1461] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.642386][ T1461] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.723808][ T5926] loop0: detected capacity change from 0 to 512 [ 127.795745][ T5926] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.810438][ T1461] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.029057][ T5926] Quota error (device loop0): v2_read_file_info: Free block number too big (58381 >= 6). [ 128.062464][ T5926] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 128.930884][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 128.944633][ T1059] block nbd0: Possible stuck request ffff888020ef0000: control (read@0,4096B). Runtime 60 seconds [ 129.271101][ T5966] input: syz1 as /devices/virtual/input/input12 [ 129.517074][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.539421][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.565099][ T5938] device bridge_slave_0 entered promiscuous mode [ 129.573611][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.584602][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.605032][ T5938] device bridge_slave_1 entered promiscuous mode [ 129.715816][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.937324][ T1461] device hsr_slave_0 left promiscuous mode [ 129.973672][ T1461] device hsr_slave_1 left promiscuous mode [ 130.006235][ T1461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.031954][ T1461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.077160][ T1461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.110943][ T1461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.197087][ T1461] device veth1_macvtap left promiscuous mode [ 130.203222][ T1461] device veth0_macvtap left promiscuous mode [ 130.257550][ T1461] device veth1_vlan left promiscuous mode [ 130.289218][ T1461] device veth0_vlan left promiscuous mode [ 130.384047][ T4319] Bluetooth: hci3: command 0x0409 tx timeout [ 130.969040][ T1461] team0 (unregistering): Port device team_slave_1 removed [ 131.053397][ T1461] team0 (unregistering): Port device team_slave_0 removed [ 131.144436][ T1461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.200291][ T1461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.588682][ T1461] bond0 (unregistering): Released all slaves [ 131.625311][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.898280][ T5938] team0: Port device team_slave_0 added [ 131.946198][ T5938] team0: Port device team_slave_1 added [ 132.032230][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.054445][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.282207][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.345548][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.392423][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.464190][ T1078] Bluetooth: hci3: command 0x041b tx timeout [ 132.536077][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.782861][ T5938] device hsr_slave_0 entered promiscuous mode [ 132.797494][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.803845][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.851638][ T5938] device hsr_slave_1 entered promiscuous mode [ 132.886168][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.893755][ T5938] Cannot create hsr debugfs directory [ 134.120588][ T6168] input: syz1 as /devices/virtual/input/input13 [ 134.544067][ T4635] Bluetooth: hci3: command 0x040f tx timeout [ 135.478257][ T5938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 135.512834][ T5938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 135.550486][ T5938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 135.579826][ T5938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 135.890416][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.926786][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.963112][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.986247][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.019871][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.038069][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.061293][ T3653] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.068510][ T3653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.109331][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.123081][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.154602][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.174830][ T3653] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.182052][ T3653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.209839][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.238062][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.277136][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.293234][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.331672][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.381540][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.402848][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.451647][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.478946][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.499256][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.530013][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.575335][ T5938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 136.625039][ T3612] Bluetooth: hci3: command 0x0419 tx timeout [ 137.001225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.024239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.068593][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.212055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.228845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.322386][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.334839][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.392123][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.434882][ T4107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.475416][ T5938] device veth0_vlan entered promiscuous mode [ 137.542861][ T5938] device veth1_vlan entered promiscuous mode [ 137.705723][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.722557][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.755797][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.791762][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.837312][ T5938] device veth0_macvtap entered promiscuous mode [ 137.877616][ T5938] device veth1_macvtap entered promiscuous mode [ 137.892259][ T6317] loop1: detected capacity change from 0 to 512 [ 137.969148][ T6317] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.003111][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.012695][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.065967][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.146186][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.208299][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.234628][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.268806][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.287764][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.298922][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.315881][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.351496][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.404088][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.425704][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.468299][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.490899][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.556347][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.571025][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.615645][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.704021][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.758497][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.851603][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.865574][ T6367] ======================================================= [ 138.865574][ T6367] WARNING: The mand mount option has been deprecated and [ 138.865574][ T6367] and is ignored by this kernel. Remove the mand [ 138.865574][ T6367] option from the mount to silence this warning. [ 138.865574][ T6367] ======================================================= [ 138.918359][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.959512][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.972277][ T6372] input: syz1 as /devices/virtual/input/input14 [ 139.005735][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.045171][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.104433][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.150423][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.168162][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.208557][ T5938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.246104][ T5938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.294077][ T5938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.302813][ T5938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.615536][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.623695][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.739236][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.758352][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.787384][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.828188][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 139.968554][ T6414] binder: 6411:6414 ioctl 4018620d 0 returned -22 [ 141.338302][ T6432] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1119' sets config #0 [ 141.396396][ T1461] device hsr_slave_0 left promiscuous mode [ 141.403499][ T1461] device hsr_slave_1 left promiscuous mode [ 141.455085][ T1461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.491449][ T1461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.547082][ T1461] device bridge_slave_1 left promiscuous mode [ 141.553343][ T1461] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.649575][ T1461] device bridge_slave_0 left promiscuous mode [ 141.688766][ T1461] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.846410][ T6463] binder: 6462:6463 ioctl 4018620d 0 returned -22 [ 143.154090][ T2126] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 143.267963][ T1461] team0 (unregistering): Port device team_slave_1 removed [ 143.374673][ T1461] team0 (unregistering): Port device team_slave_0 removed [ 143.424205][ T2126] usb 1-1: Using ep0 maxpacket: 16 [ 143.453737][ T1461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.570997][ T1461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.594455][ T2126] usb 1-1: unable to get BOS descriptor or descriptor too short [ 143.704337][ T2126] usb 1-1: config 0 has an invalid interface number: 102 but max is 0 [ 143.732802][ T2126] usb 1-1: config 0 has no interface number 0 [ 143.754343][ T2126] usb 1-1: config 0 interface 102 altsetting 160 has an invalid endpoint with address 0x0, skipping [ 143.793344][ T2126] usb 1-1: config 0 interface 102 has no altsetting 0 [ 143.994251][ T2126] usb 1-1: New USB device found, idVendor=19d2, idProduct=1161, bcdDevice=67.dd [ 144.002196][ T1461] bond0 (unregistering): Released all slaves [ 144.027026][ T2126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.134528][ T2126] usb 1-1: Product: syz [ 144.159156][ T2126] usb 1-1: Manufacturer: syz [ 144.163787][ T2126] usb 1-1: SerialNumber: syz [ 144.342512][ T2126] usb 1-1: config 0 descriptor?? [ 144.763739][ T2126] option 1-1:0.102: GSM modem (1-port) converter detected [ 144.820458][ T2126] usb 1-1: USB disconnect, device number 5 [ 144.859739][ T2126] option 1-1:0.102: device disconnected [ 147.550474][ T6668] binder: 6666:6668 ioctl 4018620d 0 returned -22 [ 149.308203][ T6694] binder: 6693:6694 ioctl 4018620d 0 returned -22 [ 157.104947][ T6863] netlink: 'syz.2.1279': attribute type 2 has an invalid length. [ 157.114365][ T3044] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 157.574347][ T3044] usb 5-1: config 0 has no interfaces? [ 157.579944][ T3044] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.620994][ T3044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.671228][ T3044] usb 5-1: config 0 descriptor?? [ 159.025985][ T1059] block nbd0: Possible stuck request ffff888020ef0000: control (read@0,4096B). Runtime 90 seconds [ 160.051464][ T3612] usb 5-1: USB disconnect, device number 3 [ 163.968465][ T7028] raw_sendmsg: syz.3.1343 forgot to set AF_INET. Fix it! [ 164.985503][ T7051] binder: 7050:7051 ioctl 4018620d 0 returned -22 [ 165.166147][ T7057] serio: Serial port pts0 [ 165.584059][ T3612] Bluetooth: hci0: command 0x0406 tx timeout [ 165.591623][ T3612] Bluetooth: hci1: command 0x0406 tx timeout [ 165.604564][ T3612] Bluetooth: hci2: command 0x0406 tx timeout [ 167.240576][ T7089] binder: 7087:7089 ioctl 4018620d 0 returned -22 [ 169.443855][ T7123] binder: 7120:7123 ioctl 4018620d 0 returned -22 [ 170.826022][ C1] eth0: bad gso: type: 1, size: 1408 [ 172.374519][ T7174] chnl_net:caif_netlink_parms(): no params data found [ 172.719650][ T26] audit: type=1326 audit(1725581065.779:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.4.1402" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f94d20ef9 code=0x0 [ 172.844338][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.860485][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.900743][ T7174] device bridge_slave_0 entered promiscuous mode [ 172.936484][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.973523][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.992608][ T7174] device bridge_slave_1 entered promiscuous mode [ 173.090378][ T7174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.115756][ T7174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.188903][ T7174] team0: Port device team_slave_0 added [ 173.202665][ T7174] team0: Port device team_slave_1 added [ 173.231428][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.240862][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.272590][ T7174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.295954][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.302891][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.335538][ T7174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.386952][ T7174] device hsr_slave_0 entered promiscuous mode [ 173.408983][ T7174] device hsr_slave_1 entered promiscuous mode [ 173.417930][ T7174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.428826][ T7174] Cannot create hsr debugfs directory [ 173.560647][ T7174] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.682303][ T7174] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.779145][ T7174] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.900927][ T7174] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.224148][ T4635] Bluetooth: hci6: command 0x0409 tx timeout [ 174.461837][ T7174] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.478264][ T7174] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.500845][ T7174] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.558327][ T7174] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.839080][ T7174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.878439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.920651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.946680][ T7174] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.966140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.984949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.003341][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.011614][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.028764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.029199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.029557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.029811][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.029836][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.030130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.031927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.040168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.042246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.045229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.045688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.046276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.049567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.050158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.067994][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.068645][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.071307][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.229996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.230080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.239269][ T7174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.260132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.260565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.280874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.281295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.281705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.282079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.286443][ T7174] device veth0_vlan entered promiscuous mode [ 175.305651][ T7174] device veth1_vlan entered promiscuous mode [ 175.331982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 175.332370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 175.332798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.333129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.338063][ T7174] device veth0_macvtap entered promiscuous mode [ 175.342889][ T7174] device veth1_macvtap entered promiscuous mode [ 175.366442][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.624137][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.648174][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.665603][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.688338][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.700731][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.700759][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.700774][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.700789][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.700800][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.700815][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.700827][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.702906][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.706422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 175.708195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.708594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.709043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.723153][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.867048][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.884219][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.902245][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.923650][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.981720][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.037337][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.076377][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.092078][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.104995][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.120618][ T7174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.133565][ T7174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.158812][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.192427][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.217583][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.258401][ T7174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.268356][ T7174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.277660][ T7174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.295847][ T7174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.305278][ T1078] Bluetooth: hci6: command 0x041b tx timeout [ 176.487104][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.496212][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.547065][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.586270][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.641860][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.693759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.337919][ T7314] sctp: [Deprecated]: syz.3.1458 (pid 7314) Use of int in maxseg socket option. [ 177.337919][ T7314] Use struct sctp_assoc_value instead [ 177.926485][ T7356] binder: 7352:7356 ioctl 4018620d 0 returned -22 [ 178.384289][ T4635] Bluetooth: hci6: command 0x040f tx timeout [ 179.536908][ T7391] binder: 7390:7391 ioctl 4018620d 0 returned -22 [ 180.464597][ T1078] Bluetooth: hci6: command 0x0419 tx timeout [ 181.253182][ T7432] binder: 7431:7432 ioctl 4018620d 0 returned -22 [ 181.293655][ T7434] serio: Serial port pts0 [ 183.476208][ T7473] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1528'. [ 186.848195][ T7531] binder: 7530:7531 ioctl 4018620d 0 returned -22 [ 188.671203][ T7562] binder: 7561:7562 ioctl 4018620d 0 returned -22 [ 189.106851][ T1059] block nbd0: Possible stuck request ffff888020ef0000: control (read@0,4096B). Runtime 120 seconds [ 191.144074][ T7606] binder: 7605:7606 ioctl 4018620d 0 returned -22 [ 192.463106][ T7613] fuse: Bad value for 'fd' [ 194.230962][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.237914][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.582419][ T7629] loop1: detected capacity change from 0 to 2048 [ 194.707229][ T7629] UDF-fs: bad mount option "gid=00000000000000000000ÿÿÿÿÿÿÿÿ" or missing value [ 194.999028][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.097919][ T7629] loop1: detected capacity change from 0 to 512 [ 195.110035][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.225686][ T7629] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 195.236810][ T7629] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038 (0x7fffffff) [ 195.442247][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.603415][ T7640] binder: 7637:7640 ioctl 4018620d 0 returned -22 [ 195.730204][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.809014][ T7638] chnl_net:caif_netlink_parms(): no params data found [ 195.992090][ T7652] loop0: detected capacity change from 0 to 1024 [ 196.075013][ T7638] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.089362][ T7652] EXT4-fs (loop0): Ignoring removed orlov option [ 196.105079][ T7654] fuse: root generation should be zero [ 196.121561][ T7638] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.126795][ T7652] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 196.130084][ T7638] device bridge_slave_0 entered promiscuous mode [ 196.181182][ T7638] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.224201][ T7638] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.236719][ T7638] device bridge_slave_1 entered promiscuous mode [ 196.239847][ T7652] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 196.397917][ T7638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.500426][ T7638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.588959][ T7638] team0: Port device team_slave_0 added [ 196.627595][ T7638] team0: Port device team_slave_1 added [ 196.698434][ T7638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.722861][ T7638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.792651][ T7638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.794167][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 196.844259][ T7638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.865510][ T7638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.948253][ T7638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.058742][ T7638] device hsr_slave_0 entered promiscuous mode [ 197.076748][ T7638] device hsr_slave_1 entered promiscuous mode [ 197.090847][ T7638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.099699][ T7638] Cannot create hsr debugfs directory [ 197.174336][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 197.294358][ T13] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 197.325964][ T13] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25946, setting to 1024 [ 197.513993][ T13] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 197.543654][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.591866][ T7693] loop1: detected capacity change from 0 to 128 [ 197.601163][ T1078] Bluetooth: hci5: command 0x0409 tx timeout [ 197.634251][ T7669] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 197.655275][ T13] hub 1-1:4.0: USB hub found [ 197.874243][ T13] hub 1-1:4.0: 2 ports detected [ 197.910798][ T144] device hsr_slave_0 left promiscuous mode [ 197.935434][ T144] device hsr_slave_1 left promiscuous mode [ 197.960491][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.975496][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.994864][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.014007][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.031984][ T144] device bridge_slave_1 left promiscuous mode [ 198.044171][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.065922][ T144] device bridge_slave_0 left promiscuous mode [ 198.076046][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.098373][ T144] device veth1_macvtap left promiscuous mode [ 198.144705][ T144] device veth0_macvtap left promiscuous mode [ 198.150820][ T144] device veth1_vlan left promiscuous mode [ 198.158837][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 198.167674][ T144] device veth0_vlan left promiscuous mode [ 198.619356][ T144] team0 (unregistering): Port device team_slave_1 removed [ 198.665301][ T144] team0 (unregistering): Port device team_slave_0 removed [ 198.690721][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.729741][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.910093][ T144] bond0 (unregistering): Released all slaves [ 199.034306][ T13] hub 1-1:4.0: hub_hub_status failed (err = -32) [ 199.045005][ T13] hub 1-1:4.0: config failed, can't get hub status (err -32) [ 199.185853][ T13] usb 1-1: USB disconnect, device number 6 [ 199.355260][ T7638] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 199.384863][ T7638] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 199.413230][ T7638] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 199.454653][ T7638] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 199.650571][ T7638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.672940][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.674696][ T3044] Bluetooth: hci5: command 0x041b tx timeout [ 199.704791][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.714130][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 199.721862][ T3611] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 199.775260][ T7638] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.832631][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.856412][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.881641][ T4032] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.888729][ T4032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.927549][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.944788][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.968474][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.004424][ T4032] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.011507][ T4032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.014212][ T3611] usb 1-1: Using ep0 maxpacket: 8 [ 200.038763][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.075088][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.104423][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.126215][ T13] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 200.154891][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.162968][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.194253][ T3611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.208785][ T13] usb 4-1: config 0 descriptor?? [ 200.225643][ T3611] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.226383][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.259102][ T3611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.276007][ T13] pwc: Askey VC010 type 2 USB webcam detected. [ 200.289903][ T3611] usb 1-1: config 0 descriptor?? [ 200.320221][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.345386][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.369395][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.406130][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.433223][ T7638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.456641][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.475553][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.484268][ T13] pwc: send_video_command error -71 [ 200.486646][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.490222][ T13] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 200.551252][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.560314][ T3611] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 200.655499][ T13] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 200.713806][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.731950][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.763834][ T7638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.771126][ T7718] udc-core: couldn't find an available UDC or it's busy [ 200.778503][ T13] usb 4-1: USB disconnect, device number 4 [ 200.807575][ T7718] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 200.816725][ T7760] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 201.184000][ T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 201.434597][ T4635] Bluetooth: hci4: command 0x0406 tx timeout [ 201.437031][ T3611] usb 1-1: USB disconnect, device number 7 [ 201.460988][ T3611] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 201.464083][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.500478][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.548311][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.583184][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.615181][ T7638] device veth0_vlan entered promiscuous mode [ 201.626765][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.645227][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.688106][ T7638] device veth1_vlan entered promiscuous mode [ 201.745063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.762489][ T1078] Bluetooth: hci5: command 0x040f tx timeout [ 201.774814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 201.814774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.839774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.870610][ T7638] device veth0_macvtap entered promiscuous mode [ 201.906693][ T7638] device veth1_macvtap entered promiscuous mode [ 201.964992][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.004298][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.031610][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.074862][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.098468][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.128327][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.165204][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.201542][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.231548][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.248894][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.301661][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.313414][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.345425][ T7638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.370912][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.388159][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 202.404111][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.413128][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.435985][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.473982][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.513475][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.545831][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.565491][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.601428][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.615288][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.636078][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.655549][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.673691][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.686301][ T7638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.702589][ T7638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.719176][ T7638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.736035][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.756071][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.791834][ T7638] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.806183][ T7638] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.823279][ T7638] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.832430][ T7638] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.864847][ T7775] input: syz1 as /devices/virtual/input/input15 [ 203.138232][ T3653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.173956][ T3653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.237337][ T7782] binder: 7777:7782 ioctl 4018620d 0 returned -22 [ 203.237871][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.288403][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.302052][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.375380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 203.399948][ T13] usb 4-1: device not accepting address 5, error -71 [ 203.825171][ T3613] Bluetooth: hci5: command 0x0419 tx timeout [ 204.888443][ T7789] loop3: detected capacity change from 0 to 512 [ 204.974864][ T7789] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 205.007442][ T7789] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 205.044185][ T1075] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 205.102059][ T7789] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 205.180133][ T7789] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 205.203262][ T7789] System zones: 0-2, 18-18, 34-34 [ 205.236892][ T7789] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 205.310847][ T7789] EXT4-fs (loop3): 1 truncate cleaned up [ 205.332014][ T7789] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.343134][ T1075] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 205.421412][ T26] audit: type=1326 audit(1725581098.479:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.3.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e5218ef9 code=0x7ffc0000 [ 205.453323][ T26] audit: type=1326 audit(1725581098.479:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.3.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fc1e5218ef9 code=0x7ffc0000 [ 205.495910][ T26] audit: type=1326 audit(1725581098.489:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.3.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e5218ef9 code=0x7ffc0000 [ 205.539664][ T26] audit: type=1326 audit(1725581098.529:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.3.1610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e5218ef9 code=0x7ffc0000 [ 207.144047][ T1075] usb 2-1: unable to read config index 4 descriptor/all [ 207.326932][ T1075] usb 2-1: can't read configurations, error -71 [ 207.610024][ T7814] chnl_net:caif_netlink_parms(): no params data found [ 207.714058][ T7814] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.721319][ T7814] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.741147][ T7814] device bridge_slave_0 entered promiscuous mode [ 207.752653][ T7814] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.766969][ T7814] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.783263][ T7814] device bridge_slave_1 entered promiscuous mode [ 207.834979][ T7814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.857880][ T7814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.917233][ T7814] team0: Port device team_slave_0 added [ 207.933711][ T7814] team0: Port device team_slave_1 added [ 207.968085][ T7814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.986840][ T7814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.024049][ T7814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.046082][ T7814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.053065][ T7814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.101041][ T7814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.163213][ T7814] device hsr_slave_0 entered promiscuous mode [ 208.179568][ T7814] device hsr_slave_1 entered promiscuous mode [ 208.192995][ T7814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.206610][ T7814] Cannot create hsr debugfs directory [ 208.364978][ T7814] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.607178][ T7814] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.434547][ T1078] Bluetooth: hci1: command 0x0409 tx timeout [ 210.089092][ T7814] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.169619][ T7814] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.241986][ T144] device hsr_slave_0 left promiscuous mode [ 210.258325][ T144] device hsr_slave_1 left promiscuous mode [ 210.281297][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.287302][ T7830] loop3: detected capacity change from 0 to 512 [ 210.291281][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.346698][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.368984][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.379469][ T144] device bridge_slave_1 left promiscuous mode [ 210.393258][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.465161][ T144] device bridge_slave_0 left promiscuous mode [ 210.471400][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.533271][ T144] device veth1_macvtap left promiscuous mode [ 210.559367][ T144] device veth0_macvtap left promiscuous mode [ 210.567587][ T144] device veth1_vlan left promiscuous mode [ 210.573417][ T144] device veth0_vlan left promiscuous mode [ 210.587997][ T7835] loop0: detected capacity change from 0 to 128 [ 210.988268][ T144] team0 (unregistering): Port device team_slave_1 removed [ 211.012209][ T144] team0 (unregistering): Port device team_slave_0 removed [ 211.041857][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.071990][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.215596][ T144] bond0 (unregistering): Released all slaves [ 211.504371][ T3615] Bluetooth: hci1: command 0x041b tx timeout [ 211.898507][ T7830] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 211.921834][ T7843] binder: 7834:7843 ioctl 4018620d 0 returned -22 [ 212.083128][ T7830] ext4 filesystem being mounted at /137/bus supports timestamps until 2038 (0x7fffffff) [ 212.105623][ T7814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.139221][ T7814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.176806][ T7814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.202101][ T7814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.428059][ T7814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.451939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.470032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.486255][ T7814] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.509710][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.524629][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.533161][ T3649] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.540257][ T3649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.570401][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.592228][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.621759][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.635195][ T3649] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.642375][ T3649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.658855][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.696271][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.715370][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.736477][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.753225][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.771959][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.781940][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.801634][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.819630][ T7814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.841204][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.856456][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.873444][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.884318][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.050035][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.067135][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.084046][ T7814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.380550][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 213.398606][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.468225][ T7814] device veth0_vlan entered promiscuous mode [ 213.494709][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.516527][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.558915][ T7814] device veth1_vlan entered promiscuous mode [ 213.575821][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.584733][ T4635] Bluetooth: hci1: command 0x040f tx timeout [ 213.599044][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.629576][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 213.685288][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 213.694531][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.727116][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.772788][ T7814] device veth0_macvtap entered promiscuous mode [ 213.806884][ T7814] device veth1_macvtap entered promiscuous mode [ 213.875586][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.911060][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.941855][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.958891][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.013096][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.025637][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.061770][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.092141][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.122790][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.154011][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.163850][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.203967][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.248488][ T7814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.302105][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 214.333307][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 214.364342][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 214.404808][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.442862][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.480363][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.509495][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.558678][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.604594][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.623013][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.664205][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.682849][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.716414][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.764807][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.783960][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.802884][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.821973][ T7814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.844590][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.853368][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.876341][ T7814] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.894848][ T7814] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.903738][ T7814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.921067][ T7814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.116713][ T3653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.151537][ T3653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.188653][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 215.204964][ T4032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.213066][ T4032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.244873][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.675177][ T4635] Bluetooth: hci1: command 0x0419 tx timeout [ 216.727410][ T7866] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 216.736165][ T7866] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 216.938394][ T7874] loop0: detected capacity change from 0 to 256 [ 217.147637][ T7878] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 217.171362][ T7874] FAT-fs (loop0): Directory bread(block 64) failed [ 217.196043][ T7874] FAT-fs (loop0): Directory bread(block 65) failed [ 217.213466][ T7874] FAT-fs (loop0): Directory bread(block 66) failed [ 217.230433][ T7874] FAT-fs (loop0): Directory bread(block 67) failed [ 217.268233][ T7874] FAT-fs (loop0): Directory bread(block 68) failed [ 217.301392][ T7874] FAT-fs (loop0): Directory bread(block 69) failed [ 217.342639][ T7874] FAT-fs (loop0): Directory bread(block 70) failed [ 217.382318][ T7874] FAT-fs (loop0): Directory bread(block 71) failed [ 217.434847][ T7874] FAT-fs (loop0): Directory bread(block 72) failed [ 217.574279][ T7874] FAT-fs (loop0): Directory bread(block 73) failed [ 217.603651][ T7888] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 217.718955][ T7888] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 217.763269][ T7890] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 217.798566][ T7888] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 217.868695][ T7890] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 218.343961][ T7898] binder: 7895:7898 ioctl 4018620d 0 returned -22 [ 218.420020][ T144] device hsr_slave_0 left promiscuous mode [ 218.437354][ T144] device hsr_slave_1 left promiscuous mode [ 218.449795][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.459919][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.490080][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.500373][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.516499][ T144] device bridge_slave_1 left promiscuous mode [ 218.522820][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.543477][ T144] device bridge_slave_0 left promiscuous mode [ 218.552698][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.572949][ T144] device veth1_macvtap left promiscuous mode [ 218.584853][ T144] device veth0_macvtap left promiscuous mode [ 218.590961][ T144] device veth1_vlan left promiscuous mode [ 218.603732][ T144] device veth0_vlan left promiscuous mode [ 218.963023][ T144] team0 (unregistering): Port device team_slave_1 removed [ 218.979455][ T144] team0 (unregistering): Port device team_slave_0 removed [ 219.012070][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.030536][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.171690][ T144] bond0 (unregistering): Released all slaves [ 219.201337][ T1059] block nbd0: Possible stuck request ffff888020ef0000: control (read@0,4096B). Runtime 150 seconds [ 220.437439][ T7910] input: syz1 as /devices/virtual/input/input16 [ 220.998472][ T7911] chnl_net:caif_netlink_parms(): no params data found [ 221.243660][ T7911] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.263982][ T7911] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.272121][ T7911] device bridge_slave_0 entered promiscuous mode [ 221.322470][ T7911] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.352871][ T7911] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.364232][ T7911] device bridge_slave_1 entered promiscuous mode [ 221.440772][ T7921] loop1: detected capacity change from 0 to 512 [ 221.475831][ T7911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.506710][ T7921] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 221.543678][ T7911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.627350][ T7921] EXT4-fs error (device loop1): ext4_do_update_inode:5171: inode #3: comm syz.1.1639: corrupted inode contents [ 221.671550][ T7911] team0: Port device team_slave_0 added [ 221.712374][ T7911] team0: Port device team_slave_1 added [ 221.721500][ T7921] EXT4-fs error (device loop1): ext4_dirty_inode:6004: inode #3: comm syz.1.1639: mark_inode_dirty error [ 221.794327][ T7921] EXT4-fs error (device loop1): ext4_do_update_inode:5171: inode #3: comm syz.1.1639: corrupted inode contents [ 221.840741][ T7921] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.1639: mark_inode_dirty error [ 221.843015][ T7911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.874062][ T7911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.904914][ T7921] Quota error (device loop1): write_blk: dquota write failed [ 221.930842][ T7921] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 221.941497][ T7911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.961821][ T7921] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.1639: Failed to acquire dquot type 0 [ 221.989089][ T7911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.012357][ T7911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.051662][ T7921] EXT4-fs error (device loop1): ext4_do_update_inode:5171: inode #16: comm syz.1.1639: corrupted inode contents [ 222.086235][ T7921] EXT4-fs error (device loop1): ext4_dirty_inode:6004: inode #16: comm syz.1.1639: mark_inode_dirty error [ 222.099189][ T7911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.144361][ T7921] EXT4-fs error (device loop1): ext4_do_update_inode:5171: inode #16: comm syz.1.1639: corrupted inode contents [ 222.173221][ T7921] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.1639: mark_inode_dirty error [ 222.209031][ T7921] EXT4-fs error (device loop1): ext4_do_update_inode:5171: inode #16: comm syz.1.1639: corrupted inode contents [ 222.209131][ T7911] device hsr_slave_0 entered promiscuous mode [ 222.254713][ T7921] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 222.265143][ T7911] device hsr_slave_1 entered promiscuous mode [ 222.287541][ T7921] EXT4-fs error (device loop1): ext4_do_update_inode:5171: inode #16: comm syz.1.1639: corrupted inode contents [ 222.300055][ T7911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.319564][ T7911] Cannot create hsr debugfs directory [ 222.340944][ T7921] EXT4-fs error (device loop1): ext4_truncate:4272: inode #16: comm syz.1.1639: mark_inode_dirty error [ 222.375124][ T7921] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 222.454610][ T7921] EXT4-fs (loop1): 1 truncate cleaned up [ 222.460396][ T7921] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 222.486113][ T7931] loop3: detected capacity change from 0 to 512 [ 222.603619][ T7911] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.634328][ T4635] Bluetooth: hci1: command 0x0409 tx timeout [ 222.651965][ T7921] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038 (0x7fffffff) [ 222.746539][ T7911] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.856190][ T7911] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.951778][ T7911] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.672426][ T27] INFO: task udevd:3561 blocked for more than 143 seconds. [ 223.691086][ T27] Not tainted 5.15.166-syzkaller #0 [ 223.697771][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 223.713942][ T27] task:udevd state:D stack:24544 pid: 3561 ppid: 3028 flags:0x00004002 [ 223.723180][ T27] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 223.788859][ T27] [ 223.791843][ T27] __schedule+0x12c4/0x45b0 [ 223.828398][ T27] ? release_firmware_map_entry+0x190/0x190 [ 223.843955][ T27] ? preempt_schedule+0xd9/0xe0 [ 223.848859][ T27] ? release_firmware_map_entry+0x190/0x190 [ 223.863964][ T27] ? preempt_schedule+0xd9/0xe0 [ 223.868859][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 223.882844][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 223.889568][ T27] ? print_irqtrace_events+0x210/0x210 [ 223.902965][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 223.914533][ T27] schedule+0x11b/0x1f0 [ 223.918735][ T27] io_schedule+0x88/0x100 [ 223.923071][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 223.936764][ T27] ? wait_on_page_bit+0x50/0x50 [ 223.941644][ T27] ? blkdev_fallocate+0x4e0/0x4e0 [ 223.951779][ T27] ? rcu_lock_release+0x20/0x20 [ 223.961629][ T27] ? vsnprintf+0x1c70/0x1c70 [ 223.970904][ T27] do_read_cache_page+0x9c1/0x1040 [ 223.979656][ T27] read_part_sector+0xd8/0x530 [ 223.989162][ T27] adfspart_check_ICS+0xd9/0xd00 [ 223.997838][ T27] ? ptr_to_hashval+0x60/0x60 [ 224.002580][ T27] ? adfspart_check_ADFS+0x8b0/0x8b0 [ 224.012600][ T27] ? snprintf+0xd6/0x120 [ 224.021623][ T27] ? __rmqueue_pcplist+0x2030/0x2030 [ 224.031715][ T27] ? __vmalloc_node_range+0x6aa/0x8c0 [ 224.040880][ T27] ? vsnprintf+0x1b89/0x1c70 [ 224.050232][ T27] ? vsnprintf+0x190/0x1c70 [ 224.058356][ T27] ? vscnprintf+0x80/0x80 [ 224.064520][ T27] ? alloc_pages+0x458/0x570 [ 224.069155][ T27] bdev_disk_changed+0x964/0x16c0 [ 224.083183][ T27] ? blk_drop_partitions+0x1b0/0x1b0 [ 224.088946][ T27] ? iput+0x371/0x8b0 [ 224.092947][ T27] blkdev_get_whole+0x2fb/0x390 [ 224.105721][ T27] blkdev_get_by_dev+0x2bc/0xa50 [ 224.110702][ T27] blkdev_open+0x138/0x2d0 [ 224.121298][ T27] ? block_ioctl+0xf0/0xf0 [ 224.129491][ T27] do_dentry_open+0x807/0xfb0 [ 224.140355][ T27] path_openat+0x2705/0x2f20 [ 224.147810][ T27] ? do_filp_open+0x460/0x460 [ 224.152545][ T27] do_filp_open+0x21c/0x460 [ 224.164489][ T27] ? vfs_tmpfile+0x2e0/0x2e0 [ 224.169146][ T27] ? _raw_spin_unlock+0x24/0x40 [ 224.181159][ T27] ? alloc_fd+0x598/0x630 [ 224.186966][ T27] do_sys_openat2+0x13b/0x4f0 [ 224.191679][ T27] ? do_sys_open+0x220/0x220 [ 224.202963][ T27] ? __fdget+0x158/0x220 [ 224.209987][ T27] __x64_sys_openat+0x243/0x290 [ 224.221486][ T27] ? __ia32_sys_open+0x270/0x270 [ 224.229444][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 224.243709][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 224.250484][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 224.267506][ T27] do_syscall_64+0x3b/0xb0 [ 224.271969][ T27] ? clear_bhb_loop+0x15/0x70 [ 224.284223][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.290630][ T26] audit: type=1800 audit(1725581117.349:7): pid=7921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1639" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 224.294028][ T7931] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3. [ 224.318735][ T27] RIP: 0033:0x7f6b660029a4 [ 224.335133][ T27] RSP: 002b:00007ffecadde430 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 224.343752][ T27] RAX: ffffffffffffffda RBX: 000055f4a66d1cf0 RCX: 00007f6b660029a4 [ 224.353316][ T27] RDX: 00000000000a0800 RSI: 000055f4a66c27b0 RDI: 00000000ffffff9c [ 224.361391][ T27] RBP: 000055f4a66c27b0 R08: 0000000000000001 R09: 0000000000000010 [ 224.370000][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 224.378390][ T27] R13: 000055f4a66c32b0 R14: 0000000000000001 R15: 000055f4a66b0910 [ 224.386452][ T27] [ 224.389505][ T27] INFO: task syz.0.251:4221 blocked for more than 144 seconds. [ 224.400460][ T27] Not tainted 5.15.166-syzkaller #0 [ 224.406586][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 224.415796][ T27] task:syz.0.251 state:D stack:27520 pid: 4221 ppid: 3569 flags:0x00004006 [ 224.425394][ T27] Call Trace: [ 224.428682][ T27] [ 224.431633][ T27] __schedule+0x12c4/0x45b0 [ 224.437104][ T27] ? release_firmware_map_entry+0x190/0x190 [ 224.443007][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 224.448530][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 224.453734][ T27] schedule+0x11b/0x1f0 [ 224.458856][ T27] schedule_preempt_disabled+0xf/0x20 [ 224.465511][ T27] __mutex_lock_common+0xe34/0x25a0 [ 224.471232][ T27] ? blkdev_put+0xfb/0x790 [ 224.476394][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 224.481623][ T27] mutex_lock_nested+0x17/0x20 [ 224.486457][ T27] blkdev_put+0xfb/0x790 [ 224.490708][ T27] ? __rwlock_init+0x140/0x140 [ 224.495784][ T27] blkdev_close+0x7c/0xa0 [ 224.500126][ T27] ? blkdev_open+0x2d0/0x2d0 [ 224.505717][ T27] __fput+0x3fe/0x8e0 [ 224.509714][ T27] task_work_run+0x129/0x1a0 [ 224.514698][ T27] get_signal+0x143a/0x14e0 [ 224.519204][ T27] ? stack_depot_save+0x3db/0x440 [ 224.524595][ T27] ? kasan_save_stack+0x4d/0x60 [ 224.529449][ T27] ? kasan_save_stack+0x36/0x60 [ 224.534691][ T27] ? kasan_record_aux_stack+0xba/0x100 [ 224.540155][ T27] ? task_work_add+0x2f/0x1d0 [ 224.545349][ T27] arch_do_signal_or_restart+0xc3/0x1890 [ 224.551005][ T27] ? get_sigframe_size+0x10/0x10 [ 224.556346][ T27] ? kick_process+0xd8/0x150 [ 224.561116][ T27] ? exit_to_user_mode_loop+0x39/0x130 [ 224.566978][ T27] exit_to_user_mode_loop+0x97/0x130 [ 224.572563][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 224.578270][ T27] syscall_exit_to_user_mode+0x5d/0x240 [ 224.583822][ T27] do_syscall_64+0x47/0xb0 [ 224.588387][ T27] ? clear_bhb_loop+0x15/0x70 [ 224.593066][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.599037][ T27] RIP: 0033:0x7fee963b2ef9 [ 224.603448][ T27] RSP: 002b:00007fee9482c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.612044][ T27] RAX: 0000000000000000 RBX: 00007fee9656bf80 RCX: 00007fee963b2ef9 [ 224.620069][ T27] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 224.628468][ T27] RBP: 00007fee9642501e R08: 0000000000000000 R09: 0000000000000000 [ 224.636573][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.645945][ T27] R13: 0000000000000000 R14: 00007fee9656bf80 R15: 00007ffd9ef4e608 [ 224.654001][ T27] [ 224.680434][ T27] INFO: task syz.0.251:4227 blocked for more than 144 seconds. [ 224.693607][ T27] Not tainted 5.15.166-syzkaller #0 [ 224.705310][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 224.720572][ T3613] Bluetooth: hci1: command 0x041b tx timeout [ 224.726826][ T27] task:syz.0.251 state:D stack:27520 pid: 4227 ppid: 3569 flags:0x00004004 [ 224.751574][ T27] Call Trace: [ 224.755286][ T27] [ 224.758235][ T27] __schedule+0x12c4/0x45b0 [ 224.762785][ T27] ? release_firmware_map_entry+0x190/0x190 [ 224.769264][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 224.775074][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 224.780599][ T27] schedule+0x11b/0x1f0 [ 224.784888][ T27] schedule_preempt_disabled+0xf/0x20 [ 224.790373][ T27] __mutex_lock_common+0xe34/0x25a0 [ 224.795645][ T27] ? blkdev_get_by_dev+0x14d/0xa50 [ 224.800792][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 224.806165][ T27] ? iput+0x371/0x8b0 [ 224.810152][ T27] ? ilookup+0x1d6/0x210 [ 224.814438][ T27] mutex_lock_nested+0x17/0x20 [ 224.819221][ T27] blkdev_get_by_dev+0x14d/0xa50 [ 224.824256][ T27] blkdev_open+0x138/0x2d0 [ 224.828716][ T27] ? block_ioctl+0xf0/0xf0 [ 224.833149][ T27] do_dentry_open+0x807/0xfb0 [ 224.837896][ T27] path_openat+0x2705/0x2f20 [ 224.842507][ T27] ? do_filp_open+0x460/0x460 [ 224.847303][ T27] do_filp_open+0x21c/0x460 [ 224.851824][ T27] ? vfs_tmpfile+0x2e0/0x2e0 [ 224.856536][ T27] ? _raw_spin_unlock+0x24/0x40 [ 224.861393][ T27] ? alloc_fd+0x598/0x630 [ 224.866068][ T27] do_sys_openat2+0x13b/0x4f0 [ 224.870770][ T27] ? do_sys_open+0x220/0x220 [ 224.875770][ T27] __x64_sys_openat+0x243/0x290 [ 224.881084][ T27] ? __ia32_sys_open+0x270/0x270 [ 224.886231][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 224.892238][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 224.897492][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 224.903479][ T27] do_syscall_64+0x3b/0xb0 [ 224.908114][ T27] ? clear_bhb_loop+0x15/0x70 [ 224.912797][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.918753][ T27] RIP: 0033:0x7fee963b1890 [ 224.923200][ T27] RSP: 002b:00007fee9480ab70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 224.931745][ T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fee963b1890 [ 224.939881][ T27] RDX: 0000000000000000 RSI: 00007fee9480ac10 RDI: 00000000ffffff9c [ 224.948234][ T27] RBP: 00007fee9480ac10 R08: 0000000000000000 R09: 002364626e2f7665 [ 224.956684][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 224.964904][ T27] R13: 0000000000000000 R14: 00007fee9656c058 R15: 00007ffd9ef4e608 [ 224.973006][ T27] [ 224.976549][ T27] [ 224.976549][ T27] Showing all locks held in the system: [ 224.985884][ T27] 2 locks held by kworker/0:0/7: [ 224.990857][ T27] 1 lock held by khungtaskd/27: [ 224.996241][ T27] #0: ffffffff8c91fbe0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 225.005969][ T27] 4 locks held by kworker/u4:1/144: [ 225.011172][ T27] #0: ffff8880171d5938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 225.023046][ T27] #1: ffffc9000160fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 225.033393][ T27] #2: ffffffff8da25a50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 225.043108][ T27] #3: ffffffff8da31608 (rtnl_mutex){+.+.}-{3:3}, at: ip6gre_exit_batch_net+0xc0/0x460 [ 225.053136][ T27] 3 locks held by kworker/0:3/2126: [ 225.058608][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 225.069305][ T27] #1: ffffc900062e7d20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 225.079479][ T27] #2: ffffffff8c9241a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 225.098817][ T27] 2 locks held by getty/3330: [ 225.103608][ T27] #0: ffff88814b356098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 225.116823][ T27] #1: ffffc900024b32e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 225.133955][ T27] 1 lock held by udevd/3561: [ 225.138690][ T27] #0: ffff888020e8b918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x14d/0xa50 [ 225.151073][ T27] 1 lock held by syz.0.251/4221: [ 225.156137][ T27] #0: ffff888020e8b918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xfb/0x790 [ 225.165514][ T27] 1 lock held by syz.0.251/4227: [ 225.170458][ T27] #0: ffff888020e8b918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x14d/0xa50 [ 225.180566][ T27] 3 locks held by syz-executor/4433: [ 225.186352][ T27] #0: ffff88802378cff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 225.197554][ T27] #1: ffff88802378c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070 [ 225.207179][ T27] #2: ffffffff8db7ac68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220 [ 225.217432][ T27] 3 locks held by kworker/1:8/4635: [ 225.222636][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 225.233157][ T27] #1: ffffc90003107d20 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 225.247348][ T27] #2: ffff88805ec3d400 (&nsim_dev->port_list_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x56/0xab0 [ 225.258732][ T27] 7 locks held by syz-executor/7911: [ 225.264153][ T27] #0: ffff88807eb4c460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 [ 225.273040][ T27] #1: ffff888024b8a088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 225.283059][ T27] #2: ffff888147e14a00 (kn->active#232){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 225.293675][ T27] #3: ffffffff8d373348 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf1/0x470 [ 225.304318][ T27] #4: ffff88801f3d2178 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xc2/0x7f0 [ 225.315233][ T27] #5: ffff88805ec3d400 (&nsim_dev->port_list_lock){+.+.}-{3:3}, at: nsim_dev_reload_destroy+0x118/0x240 [ 225.326680][ T27] #6: ffffffff8da31608 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0xa4f/0xc40 [ 225.335974][ T27] 3 locks held by syz.1.1639/7921: [ 225.341071][ T27] #0: ffff888074edcff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 225.350862][ T27] #1: ffff888074edc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070 [ 225.360420][ T27] #2: ffffffff8c9241a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740 [ 225.371395][ T27] 3 locks held by syz.2.1642/7934: [ 225.376538][ T27] #0: ffff88807ce60ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 225.386454][ T27] #1: ffff88807ce60078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070 [ 225.396436][ T27] #2: ffffffff8db7ac68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220 [ 225.406567][ T27] 3 locks held by syz.3.1641/7931: [ 225.411674][ T27] #0: ffff88807c264ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 225.422019][ T27] #1: ffff88807c264078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x431/0x1070 [ 225.432182][ T27] #2: ffffffff8db7ac68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x220 [ 225.442617][ T27] [ 225.448434][ T27] ============================================= [ 225.448434][ T27] [ 225.459207][ T27] NMI backtrace for cpu 1 [ 225.463555][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.166-syzkaller #0 [ 225.471544][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 225.481615][ T27] Call Trace: [ 225.484944][ T27] [ 225.487880][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 225.492549][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 225.498175][ T27] ? panic+0x860/0x860 [ 225.502233][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 225.507324][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 225.512238][ T27] ? __wake_up_klogd+0xd5/0x100 [ 225.517068][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 225.523198][ T27] ? _printk+0xd1/0x120 [ 225.527331][ T27] ? panic+0x860/0x860 [ 225.531381][ T27] ? __wake_up_klogd+0xcc/0x100 [ 225.536205][ T27] ? panic+0x860/0x860 [ 225.540253][ T27] ? __rcu_read_unlock+0x92/0x100 [ 225.545254][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 225.551296][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 225.557258][ T27] watchdog+0xe72/0xeb0 [ 225.561397][ T27] kthread+0x3f6/0x4f0 [ 225.565444][ T27] ? hungtask_pm_notify+0x50/0x50 [ 225.570452][ T27] ? kthread_blkcg+0xd0/0xd0 [ 225.575021][ T27] ret_from_fork+0x1f/0x30 [ 225.579422][ T27] [ 225.583383][ T27] Sending NMI from CPU 1 to CPUs 0: [ 225.589404][ C0] NMI backtrace for cpu 0 [ 225.589417][ C0] CPU: 0 PID: 3649 Comm: kworker/u4:6 Not tainted 5.15.166-syzkaller #0 [ 225.589434][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 225.589443][ C0] Workqueue: bat_events batadv_nc_worker [ 225.589465][ C0] RIP: 0010:check_preemption_disabled+0x7/0x110 [ 225.589486][ C0] Code: 92 8a e8 2c 01 00 00 65 ff 0d 01 23 cf 75 5b c3 cc cc cc 48 c7 c7 a0 00 d9 8a 48 c7 c6 e0 00 d9 8a eb 00 41 57 41 56 41 54 53 <48> 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 8b 1d 08 [ 225.589499][ C0] RSP: 0018:ffffc90003127998 EFLAGS: 00000046 [ 225.589511][ C0] RAX: 0000000000000002 RBX: ffff88807aaa0b40 RCX: ffffffff81631a88 [ 225.589522][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b3cc0 RDI: ffffffff8ad90100 [ 225.589533][ C0] RBP: ffffc90003127a80 R08: dffffc0000000000 R09: fffffbfff20e2235 [ 225.589544][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807aaa0b60 [ 225.589554][ C0] R13: 0000000000000002 R14: ffff88807aaa0ae8 R15: 1ffff1100f55415d [ 225.589565][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 225.589577][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.589587][ C0] CR2: 000000110c304482 CR3: 0000000022586000 CR4: 00000000003506f0 [ 225.589601][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 225.589610][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 225.589619][ C0] Call Trace: [ 225.589624][ C0] [ 225.589630][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 225.589647][ C0] ? read_lock_is_recursive+0x10/0x10 [ 225.589664][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 225.589686][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 225.589700][ C0] ? nmi_handle+0xf7/0x370 [ 225.589716][ C0] ? check_preemption_disabled+0x7/0x110 [ 225.589733][ C0] ? default_do_nmi+0x62/0x150 [ 225.589747][ C0] ? exc_nmi+0xa8/0x100 [ 225.589761][ C0] ? end_repeat_nmi+0x16/0x31 [ 225.589777][ C0] ? mark_lock+0x98/0x340 [ 225.589790][ C0] ? check_preemption_disabled+0x7/0x110 [ 225.589807][ C0] ? check_preemption_disabled+0x7/0x110 [ 225.589823][ C0] ? check_preemption_disabled+0x7/0x110 [ 225.589839][ C0] [ 225.589843][ C0] [ 225.589848][ C0] lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 225.589864][ C0] ? print_irqtrace_events+0x210/0x210 [ 225.589878][ C0] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 225.589892][ C0] ? __local_bh_enable_ip+0x102/0x1f0 [ 225.589908][ C0] trace_hardirqs_on+0x67/0x80 [ 225.589924][ C0] __local_bh_enable_ip+0x164/0x1f0 [ 225.589938][ C0] ? batadv_nc_purge_paths+0x30e/0x3b0 [ 225.589953][ C0] ? _local_bh_enable+0xa0/0xa0 [ 225.589967][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 225.589982][ C0] ? batadv_nc_purge_paths+0x3b0/0x3b0 [ 225.589998][ C0] batadv_nc_purge_paths+0x30e/0x3b0 [ 225.590018][ C0] batadv_nc_worker+0x2cf/0x5b0 [ 225.590036][ C0] process_one_work+0x8a1/0x10c0 [ 225.590057][ C0] ? worker_detach_from_pool+0x260/0x260 [ 225.590074][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 225.590090][ C0] ? kthread_data+0x4e/0xc0 [ 225.590104][ C0] ? wq_worker_running+0x97/0x170 [ 225.590118][ C0] worker_thread+0xaca/0x1280 [ 225.590142][ C0] kthread+0x3f6/0x4f0 [ 225.590154][ C0] ? rcu_lock_release+0x20/0x20 [ 225.590168][ C0] ? kthread_blkcg+0xd0/0xd0 [ 225.590182][ C0] ret_from_fork+0x1f/0x30 [ 225.590202][ C0] [ 225.592188][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 225.931497][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.166-syzkaller #0 [ 225.939455][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 225.949496][ T27] Call Trace: [ 225.952784][ T27] [ 225.955700][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 225.960407][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 225.966034][ T27] ? panic+0x860/0x860 [ 225.970107][ T27] panic+0x318/0x860 [ 225.973986][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 225.979618][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 225.985761][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 225.990962][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 225.997012][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 226.003147][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 226.009288][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 226.015456][ T27] watchdog+0xeb0/0xeb0 [ 226.019623][ T27] kthread+0x3f6/0x4f0 [ 226.023680][ T27] ? hungtask_pm_notify+0x50/0x50 [ 226.028868][ T27] ? kthread_blkcg+0xd0/0xd0 [ 226.033453][ T27] ret_from_fork+0x1f/0x30 [ 226.037866][ T27] [ 226.041108][ T27] Kernel Offset: disabled [ 226.045442][ T27] Rebooting in 86400 seconds..