last executing test programs: 2m2.396094011s ago: executing program 0 (id=85): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_connect(0x5, 0x164, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007af28810d30bf4055b000000000109025201010000000009044000000e01"], 0x0) 2m0.55609525s ago: executing program 0 (id=89): r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m59.44146336s ago: executing program 0 (id=92): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r4}, 0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000700)=@sack_info={0x0, 0x2, 0x6}, &(0x7f0000000740)=0xc) 1m58.20083592s ago: executing program 0 (id=93): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f00000020c0)={0x0, 0x2}, 0x2) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, 0x0) syz_io_uring_setup(0x8005e2, &(0x7f0000000340)={0x0, 0x406bc0, 0x2200, 0xa, 0x200000, 0x0, r1}, &(0x7f0000000400)=0x0, &(0x7f0000000140)) socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0601, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r6) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x8001af84, 0x0) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r8, 0x1e) keyctl$KEYCTL_MOVE(0x1e, 0x0, r6, r7, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x1000000, 0x9, 0x0, 0x5}) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) r9 = mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000001040)=[0xe]) 1m56.781798925s ago: executing program 0 (id=98): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92", '\x00', "3e6a808941a488cc"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"], 0x0}, 0x94) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0xc048aeca, &(0x7f0000000080)) sync_file_range(r4, 0x81, 0x3, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x1f, 0x1}, 0x5, 0xe0, 0x0, 0x0, 0x6, 0xffff6201, 0x1, 0x8000, 0x8000, 0x0}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) fsetxattr$security_ima(r3, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x3, 0x3, 0x16, 0x1, 0x15, "90d92e069fdd65c7638fb8e4eb609e868eaf18e435"}, 0x1e, 0x2) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20040054) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000140)) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x10000000, 0x0, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 1m55.257762738s ago: executing program 0 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) chown(0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) io_setup(0x2278, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m40.108158933s ago: executing program 32 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) chown(0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) io_setup(0x2278, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m33.051468075s ago: executing program 1 (id=149): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) 1m31.667325846s ago: executing program 1 (id=152): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 1m29.957828395s ago: executing program 1 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000000)={0x1, 0x1, 0xd0224dea9e460a0a}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, 0xfffffffffffffffd) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x1, [0xd, 0x6, 0x40, 0x100000001, 0x3], [0x6, 0x80000000, 0xa1, 0x5, 0x1a, 0x31c7fabb, 0x1c, 0x1000000000002, 0x8de, 0x6, 0x5, 0x2000000000000003, 0x400009, 0x6, 0xfffffffffffffffb, 0x8000, 0x5, 0x4, 0xfffffffffffeffff, 0x859, 0x4c3, 0x3, 0x3, 0x8, 0x7, 0x3, 0x671, 0x3, 0x4, 0x9, 0x100000001, 0x74b, 0x2, 0x2, 0xae5, 0x8d4, 0x2, 0x81, 0x1, 0x3, 0x1, 0x8, 0x10000, 0x3, 0x1000, 0x0, 0x4, 0xc, 0xa, 0x8000000000000000, 0x5, 0x2ee7517, 0x0, 0x76b, 0x1, 0x1ff, 0x7, 0xfffffffffffffffd, 0x6, 0x4, 0xffffffffffffffff, 0x6, 0x5, 0x8, 0x5, 0xf, 0x9dbc, 0xd, 0x2, 0x6, 0x9, 0xffffffffffff8002, 0xb, 0x88e, 0x10000, 0x2, 0xe, 0x0, 0x200000000000006, 0x6, 0x8000000000000001, 0xffffffffffffffff, 0x8, 0x8, 0x10, 0x8, 0xff, 0x4, 0xb6, 0x8, 0x6, 0xaf5, 0x2, 0x5, 0x9, 0xffffffff, 0xffffffffffffffff, 0x2, 0x3ff, 0x8, 0x8, 0x8, 0x3, 0xffffffffffffff3a, 0x0, 0x7fffffff, 0x9, 0x4, 0xfffffffffffffffb, 0x400, 0x8000, 0x2, 0x1000, 0xc, 0x8, 0x5, 0x4, 0xd, 0x8000000000000000, 0x8, 0x615e]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, 0xfffffffffffffffd) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f0000002a80)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000027c0)={0x2020}, 0x2038) keyctl$unlink(0x9, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x0, 0x37f, 0x148, 0x6000000, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) 1m27.424646229s ago: executing program 1 (id=160): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x17, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1m26.108551146s ago: executing program 1 (id=164): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1m25.796392571s ago: executing program 1 (id=166): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m9.12178983s ago: executing program 33 (id=166): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11.642619189s ago: executing program 3 (id=320): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc3afe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) ptrace$setregs(0xd, r1, 0xf, &(0x7f0000000580)="cde02cd3ef6c69faf5597c054e1de189a0080d9664f7ef614e4d7b9a8b60722f59adbd616c7f5d3a") write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x17f, @dev={0xfe, 0x80, '\x00', 0xb}, 0x9}, r5, 0xb}}, 0x48) 9.987981753s ago: executing program 3 (id=323): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 8.461675806s ago: executing program 3 (id=328): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f00000000c0), &(0x7f0000000080)=0x34) 8.100059305s ago: executing program 3 (id=332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.859120496s ago: executing program 5 (id=342): select(0x40, &(0x7f0000000000)={0x1, 0x1, 0x4, 0x20005, 0xffffffffffffffff, 0x7ffffffffffffff5, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 5.639550894s ago: executing program 3 (id=345): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f00000020c0)={0x0, 0x2}, 0x2) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, 0x0) syz_io_uring_setup(0x8005e2, &(0x7f0000000340)={0x0, 0x406bc0, 0x2200, 0xa, 0x200000, 0x0, r1}, &(0x7f0000000400)=0x0, &(0x7f0000000140)) socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0601, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) r6 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r6) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x8001af84, 0x0) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r8, 0x1e) keyctl$KEYCTL_MOVE(0x1e, 0x0, r6, r7, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x1000000, 0x9, 0x0, 0x5}) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) r9 = mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000001040)=[0xe]) 4.7050111s ago: executing program 5 (id=348): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92", '\x00', "3e6a808941a488cc"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"], 0x0}, 0x94) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0xc048aeca, &(0x7f0000000080)) sync_file_range(r4, 0x81, 0x3, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x1f, 0x1}, 0x5, 0xe0, 0x0, 0x0, 0x6, 0xffff6201, 0x1, 0x8000, 0x8000, 0x0}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) fsetxattr$security_ima(r3, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x3, 0x3, 0x16, 0x1, 0x15, "90d92e069fdd65c7638fb8e4eb609e868eaf18e435"}, 0x1e, 0x2) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x5}]}}]}, 0xfffffffffffffdfe}}, 0x20040054) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000140)) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4.280139594s ago: executing program 6 (id=350): r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 4.024512405s ago: executing program 6 (id=351): open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x3, 0x0) r1 = dup(r0) setsockopt$inet_opts(r1, 0x0, 0x15, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) 4.023501495s ago: executing program 3 (id=352): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x42000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, 0x0, 0x4000884) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0), 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) 3.624555577s ago: executing program 4 (id=354): close(0xffffffffffffffff) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000180)=0x8) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001cc0)="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", 0x25f}], 0x1) r1 = semget$private(0x0, 0x2, 0x1) semctl$GETALL(r1, 0x0, 0x6, &(0x7f0000000000)=""/28) 3.606723648s ago: executing program 5 (id=355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.496052588s ago: executing program 4 (id=356): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) fcntl$lock(r0, 0x9, &(0x7f00000003c0)={0x1, 0x0, 0x7fffffffffffffff, 0x1ffffffff}) 2.729184889s ago: executing program 6 (id=357): r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) 2.71830469s ago: executing program 2 (id=358): mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = open$dir(&(0x7f0000000300)='.\x00', 0x8, 0x4a) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) fchmod(r0, 0xf3) setuid(0xffffffffffffffff) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') 2.580057631s ago: executing program 4 (id=359): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000140)=0x4, 0x4) sendto$inet(r0, &(0x7f00000001c0)="e8", 0x1, 0x5, 0x0, 0x0) open(0x0, 0x10686, 0x8) 2.578583262s ago: executing program 2 (id=360): syz_emit_ethernet(0x36, &(0x7f0000000300)={@broadcast, @local, @val, {@ipv4}}, 0x0) 2.47506906s ago: executing program 4 (id=361): r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) shutdown(r0, 0x1) shutdown(r0, 0x1) 2.398530626s ago: executing program 6 (id=362): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f00000020c0)={0x0, 0x2}, 0x2) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, 0x0) syz_io_uring_setup(0x8005e2, &(0x7f0000000340)={0x0, 0x406bc0, 0x2200, 0xa, 0x200000, 0x0, r1}, &(0x7f0000000400)=0x0, &(0x7f0000000140)) socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0601, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) r6 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r6) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x8001af84, 0x0) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r8, 0x1e) keyctl$KEYCTL_MOVE(0x1e, 0x0, r6, r7, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x1000000, 0x9, 0x0, 0x5}) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) r9 = mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000001040)=[0xe]) 2.335018201s ago: executing program 5 (id=363): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x2}, &(0x7f0000000440)="15ecc6fd0e30c5041fef7d99ee21daeb5197225a4a16003a31931a9f19fbab6c6939422695abc18d783df36829816cdbe4efc48cf1ec87dcb4465439363cbf33c94bbd801fab9bf0d5d6db9f8e60bbb836ed81922e78a34483e90c08817ea2982da70ea81a2b272daf42c94185ee86d0a8f60ac3a271e45301", 0x79, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce070", 0xbf, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r4, r3}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64\x00'}}) 2.334704611s ago: executing program 2 (id=364): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc3afe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) ptrace$setregs(0xd, r1, 0xf, &(0x7f0000000580)="cde02cd3ef6c69faf5597c054e1de189a0080d9664f7ef614e4d7b9a8b60722f59adbd616c7f5d3a") write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x17f, @dev={0xfe, 0x80, '\x00', 0xb}, 0x9}, r5, 0xb}}, 0x48) 2.263982067s ago: executing program 4 (id=365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92", '\x00', "3e6a808941a488cc"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"], 0x0}, 0x94) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0xc048aeca, &(0x7f0000000080)) sync_file_range(r4, 0x81, 0x3, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x1f, 0x1}, 0x5, 0xe0, 0x0, 0x0, 0x6, 0xffff6201, 0x1, 0x8000, 0x8000, 0x0}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) fsetxattr$security_ima(r3, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x3, 0x3, 0x16, 0x1, 0x15, "90d92e069fdd65c7638fb8e4eb609e868eaf18e435"}, 0x1e, 0x2) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x5}]}}]}, 0xfffffffffffffdfe}}, 0x20040054) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000140)) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 1.24432647s ago: executing program 2 (id=366): r0 = shmget$private(0x0, 0x3000, 0x28d, &(0x7f00003e4000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, 0x0) 1.226601761s ago: executing program 5 (id=367): mknod(&(0x7f0000000040)='./bus\x00', 0x8000, 0xd02) r0 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000140)=""/182) 1.210540852s ago: executing program 6 (id=368): fcntl$lock(0xffffffffffffffff, 0x9, 0x0) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x0) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0\x00') r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='2', 0x1}], 0x1) 1.090748392s ago: executing program 2 (id=369): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 1.090606002s ago: executing program 6 (id=370): mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x1604) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 974.705791ms ago: executing program 4 (id=371): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_open_dev$vim2m(0x0, 0x81, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8200, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x8}) socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000005c0)={'pcl812\x00', [0x2f00, 0x1000, 0x3, 0x2, 0x0, 0x1, 0x2, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x8006, 0xffffffa7, 0x10001, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x3, 0x7, 0x70f]}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="041706aaaaaaaaaa12e54b3fcd443f560eb95ff5f70b2b2bf6ecdf05cceb7d5e7e0046025f2758300b9fdf09adaeef5901457f17aca2fccbf1fa7aaaec"], 0x9) 91.405643ms ago: executing program 2 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) 0s ago: executing program 5 (id=373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. [ 64.756877][ T4172] cgroup: Unknown subsys name 'net' [ 64.896899][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.294396][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.101330][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 68.137724][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 68.235745][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 68.310764][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 68.323927][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.331820][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.339786][ T4185] device bridge_slave_0 entered promiscuous mode [ 68.370608][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.377791][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.386554][ T4185] device bridge_slave_1 entered promiscuous mode [ 68.412064][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 68.431319][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.438522][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.446511][ T4184] device bridge_slave_0 entered promiscuous mode [ 68.483860][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.491094][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.498926][ T4184] device bridge_slave_1 entered promiscuous mode [ 68.516943][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.524067][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.532518][ T4189] device bridge_slave_0 entered promiscuous mode [ 68.541899][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.553500][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.577994][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.585336][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.593830][ T4189] device bridge_slave_1 entered promiscuous mode [ 68.644992][ T4185] team0: Port device team_slave_0 added [ 68.653260][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.681794][ T4185] team0: Port device team_slave_1 added [ 68.689551][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.700930][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.711446][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.721196][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.728252][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.736317][ T4194] device bridge_slave_0 entered promiscuous mode [ 68.773148][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.780470][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.788226][ T4194] device bridge_slave_1 entered promiscuous mode [ 68.831321][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.838505][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.847001][ T4187] device bridge_slave_0 entered promiscuous mode [ 68.855559][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.863013][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.889443][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.903763][ T4184] team0: Port device team_slave_0 added [ 68.912935][ T4189] team0: Port device team_slave_0 added [ 68.920239][ T4184] team0: Port device team_slave_1 added [ 68.934508][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.941888][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.949701][ T4187] device bridge_slave_1 entered promiscuous mode [ 68.957479][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.964551][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.990788][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.003551][ T4189] team0: Port device team_slave_1 added [ 69.020690][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.058845][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.065969][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.092141][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.105483][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.115145][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.122489][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.148564][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.168704][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.175922][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.202395][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.238647][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.248540][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.255692][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.281859][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.306019][ T4194] team0: Port device team_slave_0 added [ 69.320601][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.346387][ T4194] team0: Port device team_slave_1 added [ 69.355906][ T4185] device hsr_slave_0 entered promiscuous mode [ 69.362958][ T4185] device hsr_slave_1 entered promiscuous mode [ 69.398524][ T4189] device hsr_slave_0 entered promiscuous mode [ 69.411106][ T4189] device hsr_slave_1 entered promiscuous mode [ 69.417658][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.425958][ T4189] Cannot create hsr debugfs directory [ 69.454625][ T4187] team0: Port device team_slave_0 added [ 69.469263][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.476372][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.502484][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.531195][ T4187] team0: Port device team_slave_1 added [ 69.543249][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.550530][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.576524][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.590015][ T4184] device hsr_slave_0 entered promiscuous mode [ 69.597218][ T4184] device hsr_slave_1 entered promiscuous mode [ 69.603977][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.612239][ T4184] Cannot create hsr debugfs directory [ 69.675892][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.683353][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.709760][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.745441][ T4194] device hsr_slave_0 entered promiscuous mode [ 69.752559][ T4194] device hsr_slave_1 entered promiscuous mode [ 69.759157][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.766853][ T4194] Cannot create hsr debugfs directory [ 69.780980][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.788060][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.815452][ T2303] Bluetooth: hci4: command 0x0409 tx timeout [ 69.819879][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.832681][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 69.838731][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 69.863167][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 69.869215][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 69.957506][ T4187] device hsr_slave_0 entered promiscuous mode [ 69.964698][ T4187] device hsr_slave_1 entered promiscuous mode [ 69.974971][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.983064][ T4187] Cannot create hsr debugfs directory [ 70.166587][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.179003][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.188720][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.198330][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.263794][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.288320][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.306046][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.336444][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.366834][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.397846][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.409177][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.430451][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.440037][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.463325][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.479362][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.488240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.498113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.512547][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.531151][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.551198][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.561716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.571678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.580761][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.588221][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.596859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.626166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.636349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.645511][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.652643][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.688650][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.702950][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.713662][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.735378][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.743148][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.752548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.762698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.772623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.787048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.802014][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.822952][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.833329][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.842015][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.851115][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.859732][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.867639][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.879523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.888493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.908186][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.929146][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.953796][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.963266][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.972412][ T247] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.979464][ T247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.988491][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.020045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.038356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.049193][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.056356][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.084650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.101933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.124575][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.134207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.145169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.182131][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.193372][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.202714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.212183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.219938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.238775][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.250060][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.279356][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.287766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.299923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.310275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.318807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.328790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.339823][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.346520][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.349946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.361871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.370224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.379564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.388622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.398084][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.405206][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.413312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.421418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.438969][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.460941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.473326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.484126][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.491271][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.504508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.513621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.526216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.535269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.544402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.566825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.577832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.587052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.595857][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.602984][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.617654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.626798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.635928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.644819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.653670][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.660805][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.687526][ T4185] device veth0_vlan entered promiscuous mode [ 71.695464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.704228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.713159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.722203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.731555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.739309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.752043][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.773425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.784477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.794513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.804256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.813927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.822437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.833584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.846168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.861305][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.872889][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.884621][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.890869][ T4245] Bluetooth: hci1: command 0x041b tx timeout [ 71.897911][ T4245] Bluetooth: hci2: command 0x041b tx timeout [ 71.901650][ T4185] device veth1_vlan entered promiscuous mode [ 71.904450][ T4245] Bluetooth: hci0: command 0x041b tx timeout [ 71.916619][ T4245] Bluetooth: hci3: command 0x041b tx timeout [ 71.924351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.925024][ T4245] Bluetooth: hci4: command 0x041b tx timeout [ 71.933976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.946957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.957375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.965278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.973315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.982442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.990983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.998744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.015292][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.024542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.037472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.080980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.089704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.098665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.108414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.118322][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.125486][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.134197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.142764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.151521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.160097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.169011][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.176136][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.188961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.201878][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.214023][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.238549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.247852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.262994][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.277460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.287863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.297796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.306563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.315685][ T4185] device veth0_macvtap entered promiscuous mode [ 72.328280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.340068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.355433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.399419][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.409466][ T4185] device veth1_macvtap entered promiscuous mode [ 72.421447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.430020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.446651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.459340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.467659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.490075][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.526518][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.540094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.554675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.563872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.573248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.581983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.602803][ T4189] device veth0_vlan entered promiscuous mode [ 72.624195][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.642642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.661395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.671469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.680180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.707052][ T4189] device veth1_vlan entered promiscuous mode [ 72.728979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.744756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.754585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.764200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.772733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.783428][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.799709][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.807487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.821606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.855413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.903334][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.918904][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.928639][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.937898][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.948516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.958509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.974927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.984206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.013444][ T4189] device veth0_macvtap entered promiscuous mode [ 73.027738][ T4189] device veth1_macvtap entered promiscuous mode [ 73.035683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.044186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.054500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.062634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.084781][ T4184] device veth0_vlan entered promiscuous mode [ 73.097338][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.110919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.119956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.129618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.138855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.147916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.156829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.187639][ T4184] device veth1_vlan entered promiscuous mode [ 73.204201][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.216849][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.228584][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.269683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.279021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.287325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.296671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.306308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.314822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.327239][ T4194] device veth0_vlan entered promiscuous mode [ 73.336907][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.349003][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.361482][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.376865][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.388680][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.397503][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.406901][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.424315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.434351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.442435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.453658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.463870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.473140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.488408][ T4194] device veth1_vlan entered promiscuous mode [ 73.508963][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.518215][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.564908][ T4184] device veth0_macvtap entered promiscuous mode [ 73.594160][ T247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.613393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.623010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.625231][ T247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.632447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.647670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.657338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.667641][ T4184] device veth1_macvtap entered promiscuous mode [ 73.677654][ T4194] device veth0_macvtap entered promiscuous mode [ 73.707039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.716387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.725113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.733711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.742027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.749846][ T4187] device veth0_vlan entered promiscuous mode [ 73.783852][ T4194] device veth1_macvtap entered promiscuous mode [ 73.795070][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.806535][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.825397][ T4187] device veth1_vlan entered promiscuous mode [ 73.832163][ T247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.838142][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.840248][ T247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.858442][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.869036][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.879688][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.892908][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.904897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.914701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.922997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.933312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.942299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.951283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.971744][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.972033][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 73.979746][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.992566][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.004627][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 74.011324][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.021318][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 74.024990][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.027397][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 74.041647][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.045469][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 74.063456][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.085956][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.097131][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.108591][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.119130][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.129043][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.139762][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.158047][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.180679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.188904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.197681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.206840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.216866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.226077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.235157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.244054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.256405][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.265432][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.274456][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.283632][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.304247][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.315580][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.325790][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.337048][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.347188][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.358350][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.375192][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.407141][ T4187] device veth0_macvtap entered promiscuous mode [ 74.415219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.444227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.456913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.463267][ T4296] loop3: detected capacity change from 0 to 128 [ 74.484607][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.497801][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.507820][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.522156][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.682678][ T26] audit: type=1800 audit(1754607229.563:2): pid=4296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file1" dev="loop3" ino=1048584 res=0 errno=0 [ 75.328890][ T4303] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 76.386038][ T4187] device veth1_macvtap entered promiscuous mode [ 76.395369][ T4300] Bluetooth: hci2: command 0x0419 tx timeout [ 76.402047][ T4300] Bluetooth: hci0: command 0x0419 tx timeout [ 76.418893][ T4300] Bluetooth: hci3: command 0x0419 tx timeout [ 76.427987][ T4300] Bluetooth: hci4: command 0x0419 tx timeout [ 76.429048][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.436262][ T4300] Bluetooth: hci1: command 0x0419 tx timeout [ 76.467361][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.495019][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.531088][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.549094][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.560176][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.587697][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.602638][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.616720][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.630492][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.646404][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.754249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.768123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.780426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.801963][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.813044][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.823255][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.834029][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.844132][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.885600][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.930919][ T4231] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.951191][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.970487][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.990411][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.060258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.073493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.095765][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.111794][ T247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.120060][ T247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.121569][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.137845][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.147001][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.176812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.210574][ T4231] usb 4-1: Using ep0 maxpacket: 32 [ 77.300141][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.321989][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.331065][ T4231] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 77.350012][ T4231] usb 4-1: config 0 has no interface number 0 [ 77.368266][ T4231] usb 4-1: config 0 interface 184 has no altsetting 0 [ 77.416213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.540641][ T4231] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 77.560141][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.568842][ T4231] usb 4-1: Product: syz [ 77.575729][ T4231] usb 4-1: Manufacturer: syz [ 77.590553][ T4231] usb 4-1: SerialNumber: syz [ 77.611667][ T4231] usb 4-1: config 0 descriptor?? [ 77.665830][ T247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.676840][ T1231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.745849][ T4231] smsc75xx v1.0.0 [ 77.759310][ T247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.890204][ T1231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.497648][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.506696][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.669475][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.697180][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.777747][ T4329] loop4: detected capacity change from 0 to 128 [ 78.810870][ T4231] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 78.879215][ T4329] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.898074][ T4329] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.983275][ T4231] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 79.417903][ T4231] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 80.264884][ T4334] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.301458][ T4231] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 80.378262][ T4231] usb 4-1: USB disconnect, device number 2 [ 80.409908][ T4336] loop3: detected capacity change from 0 to 512 [ 80.480296][ C1] sched: RT throttling activated [ 80.520944][ T4336] EXT4-fs (loop3): #blocks per group too big: 466944 [ 80.560655][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.001250][ T4325] loop1: detected capacity change from 0 to 40427 [ 81.023657][ T4325] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 81.075462][ T4325] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 81.191542][ T4325] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.472568][ T4348] loop0: detected capacity change from 0 to 8192 [ 81.543380][ T4177] loop0: p2 p3 p4 [ 81.548698][ T4177] loop0: p2 size 130943 extends beyond EOD, truncated [ 81.628639][ T4177] loop0: p3 size 16776960 extends beyond EOD, truncated [ 81.661642][ T4177] loop0: p4 size 3599499392 extends beyond EOD, truncated [ 81.725556][ T4348] loop0: p2 p3 p4 [ 81.756267][ T4348] loop0: p2 size 130943 extends beyond EOD, truncated [ 81.828837][ T4348] loop0: p3 size 16776960 extends beyond EOD, truncated [ 81.960742][ T4348] loop0: p4 size 3599499392 extends beyond EOD, truncated [ 82.890847][ T4340] loop2: detected capacity change from 0 to 40427 [ 82.914881][ T4340] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(100663808) [ 82.964976][ T4340] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 83.000007][ T4340] F2FS-fs (loop2): Unrecognized mount option "18446744073709551615" or missing value [ 83.027640][ T4362] fuse: Unknown parameter '0x0000000000000004' [ 83.265837][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 83.265894][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 83.289659][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 83.501024][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 83.523605][ T4369] udevd[4369]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 83.544156][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 86.693629][ T2857] cfg80211: failed to load regulatory.db [ 86.998679][ T4393] process 'syz.1.24' launched './file0' with NULL argv: empty string added [ 87.458174][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 87.635597][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 87.644568][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 88.540422][ T4401] fuse: Unknown parameter '0x0000000000000004' [ 89.343508][ T4271] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 89.442318][ T4412] hub 6-0:1.0: USB hub found [ 89.451204][ T4412] hub 6-0:1.0: 1 port detected [ 90.510475][ T4271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.274426][ T4271] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 91.283951][ T4271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.303013][ T4428] loop4: detected capacity change from 0 to 128 [ 91.312310][ T4271] usb 2-1: config 0 descriptor?? [ 91.535984][ T26] audit: type=1800 audit(1754607246.413:3): pid=4428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.38" name="file1" dev="loop4" ino=1048591 res=0 errno=0 [ 91.590759][ T4174] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.211114][ T4174] usb 3-1: Using ep0 maxpacket: 32 [ 92.337569][ T4271] pantherlord 0003:0810:0001.0001: item fetching failed at offset 5/7 [ 92.351727][ T4174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.381328][ T4271] pantherlord 0003:0810:0001.0001: parse failed [ 92.387639][ T4271] pantherlord: probe of 0003:0810:0001.0001 failed with error -22 [ 92.396904][ T4174] usb 3-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 92.421568][ T4442] fuse: Unknown parameter '0x0000000000000004' [ 92.430470][ T4174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.480147][ T4174] usb 3-1: config 0 descriptor?? [ 92.566904][ T2857] usb 2-1: USB disconnect, device number 2 [ 93.206406][ T4453] syz.0.44[4453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.206975][ T4453] syz.0.44[4453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.385646][ T4174] usbhid 3-1:0.0: can't add hid device: -71 [ 93.920493][ T4174] usbhid: probe of 3-1:0.0 failed with error -71 [ 93.946822][ T4455] loop1: detected capacity change from 0 to 256 [ 93.990360][ T4174] usb 3-1: USB disconnect, device number 2 [ 96.668726][ T4481] fuse: Unknown parameter '0x0000000000000004' [ 96.890936][ T4486] kernel profiling enabled (shift: 17) [ 96.924880][ T4484] netlink: 'syz.1.55': attribute type 16 has an invalid length. [ 96.953623][ T4484] netlink: 'syz.1.55': attribute type 17 has an invalid length. [ 97.045543][ T4494] loop4: detected capacity change from 0 to 512 [ 97.117505][ T4494] EXT4-fs (loop4): Ignoring removed nobh option [ 97.134716][ T4494] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.154644][ T4496] loop1: detected capacity change from 0 to 512 [ 97.225634][ T4494] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.315735][ T4494] EXT4-fs (loop4): 1 truncate cleaned up [ 97.318166][ T4496] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,. Quota mode: writeback. [ 97.354418][ T4496] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.356411][ T4494] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 97.417361][ T4496] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.59: invalid size [ 97.869378][ T4496] EXT4-fs (loop1): Remounting filesystem read-only [ 98.517192][ T4505] netlink: 96 bytes leftover after parsing attributes in process `syz.3.61'. [ 98.681357][ T4509] netlink: 64 bytes leftover after parsing attributes in process `syz.4.58'. [ 99.610997][ T4174] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.020487][ T4174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.327286][ T4527] fuse: Unknown parameter 'fd0x0000000000000004' [ 100.352101][ T4174] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 100.363099][ T4174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.373390][ T4174] usb 4-1: config 0 descriptor?? [ 100.580442][ T4315] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.997573][ T4174] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 101.137560][ T4174] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 101.544137][ T4542] netlink: 96 bytes leftover after parsing attributes in process `syz.0.70'. [ 101.569423][ T4174] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 101.577077][ T4174] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 101.729594][ T4174] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 102.032922][ T4174] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 102.090406][ T4174] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 102.190366][ T4315] usb 3-1: Using ep0 maxpacket: 8 [ 102.201479][ T4174] prodikeys 0003:041E:2801.0002: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0 [ 102.246369][ T4549] device pim6reg1 entered promiscuous mode [ 102.288556][ T4174] usb 4-1: USB disconnect, device number 3 [ 102.310445][ T4315] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 102.318777][ T4315] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 102.340328][ T4315] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 102.370468][ T4315] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 102.379549][ T4315] usb 3-1: config 250 has no interface number 0 [ 102.397494][ T4315] usb 3-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 102.466483][ T4315] usb 3-1: config 250 interface 228 has no altsetting 0 [ 102.598985][ T4556] fido_id[4556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 102.621702][ T4315] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 102.640573][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.653934][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 102.664985][ T4315] usb 3-1: Product: syz [ 102.669202][ T4315] usb 3-1: SerialNumber: syz [ 102.765637][ T4315] hub 3-1:250.228: bad descriptor, ignoring hub [ 102.780546][ T4315] hub: probe of 3-1:250.228 failed with error -5 [ 102.912926][ T4563] loop4: detected capacity change from 0 to 256 [ 102.922385][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.179193][ T4563] No such timeout policy "syz0" [ 103.250717][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 103.402094][ T13] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 103.520661][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.135775][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 104.369156][ T2857] usb 3-1: USB disconnect, device number 3 [ 105.227268][ T4572] fuse: Unknown parameter 'fd0x0000000000000004' [ 105.249001][ T13] usb 4-1: config 0 descriptor?? [ 105.730512][ T23] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 105.747321][ T23] usb 2-1: can't read configurations, error -71 [ 105.904437][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 106.243817][ T4558] udc-core: couldn't find an available UDC or it's busy [ 106.265073][ T4558] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 106.402724][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 106.411917][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 106.420976][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 106.429957][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 106.438989][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 106.448002][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 107.920468][ T13] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 107.936119][ T13] asix: probe of 4-1:0.0 failed with error -71 [ 107.962941][ T13] usb 4-1: USB disconnect, device number 4 [ 108.296198][ T4605] 9pnet_virtio: no channels available for device syz [ 108.659660][ T4583] device vlan1 entered promiscuous mode [ 109.137703][ T4612] sctp: [Deprecated]: syz.0.92 (pid 4612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.137703][ T4612] Use struct sctp_sack_info instead [ 110.001538][ T4614] capability: warning: `syz.0.93' uses deprecated v2 capabilities in a way that may be insecure [ 110.102305][ T4618] fuse: Unknown parameter 'fd0x0000000000000004' [ 111.523934][ T4633] Zero length message leads to an empty skb [ 112.509068][ T4638] loop1: detected capacity change from 0 to 256 [ 113.936063][ T4644] loop4: detected capacity change from 0 to 2048 [ 115.579038][ T4659] sctp: [Deprecated]: syz.1.103 (pid 4659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.579038][ T4659] Use struct sctp_sack_info instead [ 117.346149][ T4644] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 117.930812][ T4672] misc userio: No port type given on /dev/userio [ 118.879946][ T4680] loop3: detected capacity change from 0 to 1024 [ 118.951164][ T4680] ======================================================= [ 118.951164][ T4680] WARNING: The mand mount option has been deprecated and [ 118.951164][ T4680] and is ignored by this kernel. Remove the mand [ 118.951164][ T4680] option from the mount to silence this warning. [ 118.951164][ T4680] ======================================================= [ 119.083604][ T4680] EXT4-fs (loop3): Ignoring removed nobh option [ 119.089914][ T4680] EXT4-fs (loop3): Ignoring removed bh option [ 119.206897][ T4680] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,noload,,errors=continue. Quota mode: writeback. [ 119.486483][ T4693] overlayfs: conflicting lowerdir path [ 121.424969][ T4707] sctp: [Deprecated]: syz.4.115 (pid 4707) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.424969][ T4707] Use struct sctp_sack_info instead [ 125.200924][ T4725] No such timeout policy "syz0" [ 126.100690][ T4732] loop1: detected capacity change from 0 to 1024 [ 126.227846][ T4732] EXT4-fs (loop1): Ignoring removed nobh option [ 126.276048][ T4732] EXT4-fs (loop1): Ignoring removed bh option [ 126.461218][ T4732] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,noload,,errors=continue. Quota mode: writeback. [ 126.671875][ T4740] loop3: detected capacity change from 0 to 128 [ 126.749740][ T4741] overlayfs: conflicting lowerdir path [ 126.828073][ T26] audit: type=1800 audit(1754607537.702:4): pid=4740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.125" name="file1" dev="loop3" ino=1048592 res=0 errno=0 [ 127.886649][ T4746] loop4: detected capacity change from 0 to 1024 [ 128.042575][ T4746] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 128.093245][ T4746] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data [ 128.279654][ T4751] device pim6reg1 entered promiscuous mode [ 129.825603][ T4763] No such timeout policy "syz0" [ 129.864230][ T4766] loop4: detected capacity change from 0 to 512 [ 129.870699][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.095908][ T4766] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.117285][ T4766] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.154048][ T26] audit: type=1800 audit(1754607541.032:5): pid=4766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.134" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 130.251148][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.290611][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.429836][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.465620][ T26] audit: type=1800 audit(1754607541.052:6): pid=4766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.134" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 130.524238][ T13] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.636223][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.736812][ T13] usb 2-1: config 0 descriptor?? [ 130.938382][ T4768] chnl_net:caif_netlink_parms(): no params data found [ 131.996606][ T13] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 132.055360][ T13] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 132.231848][ T4796] loop2: detected capacity change from 0 to 1024 [ 132.256536][ T13] usb 2-1: USB disconnect, device number 5 [ 132.280421][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 132.792598][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.798973][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.831837][ T4796] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 132.863740][ T4793] fido_id[4793]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 132.882462][ T4796] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.099593][ T4805] loop4: detected capacity change from 0 to 1024 [ 133.120229][ T4768] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.127446][ T4768] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.164454][ T4768] device bridge_slave_0 entered promiscuous mode [ 133.184606][ T4805] EXT4-fs (loop4): Ignoring removed orlov option [ 133.259740][ T4808] loop1: detected capacity change from 0 to 512 [ 133.293487][ T4805] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 133.456115][ T4808] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 133.500423][ T4808] EXT4-fs (loop1): group descriptors corrupted! [ 134.030822][ T4768] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.037937][ T4768] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.047597][ T4768] device bridge_slave_1 entered promiscuous mode [ 134.211006][ T4819] No such timeout policy "syz0" [ 134.219578][ T4768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.290572][ T4315] Bluetooth: hci5: command 0x041b tx timeout [ 134.329745][ T4768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.454077][ T4768] team0: Port device team_slave_0 added [ 134.479909][ T4768] team0: Port device team_slave_1 added [ 134.597731][ T4768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.612325][ T4768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.646254][ T4768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.698549][ T4768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.734443][ T4768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.786583][ T4768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.889891][ T4829] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 134.917768][ T4768] device hsr_slave_0 entered promiscuous mode [ 134.919255][ T4829] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 134.940354][ T4315] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 134.950721][ T4768] device hsr_slave_1 entered promiscuous mode [ 134.961922][ T4768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.969525][ T4768] Cannot create hsr debugfs directory [ 135.190385][ T4315] usb 4-1: Using ep0 maxpacket: 16 [ 135.237445][ T4285] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.310654][ T4315] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 135.330220][ T4315] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.343106][ T4315] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.360032][ T4285] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.591179][ T4315] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.661402][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.743832][ T4315] usb 4-1: Product: syz [ 135.781552][ T4315] usb 4-1: Manufacturer: syz [ 135.879586][ T4315] usb 4-1: SerialNumber: syz [ 136.370413][ T4231] Bluetooth: hci5: command 0x040f tx timeout [ 136.687154][ T4285] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.389419][ T4315] usb 4-1: 0:2 : does not exist [ 137.740070][ T4315] usb 4-1: USB disconnect, device number 5 [ 137.804131][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.028133][ T4848] loop2: detected capacity change from 0 to 128 [ 138.116088][ T4285] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.153441][ T26] audit: type=1800 audit(1754607549.032:7): pid=4848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.153" name="file1" dev="loop2" ino=1048593 res=0 errno=0 [ 138.477245][ T4231] Bluetooth: hci5: command 0x0419 tx timeout [ 139.971760][ T4768] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 140.670321][ T4768] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 140.681237][ T4768] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 140.693357][ T4768] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.179425][ T4768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.291947][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.311883][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.375616][ T4768] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.438652][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.465231][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.489713][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.496895][ T4373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.571769][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.599346][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.626860][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.657328][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.664650][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.720723][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.838160][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.864097][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.918788][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.957695][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.967491][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.009608][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.039039][ T4768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.090125][ T4768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.105008][ T4911] loop2: detected capacity change from 0 to 256 [ 142.125820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.152144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.171059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.191356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.199934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.210560][ T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.212036][ T4911] FAT-fs (loop2): Unrecognized mount option "chehk=relaxed" or missing value [ 142.373598][ T4911] loop2: detected capacity change from 0 to 2048 [ 142.480468][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 142.511021][ T4911] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.547304][ T4911] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.601683][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.641575][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.730395][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 142.788081][ T13] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 142.829276][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.859918][ T13] usb 4-1: config 0 descriptor?? [ 142.968934][ T4285] device hsr_slave_0 left promiscuous mode [ 142.993454][ T4285] device hsr_slave_1 left promiscuous mode [ 143.068553][ T4285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.093324][ T4285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.105651][ T4906] loop3: detected capacity change from 0 to 16 [ 143.130448][ T4285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.144628][ T4285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.161689][ T4285] device bridge_slave_1 left promiscuous mode [ 143.177688][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.210824][ T4906] erofs: (device loop3): mounted with root inode @ nid 36. [ 143.284687][ T4285] device bridge_slave_0 left promiscuous mode [ 143.337536][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.345612][ T13] usbhid 4-1:0.0: can't add hid device: -71 [ 143.354195][ T13] usbhid: probe of 4-1:0.0 failed with error -71 [ 143.400482][ T13] usb 4-1: USB disconnect, device number 6 [ 143.965692][ T4285] device veth1_macvtap left promiscuous mode [ 144.110720][ T4285] device veth0_macvtap left promiscuous mode [ 144.172493][ T4285] device veth1_vlan left promiscuous mode [ 144.204603][ T4285] device veth0_vlan left promiscuous mode [ 144.600525][ T4651] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 144.839906][ T4285] team0 (unregistering): Port device team_slave_1 removed [ 144.878991][ T4285] team0 (unregistering): Port device team_slave_0 removed [ 144.886382][ T4651] usb 4-1: Using ep0 maxpacket: 32 [ 144.929861][ T4285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.973881][ T4285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.030627][ T4651] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 145.045566][ T4651] usb 4-1: config 0 has no interface number 0 [ 145.067007][ T4651] usb 4-1: config 0 interface 184 has no altsetting 0 [ 145.242821][ T4285] bond0 (unregistering): Released all slaves [ 145.280660][ T4651] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 145.300056][ T4651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.328969][ T4651] usb 4-1: Product: syz [ 145.343935][ T4651] usb 4-1: Manufacturer: syz [ 145.348629][ T4651] usb 4-1: SerialNumber: syz [ 145.380004][ T4651] usb 4-1: config 0 descriptor?? [ 145.428149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.441349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.461429][ T4651] smsc75xx v1.0.0 [ 145.468516][ T4768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.130815][ T4651] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 146.290317][ T4651] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 146.435397][ T4958] loop4: detected capacity change from 0 to 1024 [ 146.490657][ T4958] EXT4-fs (loop4): Ignoring removed nobh option [ 146.580955][ T4958] EXT4-fs (loop4): Ignoring removed bh option [ 146.750502][ T4651] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 146.773001][ T4958] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,noload,,errors=continue. Quota mode: writeback. [ 146.790471][ T4651] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 147.085547][ T4651] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 147.105879][ T4651] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 147.117684][ T4651] usb 4-1: USB disconnect, device number 7 [ 147.206667][ T4983] overlayfs: conflicting lowerdir path [ 147.463982][ T4768] device veth0_vlan entered promiscuous mode [ 147.554520][ T4768] device veth1_vlan entered promiscuous mode [ 147.653679][ T4990] loop3: detected capacity change from 0 to 256 [ 147.819833][ T4990] No such timeout policy "syz0" [ 148.434762][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.451518][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.511462][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.638688][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.749630][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.250576][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.278706][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.889446][ T4768] device veth0_macvtap entered promiscuous mode [ 149.938900][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.046579][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.076736][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.112743][ T4768] device veth1_macvtap entered promiscuous mode [ 150.129458][ T4999] misc userio: No port type given on /dev/userio [ 150.217215][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.248228][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.288940][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.350330][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.382286][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.414166][ T5003] loop3: detected capacity change from 0 to 512 [ 150.469102][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.498311][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.517540][ T5007] loop4: detected capacity change from 0 to 1024 [ 150.530084][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.558329][ T4768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.674418][ T5007] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.687308][ T5003] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.178: inode #1: comm syz.3.178: iget: illegal inode # [ 150.712616][ T5007] EXT4-fs warning (device loop4): empty_inline_dir:1844: bad inline directory (dir #12) - no `..' [ 150.728215][ T5003] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.178: error while reading EA inode 1 err=-117 [ 150.759685][ T5003] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 150.786400][ T5003] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.178: inode #1: comm syz.3.178: iget: illegal inode # [ 150.804716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.817435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.863453][ T5003] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.178: error while reading EA inode 1 err=-117 [ 150.865846][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.885354][ T5003] EXT4-fs (loop3): 1 orphan inode deleted [ 150.898768][ T5003] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 150.957869][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.974523][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.986798][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.003782][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.056136][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.089383][ T4768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.126723][ T4768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.160660][ T4768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.229424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.248200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.313493][ T4768] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.431718][ T5029] loop4: detected capacity change from 0 to 256 [ 151.500949][ T4768] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.539253][ T4768] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.814282][ T4768] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.034167][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.054251][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.069729][ T5041] loop4: detected capacity change from 0 to 1024 [ 154.151901][ T5043] loop2: detected capacity change from 0 to 256 [ 154.320915][ T5043] No such timeout policy "syz0" [ 154.519562][ T5041] EXT4-fs (loop4): Ignoring removed nobh option [ 154.688672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 154.919581][ T5041] EXT4-fs (loop4): Ignoring removed bh option [ 154.993621][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.014519][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.077559][ T5041] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,noload,,errors=continue. Quota mode: writeback. [ 155.127687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.871483][ T5059] misc userio: No port type given on /dev/userio [ 159.079861][ T5090] loop3: detected capacity change from 0 to 1024 [ 159.188541][ T5090] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 159.251264][ T5090] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 160.711660][ T5116] loop2: detected capacity change from 0 to 256 [ 161.467267][ T5112] misc userio: No port type given on /dev/userio [ 163.573705][ T5122] chnl_net:caif_netlink_parms(): no params data found [ 163.680946][ T5152] sctp: [Deprecated]: syz.2.204 (pid 5152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.680946][ T5152] Use struct sctp_sack_info instead [ 164.071291][ T5151] xt_NFQUEUE: number of total queues is 0 [ 164.381843][ T4315] Bluetooth: hci1: command 0x0409 tx timeout [ 164.699950][ T5156] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 165.065547][ T5164] loop3: detected capacity change from 0 to 128 [ 165.093357][ T5164] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.178219][ T5164] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.502497][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.520411][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.549558][ T5122] device bridge_slave_0 entered promiscuous mode [ 165.593998][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.621587][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.650900][ T5122] device bridge_slave_1 entered promiscuous mode [ 165.737453][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.809092][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.876374][ T5145] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 166.096996][ T4373] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.165401][ T5122] team0: Port device team_slave_0 added [ 166.192986][ T5122] team0: Port device team_slave_1 added [ 166.318681][ T4373] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.363506][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.372873][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.442064][ T5194] loop5: detected capacity change from 0 to 512 [ 166.451952][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 166.642591][ T5194] EXT4-fs (loop5): orphan cleanup on readonly fs [ 166.664285][ T5194] Quota error (device loop5): find_tree_dqentry: Getting block too big (196613 >= 6) [ 166.674629][ T5194] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 166.684312][ T5194] EXT4-fs error (device loop5): ext4_acquire_dquot:6207: comm syz.5.210: Failed to acquire dquot type 1 [ 166.734284][ T5194] EXT4-fs (loop5): 1 truncate cleaned up [ 166.745113][ T5194] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 167.003955][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.737305][ T4373] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.821750][ T5199] misc userio: No port type given on /dev/userio [ 167.855865][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.870470][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.992454][ T4315] Bluetooth: hci1: command 0x040f tx timeout [ 168.999986][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.017775][ T4373] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.160113][ T5208] loop4: detected capacity change from 0 to 1024 [ 169.246272][ T5208] EXT4-fs (loop4): Ignoring removed nobh option [ 169.310617][ T5208] EXT4-fs (loop4): Ignoring removed bh option [ 169.368113][ T5208] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,noload,,errors=continue. Quota mode: writeback. [ 169.790779][ T5219] sctp: [Deprecated]: syz.5.215 (pid 5219) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.790779][ T5219] Use struct sctp_sack_info instead [ 170.576615][ T5221] overlayfs: conflicting lowerdir path [ 170.680054][ T5122] device hsr_slave_0 entered promiscuous mode [ 170.705930][ T5122] device hsr_slave_1 entered promiscuous mode [ 170.718098][ T5122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.835131][ T5232] loop2: detected capacity change from 0 to 256 [ 170.964117][ T5122] Cannot create hsr debugfs directory [ 172.182643][ T5235] loop5: detected capacity change from 0 to 512 [ 172.302015][ T4315] Bluetooth: hci1: command 0x0419 tx timeout [ 172.680447][ T5243] 9pnet_virtio: no channels available for device syz [ 172.858273][ T5122] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 173.016384][ T5252] syz.3.222[5252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.016483][ T5252] syz.3.222[5252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.540514][ T5122] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 174.574557][ T5258] loop3: detected capacity change from 0 to 256 [ 174.751393][ T5258] exfat: Deprecated parameter 'namecase' [ 174.768154][ T5258] exfat: Deprecated parameter 'utf8' [ 174.950555][ T5258] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 175.620144][ T5263] misc userio: No port type given on /dev/userio [ 175.641782][ T5122] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 175.670713][ T5122] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 176.393303][ T5277] sctp: [Deprecated]: syz.5.226 (pid 5277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.393303][ T5277] Use struct sctp_sack_info instead [ 177.130055][ T4238] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 177.460391][ T4238] usb 4-1: Using ep0 maxpacket: 32 [ 177.876300][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.885475][ T4238] usb 4-1: unable to read config index 0 descriptor/all [ 177.903381][ T4238] usb 4-1: can't read configurations, error -71 [ 178.666789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.681360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.903174][ T5122] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.977524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.011457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.030293][ T5307] loop5: detected capacity change from 0 to 1024 [ 179.057807][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.064972][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.088508][ T5307] EXT4-fs (loop5): Ignoring removed nobh option [ 179.150738][ T5307] EXT4-fs (loop5): Ignoring removed bh option [ 179.230010][ T5286] loop2: detected capacity change from 0 to 40427 [ 179.416615][ T5307] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,noload,,errors=continue. Quota mode: writeback. [ 179.874849][ T5307] overlayfs: conflicting lowerdir path [ 179.971858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.990865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.003941][ T5286] F2FS-fs (loop2): Found nat_bits in checkpoint [ 180.012298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.044750][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.051972][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.159749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.169207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.195734][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.222753][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.276552][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.282982][ T5286] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 180.307761][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.346232][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.386373][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.392562][ T5328] misc userio: No port type given on /dev/userio [ 180.450871][ T5122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.479386][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.488175][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.507020][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.516627][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.063641][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.075785][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.120124][ T4373] device hsr_slave_0 left promiscuous mode [ 181.139864][ T4373] device hsr_slave_1 left promiscuous mode [ 181.164177][ T4373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.188717][ T4373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.222849][ T4373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.266826][ T4373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.503580][ T4373] device bridge_slave_1 left promiscuous mode [ 181.512185][ T4373] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.536470][ T4373] device bridge_slave_0 left promiscuous mode [ 181.588138][ T4373] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.943370][ T5358] sctp: [Deprecated]: syz.2.237 (pid 5358) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.943370][ T5358] Use struct sctp_sack_info instead [ 182.578391][ T4373] device veth1_macvtap left promiscuous mode [ 182.639087][ T4373] device veth0_macvtap left promiscuous mode [ 182.679000][ T4373] device veth1_vlan left promiscuous mode [ 185.036636][ T5375] loop2: detected capacity change from 0 to 16 [ 186.416274][ T5375] erofs: (device loop2): mounted with root inode @ nid 36. [ 186.426407][ T5375] attempt to access beyond end of device [ 186.426407][ T5375] loop2: rw=0, want=34359739352, limit=16 [ 186.441900][ T5375] attempt to access beyond end of device [ 186.441900][ T5375] loop2: rw=524288, want=34359739344, limit=16 [ 186.477072][ T5375] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 186.487871][ T5375] attempt to access beyond end of device [ 186.487871][ T5375] loop2: rw=524288, want=34359740336, limit=16 [ 186.620839][ T4373] device veth0_vlan left promiscuous mode [ 187.911504][ T5381] loop5: detected capacity change from 0 to 1024 [ 188.008251][ T5381] EXT4-fs (loop5): Ignoring removed nobh option [ 188.019250][ T5381] EXT4-fs (loop5): Ignoring removed bh option [ 188.316279][ T5381] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,noload,,errors=continue. Quota mode: writeback. [ 188.847550][ T4373] team0 (unregistering): Port device team_slave_1 removed [ 188.879459][ T5388] loop2: detected capacity change from 0 to 512 [ 188.888512][ T5381] overlayfs: conflicting lowerdir path [ 188.948846][ T4373] team0 (unregistering): Port device team_slave_0 removed [ 188.987698][ T5388] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 189.005766][ T5388] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.025187][ T4373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.054509][ T4373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.177292][ T4373] bond0 (unregistering): Released all slaves [ 189.270531][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.297948][ T5370] netlink: 2 bytes leftover after parsing attributes in process `syz.4.240'. [ 189.769949][ T5388] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 189.789947][ T5388] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 189.805247][ T5388] EXT4-fs (loop2): This should not happen!! Data will be lost [ 189.805247][ T5388] [ 189.815758][ T5388] EXT4-fs (loop2): Total free blocks count 0 [ 189.822716][ T5388] EXT4-fs (loop2): Free/Dirty block details [ 189.828985][ T5388] EXT4-fs (loop2): free_blocks=39626 [ 189.835138][ T5388] EXT4-fs (loop2): dirty_blocks=3162 [ 189.840796][ T5388] EXT4-fs (loop2): Block reservation details [ 189.846807][ T5388] EXT4-fs (loop2): i_reserved_data_blocks=3162 [ 189.870468][ T5370] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.879291][ T5370] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.972827][ T4330] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1113 with error 28 [ 189.994270][ T4330] EXT4-fs (loop2): This should not happen!! Data will be lost [ 189.994270][ T4330] [ 190.550910][ T5370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.601988][ T5370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.059664][ T5370] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.068898][ T5370] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.078070][ T5370] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.087761][ T5370] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.195339][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 191.212332][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 191.218545][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 191.390706][ T5377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.244'. [ 191.478574][ T5370] syz.4.240 (5370) used greatest stack depth: 20680 bytes left [ 191.723007][ T5416] loop4: detected capacity change from 0 to 256 [ 192.769344][ T5424] tipc: Started in network mode [ 192.776343][ T5424] tipc: Node identity 4, cluster identity 4711 [ 192.782601][ T5424] tipc: Node number set to 4 [ 194.300838][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.307176][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.375466][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.425012][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.434173][ T5433] 9pnet_virtio: no channels available for device syz [ 194.571755][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.581017][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.597885][ T5453] loop5: detected capacity change from 0 to 1024 [ 194.623007][ T5122] device veth0_vlan entered promiscuous mode [ 194.643736][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.663301][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.688796][ T5453] EXT4-fs (loop5): Ignoring removed nobh option [ 194.709121][ T5122] device veth1_vlan entered promiscuous mode [ 194.807951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.823217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 194.841417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.852730][ T5453] EXT4-fs (loop5): Ignoring removed bh option [ 194.877484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.902331][ T5122] device veth0_macvtap entered promiscuous mode [ 194.942142][ T5122] device veth1_macvtap entered promiscuous mode [ 194.950197][ T5453] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,noload,,errors=continue. Quota mode: writeback. [ 195.013540][ T5457] tipc: Started in network mode [ 195.047403][ T5457] tipc: Node identity 82a0fcde88f, cluster identity 4711 [ 195.066350][ T5457] tipc: Enabled bearer , priority 0 [ 195.130641][ T5460] device syzkaller0 entered promiscuous mode [ 195.148959][ T5453] overlayfs: conflicting lowerdir path [ 195.188639][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.220040][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.235806][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.255673][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.286197][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.321388][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.357118][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.415599][ T5467] tipc: Resetting bearer [ 195.466980][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.475485][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.526415][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.540222][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.573492][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.606392][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.626830][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.671331][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.733285][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.772856][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.791690][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.815629][ T5455] tipc: Resetting bearer [ 195.840475][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 195.849026][ T5455] tipc: Disabling bearer [ 195.866224][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.885628][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.904119][ T5122] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.927004][ T5122] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.936617][ T5122] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.945656][ T5122] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.244948][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.274101][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.348684][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.399131][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.421816][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.531018][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.576842][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 197.970577][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.036117][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.101474][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 198.324884][ T5513] tipc: Cannot configure node identity twice [ 198.349580][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.538892][ T23] usb 4-1: config 0 descriptor?? [ 199.332620][ T23] usb 4-1: can't set config #0, error -71 [ 199.341034][ T23] usb 4-1: USB disconnect, device number 10 [ 199.821837][ T5538] 9pnet_virtio: no channels available for device syz [ 200.301208][ T5543] tipc: Enabled bearer , priority 0 [ 200.351092][ T5543] device syzkaller0 entered promiscuous mode [ 200.501144][ T5543] tipc: Resetting bearer [ 200.535438][ T5542] tipc: Resetting bearer [ 200.596609][ T5542] tipc: Disabling bearer [ 203.810907][ T5603] 9pnet_virtio: no channels available for device syz [ 204.100475][ T4231] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 204.458555][ T4231] usb 5-1: Using ep0 maxpacket: 16 [ 204.600920][ T4231] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 158, changing to 7 [ 204.626398][ T4231] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 204.638546][ T4231] usb 5-1: config 1 interface 1 has no altsetting 0 [ 204.792745][ T5614] tipc: Started in network mode [ 204.800462][ T5614] tipc: Node identity 165834cf4ec3, cluster identity 4711 [ 204.807764][ T5614] tipc: Enabled bearer , priority 0 [ 204.811367][ T4231] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.838346][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.858297][ T4231] usb 5-1: Product: syz [ 204.869079][ T4231] usb 5-1: Manufacturer: syz [ 204.873926][ T4231] usb 5-1: SerialNumber: syz [ 205.047993][ T5614] tipc: Disabling bearer [ 205.823710][ T21] tipc: Node number set to 1486566607 [ 206.090820][ T4231] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 206.100467][ T4231] usb 5-1: 2:1 : sample bitwidth 9 in over sample bytes 1 [ 206.107639][ T4231] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 206.156679][ T4231] usb 5-1: 2:1 : invalid channels 0 [ 206.172122][ T5624] loop5: detected capacity change from 0 to 1024 [ 206.230952][ T4231] usb 5-1: USB disconnect, device number 2 [ 206.534622][ T5624] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 206.788581][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.595333][ T5679] tipc: Started in network mode [ 211.640385][ T5679] tipc: Node identity e233afe6927, cluster identity 4711 [ 211.693976][ T5679] tipc: Enabled bearer , priority 0 [ 211.767686][ T5685] device syzkaller0 entered promiscuous mode [ 211.867854][ T5689] loop5: detected capacity change from 0 to 16 [ 211.895302][ T5679] tipc: Resetting bearer [ 212.133213][ T5689] erofs: (device loop5): mounted with root inode @ nid 36. [ 212.148393][ T5689] attempt to access beyond end of device [ 212.148393][ T5689] loop5: rw=0, want=15300821032, limit=16 [ 212.161372][ T5676] tipc: Resetting bearer [ 212.162014][ T5689] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 212.457605][ T5697] attempt to access beyond end of device [ 212.457605][ T5697] loop5: rw=0, want=15300821032, limit=16 [ 212.506711][ T5676] tipc: Disabling bearer [ 212.548032][ T5697] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 213.770630][ T4231] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 214.739517][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.813888][ T4231] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 214.834351][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.849074][ T4231] usb 4-1: config 0 descriptor?? [ 215.331998][ T4231] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 215.395523][ T4231] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0004/input/input6 [ 216.141379][ T4231] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 216.383706][ T4231] usb 4-1: USB disconnect, device number 11 [ 216.565610][ T5758] 9pnet_virtio: no channels available for device syz [ 216.909244][ T5754] fido_id[5754]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 220.022368][ T5804] syz.6.333 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 220.141397][ T5809] tipc: Started in network mode [ 220.184017][ T5809] tipc: Node identity cefe6baff5f8, cluster identity 4711 [ 220.239601][ T5809] tipc: Enabled bearer , priority 0 [ 220.815950][ T5811] device syzkaller0 entered promiscuous mode [ 222.171120][ T5826] tipc: Resetting bearer [ 222.312226][ T5826] tipc: Disabling bearer [ 223.186726][ T5848] misc userio: No port type given on /dev/userio [ 225.318349][ T5891] tipc: Enabling of bearer rejected, failed to enable media [ 225.837019][ T5918] misc userio: No port type given on /dev/userio [ 228.019571][ T5949] ================================================================================ [ 228.040439][ T5949] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1154:10 [ 228.208027][ T5949] shift exponent 4096 is too large for 32-bit type 'int' [ 228.216950][ T5949] CPU: 0 PID: 5949 Comm: syz.4.371 Not tainted 5.15.189-syzkaller #0 [ 228.225071][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.235176][ T5949] Call Trace: [ 228.238478][ T5949] [ 228.241432][ T5949] dump_stack_lvl+0x168/0x230 [ 228.246146][ T5949] ? show_regs_print_info+0x20/0x20 [ 228.251371][ T5949] ? load_image+0x3b0/0x3b0 [ 228.255909][ T5949] ubsan_epilogue+0xa/0x30 [ 228.260361][ T5949] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 228.266793][ T5949] pcl812_attach+0x1bc5/0x2330 [ 228.271591][ T5949] comedi_device_attach+0x515/0x650 [ 228.276825][ T5949] comedi_unlocked_ioctl+0x5ec/0xe90 [ 228.282118][ T5949] ? comedi_poll+0x8b0/0x8b0 [ 228.286740][ T5949] ? bpf_lsm_file_ioctl+0x5/0x10 [ 228.291667][ T5949] ? security_file_ioctl+0x7c/0xa0 [ 228.296778][ T5949] ? comedi_poll+0x8b0/0x8b0 [ 228.301369][ T5949] __se_sys_ioctl+0xfa/0x170 [ 228.305962][ T5949] do_syscall_64+0x4c/0xa0 [ 228.310376][ T5949] ? clear_bhb_loop+0x30/0x80 [ 228.315066][ T5949] ? clear_bhb_loop+0x30/0x80 [ 228.319783][ T5949] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.325690][ T5949] RIP: 0033:0x7f67f0895be9 [ 228.330102][ T5949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.349705][ T5949] RSP: 002b:00007f67eeafd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.358118][ T5949] RAX: ffffffffffffffda RBX: 00007f67f0abcfa0 RCX: 00007f67f0895be9 [ 228.366102][ T5949] RDX: 00002000000005c0 RSI: 0000000040946400 RDI: 0000000000000007 [ 228.374083][ T5949] RBP: 00007f67f0918e19 R08: 0000000000000000 R09: 0000000000000000 [ 228.382054][ T5949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.390029][ T5949] R13: 00007f67f0abd038 R14: 00007f67f0abcfa0 R15: 00007ffd3d8eac38 [ 228.398006][ T5949] [ 229.016295][ T5949] ================================================================================ [ 229.139552][ T5949] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 229.146815][ T5949] CPU: 1 PID: 5949 Comm: syz.4.371 Not tainted 5.15.189-syzkaller #0 [ 229.154994][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.165078][ T5949] Call Trace: [ 229.168384][ T5949] [ 229.171455][ T5949] dump_stack_lvl+0x168/0x230 [ 229.176171][ T5949] ? show_regs_print_info+0x20/0x20 [ 229.181402][ T5949] ? load_image+0x3b0/0x3b0 [ 229.185966][ T5949] panic+0x2c9/0x7f0 [ 229.189896][ T5949] ? bpf_jit_dump+0xd0/0xd0 [ 229.194445][ T5949] check_panic_on_warn+0x80/0xa0 [ 229.199414][ T5949] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 229.205883][ T5949] pcl812_attach+0x1bc5/0x2330 [ 229.210693][ T5949] comedi_device_attach+0x515/0x650 [ 229.215954][ T5949] comedi_unlocked_ioctl+0x5ec/0xe90 [ 229.221281][ T5949] ? comedi_poll+0x8b0/0x8b0 [ 229.225963][ T5949] ? bpf_lsm_file_ioctl+0x5/0x10 [ 229.230918][ T5949] ? security_file_ioctl+0x7c/0xa0 [ 229.236051][ T5949] ? comedi_poll+0x8b0/0x8b0 [ 229.240678][ T5949] __se_sys_ioctl+0xfa/0x170 [ 229.245303][ T5949] do_syscall_64+0x4c/0xa0 [ 229.249743][ T5949] ? clear_bhb_loop+0x30/0x80 [ 229.254448][ T5949] ? clear_bhb_loop+0x30/0x80 [ 229.259156][ T5949] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.265077][ T5949] RIP: 0033:0x7f67f0895be9 [ 229.269519][ T5949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.289269][ T5949] RSP: 002b:00007f67eeafd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.297718][ T5949] RAX: ffffffffffffffda RBX: 00007f67f0abcfa0 RCX: 00007f67f0895be9 [ 229.305745][ T5949] RDX: 00002000000005c0 RSI: 0000000040946400 RDI: 0000000000000007 [ 229.313865][ T5949] RBP: 00007f67f0918e19 R08: 0000000000000000 R09: 0000000000000000 [ 229.321872][ T5949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.329896][ T5949] R13: 00007f67f0abd038 R14: 00007f67f0abcfa0 R15: 00007ffd3d8eac38 [ 229.337917][ T5949] [ 229.341257][ T5949] Kernel Offset: disabled [ 229.345817][ T5949] Rebooting in 86400 seconds..