last executing test programs: 10.437363427s ago: executing program 2 (id=50): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00', @ANYRES16, @ANYBLOB="010000000000000000", @ANYRES32=r0], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x19e172f08959ac4a, 0x10001, 0x47}, 0x2c) 9.325841847s ago: executing program 2 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\n\x00'], 0x48) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) 8.439276158s ago: executing program 2 (id=64): socket$nl_route(0x10, 0x3, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) 6.546536511s ago: executing program 3 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\n\x00'], 0x48) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) 5.250006186s ago: executing program 4 (id=79): r0 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x2, 0x8}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffd, 0x6, 0x7, @scatter={0x0, 0x0, 0x0}, &(0x7f00000002c0)="b2c7550ffd1f", 0x0, 0x5, 0x20, 0x3, 0x0}) 4.842458769s ago: executing program 4 (id=83): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x1000000000007, 0x28842) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_async', 0x2, 0xcd) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x4000000000000ffd, 0x0, 0x1, 0x3, 0xc, "faf98317e5a1149989fc8dbe43ff6a6de16ddbc0bfc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x81]}}) 4.617947277s ago: executing program 3 (id=85): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000040)={0xa8, 0x0, 0x2}) 4.561847011s ago: executing program 4 (id=86): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_clone(0x80804000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r1, 0x16) 3.58849041s ago: executing program 3 (id=88): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x4, {0x60, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 3.524059156s ago: executing program 2 (id=90): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 3.391904816s ago: executing program 2 (id=93): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8a, 0x61, 0x6a, 0x8, 0xc98, 0x1140, 0xf021, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4e, 0x0, 0x0, 0x3, 0x9a, 0x3e, 0xc}}]}}]}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) r1 = syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x220, 0x2f0, 0xfeffffff, 0x2f0, 0x220, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, 0x0, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) 3.238657348s ago: executing program 4 (id=96): syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x69, 0x9b, 0x19, 0x40, 0x4cb, 0x121, 0x7690, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0xe2, 0x0, 0x0, 0xc6, 0xd5, 0xb2}}]}}]}}, 0x0) 875.306199ms ago: executing program 0 (id=102): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 790.710626ms ago: executing program 1 (id=103): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x1000a05, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303230303030303030303230303030303030362c6769643d69676e6f72652c12e7090021b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x21, 0xc44, &(0x7f0000004340)="$eJzs3V9sneddB/Df89rOsVNGvHVkLaxwCtJIvaakSVZnDSon1DVMSlNrjnc3ySe2E47q2JbtsLQa4HHDBReTEOJiV5agQhpiqiiauDRQpO2mF2hXXFmgVhPiwqBJk5AqT+97npMcO07jxbHjtJ/P5nzfP8/znuf94/d1LT/vEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO++cuHU8+lhtwIAOEiXxr966rTnPwB8olz23/8AAAAAAAAAAAAAAHDYpSji8UixcGkjTVbzbf0XW3M3bk6MjO5cbSBVNXuq8uVX//Onz5z90gvD5zr50fUftCfjtfHLF+ovz19fWJxZWpqZrk/Mtabmp4tdb2Hn+jP33aKh8gDUIuLG9NWrS/XTz53Zsvrm4Ae1x44Pnh9+5uRT7bI36xMjo6PjXWV6++770+9wtx4eR6KIk5Hi2e/9ODUjojpgezwW97h29ttAtRND1U5MjIxWOzLbas4tlyvHOgeiiKh3VWp0jtEBnIs9aUSslM0vGzxU7t74QnOxeWV2pj7WXFxuLbfm58ZSu7Xl/tSjiHMpYjUi1mt3bq4viuiNFN85tpGuRERP5zh8seoYfPd27P47a1+U7az3RawWj8A5O8RqUcSrkeIn756IqfKY5a/4QsSrZX4/4q0yX4pI5YVxNuL9Ha4jHk29UcSfl+f//Eaaru4HnfvKxa/VvzJ3db6rbOe+srfnw2a+eg78+TCwLQ/GIb839UcRzeqOv5Hu/4cdAAAAAAAAAAAAAAAAAB60gSjiyUjxyr//YdWvOKp+6cfOD//e4Kdu9RlPEU/cYzsp/j+ei4iVYnd9co/kLsRjaSylh9yX+JOsP4r4o9z/71sPuzEAAAAAAAAAAAAAAAAAAACfaEX8KFK8+N6JtBrdY4q35q7VLzevzLZHhe2M/dsZM31zc3OzntrZyDmZcyXnas61nOs5o8j1czZyTuZcyblaRNQiYi3Pr+eMnlw/ZyPnZM6VnKs513Ku54zeXD9nI+dkzpWcqznXcq7njEMydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMdJEUV8GCm+/Y2NFCkiGhGT0c612sNuHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQqqUi3okU9d9v3FrWGxGp+n/bifKfs9E4UuZnojFc5kvRuJCzWWVv41sPof3sTV8q4oeRotb/9q0T/qn2+e9rz926DOKtb96e++XedvZ0Vg5+UHvs+LHzw6O/+sTdptNODRi62Jq7cbM+MTI6Ot61uDd/+me6lg3mzy0ezK4TEUtvvPl6c3Z2ZvH+J8pLYA/VH9bEwIPY94OdOPIoHufDMLGZr/aft3r0HoLGP6SJh3xj4kCUz//3I8VvvfcfnQd+5+e/X2jP3XrCx0//+Pbz/8XtG9qn5//jXctezD+N9PVG9C9fX+g7HtG/9MabJ1vXm9dmrs3MnT116svDw18+c6rvSET/1davRUR7anbm1J4PFQAAAAAAAAAAAAAAAMDBSkX8TqRo/nAj1SPiZtVfa/D88DMnn+qJnqq/1ZZ+W6+NX75Qf3n++sLizNLSzHR9Yq41NT89s9uP66+6e02MjO7LztzTwD63f6D/5fmFNxZb1/5gecf1R/svXFlaXmxO7bw6BqKIaHQvGaoaPDEyWjV6ttWcq6qO7diZ7ufXl4r4z0gxdbaens7Lcv+/7T38t/T/X9m+oX3q//fprmXlZ6ZUxE8jxW/+xRPxdNXOo3HHMcvl/iZSDJ37fC4XR8pynTa03yvQ7hlYlv3fSPEPH24t2+kP+fjtss/v+sA+IsrzfyxSvPNn341fz8t6t7z/Yefzf3T7hnZ5/jf/ZFu9e5z/z3YtO7rlfQUPZv8/6crzfzJSvPT42/EbeVnvR7z/o/PujRO58K33c+zT9/9mV6XB6nO9/QMAAAAAAAAAACDy33/9baR4arQ3vZCX7ebv/6a3b2if/v7rc13Lph/MeEX3nAhDTAEAAADwMdGXivhRpLi2/PatPtRb+3939f/87du/GBtJ29ZWv+f7xeq9AQ/y93/dBvPnTu59twEAAAAAAAAAAAAAAAAAAOBQSamIF/J46pM7jKc+ELFU5HJrkeKV/342l0vHy3KdceAHq3/7L83PnbwwOzs/1VxuXpmdqY8vNKdmyrqfjRQbf/35XLeoxld/eltbOmOxL0aK0b/rlG2Pxd4Zm7w9Hnh7LPay7KcjxX/9/daynXGsf+l22dNl2b+KFF//p53LHr9d9kxZ9ruR4gdfr3fKHi3Ldt6P+rnbZZ+bmveqUAAAAAAAAAAAAAAAAAAAAPauLxXxp5Hif66v3urLn8f/7+uarbz1za7x/re5WY3zP1iN/3+36fsZ/3/wzhofbrZFbB67z70GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDDLUURb0aKhUsbaa1Wzrf1X2zN3bg5MTK6c7WBVNXsqcqXX/3Pnz5z9ksvDJ/r5EfXf9CejNfGL1+ovzx/fWFxZmlpZro+Mdeamp+e2fUW9lp/u6HqANSvv35j+urVpfrp585sWX1z8IPaY8cHzw8/c/KpTtmJkdHR8a4yvX33/el3SHdZfiSK+MtI8ez3fpz+uRZRxN6PxT2unf02UO3EULUTEyOj1Y7Mtppzy+XKsc6BKCLqXZUanWN0AOdiTxoRK2XzywYPlbs3vtBcbF6ZnamPNReXW8ut+bmx1G5tuT/1KOJciliNiPXanZvriyJejxTfObaR/qUW0dM5Dl+8NP7VU6fv3o5iH/dxF8p21vsiVotH4JwdYrUo4h8jxU/ePRH/WovojfZXfCHi1TK/H/FWtM93Ki+MsxHv73Ad8WjqjSL+rzz/5zfSu7XyftC5r1z8Wv0ry+90l+3cVx7558NBOuT3pv4o4gfVHX8j/ZvvawAAAAAAAAAAAAAAAIBDpIhfiRQvvnciVf2DO52iF1tz1+qXm1dm2936On3/Oqs3Nzc366mdjdReMpnnV3Ku5lzLuZ4zilw/Z6PM/s3NyTy/knM151rO9ZzRk+vnbOSczLmSczXnWs71nNGb6+ds5JzMuZJzNedazvWccUj67gEAAAAAAAAAAAAAAAAAAB8vRfW/FN/+xkbarLXHl56Mdq4ZD/Rj72cBAAD//z1c9n4=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) 666.037606ms ago: executing program 0 (id=104): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast1}}}}) 665.817766ms ago: executing program 4 (id=105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 550.546885ms ago: executing program 1 (id=106): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x6, [0x4, 0x8, 0x8, 0x7fff, 0x4, 0x800, 0x7, 0xfffa, 0x8, 0xbdff, 0x2, 0x10, 0x400, 0xf6, 0x28, 0x2, 0x3, 0x8, 0x7d, 0x0, 0x4, 0x2, 0x6, 0x457f, 0x2, 0x5, 0x5, 0x7ff, 0x4, 0x8544, 0xb, 0x0, 0x6, 0x7285, 0x98bd, 0x0, 0x7fff, 0x8, 0x5, 0x3, 0x0, 0x3, 0x2, 0xf, 0x3, 0x6, 0x0, 0x8], 0xc}) r1 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed5100000000000000010000000000000800", 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0)={@local, 0x0}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x13, '\x00', r4}, 0xc9) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b", @ANYRES32=0x0, @ANYBLOB="0010000020900000400012800b0001006272696467650000300002800c0023000100000000000080050016000000000008001b004b0f00000500250001000000050024"], 0x60}}, 0x0) 528.108167ms ago: executing program 3 (id=107): r0 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x28000600) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) 465.862922ms ago: executing program 4 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\n\x00'], 0x48) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, &(0x7f0000000100)) 366.12785ms ago: executing program 0 (id=109): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 366.00816ms ago: executing program 0 (id=110): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x47ffffa, 0x100001) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 365.67035ms ago: executing program 3 (id=111): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) close(r0) 288.267437ms ago: executing program 2 (id=112): syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) fsopen(&(0x7f0000000000)='msdos\x00', 0x0) landlock_create_ruleset(&(0x7f0000000000)={0xab9, 0x3, 0x3}, 0x18, 0x0) socket$unix(0x1, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 277.857677ms ago: executing program 3 (id=113): socket$inet6(0xa, 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r1, &(0x7f0000001380)=""/229, 0xe5) 202.033133ms ago: executing program 0 (id=114): epoll_create1(0x80000) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(0xffffffffffffffff) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xe148, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x100000000}) 150.948728ms ago: executing program 1 (id=115): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x8, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x94, 0x9}}}}}}, 0x0) 108.733411ms ago: executing program 0 (id=116): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c600000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="05000002009522a88fe9025d59"], 0x5) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x24, 0x3, "ec7110"}}) sendfile(r6, r5, &(0x7f00000000c0)=0x8b, 0x100000500) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 33.934297ms ago: executing program 1 (id=117): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @loopback, 0x10b}, {0xa, 0x4e23, 0x7, @empty, 0x8}, r1, 0x10007}}, 0x48) close(0x3) 33.705407ms ago: executing program 1 (id=118): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800050001f8"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x202, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r4 = dup(0xffffffffffffffff) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) write(r3, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x800) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f0000000440)=0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'dummy0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "87d52890d86dde1f66f6917dcad7d7ad92f7eb71ae6687481d34af7f8009c03e", "282e2debe5b6e2d9cad8f3518100f38f417d72544a2bb7fa11b662fef4dcc9a3", "cc23b1f369d519afed2d88adb87a656e4818391934fadf59616c097176643d4d", "fde867d2e299226caad10a947624655f91c4544c05b52b7ec7e68e27a55c6afb", "bee1fd21ead56db3e38ff37c0ad23d47f9aaeca9c5831008e79c13a71128d4c6", "0f0c3b4a2fe52f95297b7b93", 0x1, 0x4, 0x40, 0x5, 0xb0}}) dup3(0xffffffffffffffff, r2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd']) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)={0x30, r7, 0x1, 0xffffffff, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ee1c447}]}, 0x30}}, 0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=119): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'das16m1\x00', [0x2f00, 0x80000001, 0xd09a, 0x3b, 0x3, 0x39e, 0x20000002, 0x6, 0xffe, 0x9, 0x3, 0x1, 0x104, 0x1, 0xfffe, 0x55, 0x5, 0x7ec, 0x8, 0x30000, 0x10000, 0x9, 0x1800, 0xe2df, 0x10002, 0x80000001, 0x7, 0xc, 0x4, 0x5, 0x470f]}) ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. syzkaller login: [ 49.195528][ T4172] cgroup: Unknown subsys name 'net' [ 49.345420][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.510137][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.759594][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 51.882136][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 51.891813][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.898892][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.908355][ T4182] device bridge_slave_0 entered promiscuous mode [ 51.920257][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.927464][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.935263][ T4182] device bridge_slave_1 entered promiscuous mode [ 51.946164][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 51.987409][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 52.039740][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.066652][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.123966][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.131136][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.138795][ T4191] device bridge_slave_0 entered promiscuous mode [ 52.157826][ T4182] team0: Port device team_slave_0 added [ 52.170338][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.178254][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.186069][ T4187] device bridge_slave_0 entered promiscuous mode [ 52.193420][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.200618][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.208217][ T4191] device bridge_slave_1 entered promiscuous mode [ 52.215407][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 52.225689][ T4182] team0: Port device team_slave_1 added [ 52.237119][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.244313][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.252287][ T4193] device bridge_slave_0 entered promiscuous mode [ 52.259517][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.266708][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.274418][ T4187] device bridge_slave_1 entered promiscuous mode [ 52.298891][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.306132][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.314324][ T4193] device bridge_slave_1 entered promiscuous mode [ 52.339002][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.349424][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.356409][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.382316][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.415564][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.425096][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.432280][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.458273][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.478077][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.500053][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.510751][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.539678][ T4191] team0: Port device team_slave_0 added [ 52.548078][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.570946][ T4191] team0: Port device team_slave_1 added [ 52.589032][ T4187] team0: Port device team_slave_0 added [ 52.596864][ T4187] team0: Port device team_slave_1 added [ 52.634613][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.642043][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.649620][ T4183] device bridge_slave_0 entered promiscuous mode [ 52.666859][ T4182] device hsr_slave_0 entered promiscuous mode [ 52.673990][ T4182] device hsr_slave_1 entered promiscuous mode [ 52.683004][ T4193] team0: Port device team_slave_0 added [ 52.696812][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.704007][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.711985][ T4183] device bridge_slave_1 entered promiscuous mode [ 52.719152][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.726316][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.753005][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.772454][ T4193] team0: Port device team_slave_1 added [ 52.781690][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.788633][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.814832][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.844845][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.851867][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.877885][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.902527][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.909494][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.935783][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.971731][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.978685][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.004862][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.017704][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.024785][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.051662][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.064592][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.076957][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.136276][ T4187] device hsr_slave_0 entered promiscuous mode [ 53.143093][ T4187] device hsr_slave_1 entered promiscuous mode [ 53.149552][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.157375][ T4187] Cannot create hsr debugfs directory [ 53.184045][ T4191] device hsr_slave_0 entered promiscuous mode [ 53.191220][ T4191] device hsr_slave_1 entered promiscuous mode [ 53.197640][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.205334][ T4191] Cannot create hsr debugfs directory [ 53.223958][ T4183] team0: Port device team_slave_0 added [ 53.245843][ T4183] team0: Port device team_slave_1 added [ 53.253811][ T4193] device hsr_slave_0 entered promiscuous mode [ 53.261696][ T4193] device hsr_slave_1 entered promiscuous mode [ 53.268144][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.275749][ T4193] Cannot create hsr debugfs directory [ 53.352996][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.359969][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.386188][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.424841][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.432705][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.458663][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.538185][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.544859][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.551975][ T4224] Bluetooth: hci4: command 0x0409 tx timeout [ 53.557048][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 53.564207][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 53.564310][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.570547][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 53.578360][ T4183] Cannot create hsr debugfs directory [ 53.588647][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 53.689665][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.715294][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.731780][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.746077][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.774905][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.795436][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.804885][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.813733][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.856184][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.890666][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.911351][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.932983][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.955768][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.002639][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.011277][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.019855][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.029408][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.052972][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.059771][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.069612][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.101797][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.122119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.130060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.147664][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.178207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.187072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.197188][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.204382][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.213190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.222740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.231856][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.238902][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.246964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.257900][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.264795][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.277517][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.285850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.303045][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.312470][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.324305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.344240][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.353512][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.362229][ T449] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.369289][ T449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.383461][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.391699][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.400286][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.409605][ T449] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.416685][ T449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.432603][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.442345][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.452137][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.465151][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.492764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.500611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.508587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.517852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.527642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.536326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.544981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.553625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.562190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.570350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.594037][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.615274][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.623206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.633545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.643009][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.650053][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.659967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.669327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.678190][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.685303][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.693536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.703219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.712850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.721417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.729837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.738419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.746344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.778867][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.796808][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.805898][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.820975][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.835472][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.844680][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.853746][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.861740][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.870138][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.878655][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.887244][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.895733][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.904492][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.919451][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.928031][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.936893][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.958598][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.982514][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.999058][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.008463][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.015571][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.030020][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.038877][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.052536][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.059595][ T4264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.068388][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.087345][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.123802][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.145389][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.158066][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.168654][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.185344][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.197459][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.206468][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.216218][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.224914][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.236239][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.259431][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.269053][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.284025][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.298481][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.312013][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.327331][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.336025][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.344855][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.354010][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.361847][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.384794][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.417442][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.441064][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.450892][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.459381][ T449] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.466493][ T449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.476283][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.485891][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.494691][ T449] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.501801][ T449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.509457][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.518996][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.528690][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.536195][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.543890][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.553494][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.579673][ T4182] device veth0_vlan entered promiscuous mode [ 55.595945][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.611446][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.631127][ T4254] Bluetooth: hci0: command 0x041b tx timeout [ 55.637172][ T4254] Bluetooth: hci4: command 0x041b tx timeout [ 55.641639][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.651593][ T1110] Bluetooth: hci2: command 0x041b tx timeout [ 55.657682][ T1110] Bluetooth: hci3: command 0x041b tx timeout [ 55.663781][ T1110] Bluetooth: hci1: command 0x041b tx timeout [ 55.674760][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.685048][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.695292][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.704797][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.719775][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.730253][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.749528][ T4182] device veth1_vlan entered promiscuous mode [ 55.767487][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.776820][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.790208][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.799227][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.807715][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.817815][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.826471][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.835632][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.844226][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.857235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.866710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.910214][ T4182] device veth0_macvtap entered promiscuous mode [ 55.921415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.930076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.939129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.947210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.958985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.968105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.976736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.985494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.997960][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.018098][ T4182] device veth1_macvtap entered promiscuous mode [ 56.029185][ T4187] device veth0_vlan entered promiscuous mode [ 56.046062][ T4191] device veth0_vlan entered promiscuous mode [ 56.056073][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.065186][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.074636][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.087485][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.096192][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.104710][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.113245][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.121839][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.145044][ T4191] device veth1_vlan entered promiscuous mode [ 56.156407][ T4187] device veth1_vlan entered promiscuous mode [ 56.182191][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.190142][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.201283][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.209638][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.218369][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.227368][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.250963][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.263103][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.272600][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.279989][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.300255][ T4187] device veth0_macvtap entered promiscuous mode [ 56.311286][ T4187] device veth1_macvtap entered promiscuous mode [ 56.320291][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.329934][ T4193] device veth0_vlan entered promiscuous mode [ 56.336877][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.345168][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.353143][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.361822][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.370139][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.378404][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.387608][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.397474][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.406416][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.415538][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.425849][ T4191] device veth0_macvtap entered promiscuous mode [ 56.441741][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.449297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.457500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.466348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.480045][ T4193] device veth1_vlan entered promiscuous mode [ 56.490315][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.498994][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.510956][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.522442][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.532163][ T4191] device veth1_macvtap entered promiscuous mode [ 56.546052][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.554983][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.563878][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.575047][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.595000][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.603230][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.611281][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.619253][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.628485][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.640149][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.651226][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.662517][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.678324][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.687342][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.696450][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.705536][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.724354][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.733990][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.770986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.781679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.790785][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.801713][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.814142][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.824600][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.836349][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.876232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.885024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.896210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.904702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.916815][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.927550][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.941197][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.952349][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.963416][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.973518][ T4193] device veth0_macvtap entered promiscuous mode [ 56.999282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.010765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.019269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.030742][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.039445][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.048303][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.057089][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.101352][ T4193] device veth1_macvtap entered promiscuous mode [ 57.117655][ T4183] device veth0_vlan entered promiscuous mode [ 57.130986][ T449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.138927][ T449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.140086][ T4183] device veth1_vlan entered promiscuous mode [ 57.174824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.183494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.192090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.199965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.209278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.217414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.239394][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.247883][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.278247][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.293409][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.303508][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.318853][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.328689][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.339253][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.351778][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.365096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.374374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.384776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.393755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.402370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.411102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.421496][ T449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.430627][ T449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.432978][ T4183] device veth0_macvtap entered promiscuous mode [ 57.456275][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.467267][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.477538][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.488740][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.500011][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.514492][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.525502][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.533912][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.542190][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.549972][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.559486][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.577843][ T4183] device veth1_macvtap entered promiscuous mode [ 57.593168][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.608626][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.609055][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.631354][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.640067][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.654878][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.676083][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.686887][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.697044][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.707716][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.719104][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.720791][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 57.733641][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.737409][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 57.746053][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.751404][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 57.751475][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 57.767062][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.768167][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 57.775523][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.802763][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.811321][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.819193][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.827953][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.861034][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.883856][ T449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.901799][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.911769][ T449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.912176][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.930107][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.941254][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.952341][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.962271][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.973154][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.989312][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.018352][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.032590][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.046507][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.069270][ T4302] loop1: detected capacity change from 0 to 8 [ 58.082222][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.091671][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.102444][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.112375][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.134913][ T4302] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 58.141913][ T449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.170213][ T4174] udevd[4174]: incorrect cramfs checksum on /dev/loop1 [ 58.182806][ T449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.212100][ T4304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.247837][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.602393][ T4305] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 59.000556][ T4305] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 59.010490][ T4305] usb 2-1: config 0 has no interface number 0 [ 59.180665][ T4305] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 59.193713][ T4305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.204325][ T4305] usb 2-1: Product: syz [ 59.222290][ T4305] usb 2-1: Manufacturer: syz [ 59.234574][ T4305] usb 2-1: SerialNumber: syz [ 59.291233][ T4305] usb 2-1: config 0 descriptor?? [ 59.337847][ T4304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.621454][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.791068][ T1110] Bluetooth: hci0: command 0x0419 tx timeout [ 59.797982][ T1110] Bluetooth: hci2: command 0x0419 tx timeout [ 59.804322][ T1110] Bluetooth: hci3: command 0x0419 tx timeout [ 59.810468][ T1110] Bluetooth: hci4: command 0x0419 tx timeout [ 59.816501][ T1110] Bluetooth: hci1: command 0x0419 tx timeout [ 59.890544][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 60.000681][ T4305] usb 2-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1f, error -71 [ 60.008941][ T4305] usb 2-1: Firmware version (0.0) predates our first public release. [ 60.010561][ T21] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.017694][ T4305] usb 2-1: Please update to version 0.2 or newer [ 60.037226][ T21] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.050752][ T4305] usb 2-1: atusb_probe: initialization failed, error = -71 [ 60.058283][ T4305] atusb: probe of 2-1:0.128 failed with error -71 [ 60.077081][ T4305] usb 2-1: USB disconnect, device number 2 [ 60.160619][ T21] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 60.169674][ T21] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 60.178372][ T21] usb 5-1: Product: syz [ 60.182569][ T21] usb 5-1: Manufacturer: syz [ 60.206611][ T4304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.221612][ T21] hub 5-1:4.0: USB hub found [ 60.262659][ T4304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.338128][ T4304] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.352981][ T4304] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.365045][ T4304] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.377042][ T4304] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.423368][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.435542][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.438118][ T449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.446749][ T21] hub 5-1:4.0: 2 ports detected [ 60.463249][ T449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.480826][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.504112][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.534755][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.545744][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.566328][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.599106][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.604100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.622204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.641704][ T4323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10'. [ 60.660493][ T4323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'. [ 60.697170][ T4323] netlink: 'syz.1.10': attribute type 10 has an invalid length. [ 60.718189][ T4323] bridge0: port 3(team0) entered blocking state [ 60.748608][ T4330] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.749718][ T4323] bridge0: port 3(team0) entered disabled state [ 60.765071][ T21] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 60.779901][ T21] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 60.799714][ T4323] device team0 entered promiscuous mode [ 60.820999][ T4323] device team_slave_0 entered promiscuous mode [ 60.838159][ T4323] device team_slave_1 entered promiscuous mode [ 60.848257][ T21] usb 5-1: USB disconnect, device number 2 [ 60.861257][ T4323] bridge0: port 3(team0) entered blocking state [ 60.867873][ T4323] bridge0: port 3(team0) entered forwarding state [ 61.391007][ T4305] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.537290][ T4356] netlink: 'syz.4.17': attribute type 10 has an invalid length. [ 61.586716][ T4356] team0: Port device dummy0 added [ 61.599223][ T4358] netlink: 'syz.4.17': attribute type 10 has an invalid length. [ 61.622290][ T4358] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 61.631314][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.641445][ T4305] usb 1-1: Using ep0 maxpacket: 16 [ 61.689073][ T4358] team0: Failed to send options change via netlink (err -105) [ 61.698094][ T4358] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 61.728220][ T4358] team0: Port device dummy0 removed [ 61.763647][ T4358] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 62.000693][ T4305] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 62.021429][ T4305] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 62.057403][ T4305] usb 1-1: Product: syz [ 62.066278][ T4370] loop2: detected capacity change from 0 to 2048 [ 62.075411][ T4305] usb 1-1: Manufacturer: syz [ 62.082679][ T4305] usb 1-1: SerialNumber: syz [ 62.126195][ T4305] usb 1-1: config 0 descriptor?? [ 62.221470][ T4375] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.282431][ T4366] crypto_alloc_aead failed rc=-2 [ 62.590064][ T4345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 62.648729][ T4345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 62.676769][ T4407] loop1: detected capacity change from 0 to 128 [ 62.720502][ T4249] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 62.920584][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 63.080615][ T4249] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.130442][ T4249] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.210580][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 63.330658][ T4249] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 63.366015][ T21] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 63.368943][ T4414] ODEBUG: Out of memory. ODEBUG disabled [ 63.399124][ T4249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.413404][ T4249] usb 4-1: Product: syz [ 63.422316][ T4249] usb 4-1: Manufacturer: syz [ 63.430101][ T4249] usb 4-1: SerialNumber: syz [ 63.460195][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.509326][ T21] usb 5-1: config 0 descriptor?? [ 63.572366][ T21] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 63.763202][ T4249] usb 4-1: 0:2 : does not exist [ 63.851266][ T4249] usb 4-1: USB disconnect, device number 2 [ 64.079620][ T4224] usb 1-1: USB disconnect, device number 2 [ 64.198349][ T4420] netlink: 6 bytes leftover after parsing attributes in process `syz.0.32'. [ 64.301651][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 64.396503][ T4420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 64.421577][ T4429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.36'. [ 64.617833][ T4437] input: syz1 as /devices/virtual/input/input5 [ 64.880646][ T4305] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.000510][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 65.090576][ T4249] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 65.137008][ T4420] syz.0.32 (4420) used greatest stack depth: 20192 bytes left [ 65.144674][ T4305] usb 3-1: Using ep0 maxpacket: 16 [ 65.310680][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 65.330570][ T4305] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.347675][ T4305] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.906356][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.950479][ T21] gspca_sonixj: i2c_w8 err -110 [ 65.990525][ T21] sonixj: probe of 5-1:0.0 failed with error -110 [ 66.000668][ T4305] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.015639][ T4305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.025953][ T4305] usb 3-1: Product: syz [ 66.031678][ T4305] usb 3-1: Manufacturer: syz [ 66.082036][ T4305] usb 3-1: SerialNumber: syz [ 66.117977][ T4460] loop0: detected capacity change from 0 to 2368 [ 66.130552][ T4249] usb 4-1: config 0 has no interfaces? [ 66.302360][ T4249] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 66.336199][ T4249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.374612][ T4249] usb 4-1: Product: syz [ 66.388200][ T4249] usb 4-1: Manufacturer: syz [ 66.401029][ T4305] usb 3-1: 0:2 : does not exist [ 66.409822][ T4249] usb 4-1: SerialNumber: syz [ 66.443903][ T4305] usb 3-1: USB disconnect, device number 2 [ 66.460529][ T4249] usb 4-1: config 0 descriptor?? [ 66.524168][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 67.058256][ T4474] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 67.072628][ T4477] loop0: detected capacity change from 0 to 512 [ 67.134726][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 67.199528][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 67.949539][ T21] usb 5-1: USB disconnect, device number 3 [ 68.023737][ T4477] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,delalloc,bsdgroups,. Quota mode: writeback. [ 68.156019][ T4477] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.158909][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 68.214223][ T4490] syz.4.54 uses obsolete (PF_INET,SOCK_PACKET) [ 68.461849][ T25] audit: type=1326 audit(1754512839.872:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b0e88be9 code=0x7ffc0000 [ 68.597092][ T25] audit: type=1326 audit(1754512839.902:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fb4b0e88be9 code=0x7ffc0000 [ 68.727775][ T25] audit: type=1326 audit(1754512839.902:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.0.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4b0e88be9 code=0x7ffc0000 [ 68.790778][ T4503] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 69.080337][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 69.182688][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 69.233235][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.338424][ T1107] usb 4-1: USB disconnect, device number 3 [ 71.156235][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.162901][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.999923][ T4545] device geneve2 entered promiscuous mode [ 72.143147][ T4548] program syz.4.79 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.591303][ T4560] loop3: detected capacity change from 0 to 8 [ 72.609809][ T4560] Dev loop3: unable to read RDB block 8 [ 72.615776][ T4560] loop3: unable to read partition table [ 72.621796][ T4560] loop3: partition table beyond EOD, truncated [ 72.623505][ T4561] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.628878][ T4560] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CÿjmámÛÀ¿Ã½?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 72.689760][ T3561] Dev loop3: unable to read RDB block 8 [ 72.701050][ T3561] loop3: unable to read partition table [ 72.706850][ T3561] loop3: partition table beyond EOD, truncated [ 72.827345][ T4569] loop4: detected capacity change from 0 to 128 [ 73.871889][ T4569] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 73.896763][ T4581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 73.959609][ T4581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.91'. [ 73.994797][ T4569] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.018212][ T4587] loop0: detected capacity change from 0 to 512 [ 74.160759][ T4305] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 74.197705][ T4587] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.215978][ T4587] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.330610][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.405846][ T4305] usb 4-1: Using ep0 maxpacket: 32 [ 74.440586][ T4596] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.448524][ T4596] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.460497][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 74.532579][ T4305] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 74.556505][ T4305] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 74.565562][ T4305] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 74.580305][ T4305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 74.600617][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 74.606799][ T4305] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 74.617226][ T4305] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 74.630326][ T4305] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 74.640640][ T4305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.663175][ T4305] usb 4-1: config 0 descriptor?? [ 74.720603][ T7] usb 3-1: config 0 has an invalid interface number: 78 but max is 0 [ 74.730336][ T7] usb 3-1: config 0 has no interface number 0 [ 74.763834][ T4596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.797800][ T4596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.840708][ T13] usb 5-1: config 6 has an invalid interface number: 226 but max is 0 [ 74.852356][ T13] usb 5-1: config 6 has no interface number 0 [ 74.890621][ T7] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 74.905637][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.916355][ T7] usb 3-1: Product: syz [ 74.933398][ T7] usb 3-1: Manufacturer: syz [ 74.959110][ T7] usb 3-1: SerialNumber: syz [ 74.972276][ T4305] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 74.986070][ T7] usb 3-1: config 0 descriptor?? [ 74.994368][ T4305] usb 4-1: USB disconnect, device number 4 [ 75.030830][ T13] usb 5-1: New USB device found, idVendor=04cb, idProduct=0121, bcdDevice=76.90 [ 75.043344][ T4305] usblp0: removed [ 75.049772][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.059185][ T13] usb 5-1: Product: syz [ 75.063627][ T13] usb 5-1: Manufacturer: syz [ 75.068294][ T13] usb 5-1: SerialNumber: syz [ 75.133343][ T13] gspca_main: finepix-2.14.0 probing 04cb:0121 [ 75.316332][ T4596] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.325388][ T4596] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.335869][ T4596] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.337094][ T4608] usb 5-1: USB disconnect, device number 4 [ 75.346079][ T4596] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.446056][ T4613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 75.462453][ T4613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.473633][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.502223][ T4613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.509699][ T4613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.510610][ T4305] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 75.760526][ T4305] usb 4-1: Using ep0 maxpacket: 32 [ 76.445704][ T1325] cfg80211: failed to load regulatory.db [ 76.496780][ T4622] loop0: detected capacity change from 0 to 2048 [ 76.558624][ T4624] loop1: detected capacity change from 0 to 2048 [ 76.565514][ T4622] loop0: p2 p3 p7 [ 76.571035][ T4305] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 76.591656][ T4305] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 76.595098][ T4624] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 76.609246][ T4305] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 76.619827][ T4305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 76.656084][ T4624] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.694449][ T4305] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 76.712661][ T4628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.105'. [ 76.725195][ T4624] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 76.730434][ T4305] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 76.754330][ T4628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.105'. [ 76.754644][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 76.776820][ T4239] udevd[4239]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 76.808237][ T4305] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 76.833817][ T4631] udevd[4631]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 76.844335][ T4305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.053856][ T4305] usb 4-1: config 0 descriptor?? [ 77.070627][ T4305] usb 4-1: can't set config #0, error -71 [ 77.078429][ T7] usbhid 3-1:0.78: couldn't find an input interrupt endpoint [ 77.099751][ T4305] usb 4-1: USB disconnect, device number 5 [ 77.121398][ T7] usb 3-1: USB disconnect, device number 3 [ 77.306070][ T4662] netlink: 32 bytes leftover after parsing attributes in process `syz.1.118'. [ 77.361951][ T4666] ================================================================================ [ 77.372408][ T4666] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/das16m1.c:526:9 [ 77.381157][ T4666] shift exponent -2147483647 is negative [ 77.386970][ T4666] CPU: 1 PID: 4666 Comm: syz.1.119 Not tainted 5.15.189-syzkaller #0 [ 77.395028][ T4666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.405089][ T4666] Call Trace: [ 77.408382][ T4666] [ 77.411301][ T4666] dump_stack_lvl+0x168/0x230 [ 77.416011][ T4666] ? show_regs_print_info+0x20/0x20 [ 77.421200][ T4666] ? load_image+0x3b0/0x3b0 [ 77.425706][ T4666] ? __lock_acquire+0x7c60/0x7c60 [ 77.430715][ T4666] ? do_raw_write_lock+0x119/0x250 [ 77.435827][ T4666] ubsan_epilogue+0xa/0x30 [ 77.440223][ T4666] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 77.446624][ T4666] ? __comedi_request_region+0x70/0x130 [ 77.452161][ T4666] das16m1_attach+0x8c9/0xb00 [ 77.456862][ T4666] comedi_device_attach+0x515/0x650 [ 77.462063][ T4666] comedi_unlocked_ioctl+0x5ec/0xe90 [ 77.467352][ T4666] ? comedi_poll+0x8b0/0x8b0 [ 77.471996][ T4666] ? bpf_lsm_file_ioctl+0x5/0x10 [ 77.476931][ T4666] ? security_file_ioctl+0x7c/0xa0 [ 77.482053][ T4666] ? comedi_poll+0x8b0/0x8b0 [ 77.486644][ T4666] __se_sys_ioctl+0xfa/0x170 [ 77.491226][ T4666] do_syscall_64+0x4c/0xa0 [ 77.495640][ T4666] ? clear_bhb_loop+0x30/0x80 [ 77.500298][ T4666] ? clear_bhb_loop+0x30/0x80 [ 77.504970][ T4666] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.510886][ T4666] RIP: 0033:0x7fb43d471be9 [ 77.515300][ T4666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.534895][ T4666] RSP: 002b:00007fb43b2d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.540597][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 77.543319][ T4666] RAX: ffffffffffffffda RBX: 00007fb43d698fa0 RCX: 00007fb43d471be9 [ 77.558751][ T4666] RDX: 0000200000000300 RSI: 0000000040946400 RDI: 0000000000000003 [ 77.566729][ T4666] RBP: 00007fb43d4f4e19 R08: 0000000000000000 R09: 0000000000000000 [ 77.574701][ T4666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.582673][ T4666] R13: 00007fb43d699038 R14: 00007fb43d698fa0 R15: 00007fff1eebf8b8 [ 77.590658][ T4666] [ 77.609595][ T4666] ================================================================================ [ 77.621666][ T4666] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 77.628860][ T4666] CPU: 1 PID: 4666 Comm: syz.1.119 Not tainted 5.15.189-syzkaller #0 [ 77.636905][ T4666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.646944][ T4666] Call Trace: [ 77.650211][ T4666] [ 77.653130][ T4666] dump_stack_lvl+0x168/0x230 [ 77.657796][ T4666] ? show_regs_print_info+0x20/0x20 [ 77.662973][ T4666] ? load_image+0x3b0/0x3b0 [ 77.667483][ T4666] panic+0x2c9/0x7f0 [ 77.671376][ T4666] ? bpf_jit_dump+0xd0/0xd0 [ 77.675868][ T4666] check_panic_on_warn+0x80/0xa0 [ 77.680789][ T4666] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 77.687192][ T4666] ? __comedi_request_region+0x70/0x130 [ 77.692728][ T4666] das16m1_attach+0x8c9/0xb00 [ 77.697393][ T4666] comedi_device_attach+0x515/0x650 [ 77.702577][ T4666] comedi_unlocked_ioctl+0x5ec/0xe90 [ 77.707862][ T4666] ? comedi_poll+0x8b0/0x8b0 [ 77.712460][ T4666] ? bpf_lsm_file_ioctl+0x5/0x10 [ 77.717376][ T4666] ? security_file_ioctl+0x7c/0xa0 [ 77.722472][ T4666] ? comedi_poll+0x8b0/0x8b0 [ 77.727052][ T4666] __se_sys_ioctl+0xfa/0x170 [ 77.731642][ T4666] do_syscall_64+0x4c/0xa0 [ 77.736043][ T4666] ? clear_bhb_loop+0x30/0x80 [ 77.740703][ T4666] ? clear_bhb_loop+0x30/0x80 [ 77.745368][ T4666] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.751242][ T4666] RIP: 0033:0x7fb43d471be9 [ 77.755640][ T4666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.775224][ T4666] RSP: 002b:00007fb43b2d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.783630][ T4666] RAX: ffffffffffffffda RBX: 00007fb43d698fa0 RCX: 00007fb43d471be9 [ 77.791589][ T4666] RDX: 0000200000000300 RSI: 0000000040946400 RDI: 0000000000000003 [ 77.799546][ T4666] RBP: 00007fb43d4f4e19 R08: 0000000000000000 R09: 0000000000000000 [ 77.807495][ T4666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.815445][ T4666] R13: 00007fb43d699038 R14: 00007fb43d698fa0 R15: 00007fff1eebf8b8 [ 77.823410][ T4666] [ 77.826605][ T4666] Kernel Offset: disabled [ 77.835193][ T4666] Rebooting in 86400 seconds..