last executing test programs: 20.443379755s ago: executing program 0 (id=741): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711242000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="060000000400", @ANYRESHEX=r4, @ANYRES16=r1], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chown(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000580)=""/114, 0x72}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x3, &(0x7f0000000700)}, 0x10000) 18.265926197s ago: executing program 0 (id=743): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000140)=0x4) read$dsp(0xffffffffffffffff, &(0x7f0000000200)=""/25, 0x8a) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r2}) 15.017894694s ago: executing program 0 (id=754): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @empty, 0x7ff}], 0x2c) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x34, r1, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x34}}, 0x3000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000002700000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000380)={0x0, 0x2, 0x1, [0x400, 0x0, 0x7ff, 0x100000000], [0x80000000, 0x2, 0x8, 0x1, 0x8, 0x4, 0x0, 0x8, 0x73, 0x3, 0x9, 0x6, 0xc, 0x10000, 0x1, 0x29, 0xffffffffffffffff, 0x0, 0xc3, 0x80000001, 0x2, 0xb, 0x401, 0x73, 0xfff, 0x6b, 0x1, 0xfffffffffffffffb, 0x44de, 0x80000000, 0xe000000000000, 0x8000000000000000, 0x5, 0x8, 0x401, 0x0, 0x6, 0x7ff, 0x0, 0xb05, 0x696, 0x8, 0x99b7, 0x2c45, 0xfffffffffffeffff, 0x7, 0x80000001, 0x81, 0xe49, 0x1a, 0x1600000000, 0xae, 0x8, 0x5, 0x60, 0x9, 0x3ff, 0xb1, 0x2, 0xd, 0x5, 0x3, 0x3, 0x3ff, 0x159e, 0x8, 0x9e, 0x5, 0xe9, 0x9, 0x3, 0xc, 0x401, 0x406, 0x9, 0x8, 0xfffffffffffffffb, 0x3, 0xc, 0xf3, 0x9, 0x4, 0x72, 0x1, 0x2249, 0x3, 0x6, 0x4800000000000000, 0x6, 0xff, 0x9, 0x9, 0xff, 0x72, 0x6, 0xd, 0x7f, 0x3, 0x2, 0x0, 0x180, 0x3ff, 0x4d0, 0x80, 0xf641, 0x7, 0x8000000000000000, 0x4, 0x4f9, 0x5317, 0x4, 0x80, 0x3, 0x0, 0x100, 0x3, 0x4, 0x4, 0x2, 0x4, 0x5f5]}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)}], 0x2}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f7274000000"], 0x58}}, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000597fb1fec749000000000018450000010000000000000000000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040603000000000000000000010000080500010007000001"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000814) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000007c0)={0x0, 0x3, 0x7a}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x44004) 11.275855657s ago: executing program 0 (id=763): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) inotify_init() renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000340)={@mcast2, 0x32}) r5 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000200)={0x5, "e89082db530c1b9070950faeacb6ae11067653331d34a0dd16be012d1460b974"}) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffe83, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb0646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYRESDEC=r4, @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 10.200504943s ago: executing program 4 (id=768): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) 9.98216312s ago: executing program 4 (id=771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x44, 0xeffffffe, 0x2, 0x3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0xc044) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x700, 0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x0, 0x80000000, 0x9, 0x5274ef30, 0x8000000000000000, 0x47fd, 0x90b4], 0x0, 0x1}) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 9.953544781s ago: executing program 3 (id=772): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$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") munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000440)={0x1, @pix_mp={0x5, 0x8000000, 0x55595659, 0x6, 0x8, [{0x2, 0x1f}, {0x8, 0x7fff}, {0x7, 0x6}, {0x42, 0x2}, {0x3}, {0x3ff, 0x4}, {0x81, 0x3ff}, {0x8, 0xe37}], 0x1, 0x0, 0x0, 0x0, 0x5}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 8.135548261s ago: executing program 4 (id=774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.369140409s ago: executing program 3 (id=776): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$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") munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000440)={0x1, @pix_mp={0x5, 0x8000000, 0x55595659, 0x6, 0x8, [{0x2, 0x1f}, {0x8, 0x7fff}, {0x7, 0x6}, {0x42, 0x2}, {0x3}, {0x3ff, 0x4}, {0x81, 0x3ff}, {0x8, 0xe37}], 0x1, 0x0, 0x0, 0x0, 0x5}}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 6.317794531s ago: executing program 4 (id=778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x5, 0x7d, 0x8001, 0x0, 0xfffffff8, 0x10}, [@TCA_NETEM_CORR={0x10, 0x1, {0x7fffffff, 0x5, 0xfffffffd}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.162337206s ago: executing program 2 (id=779): socket$pppoe(0x18, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 5.324541434s ago: executing program 1 (id=781): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000035c0)={0x5, 0x7, &(0x7f00000033c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000003400)='GPL\x00', 0x1, 0x78, &(0x7f0000003440)=""/120, 0x41100, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000034c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000003500)={0x1, 0x4, 0x5, 0xd772}, 0x10, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000003540)=[{0x3, 0x2, 0x3, 0x7}, {0x4, 0x2, 0x4, 0x8}, {0x1, 0x1, 0xd, 0x3}, {0x4, 0x4, 0x3}, {0x0, 0x1, 0x8, 0xb}], 0x10, 0x8001}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000040)=0x40002001) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000002c0)=[{0xff, 0x0, 0x0, 0x6, @tick=0x9, {}, {}, @time=@time={0x8000, 0x1}}, {0x0, 0xfc, 0x80, 0x3, @time={0x7, 0x2}, {0x0, 0x32}, {}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) 5.277643555s ago: executing program 2 (id=782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r4 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000100)='acl', &(0x7f0000000140)="96", 0x1) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af83, &(0x7f0000000240)={0x1, 0x0, [{0x5000, 0x0, 0x0}]}) 5.200330138s ago: executing program 3 (id=783): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000035c0)={0x5, 0x7, &(0x7f00000033c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000003400)='GPL\x00', 0x1, 0x78, &(0x7f0000003440)=""/120, 0x41100, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000034c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000003500)={0x1, 0x4, 0x5, 0xd772}, 0x10, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000003540)=[{0x3, 0x2, 0x3, 0x7}, {0x4, 0x2, 0x4, 0x8}, {0x1, 0x1, 0xd, 0x3}, {0x4, 0x4, 0x3}, {0x0, 0x1, 0x8, 0xb}], 0x10, 0x8001}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000040)=0x40002001) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000002c0)=[{0xff, 0x0, 0x0, 0x6, @tick=0x9, {}, {}, @time=@time={0x8000, 0x1}}, {0x0, 0xfc, 0x80, 0x3, @time={0x7, 0x2}, {0x0, 0x32}, {}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) 5.102423101s ago: executing program 2 (id=784): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) 4.287477738s ago: executing program 1 (id=785): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) 4.286068938s ago: executing program 3 (id=786): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$eJzs3U1rE0Ecx/HfbJImtqVuH0QQT9WCJ+nDRbwUJO/AiydRmwjFUEErqCf1LL4A730LvgCPnsSz4K0nX0BukZmdNZtkN5uGppuk3w8kbLrzn4fsbGf+KSUCcGk9qP852Tu1DyOVVJJ0Xwok1aSypGu6XntzdHx43Go2hlVUchH2YRRFmoEyB0fNtFAb5yK80L4qazn5M0xG7bc+FN0HFM/d/SkCqervTne+duE9m4zLPulNW2291UrR/QAAFMuv/4Ff55f9/j0IpC2/7Peu/zO+gLaL7sCEfc85n1j/XZbVMfb6XnWnuvmeS+HKqvigk73TtLoWc9paUDSzejaYJi+rdH0Jrjw/bDXvHrxsNQJ90r5X6RbbcM+NaOrG4pzWHn8crHrT56Yj5pfJ2s5myY2hYsewm+x/osj6ObboM+7ht6b5YX6axybUVzX+7//KHWMvk7tSYd+Vivq/nV2jG+WCXKmMUa66Rm74FkYZZUkZGYniGbXadwHDvH66qLW+qGh0OzlR66lRuzlRG/1R3dmcHTlp5ot5ZDb1V99UT+z/A/tub2mUO9OWcSX9zBg6nrIrGbrZGc/Pm6klg3FHhDF81jPd08rrd+9fPG21mq/m9sDeiYOn7AoyLT28+IN4EkxLf+b2wL7JhbQerzvj15P9q4OP5edH96KfMZBJMC/svstE+V8iX9l2mzX7FPbu06vJ2E5e5YkadzJygzX3vJidwfUwLr9ZSvnr4mCLQ3OuW3ek26O0GAl9P6fP/jhBpq5fesLn/wAAAAAAAAAAAAAAAAAAALPm/P7loKasU0WPEQAAAAAAAAAAAAAAAAAAAACAWZfy/b/VQr//96GiV3z/LzBx/wIAAP//nY5x9w==") munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = socket$inet6(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 4.284784728s ago: executing program 4 (id=787): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) fsopen(&(0x7f0000000940)='9p\x00', 0x1) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000380)='stat\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r2, 0x33, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.750822369s ago: executing program 2 (id=788): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000035c0)={0x5, 0x7, &(0x7f00000033c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000003400)='GPL\x00', 0x1, 0x78, &(0x7f0000003440)=""/120, 0x41100, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000034c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000003500)={0x1, 0x4, 0x5, 0xd772}, 0x10, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000003540)=[{0x3, 0x2, 0x3, 0x7}, {0x4, 0x2, 0x4, 0x8}, {0x1, 0x1, 0xd, 0x3}, {0x4, 0x4, 0x3}, {0x0, 0x1, 0x8, 0xb}], 0x10, 0x8001}, 0x94) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000040)=0x40002001) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000002c0)=[{0xff, 0x0, 0x0, 0x6, @tick=0x9, {}, {}, @time=@time={0x8000, 0x1}}, {0x0, 0xfc, 0x80, 0x3, @time={0x7, 0x2}, {0x0, 0x32}, {}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) 2.743988829s ago: executing program 1 (id=789): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r0) 2.446745659s ago: executing program 3 (id=790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.4046104s ago: executing program 1 (id=791): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = userfaultfd(0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002700), 0x0, 0x4000001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 1.696541434s ago: executing program 2 (id=792): socket$pppoe(0x18, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 1.615615777s ago: executing program 0 (id=793): socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f15}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.438053743s ago: executing program 3 (id=794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x770d3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r3 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000100)='acl', &(0x7f0000000140)="96", 0x1) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af83, &(0x7f0000000240)={0x1, 0x0, [{0x5000, 0x0, 0x0}]}) 1.362058045s ago: executing program 1 (id=795): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) 1.356790775s ago: executing program 2 (id=796): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) 549.491512ms ago: executing program 0 (id=797): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000440)={0x1, @pix_mp={0x5, 0x8000000, 0x55595659, 0x6, 0x8, [{0x2, 0x1f}, {0x8, 0x7fff}, {0x7, 0x6}, {0x42, 0x2}, {0x3}, {0x3ff, 0x4}, {0x81, 0x3ff}, {0x8, 0xe37}], 0x1, 0x0, 0x0, 0x0, 0x5}}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 39.037878ms ago: executing program 4 (id=798): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x740, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x4004080) socket$nl_route(0x10, 0x3, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0xfffffffffffffff2}) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000540)='./file1\x00', 0x808808, &(0x7f0000000380)=ANY=[], 0x0, 0x2f8, &(0x7f0000000580)="$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") 0s ago: executing program 1 (id=799): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) kernel console output (not intermixed with test programs): 60.156801][ T4197] device bridge_slave_1 entered promiscuous mode [ 60.215948][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.223392][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.231293][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.240582][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.259264][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.278338][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.286013][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.294373][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.304118][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.316885][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.373235][ T4194] team0: Port device team_slave_0 added [ 60.408389][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.415619][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.423876][ T4199] device bridge_slave_0 entered promiscuous mode [ 60.433596][ T4194] team0: Port device team_slave_1 added [ 60.439493][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.447022][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.455525][ T4187] device bridge_slave_0 entered promiscuous mode [ 60.464670][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.477311][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.489029][ T4197] team0: Port device team_slave_0 added [ 60.495560][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.502938][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.510696][ T4199] device bridge_slave_1 entered promiscuous mode [ 60.524163][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.531240][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.539217][ T4187] device bridge_slave_1 entered promiscuous mode [ 60.560338][ T4197] team0: Port device team_slave_1 added [ 60.596672][ T4186] team0: Port device team_slave_0 added [ 60.611118][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.621373][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.628970][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.655420][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.669083][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.676650][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.703309][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.723459][ T4186] team0: Port device team_slave_1 added [ 60.730857][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.750214][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.778767][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.788708][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.795793][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.822007][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.841347][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.848526][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.875077][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.909986][ T4194] device hsr_slave_0 entered promiscuous mode [ 60.917107][ T4194] device hsr_slave_1 entered promiscuous mode [ 60.941662][ T4199] team0: Port device team_slave_0 added [ 60.948404][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.955532][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.988329][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.000594][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.007768][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.034770][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.053820][ T4199] team0: Port device team_slave_1 added [ 61.084732][ T4187] team0: Port device team_slave_0 added [ 61.093847][ T4197] device hsr_slave_0 entered promiscuous mode [ 61.100639][ T4197] device hsr_slave_1 entered promiscuous mode [ 61.107921][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.116040][ T4197] Cannot create hsr debugfs directory [ 61.152296][ T4187] team0: Port device team_slave_1 added [ 61.197947][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.205426][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.232467][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.272165][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.279505][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.305607][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.319787][ T4186] device hsr_slave_0 entered promiscuous mode [ 61.327378][ T4186] device hsr_slave_1 entered promiscuous mode [ 61.334348][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.342138][ T4186] Cannot create hsr debugfs directory [ 61.363333][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.370510][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.397983][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.433718][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.440858][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.467347][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.503770][ T4199] device hsr_slave_0 entered promiscuous mode [ 61.510840][ T4199] device hsr_slave_1 entered promiscuous mode [ 61.517632][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.525570][ T4199] Cannot create hsr debugfs directory [ 61.538548][ T4175] Bluetooth: hci4: command 0x0409 tx timeout [ 61.542491][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 61.545656][ T4175] Bluetooth: hci1: command 0x0409 tx timeout [ 61.552569][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 61.572502][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 61.598561][ T4187] device hsr_slave_0 entered promiscuous mode [ 61.605798][ T4187] device hsr_slave_1 entered promiscuous mode [ 61.613395][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.621106][ T4187] Cannot create hsr debugfs directory [ 61.806180][ T4194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.845622][ T4194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.855810][ T4194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.880380][ T4194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.944445][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.960204][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.969874][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.985401][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.045432][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.065833][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.078238][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.088685][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.157157][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.211960][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.224916][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.235790][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.247957][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.258423][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.270474][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.297019][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.307681][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.317821][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.328527][ T3087] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.336033][ T3087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.345212][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.359548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.370907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.380085][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.387513][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.402579][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.413995][ T4199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.425102][ T4199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.437602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.445784][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.457730][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.468203][ T4199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.479197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.501968][ T4199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.527191][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.538520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.548592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.557790][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.565183][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.574428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.593697][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.604514][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.613753][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.623627][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.633206][ T3087] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.640276][ T3087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.648840][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.658177][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.680902][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.699043][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.728821][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.749969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.760042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.769792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.778880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.789158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.798766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.809494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.818891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.828430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.837338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.846355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.854779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.862566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.870874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.879623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.894204][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.903349][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.912109][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.923669][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.931162][ T1213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.949671][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.963026][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.009688][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.019018][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.035515][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.050499][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.064419][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.079534][ T1213] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.086671][ T1213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.097297][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.142330][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.152923][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.161937][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.178851][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.188636][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.197516][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.220503][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.232299][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.250426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.260564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.279401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.290472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.346458][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.360045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.370516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.381214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.393077][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.407204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.416835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.430556][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.449833][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.479807][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.489394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.499472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.508233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.516022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.531940][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.570540][ T4194] device veth0_vlan entered promiscuous mode [ 63.577594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.586849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.596066][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.603196][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.611317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.620450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.629479][ T2239] Bluetooth: hci0: command 0x041b tx timeout [ 63.635010][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.636123][ T2239] Bluetooth: hci2: command 0x041b tx timeout [ 63.642774][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.643369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.652684][ T2239] Bluetooth: hci1: command 0x041b tx timeout [ 63.660093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.668487][ T2239] Bluetooth: hci3: command 0x041b tx timeout [ 63.671940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.679227][ T2239] Bluetooth: hci4: command 0x041b tx timeout [ 63.689563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.716874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.725825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.734433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.742257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.750233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.759229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.768275][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.775657][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.783715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.792283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.801144][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.808259][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.829802][ T4194] device veth1_vlan entered promiscuous mode [ 63.840822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.849658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.865828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.873939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.884891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.899179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.908420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.928263][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.954252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.964015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.973232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.982005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.991579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.018786][ T4197] device veth0_vlan entered promiscuous mode [ 64.036845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.047031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.059925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.069193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.078540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.087009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.096416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.106118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.114643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.123341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.131445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.142160][ T4197] device veth1_vlan entered promiscuous mode [ 64.154684][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.169109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.179283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.214178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.230283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.240334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.278051][ T4194] device veth0_macvtap entered promiscuous mode [ 64.293823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.302086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.314140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.333676][ T4197] device veth0_macvtap entered promiscuous mode [ 64.351429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.368333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.381214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.397401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.409495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.418996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.429821][ T4194] device veth1_macvtap entered promiscuous mode [ 64.453898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.463035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.471302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.480164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.489702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.498608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.509529][ T4197] device veth1_macvtap entered promiscuous mode [ 64.519698][ T4187] device veth0_vlan entered promiscuous mode [ 64.530683][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.543635][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.551456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.560079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.568366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.576970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.585739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.621349][ T4187] device veth1_vlan entered promiscuous mode [ 64.629877][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.643623][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.655058][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.667900][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.678144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.686429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.694683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.702177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.711538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.721028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.729990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.753861][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.761624][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.773982][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.785518][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.803954][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.823870][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.841925][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.851916][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.873303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.881932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.891561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.909587][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.918922][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.928160][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.937479][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.989535][ T4187] device veth0_macvtap entered promiscuous mode [ 65.034065][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.049400][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.075347][ T4187] device veth1_macvtap entered promiscuous mode [ 65.094163][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.167686][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.175912][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.188727][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.211757][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.225642][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.241104][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.253067][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.268022][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.297055][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.308900][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.320240][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.332059][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.342293][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.353210][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.364617][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.384455][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.394290][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.403420][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.413300][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.443754][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.453547][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.466454][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.475555][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.492934][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.501034][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.520205][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.530300][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.539853][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.552333][ T1213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.560424][ T1213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.572394][ T4199] device veth0_vlan entered promiscuous mode [ 65.626838][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.636287][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.645598][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.655804][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.664999][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.675682][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.684388][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.694255][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.702238][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.702723][ T4227] Bluetooth: hci3: command 0x040f tx timeout [ 65.717660][ T4199] device veth1_vlan entered promiscuous mode [ 65.724068][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 65.728507][ T4186] device veth0_vlan entered promiscuous mode [ 65.730327][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 65.743840][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 65.755995][ T1213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.764950][ T1213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.771990][ T4186] device veth1_vlan entered promiscuous mode [ 65.783337][ T2239] Bluetooth: hci4: command 0x040f tx timeout [ 65.790952][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.799374][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.808710][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.817086][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.827536][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.836710][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.845049][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.853563][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.864449][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.908129][ T4199] device veth0_macvtap entered promiscuous mode [ 65.967523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.983711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.992246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.001549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.011945][ T4199] device veth1_macvtap entered promiscuous mode [ 66.030417][ T4186] device veth0_macvtap entered promiscuous mode [ 66.051437][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.067207][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.118333][ T4186] device veth1_macvtap entered promiscuous mode [ 66.139025][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.150426][ T3087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.199047][ T3087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.207938][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.224581][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.239240][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.252255][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.271845][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.294668][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.328794][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.340732][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.360035][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.396845][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.426006][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.453040][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.470223][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.483750][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.503193][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.531783][ T4260] loop3: detected capacity change from 0 to 32768 [ 66.533329][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.559094][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.570270][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.589202][ T4260] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (4260) [ 66.604527][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.625389][ T4260] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 66.635203][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.646045][ T4260] BTRFS info (device loop3): enabling auto defrag [ 66.654473][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.666227][ T4260] BTRFS info (device loop3): force clearing of disk cache [ 66.676497][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.694335][ T4260] BTRFS error (device loop3): support for check_integrity* not compiled in! [ 66.706608][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.724343][ T4260] BTRFS error (device loop3): open_ctree failed: -22 [ 66.724372][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.734183][ T4178] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by udevd (4178) [ 66.748280][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.764596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.787952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.817260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.841385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.859836][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.870750][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.896782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.915876][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.938767][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.963779][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.000341][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.496381][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.513360][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.524095][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.535484][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.546405][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.557363][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.567735][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.578395][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.589953][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.603279][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.612202][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.622613][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.631542][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.652765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.694787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.782604][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 67.803878][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 67.811501][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 67.823244][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 67.854456][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 67.862758][ T2239] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.928856][ T1250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.931845][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.949756][ T1250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.950082][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.984383][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.995511][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.028411][ T1250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.038454][ T1250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.047267][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.065073][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.076909][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.088441][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.132540][ T2239] usb 4-1: Using ep0 maxpacket: 8 [ 68.163204][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.308498][ T2239] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.342206][ T2239] usb 4-1: config 0 has no interfaces? [ 68.352499][ T4258] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.524169][ T2239] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 68.548671][ T2239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.578776][ T2239] usb 4-1: Product: syz [ 68.586843][ T2239] usb 4-1: Manufacturer: syz [ 68.602841][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.608015][ T4258] usb 2-1: Using ep0 maxpacket: 16 [ 68.657553][ T2239] usb 4-1: SerialNumber: syz [ 68.662975][ T21] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 68.684594][ T2239] usb 4-1: config 0 descriptor?? [ 68.734654][ T4258] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.755543][ T4258] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 68.853114][ T21] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 68.870272][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.922815][ T21] usb 3-1: Product: syz [ 68.954929][ T21] usb 3-1: Manufacturer: syz [ 68.976183][ T21] usb 3-1: SerialNumber: syz [ 68.986917][ T4275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6'. [ 69.002800][ T4258] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 69.024251][ T21] usb 3-1: config 0 descriptor?? [ 69.031643][ T4258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.040191][ T4275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6'. [ 69.070597][ T4258] usb 2-1: Product: syz [ 69.080736][ T4258] usb 2-1: Manufacturer: syz [ 69.092532][ T4258] usb 2-1: SerialNumber: syz [ 69.118300][ T4275] device bond0 entered promiscuous mode [ 69.135787][ T4258] usb 2-1: config 0 descriptor?? [ 69.142517][ T4275] device bond_slave_0 entered promiscuous mode [ 69.154935][ T4275] device bond_slave_1 entered promiscuous mode [ 69.173479][ T4275] device bond0 left promiscuous mode [ 69.181647][ T4275] device bond_slave_0 left promiscuous mode [ 69.200787][ T4275] device bond_slave_1 left promiscuous mode [ 69.348996][ T1107] usb 3-1: USB disconnect, device number 2 [ 69.373219][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.430331][ T21] usb 4-1: USB disconnect, device number 2 [ 69.587699][ T4233] usb 2-1: USB disconnect, device number 2 [ 70.553158][ T4323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 70.562050][ T4323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 70.571780][ T4323] netlink: 'syz.0.13': attribute type 11 has an invalid length. [ 70.600386][ T4323] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.609683][ T4323] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.618539][ T4323] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.627581][ T4323] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.642145][ T4323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 70.651105][ T4323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 70.660284][ T4323] netlink: 'syz.0.13': attribute type 11 has an invalid length. [ 70.670012][ T4323] Zero length message leads to an empty skb [ 70.872774][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #42!!! [ 71.077640][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 71.537889][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.544653][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.985426][ T4313] loop2: detected capacity change from 0 to 32768 [ 72.151416][ T4315] loop3: detected capacity change from 0 to 32768 [ 72.177052][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18!!! [ 72.254114][ T4334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 72.262977][ T4334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16'. [ 72.271956][ T4334] netlink: 'syz.4.16': attribute type 11 has an invalid length. [ 72.299563][ T4334] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.308448][ T4334] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.317225][ T4334] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.326155][ T4334] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.340003][ T4334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 72.348972][ T4334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16'. [ 72.358007][ T4334] netlink: 'syz.4.16': attribute type 11 has an invalid length. [ 72.422869][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 72.511145][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 72.613716][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 72.838451][ T4334] syz.4.16 (4334) used greatest stack depth: 21104 bytes left [ 72.926327][ T4313] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 72.938029][ T4315] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.11 (4315) [ 72.976002][ T4337] loop4: detected capacity change from 0 to 64 [ 73.036601][ T4313] BTRFS info (device loop2): enabling auto defrag [ 73.205641][ T4313] BTRFS info (device loop2): force clearing of disk cache [ 73.262546][ T4313] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 74.051476][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 74.060605][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 74.063221][ T4313] BTRFS error (device loop2): open_ctree failed: -22 [ 74.078881][ T4176] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by udevd (4176) [ 74.703478][ T1107] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 74.866332][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 75.129000][ T4354] tipc: Enabling of bearer rejected, failed to enable media [ 75.174285][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.203720][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.222608][ T1107] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 75.249775][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.297456][ T1107] usb 4-1: config 0 descriptor?? [ 75.477622][ T4374] loop1: detected capacity change from 0 to 64 [ 75.514997][ T2284] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.829097][ T1107] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 75.847951][ T1107] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 75.858202][ T1107] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 75.872207][ T1107] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 75.879930][ T1107] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 75.896557][ T1107] elan 0003:04F3:0755.0001: failed to start in urb: -90 [ 75.917372][ T2284] usb 3-1: Using ep0 maxpacket: 16 [ 76.774211][ T1107] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 76.816517][ T1107] usb 4-1: USB disconnect, device number 3 [ 76.932478][ T2284] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 76.976761][ T2284] usb 3-1: config 0 interface 0 has no altsetting 0 [ 77.062273][ T4373] loop4: detected capacity change from 0 to 32768 [ 77.148564][ T4373] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 77.149742][ T4385] device syzkaller0 entered promiscuous mode [ 77.166774][ T4383] fido_id[4383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 77.182873][ T2284] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 77.189180][ T4373] BTRFS info (device loop4): enabling auto defrag [ 77.192185][ T2284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.238341][ T2284] usb 3-1: Product: syz [ 77.250879][ T4373] BTRFS info (device loop4): force clearing of disk cache [ 77.268454][ T4373] BTRFS error (device loop4): support for check_integrity* not compiled in! [ 77.280721][ T2284] usb 3-1: Manufacturer: syz [ 77.331325][ T2284] usb 3-1: SerialNumber: syz [ 77.357082][ T4373] BTRFS error (device loop4): open_ctree failed: -22 [ 77.406697][ T2284] usb 3-1: config 0 descriptor?? [ 77.415062][ T4180] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by udevd (4180) [ 78.556340][ T2284] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 78.584168][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 78.635658][ T2284] imon:send_packet: packet tx failed (-71) [ 78.672472][ T2284] imon 3-1:0.0: panel buttons/knobs setup failed [ 78.782592][ T2284] rc_core: IR keymap rc-imon-pad not found [ 78.788711][ T2284] Registered IR keymap rc-empty [ 78.852576][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.892663][ T2284] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 78.982503][ T2284] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 78.987395][ T1107] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 79.021980][ T2284] imon:send_packet: packet tx failed (-71) [ 79.065456][ T2284] imon 3-1:0.0: remote input dev register failed [ 79.085494][ T2284] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 79.142584][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 79.262524][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.291783][ T2284] imon 3-1:0.0: unable to initialize intf0, err 0 [ 79.345714][ T21] usb 5-1: config 0 has no interfaces? [ 79.370443][ T2284] imon:imon_probe: failed to initialize context! [ 79.413547][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 79.440734][ T2284] imon 3-1:0.0: unable to register, err -19 [ 79.485658][ T2284] usb 3-1: USB disconnect, device number 3 [ 79.492607][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 79.572739][ T21] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 79.588720][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.614892][ T21] usb 5-1: Product: syz [ 79.632565][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 79.656195][ T21] usb 5-1: Manufacturer: syz [ 79.662407][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 79.682100][ T21] usb 5-1: SerialNumber: syz [ 79.720989][ T21] usb 5-1: config 0 descriptor?? [ 79.833029][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 79.873946][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 79.998854][ T4397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.31'. [ 80.018666][ T4397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.31'. [ 80.057012][ T4397] device team0 entered promiscuous mode [ 80.078180][ T4397] device team_slave_0 entered promiscuous mode [ 80.085055][ T1107] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 80.104729][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.120100][ T4397] device team_slave_1 entered promiscuous mode [ 80.136232][ T1107] usb 4-1: Product: syz [ 80.155662][ T1107] usb 4-1: Manufacturer: syz [ 80.168723][ T1107] usb 4-1: SerialNumber: syz [ 80.216404][ T1107] usb 4-1: config 0 descriptor?? [ 80.240913][ T4397] device bond0 entered promiscuous mode [ 80.257488][ T4397] device bond_slave_0 entered promiscuous mode [ 80.284174][ T1107] ti_usb_3410_5052 4-1:0.0: required endpoints missing [ 80.309532][ T4397] device bond_slave_1 entered promiscuous mode [ 80.343844][ T4397] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 80.390697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 80.409920][ T1107] usb 5-1: USB disconnect, device number 2 [ 81.566822][ T4429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.39'. [ 81.775946][ T13] cfg80211: failed to load regulatory.db [ 82.192564][ T13] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 82.582790][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 82.629158][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.709002][ T13] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 82.779839][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.848198][ T13] usb 5-1: config 0 descriptor?? [ 82.891001][ T4229] usb 4-1: USB disconnect, device number 4 [ 83.164003][ T4438] loop2: detected capacity change from 0 to 32768 [ 83.309436][ T4446] loop0: detected capacity change from 0 to 64 [ 84.065499][ T13] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 84.090328][ T4446] hfs: get root inode failed [ 84.152175][ T13] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 84.159803][ T13] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 84.167510][ T13] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 84.175281][ T13] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 84.183524][ T13] elan 0003:04F3:0755.0002: failed to start in urb: -90 [ 84.194295][ T13] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 84.382639][ T4438] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 84.406718][ T13] usb 5-1: USB disconnect, device number 3 [ 84.441020][ T4451] loop0: detected capacity change from 0 to 64 [ 84.441510][ T4438] BTRFS info (device loop2): enabling auto defrag [ 84.468215][ T4449] fido_id[4449]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 84.518715][ T4438] BTRFS info (device loop2): force clearing of disk cache [ 84.685080][ T4438] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 84.705868][ T4438] BTRFS error (device loop2): open_ctree failed: -22 [ 86.212706][ T4226] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.597303][ T4226] usb 5-1: Using ep0 maxpacket: 16 [ 87.054410][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.283025][ T4226] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.331728][ T4226] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.362684][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 87.478821][ T4462] netlink: zone id is out of range [ 87.533047][ T4456] loop2: detected capacity change from 0 to 32768 [ 87.533530][ T4226] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 87.558124][ T4456] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.47 (4456) [ 87.618952][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.649710][ T4226] usb 5-1: Product: syz [ 87.671575][ T4226] usb 5-1: Manufacturer: syz [ 87.691389][ T4226] usb 5-1: SerialNumber: syz [ 87.729301][ T4226] usb 5-1: config 0 descriptor?? [ 87.762184][ T4456] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 87.786223][ T4456] BTRFS info (device loop2): enabling auto defrag [ 87.817060][ T4456] BTRFS info (device loop2): force clearing of disk cache [ 87.858114][ T4456] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 87.906216][ T4456] BTRFS error (device loop2): open_ctree failed: -22 [ 88.117431][ T4226] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 89.192427][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 90.159534][ T4226] rc_core: IR keymap rc-imon-pad not found [ 90.172480][ T4226] Registered IR keymap rc-empty [ 90.186615][ T4226] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 90.247137][ T4226] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 90.306193][ T4503] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.312487][ T4226] imon:send_packet: packet tx failed (-71) [ 90.403929][ T4226] imon 5-1:0.0: remote input dev register failed [ 90.432567][ T4226] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 90.509401][ T4226] imon 5-1:0.0: unable to initialize intf0, err 0 [ 90.569688][ T4226] imon:imon_probe: failed to initialize context! [ 90.608184][ T4512] tipc: Enabling of bearer rejected, failed to enable media [ 90.617407][ T4226] imon 5-1:0.0: unable to register, err -19 [ 90.667909][ T4226] usb 5-1: USB disconnect, device number 4 [ 90.690353][ T4512] device syzkaller0 entered promiscuous mode [ 91.064210][ T4523] fuse: Unknown parameter 'grou00000000000000000000' [ 92.228239][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 92.240889][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 92.322688][ T21] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 92.335026][ T21] usb 1-1: can't read configurations, error -71 [ 92.475580][ T4534] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 93.275219][ T4552] loop1: detected capacity change from 0 to 64 [ 94.056794][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.103236][ T4554] device syzkaller0 entered promiscuous mode [ 94.178925][ T4552] hfs: get root inode failed [ 94.449215][ T4226] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 94.521971][ T4563] tipc: Enabling of bearer rejected, failed to enable media [ 94.584512][ T21] usb 1-1: unable to read config index 0 descriptor/all [ 94.596341][ T21] usb 1-1: can't read configurations, error -71 [ 94.599315][ T4568] fuse: Unknown parameter 'grou00000000000000000000' [ 94.615136][ T4563] device syzkaller0 entered promiscuous mode [ 94.637273][ T21] usb usb1-port1: attempt power cycle [ 94.823619][ T4226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.842537][ T4226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.875501][ T4226] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 94.885518][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.896273][ T4226] usb 4-1: config 0 descriptor?? [ 95.875966][ T4226] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 95.886163][ T4226] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 95.893513][ T4226] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 95.900894][ T4226] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 95.908797][ T4226] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 95.930535][ T4226] elan 0003:04F3:0755.0003: failed to start in urb: -90 [ 95.959298][ T4226] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 95.977695][ T4226] usb 4-1: USB disconnect, device number 5 [ 96.096402][ T4595] fido_id[4595]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 96.282461][ T4229] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.345170][ T4601] device syzkaller0 entered promiscuous mode [ 96.532611][ T4229] usb 3-1: Using ep0 maxpacket: 8 [ 96.652881][ T4229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.723746][ T4229] usb 3-1: config 0 has no interfaces? [ 96.943481][ T4229] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 96.968480][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.014784][ T4229] usb 3-1: Product: syz [ 97.040041][ T4229] usb 3-1: Manufacturer: syz [ 97.072177][ T4229] usb 3-1: SerialNumber: syz [ 97.095207][ T4229] usb 3-1: config 0 descriptor?? [ 97.151435][ T4607] fuse: Unknown parameter 'group_i00000000000000000000' [ 97.246997][ T4612] tipc: Enabling of bearer rejected, failed to enable media [ 97.259566][ T4612] device syzkaller0 entered promiscuous mode [ 97.355210][ T4591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.78'. [ 97.383801][ T4591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.78'. [ 97.411071][ T4591] device bond0 entered promiscuous mode [ 97.439355][ T4591] device bond_slave_0 entered promiscuous mode [ 97.456453][ T4591] device bond_slave_1 entered promiscuous mode [ 97.480976][ T4591] device bond0 left promiscuous mode [ 97.493453][ T4591] device bond_slave_0 left promiscuous mode [ 97.509108][ T4591] device bond_slave_1 left promiscuous mode [ 97.758861][ T4226] usb 3-1: USB disconnect, device number 4 [ 99.093430][ T4639] device syzkaller0 entered promiscuous mode [ 99.106180][ T4641] fuse: Unknown parameter 'group_i00000000000000000000' [ 99.222719][ T21] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 99.228503][ T4643] tipc: Enabling of bearer rejected, failed to enable media [ 99.257376][ T4643] device syzkaller0 entered promiscuous mode [ 99.602822][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 99.664460][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.719250][ T21] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 99.736542][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.779163][ T21] usb 4-1: config 0 descriptor?? [ 100.865120][ T4674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'. [ 100.874096][ T4674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'. [ 100.883559][ T4674] netlink: 'syz.1.103': attribute type 11 has an invalid length. [ 100.909741][ T4674] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.918565][ T4674] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.927412][ T4674] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.936150][ T4674] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.949753][ T4674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'. [ 100.959053][ T4674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.103'. [ 100.968289][ T4674] netlink: 'syz.1.103': attribute type 11 has an invalid length. [ 101.566170][ T21] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 101.573373][ T21] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 101.580865][ T21] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 101.592892][ T21] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 101.646779][ T21] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 101.670375][ T21] elan 0003:04F3:0755.0004: failed to start in urb: -90 [ 101.727125][ T21] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 101.773297][ T21] usb 4-1: USB disconnect, device number 6 [ 101.888977][ T4679] fido_id[4679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 102.005253][ T4682] fuse: Unknown parameter 'group_i00000000000000000000' [ 102.301686][ T4698] tipc: Enabling of bearer rejected, failed to enable media [ 102.346890][ T4698] device syzkaller0 entered promiscuous mode [ 104.009543][ T4723] loop3: detected capacity change from 0 to 64 [ 104.173020][ T4284] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.840111][ T4723] hfs: get root inode failed [ 105.012589][ T4284] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.063788][ T4284] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.082533][ T4229] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 105.193347][ T4729] fuse: Unknown parameter 'group_id00000000000000000000' [ 105.292569][ T4284] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 105.314996][ T4284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.347209][ T4284] usb 5-1: Product: syz [ 105.359729][ T4284] usb 5-1: Manufacturer: syz [ 105.378194][ T4284] usb 5-1: SerialNumber: syz [ 105.410913][ T4284] usb 5-1: config 0 descriptor?? [ 105.473949][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.508153][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.523371][ T4229] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 105.533098][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.548354][ T4229] usb 1-1: config 0 descriptor?? [ 105.698188][ T4255] usb 5-1: USB disconnect, device number 5 [ 105.702129][ T4739] loop2: detected capacity change from 0 to 512 [ 105.810491][ T4739] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 105.835394][ T4739] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.917467][ T4229] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 107.001437][ T4229] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 107.026634][ T4229] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 107.049013][ T4229] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 107.059577][ T4229] elan 0003:04F3:0755.0005: unknown main item tag 0x0 [ 107.068261][ T4229] elan 0003:04F3:0755.0005: failed to start in urb: -90 [ 107.077950][ T4229] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 107.131184][ T4229] usb 1-1: USB disconnect, device number 5 [ 108.208171][ T4755] tipc: Enabling of bearer rejected, failed to enable media [ 108.334877][ T4755] device syzkaller0 entered promiscuous mode [ 109.298204][ T4770] fuse: Unknown parameter 'group_id00000000000000000000' [ 109.732475][ T4188] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 110.102585][ T4188] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.201391][ T4188] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.403179][ T4188] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 110.439994][ T4188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.515674][ T4188] usb 4-1: Product: syz [ 110.554966][ T4188] usb 4-1: Manufacturer: syz [ 110.629675][ T4188] usb 4-1: SerialNumber: syz [ 110.762005][ T4188] usb 4-1: config 0 descriptor?? [ 111.162240][ T4188] usb 4-1: USB disconnect, device number 7 [ 111.332523][ T21] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 111.338578][ T4788] loop0: detected capacity change from 0 to 32768 [ 111.376834][ T4788] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.136 (4788) [ 111.460070][ T4788] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 111.505240][ T4788] BTRFS info (device loop0): enabling auto defrag [ 111.531805][ T4788] BTRFS info (device loop0): force clearing of disk cache [ 111.568328][ T4788] BTRFS error (device loop0): support for check_integrity* not compiled in! [ 111.609225][ T4788] BTRFS error (device loop0): open_ctree failed: -22 [ 111.824666][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.854115][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.887333][ T21] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 112.087634][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.875236][ T4830] tipc: Enabling of bearer rejected, failed to enable media [ 112.886036][ T21] usb 2-1: config 0 descriptor?? [ 112.886591][ T4830] device syzkaller0 entered promiscuous mode [ 113.093758][ T4840] fuse: Unknown parameter 'group_id00000000000000000000' [ 113.252650][ T4188] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.452751][ T21] usbhid 2-1:0.0: can't add hid device: -71 [ 113.463921][ T21] usbhid: probe of 2-1:0.0 failed with error -71 [ 113.505164][ T21] usb 2-1: USB disconnect, device number 3 [ 113.528533][ T4188] usb 1-1: Using ep0 maxpacket: 8 [ 113.653833][ T4188] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.692509][ T4188] usb 1-1: config 0 has no interfaces? [ 113.893908][ T4188] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 113.913314][ T4188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.951761][ T4188] usb 1-1: Product: syz [ 113.964280][ T4188] usb 1-1: Manufacturer: syz [ 113.979954][ T4876] tipc: Enabling of bearer rejected, failed to enable media [ 113.993174][ T4188] usb 1-1: SerialNumber: syz [ 114.004834][ T4877] binder: 4873:4877 ioctl c0306201 0 returned -14 [ 114.006619][ T4188] usb 1-1: config 0 descriptor?? [ 114.341584][ T4834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.143'. [ 114.356308][ T4834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.143'. [ 114.386483][ T4834] device bond0 entered promiscuous mode [ 114.401674][ T4834] device bond_slave_0 entered promiscuous mode [ 114.422300][ T4834] device bond_slave_1 entered promiscuous mode [ 114.439179][ T4834] device bond0 left promiscuous mode [ 114.447136][ T4834] device bond_slave_0 left promiscuous mode [ 114.458392][ T4834] device bond_slave_1 left promiscuous mode [ 114.550034][ T4229] usb 1-1: USB disconnect, device number 6 [ 114.582678][ T4188] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 114.882440][ T21] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 114.972592][ T4188] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.989787][ T4188] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 115.153108][ T4188] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 115.167486][ T4188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.178644][ T4188] usb 5-1: Product: syz [ 115.187164][ T4188] usb 5-1: Manufacturer: syz [ 115.195531][ T4188] usb 5-1: SerialNumber: syz [ 115.221912][ T4188] usb 5-1: config 0 descriptor?? [ 115.253790][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.276981][ T21] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 115.491364][ T4188] usb 5-1: USB disconnect, device number 6 [ 115.681856][ T4909] loop2: detected capacity change from 0 to 1024 [ 115.733135][ T21] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 115.809107][ T4909] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 115.822524][ T4909] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 115.979328][ T4909] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 115.999248][ T4909] EXT4-fs (loop2): orphan cleanup on readonly fs [ 116.012179][ T4909] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.158: Inode bitmap for bg 0 marked uninitialized [ 116.030436][ T4909] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 116.130003][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.264601][ T21] usb 4-1: Product: syz [ 116.268858][ T21] usb 4-1: Manufacturer: syz [ 116.274112][ T21] usb 4-1: SerialNumber: syz [ 116.280807][ T21] usb 4-1: config 0 descriptor?? [ 116.300090][ T4914] tipc: Enabling of bearer rejected, failed to enable media [ 116.344104][ T4914] device syzkaller0 entered promiscuous mode [ 116.405613][ T4918] binder: 4917:4918 ioctl c0306201 0 returned -14 [ 116.439889][ T4920] fuse: Bad value for 'user_id' [ 116.586076][ T21] usb 4-1: USB disconnect, device number 8 [ 118.242708][ T4949] sched: RT throttling activated [ 118.685120][ T4950] loop1: detected capacity change from 0 to 1024 [ 118.722494][ T4950] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 118.733138][ T4950] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 118.759820][ T4950] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 118.769291][ T4950] EXT4-fs (loop1): orphan cleanup on readonly fs [ 118.777170][ T4950] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.173: Inode bitmap for bg 0 marked uninitialized [ 118.790422][ T4950] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 118.862784][ T4962] tipc: Enabling of bearer rejected, failed to enable media [ 118.863659][ T4959] fuse: Bad value for 'user_id' [ 119.070894][ T4968] loop1: detected capacity change from 0 to 64 [ 119.136470][ T4971] device syzkaller0 entered promiscuous mode [ 120.831635][ T4255] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 121.312670][ T4255] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.337670][ T5002] loop1: detected capacity change from 0 to 1024 [ 122.384117][ T4255] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 122.451200][ T5005] binder: BINDER_SET_CONTEXT_MGR already set [ 122.462669][ T5002] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 122.472221][ T5005] binder: 5004:5005 ioctl 4018620d 200000000040 returned -16 [ 122.477700][ T5002] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 122.490835][ T5007] fuse: Bad value for 'user_id' [ 122.503514][ T5002] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 122.513037][ T5002] EXT4-fs (loop1): orphan cleanup on readonly fs [ 122.520227][ T5002] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.189: Inode bitmap for bg 0 marked uninitialized [ 122.552855][ T5002] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 122.592789][ T4255] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 122.602071][ T4255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.610602][ T4255] usb 3-1: Product: syz [ 122.615180][ T4255] usb 3-1: Manufacturer: syz [ 122.619903][ T4255] usb 3-1: SerialNumber: syz [ 122.647560][ T4255] usb 3-1: config 0 descriptor?? [ 122.863644][ T5017] device syzkaller0 entered promiscuous mode [ 122.910095][ T1107] usb 3-1: USB disconnect, device number 5 [ 123.119114][ T5029] tipc: Enabling of bearer rejected, failed to enable media [ 123.451945][ T5044] fuse: Bad value for 'fd' [ 125.178182][ T5055] loop2: detected capacity change from 0 to 1024 [ 125.235489][ T5055] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 125.245530][ T5055] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 125.279204][ T5055] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 125.288032][ T5055] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.298678][ T5055] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.206: Inode bitmap for bg 0 marked uninitialized [ 125.324053][ T5055] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 125.639704][ T5070] device syzkaller0 entered promiscuous mode [ 125.682524][ T13] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 125.822523][ T5078] tipc: Enabling of bearer rejected, failed to enable media [ 126.025421][ T5087] fuse: Bad value for 'fd' [ 126.102865][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.129796][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.147006][ T13] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 126.156458][ T4255] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.172843][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.187698][ T13] usb 5-1: config 0 descriptor?? [ 126.704384][ T5100] loop0: detected capacity change from 0 to 1024 [ 126.826947][ T5100] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 126.847443][ T5100] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 126.952038][ T5100] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 126.968350][ T5100] EXT4-fs (loop0): orphan cleanup on readonly fs [ 126.983616][ T5100] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.222: Inode bitmap for bg 0 marked uninitialized [ 127.004880][ T5100] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 127.301674][ T4255] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.322722][ T4255] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.382809][ T13] usbhid 5-1:0.0: can't add hid device: -71 [ 127.391291][ T13] usbhid: probe of 5-1:0.0 failed with error -71 [ 127.431015][ T13] usb 5-1: USB disconnect, device number 7 [ 127.558508][ T4255] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 127.580226][ T4255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.621313][ T4255] usb 2-1: Product: syz [ 127.643540][ T4255] usb 2-1: Manufacturer: syz [ 127.648200][ T4255] usb 2-1: SerialNumber: syz [ 127.654132][ T5116] binder: BINDER_SET_CONTEXT_MGR already set [ 127.660141][ T5116] binder: 5114:5116 ioctl 4018620d 200000000040 returned -16 [ 127.668931][ T5115] device syzkaller0 entered promiscuous mode [ 127.700706][ T4255] usb 2-1: config 0 descriptor?? [ 127.882192][ T5124] fuse: Bad value for 'fd' [ 127.971540][ T4255] usb 2-1: USB disconnect, device number 4 [ 128.100394][ T5128] tipc: Enabling of bearer rejected, failed to enable media [ 129.757594][ T5138] loop3: detected capacity change from 0 to 1024 [ 129.841556][ T5138] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 129.856555][ T5138] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 129.878129][ T5138] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 129.886909][ T5138] EXT4-fs (loop3): orphan cleanup on readonly fs [ 129.894307][ T5138] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.234: Inode bitmap for bg 0 marked uninitialized [ 129.908565][ T5138] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 130.152821][ T4255] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 130.548266][ T4255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 130.572588][ T4255] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.595328][ T4255] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 130.614827][ T4255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.649285][ T4255] usb 5-1: config 0 descriptor?? [ 130.810220][ T5162] device syzkaller0 entered promiscuous mode [ 130.869489][ T5164] fuse: Bad value for 'fd' [ 131.182598][ T4255] usbhid 5-1:0.0: can't add hid device: -71 [ 131.201382][ T4255] usbhid: probe of 5-1:0.0 failed with error -71 [ 131.266097][ T4255] usb 5-1: USB disconnect, device number 8 [ 131.291013][ T5176] tipc: Enabling of bearer rejected, failed to enable media [ 131.432500][ T1107] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.693752][ T5187] loop0: detected capacity change from 0 to 1024 [ 131.778430][ T5187] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 131.790453][ T5187] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 131.865780][ T5187] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 131.879641][ T5187] EXT4-fs (loop0): orphan cleanup on readonly fs [ 131.890866][ T5187] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.250: Inode bitmap for bg 0 marked uninitialized [ 131.908921][ T5187] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 132.518120][ T5204] fuse: Bad value for 'fd' [ 132.535118][ T1107] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.551859][ T1107] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.707029][ T5208] device syzkaller0 entered promiscuous mode [ 132.742972][ T1107] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 132.752750][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.773900][ T1107] usb 3-1: Product: syz [ 132.778295][ T1107] usb 3-1: Manufacturer: syz [ 132.793654][ T1107] usb 3-1: SerialNumber: syz [ 132.817565][ T1107] usb 3-1: config 0 descriptor?? [ 132.975239][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.981610][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.070718][ T13] usb 3-1: USB disconnect, device number 6 [ 134.674667][ T13] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 135.029549][ T5229] loop1: detected capacity change from 0 to 1024 [ 135.091402][ T5229] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 135.102030][ T5229] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 135.116933][ T5229] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 135.125620][ T5229] EXT4-fs (loop1): orphan cleanup on readonly fs [ 135.133106][ T5229] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.265: Inode bitmap for bg 0 marked uninitialized [ 135.146845][ T5229] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 135.245025][ T5239] fuse: Bad value for 'fd' [ 135.427728][ T5246] device syzkaller0 entered promiscuous mode [ 135.442904][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.467191][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.508281][ T13] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 135.537990][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.593298][ T13] usb 5-1: config 0 descriptor?? [ 136.142537][ T13] usbhid 5-1:0.0: can't add hid device: -71 [ 136.145847][ T4188] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 136.158511][ T13] usbhid: probe of 5-1:0.0 failed with error -71 [ 136.181159][ T13] usb 5-1: USB disconnect, device number 9 [ 136.522612][ T4188] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.552503][ T4188] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 136.816055][ T5278] fuse: Invalid rootmode [ 136.987877][ T4188] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 136.998439][ T4188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.008085][ T4188] usb 4-1: Product: syz [ 137.013527][ T4188] usb 4-1: Manufacturer: syz [ 137.018178][ T4188] usb 4-1: SerialNumber: syz [ 137.025679][ T4188] usb 4-1: config 0 descriptor?? [ 137.055003][ T5281] device syzkaller0 entered promiscuous mode [ 137.183351][ T5286] loop0: detected capacity change from 0 to 1024 [ 138.376485][ T5286] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 138.387088][ T5286] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 138.412430][ T5286] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 138.421555][ T5286] EXT4-fs (loop0): orphan cleanup on readonly fs [ 138.428648][ T5286] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.281: Inode bitmap for bg 0 marked uninitialized [ 138.441742][ T5286] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 138.503786][ T13] usb 4-1: USB disconnect, device number 9 [ 138.800043][ T5298] binder: 5297:5298 ioctl c0306201 0 returned -14 [ 139.047765][ T5309] fuse: Invalid rootmode [ 139.072526][ T4188] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 140.986399][ T5322] loop3: detected capacity change from 0 to 1024 [ 140.993488][ T4188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 141.005035][ T4188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.015455][ T4188] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 141.025449][ T5322] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 141.036467][ T5322] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 141.067624][ T4188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.069226][ T5322] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 141.084494][ T5322] EXT4-fs (loop3): orphan cleanup on readonly fs [ 141.092245][ T5322] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.297: Inode bitmap for bg 0 marked uninitialized [ 141.105696][ T5322] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 141.147728][ T4188] usb 1-1: config 0 descriptor?? [ 141.194808][ T5329] device syzkaller0 entered promiscuous mode [ 141.457744][ T5339] fuse: Invalid rootmode [ 141.772541][ T4188] usbhid 1-1:0.0: can't add hid device: -71 [ 141.783886][ T4188] usbhid: probe of 1-1:0.0 failed with error -71 [ 141.806945][ T4188] usb 1-1: USB disconnect, device number 7 [ 141.958143][ T4284] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 142.148796][ T5359] loop4: detected capacity change from 0 to 64 [ 142.322914][ T4284] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.367433][ T4284] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 142.613010][ T4284] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 142.656226][ T4284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.747952][ T4284] usb 4-1: Product: syz [ 142.795170][ T4284] usb 4-1: Manufacturer: syz [ 142.846835][ T4284] usb 4-1: SerialNumber: syz [ 142.854690][ T4284] usb 4-1: config 0 descriptor?? [ 142.880233][ T5359] hfs: get root inode failed [ 143.181997][ T4255] usb 4-1: USB disconnect, device number 10 [ 143.313734][ T5373] device syzkaller0 entered promiscuous mode [ 143.418717][ T5377] fuse: Bad value for 'rootmode' [ 144.133815][ T5403] tipc: Enabling of bearer rejected, failed to enable media [ 144.444189][ T5414] fuse: Bad value for 'rootmode' [ 144.626729][ T5418] device syzkaller0 entered promiscuous mode [ 144.842807][ T4255] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 145.242622][ T4284] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 145.336444][ T5444] tipc: Enabling of bearer rejected, failed to enable media [ 145.372665][ T4255] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.388762][ T4255] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.404983][ T4255] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 145.416365][ T4255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.445381][ T4255] usb 1-1: config 0 descriptor?? [ 145.493771][ T5449] fuse: Bad value for 'rootmode' [ 145.602766][ T4284] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.614043][ T4284] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 145.636893][ T5455] device syzkaller0 entered promiscuous mode [ 146.073122][ T4255] usbhid 1-1:0.0: can't add hid device: -71 [ 146.105585][ T4255] usbhid: probe of 1-1:0.0 failed with error -71 [ 146.261881][ T4255] usb 1-1: USB disconnect, device number 8 [ 146.692524][ T4284] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 146.701627][ T4284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.710094][ T4284] usb 4-1: Product: syz [ 146.714724][ T4284] usb 4-1: Manufacturer: syz [ 146.719730][ T4284] usb 4-1: SerialNumber: syz [ 146.727626][ T4284] usb 4-1: config 0 descriptor?? [ 146.911023][ T5474] fuse: Unknown parameter 'use00000000000000000000' [ 146.979200][ T4284] usb 4-1: USB disconnect, device number 11 [ 147.061501][ T5481] tipc: Enabling of bearer rejected, failed to enable media [ 147.330682][ T5490] device syzkaller0 entered promiscuous mode [ 148.517101][ T5509] fuse: Unknown parameter 'use00000000000000000000' [ 149.027197][ T5522] device syzkaller0 entered promiscuous mode [ 150.132747][ T4255] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 150.239288][ T5537] fuse: Unknown parameter 'use00000000000000000000' [ 150.467939][ T5552] loop1: detected capacity change from 0 to 64 [ 150.492679][ T4255] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.526792][ T4255] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.686995][ T5554] device syzkaller0 entered promiscuous mode [ 150.742752][ T4255] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 150.759527][ T4255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.781221][ T4255] usb 1-1: Product: syz [ 150.787280][ T4255] usb 1-1: Manufacturer: syz [ 150.792946][ T4255] usb 1-1: SerialNumber: syz [ 150.805429][ T4255] usb 1-1: config 0 descriptor?? [ 151.058051][ T4255] usb 1-1: USB disconnect, device number 9 [ 152.626909][ T5573] fuse: Unknown parameter 'user_i00000000000000000000' [ 153.213622][ T5595] loop0: detected capacity change from 0 to 64 [ 154.361855][ T4255] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 154.515103][ T5604] fuse: Unknown parameter 'user_i00000000000000000000' [ 154.714526][ T5616] loop3: detected capacity change from 0 to 64 [ 154.848326][ T4255] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.868697][ T4255] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.072573][ T13] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 155.088471][ T4255] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 155.108319][ T4255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.125946][ T4255] usb 3-1: Product: syz [ 155.130182][ T4255] usb 3-1: Manufacturer: syz [ 155.153143][ T4255] usb 3-1: SerialNumber: syz [ 155.165737][ T4255] usb 3-1: config 0 descriptor?? [ 155.451122][ T4226] usb 3-1: USB disconnect, device number 7 [ 155.472672][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.504577][ T13] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.612794][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.633869][ T13] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.733755][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.750232][ T13] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.823485][ T5642] fuse: Unknown parameter 'user_i00000000000000000000' [ 155.935429][ T5648] loop4: detected capacity change from 0 to 64 [ 155.943068][ T13] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 155.957409][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.985401][ T13] usb 1-1: Product: syz [ 156.008555][ T13] usb 1-1: Manufacturer: syz [ 156.015766][ T13] usb 1-1: SerialNumber: syz [ 156.131412][ T13] usb 1-1: config 0 descriptor?? [ 157.227263][ T4226] usb 1-1: USB disconnect, device number 10 [ 157.510118][ T5669] loop4: detected capacity change from 0 to 64 [ 158.313883][ T5669] hfs: get root inode failed [ 158.918785][ T5687] fuse: Unknown parameter 'user_id00000000000000000000' [ 159.378055][ T5702] loop0: detected capacity change from 0 to 64 [ 161.182710][ T4284] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 161.707562][ T4284] usb 5-1: Using ep0 maxpacket: 16 [ 161.872817][ T4284] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.956736][ T5733] fuse: Unknown parameter 'user_id00000000000000000000' [ 162.042867][ T4284] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 162.070681][ T4284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.117705][ T4284] usb 5-1: Product: syz [ 162.140532][ T4284] usb 5-1: Manufacturer: syz [ 162.162698][ T4284] usb 5-1: SerialNumber: syz [ 162.197019][ T4284] usb 5-1: config 0 descriptor?? [ 162.666982][ T5765] loop3: detected capacity change from 0 to 64 [ 163.839819][ T4175] usb 5-1: USB disconnect, device number 10 [ 164.026643][ T5780] tipc: Started in network mode [ 164.066423][ T5780] tipc: Node identity 7af1fb06e3ea, cluster identity 4711 [ 164.089300][ T5780] tipc: Enabled bearer , priority 0 [ 164.144684][ T5780] tipc: Resetting bearer [ 164.158034][ T5778] tipc: Disabling bearer [ 164.348239][ T5798] fuse: Unknown parameter 'user_id00000000000000000000' [ 164.709676][ T5819] loop2: detected capacity change from 0 to 64 [ 165.814953][ T5823] tipc: Enabled bearer , priority 0 [ 165.860887][ T5823] tipc: Resetting bearer [ 165.926714][ T5821] tipc: Disabling bearer [ 166.185115][ T5839] fuse: Bad value for 'fd' [ 166.512504][ T2239] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 166.772666][ T4175] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 166.882572][ T2239] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.893266][ T2239] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 167.052507][ T4175] usb 5-1: Using ep0 maxpacket: 16 [ 167.062953][ T2239] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 167.073049][ T2239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.081111][ T2239] usb 1-1: Product: syz [ 167.085601][ T2239] usb 1-1: Manufacturer: syz [ 167.090457][ T2239] usb 1-1: SerialNumber: syz [ 167.105381][ T2239] usb 1-1: config 0 descriptor?? [ 167.149772][ T5858] loop3: detected capacity change from 0 to 64 [ 167.172486][ T4175] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.229558][ T4255] usb 1-1: USB disconnect, device number 11 [ 168.292645][ T4175] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 168.302935][ T4175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.311071][ T4175] usb 5-1: Product: syz [ 168.315644][ T4175] usb 5-1: Manufacturer: syz [ 168.323572][ T5862] loop3: detected capacity change from 0 to 64 [ 168.329989][ T4175] usb 5-1: SerialNumber: syz [ 168.350824][ T4175] usb 5-1: config 0 descriptor?? [ 169.477907][ T5868] loop3: detected capacity change from 0 to 64 [ 170.710655][ T5874] fuse: Bad value for 'fd' [ 170.733285][ T4233] usb 5-1: USB disconnect, device number 11 [ 170.972639][ T4175] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 171.125996][ T5898] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 171.212439][ T4175] usb 2-1: Using ep0 maxpacket: 8 [ 171.414823][ T4175] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.498280][ T5894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.481'. [ 171.506541][ T5900] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 171.507822][ T5894] netlink: 32 bytes leftover after parsing attributes in process `syz.3.481'. [ 171.525690][ T4175] usb 2-1: config 0 has no interfaces? [ 171.531287][ T5894] device gretap1 entered promiscuous mode [ 171.852692][ T4175] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 171.872451][ T4175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.891806][ T4175] usb 2-1: Product: syz [ 171.897697][ T4175] usb 2-1: Manufacturer: syz [ 171.902721][ T4175] usb 2-1: SerialNumber: syz [ 171.930915][ T4175] usb 2-1: config 0 descriptor?? [ 171.938620][ T5904] loop2: detected capacity change from 0 to 64 [ 171.975837][ T5906] loop4: detected capacity change from 0 to 64 [ 174.717051][ T1107] usb 2-1: USB disconnect, device number 5 [ 175.166822][ T5930] fuse: Bad value for 'fd' [ 176.330006][ T5947] tipc: Started in network mode [ 176.343402][ T5947] tipc: Node identity 22df016bd027, cluster identity 4711 [ 176.357893][ T5947] tipc: Enabled bearer , priority 0 [ 176.367355][ T5947] device syzkaller0 entered promiscuous mode [ 176.407051][ T5944] tipc: Resetting bearer [ 177.032469][ T5944] tipc: Disabling bearer [ 177.451203][ T4284] tipc: Node number set to 4076339563 [ 177.566500][ T5964] loop1: detected capacity change from 0 to 64 [ 177.606406][ T5966] fuse: Unknown parameter '0x0000000000000004' [ 181.297855][ T6005] fuse: Unknown parameter '0x0000000000000004' [ 181.530957][ T6013] loop0: detected capacity change from 0 to 64 [ 186.185623][ T6050] fuse: Unknown parameter '0x0000000000000004' [ 186.256442][ T4188] Bluetooth: hci1: command 0x0406 tx timeout [ 186.265343][ T4188] Bluetooth: hci2: command 0x0406 tx timeout [ 186.292724][ T4188] Bluetooth: hci0: command 0x0406 tx timeout [ 186.321809][ T4188] Bluetooth: hci4: command 0x0406 tx timeout [ 186.352442][ T4188] Bluetooth: hci3: command 0x0406 tx timeout [ 187.398764][ T6055] ODEBUG: Out of memory. ODEBUG disabled [ 187.467150][ T6071] loop3: detected capacity change from 0 to 64 [ 187.546516][ T6073] loop4: detected capacity change from 0 to 64 [ 187.899743][ T6055] syz.0.529 (6055): drop_caches: 2 [ 190.013236][ T6099] fuse: Unknown parameter '0x0000000000000004' [ 190.971865][ T6117] loop3: detected capacity change from 0 to 64 [ 192.573200][ T6144] fuse: Unknown parameter '0x0000000000000004' [ 193.658271][ T6153] loop2: detected capacity change from 0 to 64 [ 193.695664][ T6158] loop1: detected capacity change from 0 to 64 [ 194.423750][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.430855][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.094025][ T6174] loop0: detected capacity change from 0 to 64 [ 195.898186][ T6182] fuse: Unknown parameter '0x0000000000000004' [ 197.247136][ T6206] loop0: detected capacity change from 0 to 64 [ 197.356847][ T6207] tipc: Enabling of bearer rejected, failed to enable media [ 197.471713][ T6212] device syzkaller0 entered promiscuous mode [ 198.511661][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 199.562890][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 200.040007][ T6233] fuse: Unknown parameter 'fd0x0000000000000004' [ 200.062743][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.355798][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 200.372028][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.472727][ T7] usb 3-1: config 0 descriptor?? [ 200.748327][ T7] usb 3-1: can't set config #0, error -71 [ 200.771695][ T6254] loop0: detected capacity change from 0 to 64 [ 200.800768][ T7] usb 3-1: USB disconnect, device number 8 [ 201.082419][ T4284] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 201.362555][ T4284] usb 5-1: Using ep0 maxpacket: 8 [ 202.352901][ T4284] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.364249][ T4284] usb 5-1: config 0 has no interfaces? [ 202.542464][ T4284] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 202.563451][ T4284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.571775][ T4284] usb 5-1: Product: syz [ 202.596443][ T4284] usb 5-1: Manufacturer: syz [ 202.637978][ T4284] usb 5-1: SerialNumber: syz [ 203.178702][ T4284] usb 5-1: config 0 descriptor?? [ 203.258013][ T6281] tipc: Started in network mode [ 203.263086][ T6281] tipc: Node identity 5679b2ec49c5, cluster identity 4711 [ 203.270311][ T6281] tipc: Enabled bearer , priority 0 [ 203.303878][ T6281] device syzkaller0 entered promiscuous mode [ 203.337485][ T6281] tipc: Resetting bearer [ 203.354383][ T6280] tipc: Resetting bearer [ 203.360460][ T6283] loop3: detected capacity change from 0 to 512 [ 203.367779][ T6280] tipc: Disabling bearer [ 204.322197][ T6253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.585'. [ 204.339514][ T6283] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 204.372493][ T6253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.585'. [ 204.414173][ T6283] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.938519][ T6307] tipc: Enabling of bearer rejected, failed to enable media [ 206.950235][ T4255] usb 5-1: USB disconnect, device number 12 [ 207.013602][ T6312] device syzkaller0 entered promiscuous mode [ 207.095367][ T6316] loop3: detected capacity change from 0 to 64 [ 207.231039][ T6320] fuse: Unknown parameter 'fd0x0000000000000004' [ 208.258121][ T6328] loop4: detected capacity change from 0 to 64 [ 209.699651][ T6341] loop2: detected capacity change from 0 to 64 [ 214.016940][ T6386] loop3: detected capacity change from 0 to 64 [ 217.758637][ T6417] loop1: detected capacity change from 0 to 64 [ 219.279616][ T6433] loop3: detected capacity change from 0 to 64 [ 219.602520][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 219.719759][ T6439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.639'. [ 219.822684][ T6439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.639'. [ 219.842493][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 220.315239][ T6439] device bond0 entered promiscuous mode [ 220.315710][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.321105][ T6439] device bond_slave_0 entered promiscuous mode [ 220.339357][ T6439] device bond_slave_1 entered promiscuous mode [ 220.430882][ T6439] device bond0 left promiscuous mode [ 220.472491][ T6439] device bond_slave_0 left promiscuous mode [ 220.480586][ T6439] device bond_slave_1 left promiscuous mode [ 220.481101][ T7] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.716093][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 220.892632][ T7] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 220.918420][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.955780][ T7] usb 3-1: Product: syz [ 220.960016][ T7] usb 3-1: Manufacturer: syz [ 220.984917][ T7] usb 3-1: SerialNumber: syz [ 221.007113][ T7] usb 3-1: config 0 descriptor?? [ 221.684571][ T7] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 221.712759][ T7] imon 3-1:0.0: unable to initialize intf0, err -19 [ 221.763424][ T7] imon:imon_probe: failed to initialize context! [ 221.780269][ T7] imon 3-1:0.0: unable to register, err -19 [ 221.800232][ T7] usb 3-1: USB disconnect, device number 9 [ 223.303438][ T6475] loop1: detected capacity change from 0 to 64 [ 223.495209][ T6484] loop0: detected capacity change from 0 to 512 [ 224.699599][ T6484] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 224.744577][ T6484] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.462476][ T4227] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 226.552586][ T2239] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 227.162429][ T2239] usb 2-1: Using ep0 maxpacket: 8 [ 227.278376][ T4227] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.293076][ T4227] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 227.332472][ T2239] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.344876][ T2239] usb 2-1: config 0 has no interfaces? [ 227.462827][ T4227] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 227.523153][ T2239] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 227.560903][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.618756][ T2239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.726982][ T4227] usb 4-1: Product: syz [ 227.753928][ T2239] usb 2-1: Product: syz [ 227.796161][ T4227] usb 4-1: Manufacturer: syz [ 227.825581][ T2239] usb 2-1: Manufacturer: syz [ 227.873467][ T4227] usb 4-1: SerialNumber: syz [ 227.896182][ T2239] usb 2-1: SerialNumber: syz [ 228.053878][ T4227] usb 4-1: config 0 descriptor?? [ 228.224797][ T2239] usb 2-1: config 0 descriptor?? [ 228.241051][ T6537] loop0: detected capacity change from 0 to 64 [ 228.328279][ T6539] tipc: Enabled bearer , priority 0 [ 228.341642][ T6539] device syzkaller0 entered promiscuous mode [ 228.873885][ T6539] tipc: Resetting bearer [ 229.318622][ T6536] tipc: Resetting bearer [ 229.327506][ T4233] usb 4-1: USB disconnect, device number 12 [ 229.391270][ T6536] tipc: Disabling bearer [ 229.411168][ T6514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'. [ 229.421757][ T6514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'. [ 229.433494][ T6514] device bond0 entered promiscuous mode [ 229.439159][ T6514] device bond_slave_0 entered promiscuous mode [ 229.446248][ T6514] device bond_slave_1 entered promiscuous mode [ 229.453699][ T6514] device bond0 left promiscuous mode [ 229.459149][ T6514] device bond_slave_0 left promiscuous mode [ 229.466198][ T6514] device bond_slave_1 left promiscuous mode [ 229.552896][ T5914] usb 2-1: USB disconnect, device number 6 [ 229.553114][ T6559] loop2: detected capacity change from 0 to 64 [ 229.583549][ T6561] device syzkaller0 entered promiscuous mode [ 236.461360][ T6616] loop1: detected capacity change from 0 to 64 [ 238.135500][ T6645] loop2: detected capacity change from 0 to 64 [ 238.492705][ T4228] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 238.882740][ T4228] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.911071][ T4228] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.933673][ T6640] loop1: detected capacity change from 0 to 32768 [ 238.955234][ T6640] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.692 (6640) [ 238.974849][ T6640] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 239.006727][ T6640] BTRFS info (device loop1): enabling auto defrag [ 239.043800][ T6640] BTRFS info (device loop1): force clearing of disk cache [ 239.061239][ T6640] BTRFS error (device loop1): support for check_integrity* not compiled in! [ 239.073581][ T6640] BTRFS error (device loop1): open_ctree failed: -22 [ 239.102874][ T4228] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 239.119474][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.152800][ T4228] usb 4-1: Product: syz [ 239.165282][ T4228] usb 4-1: Manufacturer: syz [ 239.179443][ T4228] usb 4-1: SerialNumber: syz [ 239.198223][ T4228] usb 4-1: config 0 descriptor?? [ 239.423208][ T4178] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by udevd (4178) [ 239.589871][ T4282] usb 4-1: USB disconnect, device number 13 [ 241.438365][ T6665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 242.456882][ T6682] loop4: detected capacity change from 0 to 64 [ 243.372499][ T4282] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 245.178184][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 245.239003][ T4282] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.252488][ T4282] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 245.432533][ T4282] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 245.446332][ T4282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.454903][ T4282] usb 1-1: Product: syz [ 245.459201][ T4282] usb 1-1: Manufacturer: syz [ 245.464785][ T4282] usb 1-1: SerialNumber: syz [ 245.481132][ T4282] usb 1-1: config 0 descriptor?? [ 245.502455][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 245.549386][ T6711] loop2: detected capacity change from 0 to 32768 [ 245.605823][ T6711] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 245.615974][ T6711] BTRFS info (device loop2): enabling auto defrag [ 245.623875][ T7] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.624022][ T6711] BTRFS info (device loop2): force clearing of disk cache [ 245.643080][ T6711] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 245.643342][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 245.667410][ T6711] BTRFS error (device loop2): open_ctree failed: -22 [ 245.682467][ T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 245.690445][ T4178] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (4178) [ 245.780347][ T4228] usb 1-1: USB disconnect, device number 12 [ 245.838547][ T7] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 245.853499][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.878796][ T7] usb 2-1: Product: syz [ 245.893642][ T7] usb 2-1: Manufacturer: syz [ 245.906126][ T7] usb 2-1: SerialNumber: syz [ 245.922687][ T7] usb 2-1: config 0 descriptor?? [ 245.927773][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 246.052594][ T23] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.070600][ T23] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 246.082205][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 246.182468][ T7] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 246.252729][ T23] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 246.262011][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.287694][ T23] usb 4-1: Product: syz [ 246.291921][ T23] usb 4-1: Manufacturer: syz [ 246.301912][ T23] usb 4-1: SerialNumber: syz [ 246.322631][ T6720] tipc: Enabled bearer , priority 0 [ 246.336038][ T23] usb 4-1: config 0 descriptor?? [ 246.341473][ T6720] device syzkaller0 entered promiscuous mode [ 246.382368][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 246.389818][ T7] imon:send_packet: packet tx failed (-71) [ 246.390602][ T6720] tipc: Resetting bearer [ 246.423000][ T6719] tipc: Resetting bearer [ 246.426596][ T7] imon 2-1:0.0: panel buttons/knobs setup failed [ 246.458259][ T6719] tipc: Disabling bearer [ 246.562498][ T7] rc_core: IR keymap rc-imon-pad not found [ 246.572318][ T7] Registered IR keymap rc-empty [ 246.577528][ T7] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 246.606848][ T7] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 246.606957][ T23] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 246.640987][ T23] imon 4-1:0.0: unable to initialize intf0, err -90 [ 246.651059][ T23] imon:imon_probe: failed to initialize context! [ 246.668153][ T23] imon 4-1:0.0: unable to register, err -19 [ 246.676300][ T6730] loop4: detected capacity change from 0 to 64 [ 246.799436][ T7] imon:send_packet: packet tx failed (-71) [ 246.822461][ T7] imon 2-1:0.0: remote input dev register failed [ 246.828925][ T7] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 246.857166][ T7] imon 2-1:0.0: unable to initialize intf0, err 0 [ 246.868835][ T7] imon:imon_probe: failed to initialize context! [ 246.869988][ T4282] usb 4-1: USB disconnect, device number 14 [ 246.882431][ T7] imon 2-1:0.0: unable to register, err -19 [ 247.662891][ T7] usb 2-1: USB disconnect, device number 7 [ 248.313091][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 248.532622][ T23] usb 2-1: device descriptor read/64, error -71 [ 248.802400][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 248.959519][ T6749] loop3: detected capacity change from 0 to 32768 [ 249.022542][ T23] usb 2-1: device descriptor read/64, error -71 [ 249.069364][ T6749] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 249.104060][ T6749] BTRFS info (device loop3): enabling auto defrag [ 249.125389][ T6749] BTRFS info (device loop3): force clearing of disk cache [ 249.140306][ T6749] BTRFS error (device loop3): support for check_integrity* not compiled in! [ 249.163148][ T23] usb usb2-port1: attempt power cycle [ 249.212166][ T6749] BTRFS error (device loop3): open_ctree failed: -22 [ 249.219600][ T4178] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by udevd (4178) [ 249.498303][ T6755] loop2: detected capacity change from 0 to 32768 [ 249.632443][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 250.335988][ T6755] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 250.365195][ T6755] BTRFS info (device loop2): enabling auto defrag [ 250.395352][ T6755] BTRFS info (device loop2): force clearing of disk cache [ 250.403227][ T23] usb 2-1: device descriptor read/8, error -71 [ 250.430252][ T6755] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 250.481155][ T6755] BTRFS error (device loop2): open_ctree failed: -22 [ 250.682473][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 250.782848][ T23] usb 2-1: device descriptor read/8, error -71 [ 250.904067][ T23] usb usb2-port1: unable to enumerate USB device [ 252.504224][ T6773] loop1: detected capacity change from 0 to 64 [ 254.413257][ T6783] tipc: Enabling of bearer rejected, failed to enable media [ 254.862029][ T6806] loop1: detected capacity change from 0 to 256 [ 254.903384][ T6803] loop4: detected capacity change from 0 to 512 [ 254.914901][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.739'. [ 254.963054][ T6806] ======================================================= [ 254.963054][ T6806] WARNING: The mand mount option has been deprecated and [ 254.963054][ T6806] and is ignored by this kernel. Remove the mand [ 254.963054][ T6806] option from the mount to silence this warning. [ 254.963054][ T6806] ======================================================= [ 255.084697][ T6803] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 255.118529][ T6803] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 255.148946][ T6806] FAT-fs (loop1): Directory bread(block 64) failed [ 255.157383][ T6806] FAT-fs (loop1): Directory bread(block 65) failed [ 255.164523][ T6806] FAT-fs (loop1): Directory bread(block 66) failed [ 255.171079][ T6806] FAT-fs (loop1): Directory bread(block 67) failed [ 255.191067][ T6813] loop0: detected capacity change from 0 to 512 [ 255.198849][ T6806] FAT-fs (loop1): Directory bread(block 68) failed [ 255.211787][ T6806] FAT-fs (loop1): Directory bread(block 69) failed [ 255.220945][ T6806] FAT-fs (loop1): Directory bread(block 70) failed [ 255.255835][ T6806] FAT-fs (loop1): Directory bread(block 71) failed [ 255.289118][ T6806] FAT-fs (loop1): Directory bread(block 72) failed [ 255.297611][ T6806] FAT-fs (loop1): Directory bread(block 73) failed [ 255.472098][ T6813] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 255.753254][ T6813] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 255.916062][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.922611][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.314658][ T6790] loop2: detected capacity change from 0 to 32768 [ 257.354844][ T6790] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.737 (6790) [ 257.436796][ T6790] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 257.468622][ T6790] BTRFS info (device loop2): enabling auto defrag [ 257.496568][ T6790] BTRFS info (device loop2): force clearing of disk cache [ 257.532430][ T6790] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 257.597846][ T6790] BTRFS error (device loop2): open_ctree failed: -22 [ 258.322486][ T4229] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 258.480486][ T6838] loop2: detected capacity change from 0 to 64 [ 258.570814][ T6824] loop4: detected capacity change from 0 to 32768 [ 258.572985][ T6840] tipc: Enabling of bearer rejected, failed to enable media [ 258.797757][ T6824] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.744 (6824) [ 258.828623][ T4229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.856318][ T4229] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 258.878415][ T6824] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 258.890647][ T6824] BTRFS info (device loop4): enabling auto defrag [ 258.897679][ T6824] BTRFS info (device loop4): force clearing of disk cache [ 258.905603][ T6824] BTRFS error (device loop4): support for check_integrity* not compiled in! [ 258.917485][ T6824] BTRFS error (device loop4): open_ctree failed: -22 [ 259.037649][ T6352] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by udevd (6352) [ 259.052786][ T4229] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 259.082711][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.122147][ T4229] usb 4-1: Product: syz [ 259.134205][ T6852] loop1: detected capacity change from 0 to 512 [ 259.137726][ T4229] usb 4-1: Manufacturer: syz [ 259.163318][ T4229] usb 4-1: SerialNumber: syz [ 259.177553][ T4229] usb 4-1: config 0 descriptor?? [ 259.345728][ T6852] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 259.786812][ T6852] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.861920][ T21] usb 4-1: USB disconnect, device number 15 [ 260.505595][ T6860] loop2: detected capacity change from 0 to 512 [ 260.795838][ T6860] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 260.832206][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.754'. [ 260.911801][ T6860] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 261.325986][ T6871] loop3: detected capacity change from 0 to 512 [ 262.236679][ T6871] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 262.303491][ T6871] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.227100][ T6889] loop1: detected capacity change from 0 to 64 [ 263.276777][ T6889] hfs: get root inode failed [ 264.701463][ T6918] loop2: detected capacity change from 0 to 64 [ 265.552523][ T4282] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 266.474393][ T6933] loop3: detected capacity change from 0 to 64 [ 267.382410][ T4282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.422901][ T4282] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 267.441260][ T6937] tipc: Enabling of bearer rejected, failed to enable media [ 269.202400][ T4282] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 269.216792][ T4282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.242343][ T4282] usb 2-1: Product: syz [ 269.248733][ T4282] usb 2-1: config 0 descriptor?? [ 269.272551][ T4282] usb 2-1: can't set config #0, error -71 [ 269.308006][ T4282] usb 2-1: USB disconnect, device number 12 [ 269.316547][ T6951] tipc: Enabled bearer , priority 0 [ 269.338632][ T6955] loop3: detected capacity change from 0 to 64 [ 269.386359][ T6957] device syzkaller0 entered promiscuous mode [ 269.483962][ T6951] tipc: Resetting bearer [ 269.497403][ T6949] tipc: Resetting bearer [ 270.152644][ T6949] tipc: Disabling bearer [ 271.428305][ T6986] loop3: detected capacity change from 0 to 64 [ 273.092895][ T4228] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 273.523358][ T4228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.553890][ T4228] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 273.862735][ T4228] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 273.871992][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.903159][ T7000] tipc: Enabling of bearer rejected, failed to enable media [ 273.925192][ T4228] usb 5-1: Product: syz [ 273.929420][ T4228] usb 5-1: Manufacturer: syz [ 273.949168][ T4228] usb 5-1: SerialNumber: syz [ 273.960264][ T4228] usb 5-1: config 0 descriptor?? [ 274.275143][ T4258] usb 5-1: USB disconnect, device number 13 [ 275.506901][ T7025] loop0: detected capacity change from 0 to 64 [ 276.144615][ T7034] loop4: detected capacity change from 0 to 64 [ 276.332708][ C0] ================================================================== [ 276.341084][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 276.348600][ C0] Read of size 2 at addr ffff88805f4e8c2a by task syz.0.797/7035 [ 276.356328][ C0] [ 276.358675][ C0] CPU: 0 PID: 7035 Comm: syz.0.797 Not tainted syzkaller #0 [ 276.366060][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 276.376378][ C0] Call Trace: [ 276.379691][ C0] [ 276.382552][ C0] dump_stack_lvl+0x188/0x250 [ 276.387261][ C0] ? show_regs_print_info+0x20/0x20 [ 276.392756][ C0] ? _printk+0xda/0x130 [ 276.396935][ C0] ? rose_timer_expiry+0x470/0x490 [ 276.402079][ C0] ? load_image+0x400/0x400 [ 276.406698][ C0] print_address_description+0x60/0x2d0 [ 276.412264][ C0] ? rose_timer_expiry+0x470/0x490 [ 276.417396][ C0] kasan_report+0xdf/0x130 [ 276.421838][ C0] ? rose_timer_expiry+0x470/0x490 [ 276.426969][ C0] rose_timer_expiry+0x470/0x490 [ 276.431923][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 276.437080][ C0] call_timer_fn+0x17b/0x540 [ 276.441689][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 276.446747][ C0] ? __run_timers+0x800/0x800 [ 276.451452][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 276.456664][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 276.461880][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 276.466925][ C0] __run_timers+0x53e/0x800 [ 276.471464][ C0] ? detach_timer+0x2b0/0x2b0 [ 276.476182][ C0] run_timer_softirq+0x63/0xf0 [ 276.480974][ C0] handle_softirqs+0x339/0x830 [ 276.485768][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 276.490679][ C0] ? do_softirq+0x210/0x210 [ 276.495207][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 276.500484][ C0] __irq_exit_rcu+0x13b/0x230 [ 276.505273][ C0] ? irq_exit_rcu+0x20/0x20 [ 276.510013][ C0] irq_exit_rcu+0x5/0x20 [ 276.514272][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 276.520117][ C0] [ 276.523069][ C0] [ 276.526102][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 276.532115][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 276.538759][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2f 8a 8c f7 65 8b 05 d0 97 3c 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 276.558396][ C0] RSP: 0018:ffffc9000343f5c0 EFLAGS: 00000206 [ 276.564686][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: edaf9e49153d8f00 [ 276.572797][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001 [ 276.580796][ C0] RBP: ffffc9000343f650 R08: ffffffff901d4177 R09: 1ffffffff203a82e [ 276.588804][ C0] R10: dffffc0000000000 R11: fffffbfff203a82f R12: dffffc0000000000 [ 276.595066][ T7034] hfs: get root inode failed [ 276.596898][ C0] R13: 0000000000000000 R14: ffff8880793cfec0 R15: 1ffff92000687eb8 [ 276.596955][ C0] ? _raw_spin_unlock+0x40/0x40 [ 276.614807][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 276.619890][ C0] __wake_up_sync_key+0x128/0x190 [ 276.624964][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 276.630984][ C0] ? sock_load_diag_module+0x130/0x130 [ 276.636526][ C0] __unix_dgram_recvmsg+0x4c0/0xd90 [ 276.641779][ C0] ? unix_unhash+0x10/0x10 [ 276.646248][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 276.651524][ C0] ? mark_lock+0x94/0x320 [ 276.655994][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 276.661150][ C0] ? unix_dgram_sendmsg+0x18a0/0x18a0 [ 276.666678][ C0] ____sys_recvmsg+0x2cd/0x5e0 [ 276.671470][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 276.676513][ C0] ? import_iovec+0x6f/0xa0 [ 276.681031][ C0] ___sys_recvmsg+0x21a/0x5c0 [ 276.685713][ C0] ? __sys_recvmsg+0x280/0x280 [ 276.690514][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 276.695561][ C0] ? __might_fault+0xb3/0x110 [ 276.700314][ C0] do_recvmmsg+0x382/0x850 [ 276.704744][ C0] ? __sys_recvmmsg+0x290/0x290 [ 276.709614][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 276.714674][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 276.719747][ C0] ? do_recvmmsg+0x850/0x850 [ 276.724375][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 276.729584][ C0] do_syscall_64+0x4c/0xa0 [ 276.734015][ C0] ? clear_bhb_loop+0x30/0x80 [ 276.738827][ C0] ? clear_bhb_loop+0x30/0x80 [ 276.743535][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 276.749460][ C0] RIP: 0033:0x7f7dfbaef819 [ 276.753988][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.774047][ C0] RSP: 002b:00007f7df9d28028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 276.782645][ C0] RAX: ffffffffffffffda RBX: 00007f7dfbd69090 RCX: 00007f7dfbaef819 [ 276.790620][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007 [ 276.798601][ C0] RBP: 00007f7dfbb85c91 R08: 0000000000000000 R09: 0000000000000000 [ 276.806664][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 276.814837][ C0] R13: 00007f7dfbd69128 R14: 00007f7dfbd69090 R15: 00007ffffdf1c538 [ 276.822844][ C0] [ 276.825877][ C0] [ 276.828203][ C0] Allocated by task 4187: [ 276.832566][ C0] __kasan_kmalloc+0xb5/0xf0 [ 276.837160][ C0] __alloc_skb+0x22c/0x750 [ 276.841590][ C0] alloc_uevent_skb+0x7d/0x230 [ 276.846529][ C0] kobject_uevent_net_broadcast+0x2e6/0x530 [ 276.852420][ C0] kobject_uevent_env+0x556/0x890 [ 276.857564][ C0] __loop_clr_fd+0x776/0xb90 [ 276.862170][ C0] blkdev_put+0x53f/0x7d0 [ 276.866570][ C0] deactivate_locked_super+0x93/0xf0 [ 276.871940][ C0] cleanup_mnt+0x42d/0x4e0 [ 276.876351][ C0] task_work_run+0x125/0x1a0 [ 276.880943][ C0] exit_to_user_mode_loop+0x10f/0x130 [ 276.886572][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 276.892112][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 276.897585][ C0] do_syscall_64+0x58/0xa0 [ 276.902020][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 276.907909][ C0] [ 276.910230][ C0] Freed by task 3562: [ 276.914203][ C0] kasan_set_track+0x4b/0x70 [ 276.918791][ C0] kasan_set_free_info+0x1f/0x40 [ 276.923729][ C0] ____kasan_slab_free+0xd5/0x110 [ 276.928759][ C0] slab_free_freelist_hook+0xea/0x170 [ 276.934212][ C0] kfree+0xef/0x2a0 [ 276.938016][ C0] skb_release_data+0x6b8/0x800 [ 276.942867][ C0] consume_skb+0xa2/0x100 [ 276.947219][ C0] skb_free_datagram+0x25/0xe0 [ 276.952064][ C0] netlink_recvmsg+0x5c6/0xe20 [ 276.956822][ C0] ____sys_recvmsg+0x2cd/0x5e0 [ 276.961586][ C0] ___sys_recvmsg+0x21a/0x5c0 [ 276.966261][ C0] __x64_sys_recvmsg+0x1f9/0x2c0 [ 276.971208][ C0] do_syscall_64+0x4c/0xa0 [ 276.975621][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 276.981604][ C0] [ 276.983965][ C0] The buggy address belongs to the object at ffff88805f4e8c00 [ 276.983965][ C0] which belongs to the cache kmalloc-512 of size 512 [ 276.998329][ C0] The buggy address is located 42 bytes inside of [ 276.998329][ C0] 512-byte region [ffff88805f4e8c00, ffff88805f4e8e00) [ 277.011632][ C0] The buggy address belongs to the page: [ 277.017270][ C0] page:ffffea00017d3a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f4e8 [ 277.027510][ C0] head:ffffea00017d3a00 order:2 compound_mapcount:0 compound_pincount:0 [ 277.035927][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 277.043911][ C0] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41c80 [ 277.052607][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 277.061270][ C0] page dumped because: kasan: bad access detected [ 277.067857][ C0] page_owner tracks the page as allocated [ 277.073753][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4197, ts 63359726197, free_ts 19134534098 [ 277.093232][ C0] get_page_from_freelist+0x1bbd/0x1ca0 [ 277.098878][ C0] __alloc_pages+0x1ee/0x480 [ 277.103555][ C0] new_slab+0xc0/0x4b0 [ 277.107628][ C0] ___slab_alloc+0x80a/0xdd0 [ 277.112221][ C0] __kmalloc+0x1cd/0x330 [ 277.116464][ C0] fib6_info_alloc+0x2e/0xe0 [ 277.121136][ C0] ip6_route_info_create+0x44f/0x1210 [ 277.126532][ C0] addrconf_f6i_alloc+0x1ec/0x430 [ 277.131565][ C0] ipv6_add_addr+0x45f/0xe10 [ 277.136154][ C0] inet6_addr_add+0x43a/0x9c0 [ 277.140827][ C0] inet6_rtm_newaddr+0x64c/0x8f0 [ 277.145767][ C0] rtnetlink_rcv_msg+0x844/0xf30 [ 277.150712][ C0] netlink_rcv_skb+0x1f5/0x440 [ 277.155474][ C0] netlink_unicast+0x774/0x920 [ 277.160234][ C0] netlink_sendmsg+0x8ba/0xbe0 [ 277.164991][ C0] __sys_sendto+0x46d/0x620 [ 277.169495][ C0] page last free stack trace: [ 277.174159][ C0] free_unref_page_prepare+0x637/0x6c0 [ 277.179633][ C0] free_unref_page+0x8f/0x2a0 [ 277.184332][ C0] free_contig_range+0x96/0xf0 [ 277.189118][ C0] destroy_args+0xf0/0xa00 [ 277.193543][ C0] debug_vm_pgtable+0x321/0x380 [ 277.198512][ C0] do_one_initcall+0x272/0x730 [ 277.203372][ C0] do_initcall_level+0x137/0x1f0 [ 277.208475][ C0] do_initcalls+0x4b/0x90 [ 277.212986][ C0] kernel_init_freeable+0x3e9/0x570 [ 277.218356][ C0] kernel_init+0x19/0x1b0 [ 277.222684][ C0] ret_from_fork+0x1f/0x30 [ 277.227190][ C0] [ 277.229533][ C0] Memory state around the buggy address: [ 277.235156][ C0] ffff88805f4e8b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 277.243212][ C0] ffff88805f4e8b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 277.251529][ C0] >ffff88805f4e8c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 277.260027][ C0] ^ [ 277.265489][ C0] ffff88805f4e8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 277.273631][ C0] ffff88805f4e8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 277.281772][ C0] ================================================================== [ 277.290095][ C0] Disabling lock debugging due to kernel taint [ 277.296403][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 277.303612][ C0] CPU: 0 PID: 7035 Comm: syz.0.797 Tainted: G B syzkaller #0 [ 277.312314][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.322582][ C0] Call Trace: [ 277.325893][ C0] [ 277.328850][ C0] dump_stack_lvl+0x188/0x250 [ 277.333555][ C0] ? show_regs_print_info+0x20/0x20 [ 277.338784][ C0] ? load_image+0x400/0x400 [ 277.343315][ C0] panic+0x2e5/0x810 [ 277.347244][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 277.349221][ T7038] loop1: detected capacity change from 0 to 64 [ 277.351774][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 277.363816][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 277.369737][ C0] ? _raw_spin_unlock+0x40/0x40 [ 277.374762][ C0] ? print_memory_metadata+0x314/0x400 [ 277.380257][ C0] ? rose_timer_expiry+0x470/0x490 [ 277.385470][ C0] check_panic_on_warn+0x80/0xa0 [ 277.390482][ C0] ? rose_timer_expiry+0x470/0x490 [ 277.395948][ C0] end_report+0x6d/0xf0 [ 277.400165][ C0] kasan_report+0x102/0x130 [ 277.404710][ C0] ? rose_timer_expiry+0x470/0x490 [ 277.409944][ C0] rose_timer_expiry+0x470/0x490 [ 277.414921][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 277.419989][ C0] call_timer_fn+0x17b/0x540 [ 277.424712][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 277.429793][ C0] ? __run_timers+0x800/0x800 [ 277.434519][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 277.439746][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 277.444980][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 277.450032][ C0] __run_timers+0x53e/0x800 [ 277.454564][ C0] ? detach_timer+0x2b0/0x2b0 [ 277.459272][ C0] run_timer_softirq+0x63/0xf0 [ 277.464053][ C0] handle_softirqs+0x339/0x830 [ 277.468852][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 277.473727][ C0] ? do_softirq+0x210/0x210 [ 277.478253][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 277.483493][ C0] __irq_exit_rcu+0x13b/0x230 [ 277.488201][ C0] ? irq_exit_rcu+0x20/0x20 [ 277.492730][ C0] irq_exit_rcu+0x5/0x20 [ 277.497016][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 277.502674][ C0] [ 277.505622][ C0] [ 277.508569][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 277.514572][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 277.521096][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2f 8a 8c f7 65 8b 05 d0 97 3c 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 277.540732][ C0] RSP: 0018:ffffc9000343f5c0 EFLAGS: 00000206 [ 277.546861][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: edaf9e49153d8f00 [ 277.554853][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001 [ 277.562838][ C0] RBP: ffffc9000343f650 R08: ffffffff901d4177 R09: 1ffffffff203a82e [ 277.570921][ C0] R10: dffffc0000000000 R11: fffffbfff203a82f R12: dffffc0000000000 [ 277.578998][ C0] R13: 0000000000000000 R14: ffff8880793cfec0 R15: 1ffff92000687eb8 [ 277.587003][ C0] ? _raw_spin_unlock+0x40/0x40 [ 277.592140][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 277.597275][ C0] __wake_up_sync_key+0x128/0x190 [ 277.602317][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 277.608312][ C0] ? sock_load_diag_module+0x130/0x130 [ 277.613807][ C0] __unix_dgram_recvmsg+0x4c0/0xd90 [ 277.619027][ C0] ? unix_unhash+0x10/0x10 [ 277.623475][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 277.628695][ C0] ? mark_lock+0x94/0x320 [ 277.633051][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 277.638094][ C0] ? unix_dgram_sendmsg+0x18a0/0x18a0 [ 277.643486][ C0] ____sys_recvmsg+0x2cd/0x5e0 [ 277.648269][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 277.653318][ C0] ? import_iovec+0x6f/0xa0 [ 277.657930][ C0] ___sys_recvmsg+0x21a/0x5c0 [ 277.662626][ C0] ? __sys_recvmsg+0x280/0x280 [ 277.667409][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 277.672471][ C0] ? __might_fault+0xb3/0x110 [ 277.677163][ C0] do_recvmmsg+0x382/0x850 [ 277.681685][ C0] ? __sys_recvmmsg+0x290/0x290 [ 277.686569][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 277.691616][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 277.696658][ C0] ? do_recvmmsg+0x850/0x850 [ 277.701270][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 277.706490][ C0] do_syscall_64+0x4c/0xa0 [ 277.710924][ C0] ? clear_bhb_loop+0x30/0x80 [ 277.715613][ C0] ? clear_bhb_loop+0x30/0x80 [ 277.720304][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.726212][ C0] RIP: 0033:0x7f7dfbaef819 [ 277.730641][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.750528][ C0] RSP: 002b:00007f7df9d28028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 277.758972][ C0] RAX: ffffffffffffffda RBX: 00007f7dfbd69090 RCX: 00007f7dfbaef819 [ 277.767066][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007 [ 277.775326][ C0] RBP: 00007f7dfbb85c91 R08: 0000000000000000 R09: 0000000000000000 [ 277.783338][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 277.791343][ C0] R13: 00007f7dfbd69128 R14: 00007f7dfbd69090 R15: 00007ffffdf1c538 [ 277.799358][ C0] [ 277.802783][ C0] Kernel Offset: disabled [ 277.807110][ C0] Rebooting in 86400 seconds..