last executing test programs: 6.417358803s ago: executing program 1 (id=100): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x6c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x6, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_ID={0x8}, @CTA_ID={0x8}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x5, 0x8001, 0xffff, 0xa, 0x4, 0x3, 0x1, 0x0, 0x10000]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x6, 0x9]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f0000000440), &(0x7f0000000480)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000900)={r4, &(0x7f00000006c0), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x70, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x10, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x43}]}}}]}, 0x70}}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r6, 0x4b4a, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x149442, 0x1f0) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ftruncate(r7, 0xf88) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setattr(r8, &(0x7f0000000100)={0x38, 0x5, 0x8000008, 0xb25b, 0x2, 0x8000000000000001, 0x0, 0x7fffffff, 0x1ff, 0x4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x0) 4.763802626s ago: executing program 1 (id=107): r0 = inotify_init() r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000080)={r2, r3, 0x1, 0x0, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 4.228417963s ago: executing program 1 (id=113): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f0000006800)="10", 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.905497074s ago: executing program 4 (id=117): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000600)={'comedi_parport\x00', [0x7c, 0x5, 0x0, 0xc, 0x10, 0x6, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x0, 0x8, 0x83, 0x7, 0x1000003, 0x1b18, 0x18, 0x0, 0xffffffff, 0xffffffff, 0xb, 0xfffffff9, 0x3b, 0xc, 0x10000006, 0x664, 0xfffffff8]}) 2.627695675s ago: executing program 2 (id=126): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13b", 0x10, 0x8800, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 2.523125818s ago: executing program 2 (id=128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xa, 0x8580) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x4, 0x0, 0x10000, 0x3e12, 0x1}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0xf, 0x5, 0x6, 0x3, 0x9, 0x6, 0xf73c], 0x80a0000, 0x40}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.103042562s ago: executing program 2 (id=134): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x56) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="eb", 0x1}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.563818749s ago: executing program 0 (id=141): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)) 1.443495393s ago: executing program 0 (id=142): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) 1.272655819s ago: executing program 3 (id=143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 1.272462229s ago: executing program 2 (id=144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="0f20e035000001000f22e036f30fa7e80f01c3dfec0f01c3f044811cb366000000420f01cf36460f73d50a0f01c2c461111524d54b680000", 0x38}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.23713642s ago: executing program 0 (id=145): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x1, 0x4800102b, r0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x80) sendfile(r2, r3, 0x0, 0x1) 1.045117286s ago: executing program 3 (id=146): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast2}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'nicvf0\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f3f497cce555acc996225d02032a0dcd7773e021687095dfdb399fa7ea10a0b0", "5e53b1ab255abf6e86a45b6356438a932ef5be377262643f5eb3456238ff1942", "3c03cb8953de7469807fc5e445bf14f6c07618fb2713eda60a1295ee36130899", "0b0ab4c62b5a238af9d187fe49b83b7421dab149d8e5317f9866dcf640b281d3", "3f3d3ef2ff8a3c7fffccfd1ead18af0a8a01f9050007d768e64156d48c38f12a", "df210139767ade5fc32ef7be", 0x7, 0x9, 0x6, 0x0, 0xffffffff}}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r3, 0x42024, 0xad85}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) 979.798988ms ago: executing program 1 (id=147): syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}}]}}, 0xf) 979.524718ms ago: executing program 0 (id=148): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)}, 0x40010040) 893.550131ms ago: executing program 2 (id=149): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 848.322383ms ago: executing program 1 (id=150): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x2}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r1, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x10, 0x18, {0x2, @bearer=@l2={'ib', 0x3a, 'hsr0\x00'}}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000080) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="40000180", @ANYBLOB="14"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 759.867906ms ago: executing program 0 (id=151): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0xfffffed4, 0x2, 0x0, 0x20, 0x1, 0x1, 0xffffffff, &(0x7f0000000280)=[0x7], 0x1, 0x0}) 745.504316ms ago: executing program 4 (id=152): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)="a9050000000074640001", 0xa}, {&(0x7f0000000300)="82d90384b98931c6c599ed9cf57c000000954eb2fe3b5ecaf5527741ea6b8ae04573a605", 0x24}], 0x2}}], 0x1, 0x24044800) 660.745879ms ago: executing program 2 (id=153): unshare(0x6e000000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB="0000000000000100b7080000b2"], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 576.607012ms ago: executing program 0 (id=154): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 576.314282ms ago: executing program 4 (id=155): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0xfffffed4, 0x2, 0x2000000, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000280)=[0x7], 0x1, 0x0}) 576.184522ms ago: executing program 3 (id=156): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000140)={0x35, 0x0, [{0x40000108}]}) openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) 442.647046ms ago: executing program 4 (id=157): syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 363.564688ms ago: executing program 1 (id=158): syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="1a0110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501012709058c0200026df780052501013a"], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x60}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) 303.76797ms ago: executing program 3 (id=159): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl812\x00', [0x140, 0x0, 0xd, 0x2, 0x5, 0x4, 0x7fff, 0x6, 0x7, 0xc72d, 0x4, 0x7, 0x2009, 0x8, 0x4ce, 0x9e9b, 0x101, 0x6, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x80000001, 0xaf, 0x0, 0x283, 0x8001, 0x4]}) 232.394643ms ago: executing program 4 (id=160): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0xe}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 213.393953ms ago: executing program 3 (id=161): io_setup(0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000800) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 63.793278ms ago: executing program 4 (id=162): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)={0x14, 0x5e, 0xe25, 0x1, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x2, 0x28, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@rr={0x7, 0xb, 0xb2, [@local, @loopback]}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 0s ago: executing program 3 (id=163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa8201, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts. [ 64.246098][ T4176] cgroup: Unknown subsys name 'net' [ 64.351829][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.847395][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.354756][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 67.388340][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 67.420201][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 67.491448][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 67.520187][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 67.598376][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.606509][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.615508][ T4191] device bridge_slave_0 entered promiscuous mode [ 67.631084][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.638505][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.646952][ T4191] device bridge_slave_1 entered promiscuous mode [ 67.655232][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.663794][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.672034][ T4190] device bridge_slave_0 entered promiscuous mode [ 67.707671][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.714854][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.723569][ T4190] device bridge_slave_1 entered promiscuous mode [ 67.744378][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.751746][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.760106][ T4189] device bridge_slave_0 entered promiscuous mode [ 67.775488][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.782758][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.790754][ T4189] device bridge_slave_1 entered promiscuous mode [ 67.808305][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.815596][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.823744][ T4192] device bridge_slave_0 entered promiscuous mode [ 67.834691][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.852755][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.874945][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.882498][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.890629][ T4192] device bridge_slave_1 entered promiscuous mode [ 67.913383][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.937949][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.955742][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.965037][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.972651][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.980571][ T4188] device bridge_slave_0 entered promiscuous mode [ 67.996022][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.015307][ T4191] team0: Port device team_slave_0 added [ 68.031009][ T4191] team0: Port device team_slave_1 added [ 68.043567][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.050689][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.059237][ T4188] device bridge_slave_1 entered promiscuous mode [ 68.068822][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.100170][ T4190] team0: Port device team_slave_0 added [ 68.115291][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.133058][ T4189] team0: Port device team_slave_0 added [ 68.140346][ T4190] team0: Port device team_slave_1 added [ 68.146962][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.154090][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.180167][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.200367][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.207414][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.234025][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.247826][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.259208][ T4189] team0: Port device team_slave_1 added [ 68.283991][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.308648][ T4192] team0: Port device team_slave_0 added [ 68.337364][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.344714][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.371680][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.385164][ T4192] team0: Port device team_slave_1 added [ 68.391611][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.398687][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.425138][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.445740][ T4188] team0: Port device team_slave_0 added [ 68.452223][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.459202][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.485332][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.527161][ T4188] team0: Port device team_slave_1 added [ 68.533676][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.540647][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.567208][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.597369][ T4191] device hsr_slave_0 entered promiscuous mode [ 68.604396][ T4191] device hsr_slave_1 entered promiscuous mode [ 68.619037][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.626146][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.652122][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.672378][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.679357][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.705669][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.752483][ T4189] device hsr_slave_0 entered promiscuous mode [ 68.759780][ T4189] device hsr_slave_1 entered promiscuous mode [ 68.766761][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.775278][ T4189] Cannot create hsr debugfs directory [ 68.781386][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.788351][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.814578][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.830002][ T4190] device hsr_slave_0 entered promiscuous mode [ 68.837257][ T4190] device hsr_slave_1 entered promiscuous mode [ 68.844184][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.852104][ T4190] Cannot create hsr debugfs directory [ 68.877311][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.885002][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.911133][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.994704][ T4192] device hsr_slave_0 entered promiscuous mode [ 69.003086][ T4192] device hsr_slave_1 entered promiscuous mode [ 69.010217][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.018076][ T4192] Cannot create hsr debugfs directory [ 69.053835][ T4188] device hsr_slave_0 entered promiscuous mode [ 69.060789][ T4188] device hsr_slave_1 entered promiscuous mode [ 69.064271][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 69.067051][ T4195] Bluetooth: hci3: command 0x0409 tx timeout [ 69.080211][ T4195] Bluetooth: hci2: command 0x0409 tx timeout [ 69.087475][ T4195] Bluetooth: hci1: command 0x0409 tx timeout [ 69.093919][ T4195] Bluetooth: hci4: command 0x0409 tx timeout [ 69.100068][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.107761][ T4188] Cannot create hsr debugfs directory [ 69.376273][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.388702][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.399538][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.413103][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.464085][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.475199][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.502512][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.520518][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.564182][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.577291][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.587582][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.611613][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.650844][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.660956][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.671947][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.685831][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.729054][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.773770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.784975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.805308][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.840962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.852191][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.861368][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.868693][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.879489][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.898318][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.914403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.928534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.938853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.947878][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.955036][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.963664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.972819][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.990366][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.006957][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.017458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.027865][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.052025][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.061076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.072924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.082686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.090615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.099623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.109830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.119360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.159520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.168955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.179588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.188946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.200607][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.207822][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.220970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.229594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.239683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.248556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.260322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.268967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.278202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.286838][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.293963][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.310685][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.329743][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.339742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.350320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.359696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.369808][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.377043][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.385726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.401898][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.424430][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.434884][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.445010][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.454488][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.461646][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.486173][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.507930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.516334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.524776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.534458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.546377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.559412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.602297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.612804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.622975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.632480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.641077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.649978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.660277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.669628][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.676763][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.685748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.694651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.703498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.712592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.722143][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.729256][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.740536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.749489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.758346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.768178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.780810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.789755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.805779][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.815978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.826146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.836375][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.859206][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.878408][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.904099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.920627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.930176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.945070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.963493][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.990250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.007505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.020558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.029853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.039813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.049644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.059456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.068775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.082231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.090781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.117055][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.141849][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 71.147913][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 71.153639][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 71.159966][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 71.174379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.181698][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 71.189597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.197224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.207155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.216287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.226071][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.233241][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.243040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.251878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.260431][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.267598][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.279373][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.305579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.316973][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.323889][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.334132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.383162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.402544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.412800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.424251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.436954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.495073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.504556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.513476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.523442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.532581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.541462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.550119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.560667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.568437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.576772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.584533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.598462][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.626179][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.669835][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.693415][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.740639][ T4189] device veth0_vlan entered promiscuous mode [ 71.749999][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.767021][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.776946][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.786829][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.818511][ T4189] device veth1_vlan entered promiscuous mode [ 71.838488][ T4190] device veth0_vlan entered promiscuous mode [ 71.847138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.866352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.880980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.923013][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.937126][ T4190] device veth1_vlan entered promiscuous mode [ 71.956831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.968398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.983263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.991608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.999910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.008036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.048947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.058141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.068342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.097757][ T4189] device veth0_macvtap entered promiscuous mode [ 72.121285][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.136773][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.145894][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.159730][ T4190] device veth0_macvtap entered promiscuous mode [ 72.169898][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.180987][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.190763][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.200448][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.209611][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.223252][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.233786][ T4189] device veth1_macvtap entered promiscuous mode [ 72.253163][ T4190] device veth1_macvtap entered promiscuous mode [ 72.293377][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.312712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.321079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.330159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.340301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.350110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.359097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.368828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.378098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.387277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.395504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.405774][ T4192] device veth0_vlan entered promiscuous mode [ 72.419889][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.428825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.438498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.449115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.458293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.486657][ T4192] device veth1_vlan entered promiscuous mode [ 72.497782][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.516131][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.527626][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.536899][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.555043][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.566570][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.579054][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.594497][ T4188] device veth0_vlan entered promiscuous mode [ 72.615171][ T4191] device veth0_vlan entered promiscuous mode [ 72.631864][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.640433][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.649366][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.658717][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.669342][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.678058][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.686822][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.695380][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.706038][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.716757][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.728077][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.740647][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.757974][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.766831][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.777162][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.812299][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.820275][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.829098][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.837756][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.858842][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.867772][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.878923][ T4188] device veth1_vlan entered promiscuous mode [ 72.915907][ T4191] device veth1_vlan entered promiscuous mode [ 72.929249][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.938885][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.957106][ T4192] device veth0_macvtap entered promiscuous mode [ 73.058904][ T4192] device veth1_macvtap entered promiscuous mode [ 73.071632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.080043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.088339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.097441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.132392][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.140425][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.154673][ T4191] device veth0_macvtap entered promiscuous mode [ 73.166456][ T4188] device veth0_macvtap entered promiscuous mode [ 73.175549][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.184425][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.193741][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.203851][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.212848][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.221450][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 73.227613][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 73.232117][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 73.240765][ T4253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.246737][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.260443][ T4253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.269222][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 73.272164][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.276099][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 73.293050][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.304314][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.316414][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.332384][ T4188] device veth1_macvtap entered promiscuous mode [ 73.339599][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.349666][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.358997][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.368315][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.380485][ T4191] device veth1_macvtap entered promiscuous mode [ 73.395650][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.407314][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.418559][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.429270][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.440816][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.460632][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.472433][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.485135][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.495860][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.506253][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.517073][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.529033][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.553991][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.564073][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.573582][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.582783][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.592874][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.604810][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.614161][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.624337][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.634063][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.651775][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.667701][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.678669][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.689518][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.699415][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.711473][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.723229][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.736256][ T4253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.742555][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.753643][ T4253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.762205][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.770960][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.780257][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.802428][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.810407][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.819566][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.846441][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.857729][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.869245][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.881692][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.891611][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.903674][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.913590][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.924150][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.935870][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.948124][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.965344][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.975524][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.986061][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.996491][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.007051][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.017874][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.029363][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.050553][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.093487][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.110149][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.119604][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.129192][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.154661][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.164329][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.173006][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.188279][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.212295][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.221065][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.251629][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.258993][ T4276] loop1: detected capacity change from 0 to 256 [ 74.319761][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.337897][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.524668][ T1270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.539019][ T1270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.581943][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.590488][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.641026][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.190291][ T4285] usb usb8: usbfs: process 4285 (syz.0.1) did not claim interface 4 before use [ 75.200336][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.242385][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.302257][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 75.357053][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 75.367355][ T4233] Bluetooth: hci4: command 0x0419 tx timeout [ 75.374710][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 75.380777][ T4233] Bluetooth: hci0: command 0x0419 tx timeout [ 75.400273][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.441760][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.511812][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.536790][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.540999][ T4253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.571837][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.579461][ T4253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.580849][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.645054][ T4290] loop1: detected capacity change from 0 to 2048 [ 75.669768][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.810240][ T4285] loop0: detected capacity change from 0 to 32768 [ 75.848213][ T4290] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.859791][ T4290] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.888549][ T4293] loop3: detected capacity change from 0 to 512 [ 75.895660][ T4290] fs-verity: sha512 using implementation "sha512-avx2" [ 75.977217][ T4293] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.990800][ T4293] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 76.000769][ T4293] EXT4-fs (loop3): invalid inodes per group: 4294967295 [ 76.000769][ T4293] [ 76.023956][ T4285] XFS (loop0): Mounting V5 Filesystem [ 76.116014][ T4305] loop4: detected capacity change from 0 to 256 [ 76.232317][ T4308] loop2: detected capacity change from 0 to 256 [ 76.251001][ T4285] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 77.266903][ T4318] loop3: detected capacity change from 0 to 256 [ 77.378911][ T4285] XFS (loop0): Starting recovery (logdev: internal) [ 77.429468][ T4319] loop4: detected capacity change from 0 to 256 [ 77.492832][ T4321] binder: 4320:4321 ioctl 4018620d 0 returned -22 [ 78.546402][ T4285] XFS (loop0): Ending recovery (logdev: internal) [ 78.843281][ T4190] XFS (loop0): Unmounting Filesystem [ 78.988893][ T4336] capability: warning: `syz.2.10' uses 32-bit capabilities (legacy support in use) [ 79.125308][ T4340] netlink: 200 bytes leftover after parsing attributes in process `syz.4.14'. [ 79.128752][ T4337] loop3: detected capacity change from 0 to 256 [ 79.377357][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.632621][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 79.772472][ T4344] loop4: detected capacity change from 0 to 256 [ 79.802269][ T1108] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 80.816028][ T1108] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 80.836276][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.846415][ T1108] usb 2-1: Product: syz [ 80.850627][ T1108] usb 2-1: Manufacturer: syz [ 81.346391][ T4338] loop2: detected capacity change from 0 to 32768 [ 81.572285][ T4359] loop4: detected capacity change from 0 to 256 [ 81.617590][ T1108] usb 2-1: SerialNumber: syz [ 81.644220][ T1108] usb 2-1: config 0 descriptor?? [ 81.673794][ T1108] usb 2-1: can't set config #0, error -71 [ 81.694285][ T1108] usb 2-1: USB disconnect, device number 2 [ 81.727058][ T4366] netlink: 'syz.1.19': attribute type 10 has an invalid length. [ 81.825117][ T4338] XFS (loop2): Mounting V5 Filesystem [ 81.831020][ T4363] loop0: detected capacity change from 0 to 8192 [ 81.869869][ T4366] team0: Device wg1 is of different type [ 81.902807][ T4338] XFS (loop2): log mount failed [ 81.954118][ T4363] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 82.001843][ T4363] REISERFS (device loop0): using ordered data mode [ 82.008463][ T4363] reiserfs: using flush barriers [ 82.076687][ T4363] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.149045][ T4366] syz.1.19 (4366) used greatest stack depth: 20720 bytes left [ 82.171849][ T4363] REISERFS (device loop0): checking transaction log (loop0) [ 82.239136][ T4363] REISERFS (device loop0): Using r5 hash to sort names [ 82.268980][ T4363] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 82.308004][ T4372] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.441534][ T4363] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 82.487942][ T4363] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 82.517794][ T4348] loop3: detected capacity change from 0 to 32768 [ 82.541508][ T4363] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 82.590380][ T4379] ======================================================= [ 82.590380][ T4379] WARNING: The mand mount option has been deprecated and [ 82.590380][ T4379] and is ignored by this kernel. Remove the mand [ 82.590380][ T4379] option from the mount to silence this warning. [ 82.590380][ T4379] ======================================================= [ 82.593836][ T4363] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 82.731987][ T4348] XFS (loop3): Mounting V5 Filesystem [ 82.763303][ T4363] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 83.424319][ T4348] XFS (loop3): Starting recovery (logdev: internal) [ 84.157659][ T4348] XFS (loop3): Ending recovery (logdev: internal) [ 84.266415][ T4192] XFS (loop3): Unmounting Filesystem [ 84.309198][ T4396] loop4: detected capacity change from 0 to 256 [ 84.515307][ T4237] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.841281][ T4237] usb 3-1: Using ep0 maxpacket: 32 [ 84.972285][ T4237] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 85.100522][ T4237] usb 3-1: config 0 has no interface number 0 [ 85.234766][ T4237] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 102, changing to 10 [ 85.301568][ T4237] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid maxpacket 24624, setting to 1024 [ 85.459417][ T4406] loop3: detected capacity change from 0 to 2048 [ 85.511921][ T4408] usb usb8: usbfs: process 4408 (syz.4.26) did not claim interface 4 before use [ 85.542043][ T4237] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 85.570146][ T4237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.584544][ T4406] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.605602][ T4237] usb 3-1: Product: syz [ 85.609829][ T4237] usb 3-1: Manufacturer: syz [ 85.614659][ T4237] usb 3-1: SerialNumber: syz [ 85.623239][ T4237] usb 3-1: config 0 descriptor?? [ 85.629519][ T4406] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.879589][ T4394] udc-core: couldn't find an available UDC or it's busy [ 85.924016][ T4394] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 85.972118][ T4237] radio-si470x 3-1:0.35: this is not a si470x device. [ 86.059424][ T4421] loop3: detected capacity change from 0 to 128 [ 86.092235][ T4237] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 86.104529][ T4421] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 86.248642][ T4401] loop0: detected capacity change from 0 to 32768 [ 86.314589][ T4237] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 86.403511][ T4401] XFS (loop0): Mounting V5 Filesystem [ 86.408750][ T4408] loop4: detected capacity change from 0 to 32768 [ 86.539836][ T4237] usb 3-1: USB disconnect, device number 2 [ 86.549681][ T4237] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 86.595838][ T4408] XFS (loop4): Mounting V5 Filesystem [ 86.621489][ T4401] XFS (loop0): Starting recovery (logdev: internal) [ 86.647609][ T4401] XFS (loop0): Ending recovery (logdev: internal) [ 86.669502][ T1325] cfg80211: failed to load regulatory.db [ 86.803942][ T4408] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 86.832288][ T4408] XFS (loop4): Starting recovery (logdev: internal) [ 86.855095][ T4408] XFS (loop4): Ending recovery (logdev: internal) [ 87.108467][ T4408] XFS (loop4): Metadata corruption detected at xfs_btree_lookup_get_block+0x444/0x660, xfs_bnobt block 0x8 [ 87.142173][ T4455] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.175623][ T4408] XFS (loop4): Unmount and run xfs_repair [ 87.236004][ T4424] loop1: detected capacity change from 0 to 32768 [ 87.264688][ T4401] process 'syz.0.35' launched '/dev/fd/4' with NULL argv: empty string added [ 87.318349][ T4424] jfs_mount: dbMount failed w/rc = -22 [ 87.357978][ T4424] Mount JFS Failure: -22 [ 87.364262][ T4462] loop2: detected capacity change from 0 to 8 [ 87.382111][ T4424] jfs_mount failed w/return code = -22 [ 87.803445][ T4468] loop3: detected capacity change from 0 to 2048 [ 88.087623][ T4474] loop2: detected capacity change from 0 to 512 [ 88.141518][ T4474] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.173772][ T4474] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 88.205844][ T4480] loop1: detected capacity change from 0 to 1024 [ 88.222581][ T4474] EXT4-fs (loop2): Remounting filesystem read-only [ 88.230814][ T4474] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 88.244491][ T4474] EXT4-fs (loop2): 1 truncate cleaned up [ 88.250245][ T4474] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 88.294820][ T4484] loop3: detected capacity change from 0 to 1024 [ 88.317265][ T26] audit: type=1804 audit(1780898982.271:2): pid=4450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.35" name="/newroot/3/file0/file0/file1" dev="overlay" ino=7430 res=1 errno=0 [ 88.402974][ T4484] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 88.426706][ T4484] hfsplus: failed to load root directory [ 88.439957][ T26] audit: type=1800 audit(1780898982.351:3): pid=4450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.35" name="file1" dev="overlay" ino=7430 res=0 errno=0 [ 88.541698][ T4401] syz.0.35 (4401) used greatest stack depth: 19512 bytes left [ 88.549395][ T4450] syz.0.35 (4450) used greatest stack depth: 15384 bytes left [ 88.887113][ T4191] XFS (loop4): Unmounting Filesystem [ 88.897894][ T4190] XFS (loop0): Unmounting Filesystem [ 88.980644][ T4494] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.011697][ T4494] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.299524][ T4491] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.37 (4491) [ 89.504897][ T4502] exfat: Deprecated parameter 'utf8' [ 89.506328][ T4491] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 89.562768][ T4491] BTRFS error (device loop1): unrecognized metadata_ratio value 0x0000010000000004 [ 89.614066][ T4502] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 89.646584][ T4491] BTRFS error (device loop1): open_ctree failed: -34 [ 90.002834][ T4516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.44'. [ 91.170406][ T4523] set_capacity_and_notify: 4 callbacks suppressed [ 91.170422][ T4523] loop0: detected capacity change from 0 to 4096 [ 91.278842][ T4523] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 91.299315][ T4526] loop3: detected capacity change from 0 to 512 [ 91.310823][ T4496] kvm [4495]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010000 data 0xfffffffffffffffe [ 91.322839][ T4523] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 91.353738][ T26] audit: type=1800 audit(1780898985.311:4): pid=4497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.39" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 91.371580][ T4523] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 91.392253][ T4497] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.39'. [ 91.431409][ T4526] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 91.447761][ T4523] ntfs: volume version 3.1. [ 91.549554][ T4526] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.47: casefold flag without casefold feature [ 91.634812][ T4526] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.47: couldn't read orphan inode 15 (err -117) [ 91.687092][ T4526] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 91.695897][ T4523] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 91.791321][ T4523] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 91.936508][ T4513] loop4: detected capacity change from 0 to 32768 [ 92.010425][ T4389] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 92.080340][ T26] audit: type=1800 audit(1780898986.031:5): pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.41" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 92.201375][ T4236] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.224253][ T4513] loop0: detected capacity change from 4096 to 64 [ 92.402260][ T4236] usb 3-1: device descriptor read/64, error -71 [ 92.450988][ T4548] loop3: detected capacity change from 0 to 2048 [ 92.508529][ T4548] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.545832][ T4548] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.602242][ T4235] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 92.671944][ T4236] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 92.881530][ T4236] usb 3-1: device descriptor read/64, error -71 [ 92.981670][ T4235] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 92.996305][ T4235] usb 2-1: config 0 has no interface number 0 [ 93.011588][ T4236] usb usb3-port1: attempt power cycle [ 93.087667][ T4557] loop4: detected capacity change from 0 to 512 [ 93.118242][ T4235] usb 2-1: config 0 interface 41 has no altsetting 0 [ 93.206418][ T4557] EXT4-fs (loop4): inline encryption not supported [ 93.247660][ T4563] loop3: detected capacity change from 0 to 512 [ 93.257406][ T4557] EXT4-fs (loop4): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 93.281343][ T4235] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 93.295669][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.344104][ T4235] usb 2-1: Product: syz [ 93.349269][ T4235] usb 2-1: Manufacturer: syz [ 93.354351][ T4235] usb 2-1: SerialNumber: syz [ 93.371067][ T4235] usb 2-1: config 0 descriptor?? [ 93.410344][ T4563] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.57: bg 0: block 473: padding at end of block bitmap is not set [ 93.483889][ T4563] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 93.521263][ T4236] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.563582][ T4563] EXT4-fs (loop3): 1 orphan inode deleted [ 93.581816][ T4563] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.621047][ T4563] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.634889][ T4236] usb 3-1: device descriptor read/8, error -71 [ 93.844775][ T4577] loop4: detected capacity change from 0 to 2048 [ 93.901366][ T4236] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 93.990117][ T4581] device batadv_slave_1 entered promiscuous mode [ 93.999933][ T4581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'. [ 94.009437][ T4581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.441991][ T4577] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.671087][ T4577] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.731432][ T4236] usb 3-1: device descriptor read/8, error -71 [ 94.747079][ T4581] device batadv_slave_1 left promiscuous mode [ 94.753534][ T4581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.852582][ T4236] usb usb3-port1: unable to enumerate USB device [ 94.861418][ T4552] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.039699][ T4589] loop2: detected capacity change from 0 to 2048 [ 95.101273][ T4552] usb 1-1: Using ep0 maxpacket: 32 [ 95.163224][ T4589] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.216135][ T4589] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.222392][ T4552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.247859][ T4552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.268173][ T4552] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 95.284020][ T4552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.312588][ T4552] usb 1-1: config 0 descriptor?? [ 95.362929][ T4552] hub 1-1:0.0: USB hub found [ 95.638279][ T4552] hub 1-1:0.0: 1 port detected [ 95.706352][ T4598] loop3: detected capacity change from 0 to 512 [ 95.761514][ T4598] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.779878][ T4598] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 95.795978][ T4598] EXT4-fs (loop3): Remounting filesystem read-only [ 95.803141][ T4598] EXT4-fs (loop3): 1 truncate cleaned up [ 95.809112][ T4598] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 95.833927][ T4580] udc-core: couldn't find an available UDC or it's busy [ 95.848959][ T4600] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 95.871470][ T4600] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.882143][ T4580] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 96.183354][ T4552] usb 1-1: USB disconnect, device number 2 [ 96.202970][ T4587] XFS (loop4): Mounting V5 Filesystem [ 96.209316][ T4235] CoreChips: probe of 2-1:0.41 failed with error -71 [ 96.573829][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 96.573848][ T26] audit: type=1107 audit(1780898990.231:6): pid=4599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 96.627559][ T4235] usb 2-1: USB disconnect, device number 3 [ 96.867524][ T4612] set_capacity_and_notify: 2 callbacks suppressed [ 96.867539][ T4612] loop1: detected capacity change from 0 to 512 [ 96.906781][ T4587] XFS (loop4): Ending clean mount [ 96.972664][ T4612] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 96.975386][ T4612] EXT4-fs (loop1): invalid journal inode [ 96.975534][ T4612] EXT4-fs (loop1): can't get journal size [ 97.023711][ T4612] EXT4-fs (loop1): 1 truncate cleaned up [ 97.023741][ T4612] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 97.040489][ T26] audit: type=1804 audit(1780898990.991:7): pid=4622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.63" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=33416 res=1 errno=0 [ 97.097411][ T26] audit: type=1804 audit(1780898991.051:8): pid=4587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.63" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=33416 res=1 errno=0 [ 97.237242][ T4628] loop0: detected capacity change from 0 to 1024 [ 97.317808][ T4628] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 97.356266][ T4628] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,sysvgroups,nodelalloc,journal_dev=0x0000000000000001,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 97.359487][ T4191] XFS (loop4): Unmounting Filesystem [ 97.479569][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.507005][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.514610][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.616090][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.673682][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.698050][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.707302][ T4636] loop3: detected capacity change from 0 to 256 [ 97.772717][ T4634] loop1: detected capacity change from 0 to 2048 [ 97.881664][ T4636] FAT-fs (loop3): Unrecognized mount option "00000000000000000000003´Ò_þS£‡ÍL`rNÛëÞħ¶”²²!‰þ¼Í£¥þ~Z" or missing value [ 97.959739][ T4634] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.006251][ T4634] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.227322][ T4626] loop2: detected capacity change from 0 to 32768 [ 98.275019][ T4626] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.73 (4626) [ 98.340022][ T4649] loop0: detected capacity change from 0 to 256 [ 98.360144][ T4626] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 98.441090][ T4651] loop1: detected capacity change from 0 to 2048 [ 98.447877][ T4626] BTRFS error (device loop2): unrecognized metadata_ratio value 0x0000010000000004 [ 98.485060][ T4626] BTRFS error (device loop2): open_ctree failed: -34 [ 98.702589][ T4272] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4272) [ 99.077466][ T4651] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.262191][ T4651] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.541418][ T7] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 99.936560][ T4673] loop1: detected capacity change from 0 to 32768 [ 99.943652][ T4673] xfs: Unknown parameter 'measure' [ 100.071225][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 100.191682][ T7] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 100.252092][ T7] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 100.433981][ T7] usb 4-1: config 150 has no interface number 0 [ 100.521210][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 100.604227][ T7] usb 4-1: config 150 interface 204 has no altsetting 0 [ 100.796838][ T4668] loop4: detected capacity change from 0 to 8192 [ 100.861673][ T7] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 100.897953][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.911530][ T4668] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 100.938122][ T4668] REISERFS (device loop4): using ordered data mode [ 100.945531][ T4668] reiserfs: using flush barriers [ 100.964094][ T4668] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.000739][ T7] usb 4-1: Product: syz [ 101.052435][ T4668] REISERFS (device loop4): checking transaction log (loop4) [ 101.061359][ T7] usb 4-1: Manufacturer: syz [ 101.076019][ T4668] REISERFS (device loop4): Using r5 hash to sort names [ 101.086123][ T4668] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 101.091718][ T7] usb 4-1: SerialNumber: syz [ 101.278168][ T4694] loop0: detected capacity change from 0 to 2048 [ 101.311422][ T4236] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.418217][ T4694] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.489244][ T4694] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.512634][ T4236] usb 2-1: device descriptor read/64, error -71 [ 101.553299][ T7] xr_serial 4-1:150.204: skipping garbage [ 101.559131][ T7] xr_serial 4-1:150.204: xr_serial converter detected [ 101.581370][ T7] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 101.591330][ T7] xr_serial: probe of ttyUSB0 failed with error -71 [ 101.641855][ T7] usb 4-1: USB disconnect, device number 2 [ 101.680513][ T7] xr_serial 4-1:150.204: device disconnected [ 101.791470][ T4236] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 101.948312][ T4709] 8021q: VLANs not supported on sit0 [ 101.991433][ T4236] usb 2-1: device descriptor read/64, error -71 [ 102.032506][ T4695] loop2: detected capacity change from 0 to 32768 [ 102.121878][ T4236] usb usb2-port1: attempt power cycle [ 102.150880][ T4715] loop0: detected capacity change from 0 to 256 [ 102.219913][ T4695] XFS (loop2): Mounting V5 Filesystem [ 102.236472][ T4719] loop3: detected capacity change from 0 to 2048 [ 102.345385][ T4695] XFS (loop2): Ending clean mount [ 102.395855][ T4719] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.463173][ T4719] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.531290][ T4236] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.578665][ T4188] XFS (loop2): Unmounting Filesystem [ 102.621597][ T4236] usb 2-1: device descriptor read/8, error -71 [ 102.660646][ T4702] loop4: detected capacity change from 0 to 32768 [ 102.723596][ T4702] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 102.802045][ T4702] BTRFS error (device loop4): unrecognized metadata_ratio value 0x0000010000000004 [ 102.859359][ T4702] BTRFS error (device loop4): open_ctree failed: -34 [ 102.897291][ T4236] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.951283][ T4296] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4296) [ 103.001441][ T4236] usb 2-1: device descriptor read/8, error -71 [ 103.121473][ T4236] usb usb2-port1: unable to enumerate USB device [ 103.230690][ T4740] usb usb8: usbfs: process 4740 (syz.0.97) did not claim interface 4 before use [ 103.351464][ T4235] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.476131][ T4744] loop2: detected capacity change from 0 to 512 [ 103.567866][ T4744] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.95: bg 0: block 393: padding at end of block bitmap is not set [ 103.596264][ T4744] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 103.611473][ T4235] usb 4-1: Using ep0 maxpacket: 8 [ 103.658023][ T4744] EXT4-fs (loop2): 2 truncates cleaned up [ 103.677523][ T4744] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.737127][ T4235] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 103.811447][ T7] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 103.921582][ T4235] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 103.930718][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.007970][ T4235] usb 4-1: Product: syz [ 104.028478][ T4235] usb 4-1: Manufacturer: syz [ 104.038332][ T4235] usb 4-1: SerialNumber: syz [ 104.065601][ T4235] usb 4-1: config 0 descriptor?? [ 104.103618][ T4235] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 104.127799][ T4235] usb 4-1: setting power ON [ 104.137495][ T4235] dvb-usb: bulk message failed: -22 (2/0) [ 104.168673][ T4740] loop0: detected capacity change from 0 to 32768 [ 104.179889][ T4235] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 104.188304][ T4755] loop2: detected capacity change from 0 to 4096 [ 104.199402][ T7] usb 5-1: config 154 has an invalid interface number: 128 but max is 0 [ 104.219759][ T7] usb 5-1: config 154 has no interface number 0 [ 104.228717][ T4753] loop1: detected capacity change from 0 to 8192 [ 104.238507][ T7] usb 5-1: config 154 interface 128 has no altsetting 0 [ 104.251738][ T4235] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 104.268707][ T4235] usb 4-1: media controller created [ 104.339918][ T4753] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 104.371332][ T4235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.385607][ T4740] XFS (loop0): Mounting V5 Filesystem [ 104.392020][ T4753] REISERFS (device loop1): using ordered data mode [ 104.398613][ T4753] reiserfs: using flush barriers [ 104.430002][ T4765] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.450270][ T4753] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.488067][ T4753] REISERFS (device loop1): checking transaction log (loop1) [ 104.497150][ T4740] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 104.523022][ T7] usb 5-1: string descriptor 0 read error: -22 [ 104.541389][ T7] usb 5-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=58.09 [ 104.555697][ T4235] usb 4-1: selecting invalid altsetting 6 [ 104.594469][ T4740] XFS (loop0): Starting recovery (logdev: internal) [ 104.621412][ T4235] usb 4-1: digital interface selection failed (-22) [ 104.633343][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.655772][ T4235] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 104.733437][ T7] ums-datafab 5-1:154.128: USB Mass Storage device detected [ 104.760189][ T4740] XFS (loop0): Ending recovery (logdev: internal) [ 104.763046][ T4235] usb 4-1: setting power OFF [ 104.789092][ T4753] REISERFS (device loop1): Using tea hash to sort names [ 104.805002][ T4235] dvb-usb: bulk message failed: -22 (2/0) [ 104.819145][ T4753] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 104.872520][ T7] ums-sddr55 5-1:154.128: USB Mass Storage device detected [ 104.882404][ T4235] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 104.970419][ T4235] (NULL device *): no alternate interface [ 104.978812][ T7] usb 5-1: USB disconnect, device number 2 [ 105.131482][ T4740] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x444/0x660, xfs_bnobt block 0x8 [ 105.171429][ T4740] XFS (loop0): Unmount and run xfs_repair [ 105.182692][ T4235] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 105.234193][ T4235] usb 4-1: USB disconnect, device number 3 [ 105.420739][ T4788] loop4: detected capacity change from 0 to 2048 [ 105.549421][ T4788] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.591220][ T13] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 105.602995][ T4788] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.961573][ T13] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.984129][ T13] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.011263][ T13] usb 3-1: config 0 interface 0 has no altsetting 0 [ 106.031265][ T13] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 106.050760][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.069205][ T13] usb 3-1: config 0 descriptor?? [ 106.080436][ T4190] XFS (loop0): Unmounting Filesystem [ 106.289793][ T4809] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 106.300564][ T4809] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 106.319918][ T4815] comedi: valid board names for 8255 driver are: [ 106.340564][ T4815] 8255 [ 106.344447][ T4815] comedi: valid board names for vmk80xx driver are: [ 106.351295][ T4235] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 106.352531][ T4815] vmk80xx [ 106.390374][ T4815] comedi: valid board names for usbduxsigma driver are: [ 106.399079][ T4815] usbduxsigma [ 106.407518][ T4815] comedi: valid board names for usbduxfast driver are: [ 106.416078][ T4815] usbduxfast [ 106.419493][ T4815] comedi: valid board names for usbdux driver are: [ 106.431042][ T4815] usbdux [ 106.435373][ T4815] comedi: valid board names for ni6501 driver are: [ 106.447171][ T4815] ni6501 [ 106.450556][ T4815] comedi: valid board names for dt9812 driver are: [ 106.461415][ T4815] dt9812 [ 106.464425][ T4815] comedi: valid board names for ni_labpc_cs driver are: [ 106.489184][ T4815] ni_labpc_cs [ 106.492938][ T4815] comedi: valid board names for ni_daq_700 driver are: [ 106.529119][ T4815] ni_daq_700 [ 106.533214][ T4815] comedi: valid board names for labpc_pci driver are: [ 106.547468][ T4815] labpc_pci [ 106.550726][ T4815] comedi: valid board names for adl_pci9118 driver are: [ 106.570571][ T13] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 106.578075][ T4815] pci9118dg [ 106.586048][ T4815] pci9118hg [ 106.589406][ T13] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 106.597044][ T4235] usb 2-1: Using ep0 maxpacket: 32 [ 106.607295][ T4815] pci9118hr [ 106.610559][ T4815] comedi: valid board names for 8255_pci driver are: [ 106.620195][ T13] hid-steam 0003:28DE:1102.0001: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 106.637534][ T4815] 8255_pci [ 106.640699][ T4815] comedi: valid board names for s526 driver are: [ 106.659167][ T4820] device syzkaller0 entered promiscuous mode [ 106.663401][ T4815] s526 [ 106.667996][ T4815] comedi: valid board names for multiq3 driver are: [ 106.682146][ T13] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 106.689799][ T13] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 106.703522][ T4815] multiq3 [ 106.706606][ T4815] comedi: valid board names for pcmuio driver are: [ 106.717982][ T4815] pcmuio48 [ 106.721886][ T4235] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 106.725103][ T4815] pcmuio96 [ 106.742481][ T4815] comedi: valid board names for pcmmio driver are: [ 106.749291][ T4815] pcmmio [ 106.751989][ T4235] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 106.767865][ T13] hid-steam 0003:28DE:1102.0002: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 106.773968][ T4815] comedi: valid board names for pcmda12 driver are: [ 106.779818][ T4235] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 106.813809][ T4815] pcmda12 [ 106.817301][ T4815] comedi: valid board names for pcmad driver are: [ 106.825957][ T4815] pcmad12 [ 106.829259][ T4815] pcmad16 [ 106.833962][ T4815] comedi: valid board names for ni_labpc driver are: [ 106.840683][ T4815] lab-pc-1200 [ 106.844499][ T4815] lab-pc-1200ai [ 106.848083][ T4815] lab-pc+ [ 106.854540][ T4815] comedi: valid board names for atmio16 driver are: [ 106.864443][ T4815] atmio16 [ 106.868496][ T4815] atmio16d [ 106.874898][ T13] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' connected [ 106.883843][ T4815] comedi: valid board names for ni_at_ao driver are: [ 106.894245][ T13] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0001/input/input7 [ 106.906076][ T4815] at-ao-6 [ 106.913251][ T4815] at-ao-10 [ 106.916576][ T4815] comedi: valid board names for ni_at_a2150 driver are: [ 106.927390][ T4815] ni_at_a2150 [ 106.930882][ T4815] comedi: valid board names for adq12b driver are: [ 106.941748][ T4815] adq12b [ 106.948311][ T4815] comedi: valid board names for mpc624 driver are: [ 106.967195][ T13] usb 3-1: USB disconnect, device number 7 [ 106.981410][ T4235] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 106.990557][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.004961][ T4815] mpc624 [ 107.007966][ T4815] comedi: valid board names for c6xdigio driver are: [ 107.018731][ T4815] c6xdigio [ 107.031317][ T4235] usb 2-1: Product: syz [ 107.037598][ T4815] comedi: valid board names for aio_iiro_16 driver are: [ 107.059816][ T4235] usb 2-1: Manufacturer: syz [ 107.065828][ T4815] aio_iiro_16 [ 107.069611][ T4235] usb 2-1: SerialNumber: syz [ 107.088054][ T4815] comedi: valid board names for aio_aio12_8 driver are: [ 107.117806][ T4815] aio_aio12_8 [ 107.131092][ T13] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' disconnected [ 107.136414][ T4815] aio_ai12_8 [ 107.153124][ T4235] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 107.166446][ T4815] aio_ao12_4 [ 107.171721][ T4235] imon 2-1:155.0: unable to initialize intf0, err -19 [ 107.183595][ T4815] comedi: valid board names for fl512 driver are: [ 107.201241][ T4235] imon:imon_probe: failed to initialize context! [ 107.205362][ T4815] fl512 [ 107.207632][ T4235] imon 2-1:155.0: unable to register, err -19 [ 107.224145][ T4815] comedi: valid board names for dmm32at driver are: [ 107.232068][ T4826] fido_id[4826]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 107.258054][ T4815] dmm32at [ 107.268958][ T4815] comedi: valid board names for dt282x driver are: [ 107.282334][ T4815] dt2821 [ 107.287850][ T4815] dt2821-f [ 107.291093][ T4815] dt2821-g [ 107.316257][ T4830] usb usb8: usbfs: process 4830 (syz.0.121) did not claim interface 0 before use [ 107.318753][ T4815] dt2823 [ 107.360563][ T4815] dt2824-pgh [ 107.398523][ T4815] dt2824-pgl [ 107.408539][ T4815] dt2825 [ 107.413991][ T4815] dt2827 [ 107.416988][ T4815] dt2828 [ 107.420412][ T4815] dt2829 [ 107.430287][ T4815] dt21-ez [ 107.441127][ T4815] dt23-ez [ 107.451352][ T4815] dt24-ez [ 107.454429][ T4815] dt24-ez-pgl [ 107.457830][ T4815] comedi: valid board names for dt2817 driver are: [ 107.485113][ T4815] dt2817 [ 107.488159][ T4815] comedi: valid board names for dt2815 driver are: [ 107.547392][ T4815] dt2815 [ 107.550495][ T4815] comedi: valid board names for dt2814 driver are: [ 107.591224][ T4815] dt2814 [ 107.594240][ T4815] comedi: valid board names for dt2811 driver are: [ 107.603991][ T4815] dt2811-pgh [ 107.631538][ T4815] dt2811-pgl [ 107.636500][ T4815] comedi: valid board names for dt2801 driver are: [ 107.661386][ T4815] dt2801 [ 107.664399][ T4815] comedi: valid board names for das6402 driver are: [ 107.691443][ T4815] das6402-12 [ 107.694792][ T4815] das6402-16 [ 107.731826][ T4206] Bluetooth: hci2: hardware error 0x04 [ 107.741034][ T4815] comedi: valid board names for das1800 driver are: [ 107.752675][ T4815] das-1701st [ 107.756059][ T4815] das-1701st-da [ 107.781823][ T4815] das-1702st [ 107.785182][ T4815] das-1702st-da [ 107.788802][ T4815] das-1702hr [ 107.832617][ T4815] das-1702hr-da [ 107.836232][ T4815] das-1701ao [ 107.839539][ T4815] das-1702ao [ 107.875672][ T4815] das-1801st [ 107.879228][ T4815] das-1801st-da [ 107.883314][ T4815] das-1802st [ 107.886644][ T4815] das-1802st-da [ 107.899160][ T4815] das-1802hr [ 107.902725][ T4815] das-1802hr-da [ 107.906304][ T4815] das-1801hc [ 107.909824][ T4815] das-1802hc [ 107.914111][ T4815] das-1801ao [ 107.917437][ T4815] das-1802ao [ 107.920946][ T4815] comedi: valid board names for das800 driver are: [ 107.927788][ T4815] das-800 [ 107.930845][ T4815] cio-das800 [ 107.934788][ T4815] das-801 [ 107.937851][ T4815] cio-das801 [ 107.946462][ T4815] das-802 [ 107.949566][ T4815] cio-das802 [ 107.953292][ T4815] cio-das802/16 [ 107.957117][ T4815] comedi: valid board names for isa-das08 driver are: [ 107.987662][ T4815] isa-das08 [ 107.997793][ T4815] das08-pgm [ 108.001054][ T4815] das08-pgh [ 108.029587][ T4815] das08-pgl [ 108.033219][ T4815] das08-aoh [ 108.056676][ T4815] das08-aol [ 108.060021][ T4815] das08-aom [ 108.073475][ T4815] das08/jr-ao [ 108.097027][ T4815] das08jr-16-ao [ 108.100647][ T4815] pc104-das08 [ 108.144414][ T4815] das08jr/16 [ 108.147748][ T4815] comedi: valid board names for das16m1 driver are: [ 108.201400][ T4815] das16m1 [ 108.204514][ T4815] comedi: valid board names for dac02 driver are: [ 108.210952][ T4815] dac02 [ 108.237170][ T4815] comedi: valid board names for rti802 driver are: [ 108.245413][ T4815] rti802 [ 108.248558][ T4815] comedi: valid board names for rti800 driver are: [ 108.258690][ T4815] rti800 [ 108.268898][ T4815] rti815 [ 108.272246][ T4815] comedi: valid board names for pcm3724 driver are: [ 108.287423][ T4815] pcm3724 [ 108.307786][ T4815] comedi: valid board names for pcl818 driver are: [ 108.320531][ T4815] pcl818l [ 108.323706][ T4815] pcl818h [ 108.326751][ T4815] pcl818hd [ 108.341545][ T4815] pcl818hg [ 108.344725][ T4815] pcl818 [ 108.347684][ T4815] pcl718 [ 108.350644][ T4815] pcm3718 [ 108.395148][ T4815] comedi: valid board names for pcl816 driver are: [ 108.410218][ T4815] pcl816 [ 108.420358][ T4815] pcl814b [ 108.441462][ T4815] comedi: valid board names for pcl812 driver are: [ 108.448126][ T4815] pcl812 [ 108.451092][ T4815] pcl812pg [ 108.471311][ T4815] acl8112pg [ 108.474583][ T4815] acl8112dg [ 108.483536][ T4815] acl8112hg [ 108.486891][ T4815] a821pgl [ 108.500173][ T4815] a821pglnda [ 108.544482][ T4815] a821pgh [ 108.547579][ T4815] a822pgl [ 108.550629][ T4815] a822pgh [ 108.574960][ T4815] a823pgl [ 108.578068][ T4815] a823pgh [ 108.581115][ T4815] pcl813 [ 108.610627][ T4815] pcl813b [ 108.614920][ T4815] acl8113 [ 108.617990][ T4815] iso813 [ 108.620956][ T4815] acl8216 [ 108.657876][ T4815] a826pg [ 108.661124][ T4815] comedi: valid board names for pcl730 driver are: [ 108.687786][ T4815] pcl730 [ 108.690754][ T4815] iso730 [ 108.711336][ T4815] acl7130 [ 108.714440][ T4815] pcm3730 [ 108.717494][ T4815] pcl725 [ 108.720457][ T4815] p8r8dio [ 108.747303][ T4815] acl7225b [ 108.750500][ T4815] p16r16dio [ 108.770636][ T4815] pcl733 [ 108.775430][ T4815] pcl734 [ 108.778773][ T4815] opmm-1616-xt [ 108.798246][ T4815] pearl-mm-p [ 108.801976][ T4815] ir104-pbf [ 108.806513][ T4815] comedi: valid board names for pcl726 driver are: [ 108.824428][ T4815] pcl726 [ 108.830911][ T4815] pcl727 [ 108.837758][ T4815] pcl728 [ 108.844130][ T4815] acl6126 [ 108.850841][ T4815] acl6128 [ 108.857587][ T4815] comedi: valid board names for pcl724 driver are: [ 108.874841][ T4815] pcl724 [ 108.882099][ T4815] pcl722 [ 108.888682][ T4815] pcl731 [ 108.892770][ T4901] netlink: 'syz.3.143': attribute type 11 has an invalid length. [ 108.902196][ T4815] acl7122 [ 108.905809][ T4815] acl7124 [ 108.910388][ T4815] pet48dio [ 108.920100][ T4815] pcmio48 [ 108.940395][ T4815] onyx-mm-dio [ 108.951367][ T4815] comedi: valid board names for pcl711 driver are: [ 108.977800][ T4815] pcl711 [ 108.994975][ T4815] pcl711b [ 109.005986][ T4815] acl8112hg [ 109.033104][ T4815] acl8112dg [ 109.041567][ T4815] comedi: valid board names for amplc_pc263 driver are: [ 109.048579][ T4815] pc263 [ 109.053368][ T4815] comedi: valid board names for amplc_pc236 driver are: [ 109.081360][ T4815] pc36at [ 109.088090][ T4903] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 109.096500][ T4815] comedi: valid board names for amplc_dio200 driver are: [ 109.105827][ T4903] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 109.115555][ T4815] pc212e [ 109.120877][ T4815] pc214e [ 109.132431][ T4815] pc215e [ 109.174087][ T4815] pc218e [ 109.177131][ T4815] pc272e [ 109.186426][ T4232] usb 2-1: USB disconnect, device number 8 [ 109.200470][ T4815] comedi: valid board names for comedi_parport driver are: [ 109.241375][ T4815] comedi_parport [ 109.245250][ T4815] comedi: valid board names for comedi_test driver are: [ 109.297101][ T4815] comedi_test [ 109.309727][ T4916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 109.329179][ T4815] comedi: valid board names for comedi_bond driver are: [ 109.352502][ T4815] comedi_bond [ 110.131297][ T4235] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 110.175011][ T4953] [ 110.180987][ T4953] ============================= [ 110.204316][ T4953] WARNING: suspicious RCU usage [ 110.221289][ T4953] syzkaller #0 Not tainted [ 110.225776][ T4953] ----------------------------- [ 110.247514][ T4953] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 110.279560][ T4953] [ 110.279560][ T4953] other info that might help us debug this: [ 110.279560][ T4953] [ 110.313886][ T4953] [ 110.313886][ T4953] rcu_scheduler_active = 2, debug_locks = 1 [ 110.334780][ T4953] 1 lock held by syz.4.162/4953: [ 110.363009][ T4953] #0: ffffffff8d43e4c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 110.392400][ T4235] usb 2-1: Using ep0 maxpacket: 32 [ 110.411322][ T4953] [ 110.411322][ T4953] stack backtrace: [ 110.460256][ T4953] CPU: 1 PID: 4953 Comm: syz.4.162 Not tainted syzkaller #0 [ 110.467624][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 110.477741][ T4953] Call Trace: [ 110.481065][ T4953] [ 110.484066][ T4953] dump_stack_lvl+0x188/0x250 [ 110.488834][ T4953] ? load_image+0x400/0x400 [ 110.493372][ T4953] ? show_regs_print_info+0x20/0x20 [ 110.498615][ T4953] ? lockdep_rcu_suspicious+0x110/0x180 [ 110.504193][ T4953] ? local_bh_enable+0x20/0x20 [ 110.508999][ T4953] rhltable_lookup+0x7a9/0x7c0 [ 110.513804][ T4953] ? local_bh_enable+0x20/0x20 [ 110.518606][ T4953] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 110.524656][ T4953] ? release_firmware_map_entry+0x190/0x190 [ 110.530594][ T4953] ? lock_chain_count+0x20/0x20 [ 110.535490][ T4953] ? mr_mfc_find_parent+0x190/0x190 [ 110.540731][ T4953] ? local_bh_enable+0x20/0x20 [ 110.545536][ T4953] ? preempt_schedule+0xbc/0xd0 [ 110.550424][ T4953] ? ipmr_mfc_add+0x212d/0x2d40 [ 110.555311][ T4953] ? preempt_schedule+0xbc/0xd0 [ 110.560194][ T4953] ? schedule_preempt_disabled+0x20/0x20 [ 110.565856][ T4953] ? lock_chain_count+0x20/0x20 [ 110.570750][ T4953] mr_mfc_find_any_parent+0xb6/0x1e0 [ 110.576077][ T4953] ? local_bh_enable+0x20/0x20 [ 110.580890][ T4953] ip_mr_forward+0x24c/0xf90 [ 110.585524][ T4953] ipmr_mfc_add+0x23cc/0x2d40 [ 110.590246][ T4953] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 110.595223][ T4953] ? __lock_acquire+0x7d10/0x7d10 [ 110.600311][ T4953] ip_mroute_setsockopt+0xeaf/0x1250 [ 110.605641][ T4953] ? ipmr_rule_default+0x70/0x70 [ 110.610623][ T4953] ? __might_sleep+0xf0/0xf0 [ 110.615244][ T4953] ip_setsockopt+0x568/0x3130 [ 110.619965][ T4953] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 110.625373][ T4953] ? aa_sk_perm+0x7dc/0x910 [ 110.629914][ T4953] ? aa_af_perm+0x340/0x340 [ 110.634446][ T4953] ? __fget_files+0x40f/0x480 [ 110.639163][ T4953] ? aa_sock_opt_perm+0x74/0x100 [ 110.644146][ T4953] ? sock_common_setsockopt+0x32/0xb0 [ 110.649554][ T4953] ? raw_setsockopt+0xc5/0x180 [ 110.654368][ T4953] ? sock_common_recvmsg+0x1c0/0x1c0 [ 110.659695][ T4953] __sys_setsockopt+0x2bf/0x3d0 [ 110.664597][ T4953] __x64_sys_setsockopt+0xb1/0xc0 [ 110.669674][ T4953] do_syscall_64+0x4c/0xa0 [ 110.674127][ T4953] ? clear_bhb_loop+0x30/0x80 [ 110.678842][ T4953] ? clear_bhb_loop+0x30/0x80 [ 110.683567][ T4953] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.689517][ T4953] RIP: 0033:0x7fb7d0b23e59 [ 110.694009][ T4953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.713743][ T4953] RSP: 002b:00007fb7ced7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.722205][ T4953] RAX: ffffffffffffffda RBX: 00007fb7d0d9cfa0 RCX: 00007fb7d0b23e59 [ 110.730229][ T4953] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000008 [ 110.738250][ T4953] RBP: 00007fb7d0bb9d6f R08: 000000000000003c R09: 0000000000000000 [ 110.746271][ T4953] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 110.754284][ T4953] R13: 00007fb7d0d9d038 R14: 00007fb7d0d9cfa0 R15: 00007ffcf85697a8 [ 110.762319][ T4953] [ 110.770987][ T23] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 110.784353][ T23] Bluetooth: hci4: Injecting HCI hardware error event [ 110.796297][ T4953] [ 110.798758][ T4953] ============================= [ 110.805784][ T4205] Bluetooth: hci4: hardware error 0x00 [ 110.836533][ T4953] WARNING: suspicious RCU usage [ 110.844575][ T4953] syzkaller #0 Not tainted [ 110.849303][ T4953] ----------------------------- [ 110.901466][ T4235] usb 2-1: string descriptor 0 read error: -22 [ 110.907901][ T4235] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 110.929089][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.992995][ T4953] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 111.008605][ T4235] usb 2-1: MIDIStreaming interface descriptor not found [ 111.020311][ T4953] [ 111.020311][ T4953] other info that might help us debug this: [ 111.020311][ T4953] [ 111.045820][ T4953] [ 111.045820][ T4953] rcu_scheduler_active = 2, debug_locks = 1 [ 111.069133][ T4953] 1 lock held by syz.4.162/4953: [ 111.081947][ T4953] #0: ffffffff8d43e4c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 111.106566][ T4953] [ 111.106566][ T4953] stack backtrace: [ 111.121961][ T4953] CPU: 1 PID: 4953 Comm: syz.4.162 Not tainted syzkaller #0 [ 111.129326][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.139420][ T4953] Call Trace: [ 111.142738][ T4953] [ 111.145697][ T4953] dump_stack_lvl+0x188/0x250 [ 111.150418][ T4953] ? load_image+0x400/0x400 [ 111.154962][ T4953] ? show_regs_print_info+0x20/0x20 [ 111.160224][ T4953] ? lockdep_rcu_suspicious+0x110/0x180 [ 111.165813][ T4953] ? local_bh_enable+0x20/0x20 [ 111.170619][ T4953] rhltable_lookup+0x52a/0x7c0 [ 111.175462][ T4953] ? local_bh_enable+0x20/0x20 [ 111.180278][ T4953] ? mr_mfc_find_parent+0x190/0x190 [ 111.185517][ T4953] ? local_bh_enable+0x20/0x20 [ 111.190324][ T4953] ? preempt_schedule+0xbc/0xd0 [ 111.195217][ T4953] ? ipmr_mfc_add+0x212d/0x2d40 [ 111.200114][ T4953] ? preempt_schedule+0xbc/0xd0 [ 111.205002][ T4953] ? schedule_preempt_disabled+0x20/0x20 [ 111.210678][ T4953] ? lock_chain_count+0x20/0x20 [ 111.215733][ T4953] mr_mfc_find_any_parent+0xb6/0x1e0 [ 111.221116][ T4953] ? local_bh_enable+0x20/0x20 [ 111.225940][ T4953] ip_mr_forward+0x24c/0xf90 [ 111.230594][ T4953] ipmr_mfc_add+0x23cc/0x2d40 [ 111.235342][ T4953] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 111.240330][ T4953] ? __lock_acquire+0x7d10/0x7d10 [ 111.245435][ T4953] ip_mroute_setsockopt+0xeaf/0x1250 [ 111.250772][ T4953] ? ipmr_rule_default+0x70/0x70 [ 111.255773][ T4953] ? __might_sleep+0xf0/0xf0 [ 111.260428][ T4953] ip_setsockopt+0x568/0x3130 [ 111.265157][ T4953] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 111.270577][ T4953] ? aa_sk_perm+0x7dc/0x910 [ 111.275123][ T4953] ? aa_af_perm+0x340/0x340 [ 111.279660][ T4953] ? __fget_files+0x40f/0x480 [ 111.284388][ T4953] ? aa_sock_opt_perm+0x74/0x100 [ 111.289372][ T4953] ? sock_common_setsockopt+0x32/0xb0 [ 111.294867][ T4953] ? raw_setsockopt+0xc5/0x180 [ 111.299670][ T4953] ? sock_common_recvmsg+0x1c0/0x1c0 [ 111.304993][ T4953] __sys_setsockopt+0x2bf/0x3d0 [ 111.309889][ T4953] __x64_sys_setsockopt+0xb1/0xc0 [ 111.314962][ T4953] do_syscall_64+0x4c/0xa0 [ 111.319416][ T4953] ? clear_bhb_loop+0x30/0x80 [ 111.324131][ T4953] ? clear_bhb_loop+0x30/0x80 [ 111.328851][ T4953] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.334783][ T4953] RIP: 0033:0x7fb7d0b23e59 [ 111.339234][ T4953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.358910][ T4953] RSP: 002b:00007fb7ced7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 111.367419][ T4953] RAX: ffffffffffffffda RBX: 00007fb7d0d9cfa0 RCX: 00007fb7d0b23e59 [ 111.375466][ T4953] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000008 [ 111.383515][ T4953] RBP: 00007fb7d0bb9d6f R08: 000000000000003c R09: 0000000000000000 [ 111.391573][ T4953] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 111.399724][ T4953] R13: 00007fb7d0d9d038 R14: 00007fb7d0d9cfa0 R15: 00007ffcf85697a8 [ 111.407892][ T4953] [ 111.512641][ T4235] usb 2-1: USB disconnect, device number 9 [ 111.606417][ T4953] [ 111.632246][ T4953] ============================= [ 111.637196][ T4953] WARNING: suspicious RCU usage [ 111.659274][ T4953] syzkaller #0 Not tainted [ 111.680132][ T4953] ----------------------------- [ 111.695609][ T4953] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 111.724737][ T4953] [ 111.724737][ T4953] other info that might help us debug this: [ 111.724737][ T4953] [ 111.741319][ T4953] [ 111.741319][ T4953] rcu_scheduler_active = 2, debug_locks = 1 [ 111.759754][ T4953] 1 lock held by syz.4.162/4953: [ 111.764930][ T4953] #0: ffffffff8d43e4c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 111.795563][ T4953] [ 111.795563][ T4953] stack backtrace: [ 111.813184][ T4953] CPU: 1 PID: 4953 Comm: syz.4.162 Not tainted syzkaller #0 [ 111.820547][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.830639][ T4953] Call Trace: [ 111.833956][ T4953] [ 111.836922][ T4953] dump_stack_lvl+0x188/0x250 [ 111.841642][ T4953] ? load_image+0x400/0x400 [ 111.846187][ T4953] ? show_regs_print_info+0x20/0x20 [ 111.851438][ T4953] ? lockdep_rcu_suspicious+0x110/0x180 [ 111.857045][ T4953] ? local_bh_enable+0x20/0x20 [ 111.861876][ T4953] rhltable_lookup+0x61e/0x7c0 [ 111.866688][ T4953] ? local_bh_enable+0x20/0x20 [ 111.871499][ T4953] ? mr_mfc_find_parent+0x190/0x190 [ 111.876738][ T4953] ? local_bh_enable+0x20/0x20 [ 111.881541][ T4953] ? preempt_schedule+0xbc/0xd0 [ 111.886441][ T4953] ? ipmr_mfc_add+0x212d/0x2d40 [ 111.891335][ T4953] ? preempt_schedule+0xbc/0xd0 [ 111.896219][ T4953] ? schedule_preempt_disabled+0x20/0x20 [ 111.901899][ T4953] ? lock_chain_count+0x20/0x20 [ 111.906805][ T4953] mr_mfc_find_any_parent+0xb6/0x1e0 [ 111.912134][ T4953] ? local_bh_enable+0x20/0x20 [ 111.916944][ T4953] ip_mr_forward+0x24c/0xf90 [ 111.921591][ T4953] ipmr_mfc_add+0x23cc/0x2d40 [ 111.926363][ T4953] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 111.931724][ T4953] ? __lock_acquire+0x7d10/0x7d10 [ 111.936820][ T4953] ip_mroute_setsockopt+0xeaf/0x1250 [ 111.942163][ T4953] ? ipmr_rule_default+0x70/0x70 [ 111.947155][ T4953] ? __might_sleep+0xf0/0xf0 [ 111.951827][ T4953] ip_setsockopt+0x568/0x3130 [ 111.956553][ T4953] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 111.961955][ T4953] ? aa_sk_perm+0x7dc/0x910 [ 111.966493][ T4953] ? aa_af_perm+0x340/0x340 [ 111.971033][ T4953] ? __fget_files+0x40f/0x480 [ 111.975795][ T4953] ? aa_sock_opt_perm+0x74/0x100 [ 111.980769][ T4953] ? sock_common_setsockopt+0x32/0xb0 [ 111.986181][ T4953] ? raw_setsockopt+0xc5/0x180 [ 111.990988][ T4953] ? sock_common_recvmsg+0x1c0/0x1c0 [ 111.996327][ T4953] __sys_setsockopt+0x2bf/0x3d0 [ 112.001226][ T4953] __x64_sys_setsockopt+0xb1/0xc0 [ 112.006298][ T4953] do_syscall_64+0x4c/0xa0 [ 112.010754][ T4953] ? clear_bhb_loop+0x30/0x80 [ 112.015465][ T4953] ? clear_bhb_loop+0x30/0x80 [ 112.020184][ T4953] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.026151][ T4953] RIP: 0033:0x7fb7d0b23e59 [ 112.030633][ T4953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.050281][ T4953] RSP: 002b:00007fb7ced7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.058742][ T4953] RAX: ffffffffffffffda RBX: 00007fb7d0d9cfa0 RCX: 00007fb7d0b23e59 [ 112.066753][ T4953] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000008 [ 112.074754][ T4953] RBP: 00007fb7d0bb9d6f R08: 000000000000003c R09: 0000000000000000 [ 112.082762][ T4953] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 112.090803][ T4953] R13: 00007fb7d0d9d038 R14: 00007fb7d0d9cfa0 R15: 00007ffcf85697a8 [ 112.098856][ T4953]