last executing test programs: 2m29.650789935s ago: executing program 1 (id=99): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089000000e024c283", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0) getsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa040090780008000045a60007006600810229100000200000e0000001"], 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x8914, &(0x7f0000000040)='dummy0\x00'/40) ioctl(r6, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r6, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r6, 0x890b, &(0x7f0000000100)="00000000000000000000000000000000020000006c6170623000"/64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) close(0x3) socket(0x8, 0x800, 0xdf5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={&(0x7f0000000740)="674eeaf37e6df597d30c072b031c6b3268974b2e9cc7895c19ff9fa43465e6d105ac7b297c91283a673f81c36d51acc906127d57753f3c10c4b09c9671c37fa28f13a27558995567ae4dfc811e7a0a282901fd585f21626be02de00e2dab97c0f190bfe8dd84b5dd393aff4851723989268dc8af9b371942338c86d42d2bec2ea53cb771e3a91d47f3ce2643f4ce12b8db2d9ea2aac4b4dd3da1d304281975d7bc603b51eab080a4ee8fb047a5cf44429a2b3eeae7664018627ad29e802bc4e025892a86b2e25ee5b3265cc33f8c89e1c575bfa5db7e0904962938", &(0x7f0000000b40)=""/213, &(0x7f0000000c40)="8d7d24ba663efc470b53f8f85b179597635c7972d132034ca4d44316a945c361e465cbb072060b64d3912b4dc5b421b44c5fa89f2b7624556c103bb38a80f44367a213dcbf25f986cd9688e33f6e16d25696d5d7dd110bdc12085de731f90d7c1bc86ed933bb0a9a7cf0afa058cb2c3bc052c24b32dcb2269b6c292cb0468eebe74097812eaa54a0130e7d84d054f51a611aef480a86b925", &(0x7f00000008c0)="91d92a5e9820d340cc180e5c6cea5adb2173c7951c9b89c5e15601e9b19e6e5715cfa955d4c6e813e3e78e45d33eb4bd55487b1763bfad59a6f37b7bc3468c01a1adeadc248c74a949c37ec2f95511ef827974a4e0f1486ab8a124154cc2c3cfa06dedfabb4cdfc23d33a93dcb69806d5800be2cba11b103081637719d418b3d809d92f2d630769c653b72e75de3fa300205b5", 0x70, r0}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) 2m29.115936048s ago: executing program 1 (id=104): ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x0, @initdev}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000002700)=ANY=[@ANYBLOB="5b37182347bcffffffffffff88a800004305000086dd60f7537200140600ff02000000000000000000000000000100000000000000000000ffff0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) utimes(&(0x7f0000000f80)='./file0\x00', 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = open(&(0x7f0000000000)='./file0\x00', 0x143142, 0x80) sendfile(r5, r5, 0x0, 0x1000000201005) 2m27.464446489s ago: executing program 1 (id=106): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x10, 0x0, 0x8000c62) lseek(r0, 0x5, 0x4) 2m26.927957252s ago: executing program 1 (id=113): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x47f, 0x1f00, 0x0, 0x0, r2}]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x4000) 2m25.237946444s ago: executing program 1 (id=124): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000080)='asymmetric\x00', 0x0) 2m23.77217766s ago: executing program 1 (id=128): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000121401"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8084) 2m23.416979579s ago: executing program 32 (id=128): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000121401"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8084) 2m16.053094581s ago: executing program 0 (id=151): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) writev(r0, &(0x7f0000001680)=[{&(0x7f0000000040)="b8601a454f44", 0x6}, {0x0}], 0x2) 2m15.858870355s ago: executing program 0 (id=152): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000240)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) 2m15.653891s ago: executing program 0 (id=153): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000000)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x1, 0x3, 0x0, 0x3, "dde7f912c3fa20e8791fd027a6968fd915df13e987f8d97490f508486de12387a469f74052a9f53da6058029addd914ba5fc936382b71d1b5cec9f90ba98ce967d190333"}, 0x47) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) 2m15.331546828s ago: executing program 0 (id=154): iopl(0x3) syz_read_part_table(0x632, &(0x7f0000000000)="$eJzs27+LXFUUB/DvzM7Om0lgN/6o0mysbMRg6oxusxliJUq6gEQFWSIK20UIOytpkmILC/8DEbZZUqmksFAXsbRaRNSIrU0Kibp45b15M7Pb2AT8AZ9Psffc+849517mbfnC/1o3O0mnCav0kpx/bfZoMB12MkuoV7r1WJan83Jlb+PS5VJK6XTTydUs56nPV+4m6bVbBvNGpZTt9NvJ8ynVqXu3n36nrDbzL+8s1cNweoxh8szp/qApc6xCSlnEwzqRf93+6KDTuTX7XWcvSu3i+3dfbMPtJ/JVUraT9+qMWfa7uX7uWq8JB8nefOdLiyL9Rbj4uYfpnTjD5NbWeHd9tHk4Wzg73vvkzYu/nbuXciFf93vd+fH6360sKk+SpUe4emN/dLBaOsnujdEfh+ObzRvcFH3yg8e/yFqb9aCUnKlbPpbmX2dt9rIDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAfsz86SDIZ7yabh+OqXd14ebmN3hi0wfnju5ba8Xqu3a/H7WwlP32c5eNJnfpPs9LN8nqSYfLjWnm2edib9a+GzVi3ORz/fiq5/9yfZ8fTXak+u7Botz2v/GleaKOHZaqZ7GTapLU4TLtWVkvOnLz+IKNOL9ka794YbR6Ob/7c6Q2SV+db62MedZO8VeX1acXysN8+POrPrwEAAAAAAAAAAAAAAAAAAACPZOPS5bcftPHVQZJfqm4dl2r6lXsvndyeZ6/n+yrJUfLhoFST9STfvvJr/5uVOz9UzQf7maTKJMnpj3autJv6JxrOP63vpPT/gQvyt/4KAAD//0CQc7s=") 2m14.626380076s ago: executing program 0 (id=155): syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d"], 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x80000000002, 0x30004) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$hiddev(0x0, 0x104, 0x8080) 2m8.604101545s ago: executing program 0 (id=163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x68, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2m3.992619979s ago: executing program 3 (id=172): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24040054, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) 2m3.661982547s ago: executing program 3 (id=174): set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES64], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x1) mount(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x7f00, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x2, 0x0) 2m2.936626245s ago: executing program 3 (id=175): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x2004, 0x8, 0x2, 0x0, 0x1, 0x5000000}, 0x50) 2m2.469506876s ago: executing program 3 (id=177): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000ec0), 0x1, 0xb87, &(0x7f00000017c0)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x39) io_setup(0x2, &(0x7f0000002380)=0x0) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0xa0, 0x1, 0x0, r0, 0x0, 0x0, 0xc00}]) 2m1.699213795s ago: executing program 3 (id=179): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a9968100000005"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="6f4913451e8b"}) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 1m58.757453808s ago: executing program 3 (id=184): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) unshare(0x64000600) 1m53.337007461s ago: executing program 33 (id=163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x68, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1m42.508969829s ago: executing program 34 (id=184): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) unshare(0x64000600) 1m24.508790814s ago: executing program 2 (id=268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x200040c4) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f00000003c0)={'fscrypt:', @auto=[0x66, 0x38, 0x63, 0x33, 0x63, 0x66, 0x38, 0x0, 0x34, 0x32, 0x38, 0x33, 0x36, 0x36, 0x37, 0x33]}, &(0x7f0000000400)={0x0, "cfe062a761e3827b24b8892afdefedeb95e601613685c3359b46736511645680f020b02d24851781ed8c7134d7fd8378d32f107e462b4542f6487e32df24b2e6", 0x40}, 0x48, 0xfffffffffffffff8) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)=@chain) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000280)='$\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0xa00}, 0x2040) syz_usb_connect$cdc_ecm(0x2, 0x51, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023f000101ff8000090400000202060000052406000005240008000d000000001200005305000000042413cf0905"], 0x0) 1m21.117881597s ago: executing program 2 (id=270): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = request_key(0x0, &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) keyctl$instantiate(0xc, r3, &(0x7f0000000000)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '/dev/ptmx\x00', 0x20, 0x1}, 0x34, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000290000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1m19.346710501s ago: executing program 2 (id=272): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000001d80)='<') 1m19.152769066s ago: executing program 2 (id=274): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) r2 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'c', ' *:* ', 'rw\x00'}, 0x9) write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 1m18.910018072s ago: executing program 2 (id=276): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001300050026bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="00000000000000000c001a800800058004000680"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000) 1m15.298027011s ago: executing program 2 (id=280): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @local}], 0x10) 58.870464426s ago: executing program 35 (id=280): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @local}], 0x10) 32.856756989s ago: executing program 8 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) syz_open_dev$usbfs(&(0x7f0000000280), 0xf15, 0x422000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 31.065974893s ago: executing program 8 (id=388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$usbfs(&(0x7f0000000280), 0xf15, 0x422000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) io_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 15.529362467s ago: executing program 36 (id=388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$usbfs(&(0x7f0000000280), 0xf15, 0x422000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) io_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 13.605128834s ago: executing program 4 (id=427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) syz_open_dev$usbfs(&(0x7f0000000280), 0xf15, 0x422000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 11.841739478s ago: executing program 4 (id=431): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x20046090) 8.469872011s ago: executing program 4 (id=436): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e7cc94"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000002c0)={0x40, 0x14, 0x4, "d66d387e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000c40)=ANY=[@ANYBLOB="43731b09000000ebb1a30000304f9c0cb48224c12b8448fd5f8d44f55bca22694aa86b9af5b863c5a36e5d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.469659071s ago: executing program 6 (id=437): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='./my_dbroot', 0xb) close(r0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='1', 0x1) close(r2) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r3, &(0x7f0000001700)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r4, &(0x7f0000001900)='1', 0x1) 8.436107392s ago: executing program 7 (id=438): r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, 0x0, 0x0, 0x0}, 0x0) 8.069676641s ago: executing program 6 (id=440): syz_usb_connect$uac3(0x0, 0xb3, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000040cd0c14004000010203010902a1009e1801c010080b0002010130070904000000010130000a2401103d0007000000132403050101060250ff0700cbb3000900ff010c240b0701fcffffff08060014240202049b2d0515b3a32cf2676bc5"], 0x0) 5.119732163s ago: executing program 7 (id=445): openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYRES8=r0], 0x0) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) socket$unix(0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x3}}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)={'c', ' *:* ', 'rw\x00'}, 0x9) 5.084676674s ago: executing program 5 (id=446): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) 4.956763298s ago: executing program 4 (id=447): openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYRES8=r0], 0x0) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) socket$unix(0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) r3 = openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)={'c', ' *:* ', 'rw\x00'}, 0x9) write$cgroup_devices(r3, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 4.86247429s ago: executing program 5 (id=448): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0x8000) 4.795596402s ago: executing program 7 (id=449): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='./my_dbroot', 0xb) close(r0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='1', 0x1) close(r2) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r3, &(0x7f0000001900)='1', 0x1) 4.599804987s ago: executing program 5 (id=450): socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 4.585428657s ago: executing program 6 (id=451): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) 4.396646012s ago: executing program 4 (id=452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) 4.329755733s ago: executing program 5 (id=453): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x870bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 4.297229864s ago: executing program 7 (id=454): ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x0, @initdev}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000002700)=ANY=[@ANYBLOB="5b37182347bcffffffffffff88a800004305000086dd60f7537200140600ff02000000000000000000000000000100000000000000000000ffff", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000a89eb81a"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) utimes(&(0x7f0000000f80)='./file0\x00', 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = open(&(0x7f0000000000)='./file0\x00', 0x143142, 0x80) sendfile(r5, r5, 0x0, 0x1000000201005) 4.165960917s ago: executing program 6 (id=455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = inotify_init1(0x0) fcntl$lock(r4, 0x5, &(0x7f0000000380)={0x0, 0x2, 0x5, 0x7fffffffffffffff}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 4.132223918s ago: executing program 5 (id=456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x0, 0x3, 0x1, 0x9}}, {0x3, 0x5, 0x0, 0x0, @msi={0x1, 0x2, 0x0, 0x7}}]}) 1.21849585s ago: executing program 5 (id=457): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d000009058202"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x5, 0x28, 0x800, 0xfff6, 0x3fc, 0x4, 0x440, 0x6, 0x1000, 0x5, 0x1060, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1.126736552s ago: executing program 6 (id=458): openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYRES8=r0], 0x0) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) socket$unix(0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x3}}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)={'c', ' *:* ', 'rw\x00'}, 0x9) 1.081211483s ago: executing program 7 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 1.002033455s ago: executing program 4 (id=460): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/Loopback.0\x00') 138.872986ms ago: executing program 7 (id=461): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='./my_dbroot', 0xb) close(r0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r2, &(0x7f0000001700)='1', 0x1) 0s ago: executing program 6 (id=462): mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x10000a, 0xe4, 0x40000}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r1, 0x4018aee2, &(0x7f0000000340)=@attr_other={0x0, 0x2, 0x5, &(0x7f00000002c0)=0xff}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xf, 0xdfdf, 0x10015, 0x80, 0x9, 0x3, 0xcf, 0xfffffffffffffffb, 0x3, 0x7ffffffffffffffc, 0x1, 0x9, 0x5, 0x4, 0xfffffffffffffffd], 0x0, 0x1119c4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): 56994][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.673846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.682336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.692018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.702424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.714283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.722868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.732209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.746272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.759011][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.769675][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.787309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.801663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.832758][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.852270][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.866987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.879975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.927823][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.988381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.026980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.048469][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.068622][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.100959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.111477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.119944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.129419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.140265][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.147418][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.157312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.176204][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.190179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.198274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.206371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.217922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.227723][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.234866][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.259859][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.280599][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.302130][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.322063][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.331545][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.342694][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.351319][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.361308][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.372409][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.379611][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.388064][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.399188][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.408155][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.415317][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.423459][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.432644][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.442916][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.451861][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.460286][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.491710][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 72.498089][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.509609][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 72.516791][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.525566][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 72.547008][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.555170][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.565354][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 72.567772][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.571736][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 72.588585][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.597887][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.607439][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.616618][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.624937][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.632838][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.642011][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.651609][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.660698][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.669463][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.679213][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.688579][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.697221][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.706681][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.717188][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.726226][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.734070][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.742568][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.750831][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.774815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.787507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.796517][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.803648][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.812530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.822318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.831230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.840360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.849589][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.856738][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.868444][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.881239][ T4198] device veth0_vlan entered promiscuous mode [ 72.894016][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.902594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.912870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.921911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.932681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.956639][ T4198] device veth1_vlan entered promiscuous mode [ 72.971936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.982243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.998197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.053684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.061706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.081570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.097382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.109104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.122431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.138569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.149886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.160968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.171710][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.190533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.200088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.209687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.224145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.262381][ T4186] device veth0_vlan entered promiscuous mode [ 73.349263][ T4198] device veth0_macvtap entered promiscuous mode [ 73.363445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.385665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.397612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.407735][ T4186] device veth1_vlan entered promiscuous mode [ 73.427750][ T4198] device veth1_macvtap entered promiscuous mode [ 73.452036][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.475136][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.494431][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.507511][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.516206][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.525433][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.562865][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.584861][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.594588][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.604535][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.612084][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.619955][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.632025][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.640899][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.648498][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.663527][ T4186] device veth0_macvtap entered promiscuous mode [ 73.674529][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.685868][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.700616][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.710991][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.725537][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.745160][ T4186] device veth1_macvtap entered promiscuous mode [ 73.766984][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.780783][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.793394][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.801555][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.816574][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.841541][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.855933][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.868482][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.882640][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.905922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.916086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.927330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.945391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.980476][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.992703][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.008257][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.035298][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.045146][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.057280][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.067981][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.081068][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.090462][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.107680][ T4193] device veth0_vlan entered promiscuous mode [ 74.132322][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.149241][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.192691][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.205257][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.214650][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.223792][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.271811][ T4193] device veth1_vlan entered promiscuous mode [ 74.310126][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.333812][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.341433][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.352495][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.361164][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.370278][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.379552][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.389545][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.406176][ T4188] device veth0_vlan entered promiscuous mode [ 74.459288][ T4188] device veth1_vlan entered promiscuous mode [ 74.469623][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.482790][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.502824][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.518318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.527047][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.537090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.546998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.555272][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 74.562272][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 74.569732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.578168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.587478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.598438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.620004][ T4188] device veth0_macvtap entered promiscuous mode [ 74.631233][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.640032][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 74.652318][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 74.659558][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.673547][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 74.684778][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.696220][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.708800][ T4193] device veth0_macvtap entered promiscuous mode [ 74.735175][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.746904][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.761955][ T4193] device veth1_macvtap entered promiscuous mode [ 74.786630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.799870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.808795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.824169][ T4187] device veth0_vlan entered promiscuous mode [ 74.852630][ T4188] device veth1_macvtap entered promiscuous mode [ 74.859421][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.891434][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.900267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.916703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.926506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.935464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.945854][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.957760][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.968720][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.979651][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.994309][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.020089][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.033118][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.045962][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.056819][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.069547][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.081325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.090595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.100434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.109551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.121508][ T4187] device veth1_vlan entered promiscuous mode [ 75.149257][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.168970][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.179495][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.188538][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.257845][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.283579][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.293970][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.306428][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.317137][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.329453][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.358108][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.398233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.410272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.438061][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.854369][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.005241][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.080595][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.248286][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.258860][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.269025][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.290700][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.324167][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.402253][ T4187] device veth0_macvtap entered promiscuous mode [ 76.438840][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.453931][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.473257][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.503389][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.512717][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.528590][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.540020][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.647055][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 76.654505][ T4187] device veth1_macvtap entered promiscuous mode [ 76.673353][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 76.716123][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 76.728565][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 76.738164][ T26] audit: type=1326 audit(1785226066.729:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4287 comm="syz.0.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef9db02e99 code=0x0 [ 76.762075][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 76.773450][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.781325][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.810543][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.826903][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.837215][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.848740][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.860069][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.908332][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.918943][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.936815][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.950578][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.977571][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.991488][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.007551][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.041996][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.063597][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.078331][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.090939][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.106850][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.122506][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.139024][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.158779][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.184586][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.210793][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.230841][ T4293] scsi_dev_info_list_add_str: bad dev info string 'e' '(null)' '(null)' [ 77.241578][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.268881][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.288484][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.298923][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.312583][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.394489][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.402370][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.431578][ T4295] loop0: detected capacity change from 0 to 512 [ 77.468654][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.494338][ T4295] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.523921][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.531793][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.543436][ T4295] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.610751][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.631189][ T4295] EXT4-fs (loop0): 1 orphan inode deleted [ 77.637610][ T4295] EXT4-fs (loop0): 1 truncate cleaned up [ 77.643419][ T4295] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x0000000000000006,stripe=0x0000000000000005,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 77.704972][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.712847][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.722735][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.754929][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.842756][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.853866][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.943732][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.963076][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.980410][ T4304] loop0: detected capacity change from 0 to 512 [ 78.017530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.089148][ T4304] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 78.137292][ T4304] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 78.208898][ T4304] EXT4-fs (loop0): orphan cleanup on readonly fs [ 78.263556][ T4304] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #13: comm syz.0.13: iget: bad i_size value: 12154761577498 [ 78.314065][ T4304] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.13: couldn't read orphan inode 13 (err -117) [ 78.354629][ T4304] EXT4-fs (loop0): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,user_xattr,,errors=continue. Quota mode: none. [ 78.638917][ T4321] netlink: 'syz.1.17': attribute type 4 has an invalid length. [ 78.724056][ T4325] futex_wake_op: syz.4.20 tries to shift op by 144; fix this program [ 79.572798][ T4336] loop4: detected capacity change from 0 to 512 [ 79.715370][ T4336] ======================================================= [ 79.715370][ T4336] WARNING: The mand mount option has been deprecated and [ 79.715370][ T4336] and is ignored by this kernel. Remove the mand [ 79.715370][ T4336] option from the mount to silence this warning. [ 79.715370][ T4336] ======================================================= [ 79.916151][ T4336] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.994167][ T4336] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.099410][ T4336] Quota error (device loop4): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 80.179559][ T4336] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 80.205940][ T4336] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.21: Failed to acquire dquot type 0 [ 80.303196][ T4321] syz.1.17 (4321) used greatest stack depth: 20432 bytes left [ 80.572022][ T4360] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.608294][ T4359] program syz.1.25 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.900996][ T4372] netlink: 'syz.3.29': attribute type 2 has an invalid length. [ 80.942043][ T4372] netlink: 'syz.3.29': attribute type 1 has an invalid length. [ 81.001931][ T4372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 81.245697][ T4385] futex_wake_op: syz.4.31 tries to shift op by 144; fix this program [ 82.237956][ T4398] syz.2.35 uses obsolete (PF_INET,SOCK_PACKET) [ 82.282113][ T4401] loop0: detected capacity change from 0 to 256 [ 82.335487][ T4398] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 82.392091][ T4398] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 82.419488][ T4401] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.195035][ T4438] netlink: 'syz.0.42': attribute type 4 has an invalid length. [ 83.202660][ T4438] netlink: 17 bytes leftover after parsing attributes in process `syz.0.42'. [ 83.221181][ T4438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 83.305880][ T4441] loop1: detected capacity change from 0 to 512 [ 83.314299][ T4442] netlink: 'syz.0.42': attribute type 5 has an invalid length. [ 83.390449][ T4444] futex_wake_op: syz.3.43 tries to shift op by 144; fix this program [ 83.697707][ T4441] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 83.864240][ T4441] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.220837][ T4454] loop3: detected capacity change from 0 to 164 [ 86.455620][ T4478] capability: warning: `syz.4.53' uses 32-bit capabilities (legacy support in use) [ 86.469682][ T4478] program syz.4.53 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.650271][ T7] cfg80211: failed to load regulatory.db [ 86.839618][ T4497] futex_wake_op: syz.2.57 tries to shift op by 144; fix this program [ 87.692594][ T4454] device syzkaller0 entered promiscuous mode [ 87.726498][ T4504] netlink: 'syz.2.59': attribute type 4 has an invalid length. [ 87.773418][ T4504] netlink: 17 bytes leftover after parsing attributes in process `syz.2.59'. [ 87.801135][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 88.196329][ T4504] netlink: 'syz.2.59': attribute type 5 has an invalid length. [ 88.941683][ T4535] loop1: detected capacity change from 0 to 512 [ 89.021835][ T4535] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.061974][ T4539] zero sized request [ 89.069464][ T4535] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.121812][ T4535] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.68: Invalid block bitmap block 0 in block_group 0 [ 89.148588][ T4535] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 89.176992][ T4535] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.68: attempt to clear invalid blocks 983261 len 1 [ 89.216641][ T4535] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.68: Invalid inode table block 0 in block_group 0 [ 89.339879][ T4535] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 89.421840][ T4535] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 89.478583][ T4535] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.68: Invalid inode table block 0 in block_group 0 [ 89.497602][ T4535] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 89.527850][ T4535] EXT4-fs error (device loop1): ext4_truncate:4286: inode #11: comm syz.1.68: mark_inode_dirty error [ 89.551415][ T4535] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 89.728254][ T4535] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.68: Invalid inode table block 0 in block_group 0 [ 90.382417][ T4535] EXT4-fs (loop1): 1 truncate cleaned up [ 90.408785][ T4535] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 90.663615][ T4561] futex_wake_op: syz.2.73 tries to shift op by 144; fix this program [ 91.631055][ T4566] netlink: 'syz.4.75': attribute type 4 has an invalid length. [ 91.679906][ T4566] netlink: 17 bytes leftover after parsing attributes in process `syz.4.75'. [ 91.771685][ T4566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'. [ 91.857401][ T4575] loop2: detected capacity change from 0 to 512 [ 91.933432][ T4571] netlink: 'syz.4.75': attribute type 5 has an invalid length. [ 91.980281][ T4575] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.79: iget: bad i_size value: 38620345925642 [ 92.029269][ T4584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.80'. [ 92.047745][ T4584] loop3: detected capacity change from 0 to 512 [ 92.054900][ T4575] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.79: couldn't read orphan inode 15 (err -117) [ 92.070666][ T4575] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.102899][ T4584] EXT4-fs (loop3): Unrecognized mount option "fscontext=system_u" or missing value [ 92.870074][ T4612] futex_wake_op: syz.3.88 tries to shift op by 144; fix this program [ 93.660791][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.763080][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 94.883430][ T7] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 94.892349][ T7] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 94.918799][ T4635] loop1: detected capacity change from 0 to 512 [ 94.936680][ T7] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 94.974630][ T7] usb 3-1: config 0 has no interface number 1 [ 94.993471][ T4635] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 95.009421][ T7] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 95.071756][ T7] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 95.110217][ T4642] netlink: 'syz.0.97': attribute type 4 has an invalid length. [ 95.122160][ T4635] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000006,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 95.128598][ T4642] netlink: 17 bytes leftover after parsing attributes in process `syz.0.97'. [ 95.140805][ T4635] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.169429][ T4642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 95.191296][ T7] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 95.250264][ T7] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.280829][ T4642] netlink: 'syz.0.97': attribute type 5 has an invalid length. [ 95.323051][ T7] usb 3-1: config 0 interface 125 has no altsetting 0 [ 95.543416][ T7] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 95.559964][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.569063][ T7] usb 3-1: Product: syz [ 95.590746][ T7] usb 3-1: config 0 descriptor?? [ 95.629088][ T7] usb 3-1: can't set config #0, error -71 [ 95.665865][ T7] usb 3-1: USB disconnect, device number 2 [ 97.082951][ C0] sched: RT throttling activated [ 97.506309][ T4686] loop1: detected capacity change from 0 to 512 [ 97.613287][ T4683] device syzkaller0 entered promiscuous mode [ 97.657191][ T4686] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.739132][ T4686] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.161290][ T4718] loop1: detected capacity change from 0 to 512 [ 98.183052][ T4234] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.247860][ T4723] db_root: cannot be changed: target drivers registered [ 98.269185][ T4718] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.332060][ T4718] EXT4-fs (loop1): 1 truncate cleaned up [ 98.350621][ T4718] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.385705][ T4723] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 98.413827][ T4729] netlink: 'syz.2.119': attribute type 4 has an invalid length. [ 98.435156][ T4234] usb 1-1: Using ep0 maxpacket: 16 [ 98.439366][ T4729] netlink: 17 bytes leftover after parsing attributes in process `syz.2.119'. [ 98.459967][ T4723] filp_open(/var/target/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 98.473377][ T4718] loop_set_status: loop1 () has still dirty pages (nrpages=3) [ 98.503771][ T4729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 98.583684][ T4234] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 98.592099][ T4234] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 98.608271][ T4731] netlink: 'syz.2.119': attribute type 5 has an invalid length. [ 98.651455][ T4234] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 98.681829][ T4234] usb 1-1: config 0 has no interface number 1 [ 98.690469][ T4234] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 99.570646][ T4188] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 99.624638][ T4234] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 99.693544][ T4234] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 99.878686][ T4234] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 99.968401][ T4234] usb 1-1: config 0 interface 125 has no altsetting 0 [ 100.833412][ T4234] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 100.881458][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.942877][ T4234] usb 1-1: Product: syz [ 100.975606][ T4234] usb 1-1: Manufacturer: syz [ 101.016522][ T4234] usb 1-1: SerialNumber: syz [ 101.058892][ T4234] usb 1-1: config 0 descriptor?? [ 101.064543][ T4761] device syzkaller0 entered promiscuous mode [ 101.094470][ T4234] usb 1-1: can't set config #0, error -71 [ 101.131607][ T4234] usb 1-1: USB disconnect, device number 2 [ 101.264865][ T4329] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.371453][ T4329] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.477368][ T4329] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.532500][ T4774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.130'. [ 101.581154][ T4329] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.694925][ T4776] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.052850][ T26] audit: type=1326 audit(1785226349.089:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.0.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9db02e99 code=0x7ffc0000 [ 103.085045][ T4794] netlink: 'syz.3.135': attribute type 4 has an invalid length. [ 103.093131][ T4794] netlink: 17 bytes leftover after parsing attributes in process `syz.3.135'. [ 103.154656][ T26] audit: type=1326 audit(1785226349.119:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.0.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9db02e99 code=0x7ffc0000 [ 103.181909][ T26] audit: type=1326 audit(1785226349.119:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.0.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9db02e99 code=0x7ffc0000 [ 103.275950][ T4798] ODEBUG: Out of memory. ODEBUG disabled [ 103.341578][ T26] audit: type=1326 audit(1785226349.119:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.0.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fef9db02e99 code=0x7ffc0000 [ 103.367535][ T26] audit: type=1326 audit(1785226349.119:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.0.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9db02e99 code=0x7ffc0000 [ 103.423725][ T4794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 103.428210][ T26] audit: type=1326 audit(1785226349.119:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.0.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9db02e99 code=0x7ffc0000 [ 103.560273][ T26] audit: type=1326 audit(1785226349.119:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.0.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fef9db02e99 code=0x7ffc0000 [ 103.585078][ T4234] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.616973][ T26] audit: type=1326 audit(1785226349.119:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.0.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fef9db02e99 code=0x7ffc0000 [ 103.659930][ T4794] netlink: 'syz.3.135': attribute type 5 has an invalid length. [ 103.729737][ T4808] device syzkaller0 entered promiscuous mode [ 103.897721][ T4234] usb 1-1: Using ep0 maxpacket: 16 [ 103.998923][ T1110] Bluetooth: hci2: command 0x0409 tx timeout [ 104.044502][ T4825] loop3: detected capacity change from 0 to 512 [ 104.056866][ T4782] chnl_net:caif_netlink_parms(): no params data found [ 104.064194][ T4234] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 104.072593][ T4234] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 104.086805][ T4825] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.101717][ T4234] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 104.110586][ T4234] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 104.119612][ T4234] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 104.129133][ T4234] usb 1-1: config 0 has no interface number 0 [ 104.141162][ T4234] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 104.165060][ T4234] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 104.175897][ T4234] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 104.189283][ T4234] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.204645][ T4234] usb 1-1: config 0 interface 125 has no altsetting 2 [ 104.211559][ T4825] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,norecovery,dioread_nolock,norecovery,,errors=continue. Quota mode: writeback. [ 104.236714][ T4825] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.568306][ T4234] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 104.578103][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.593249][ T4234] usb 1-1: Product: syz [ 104.598744][ T4234] usb 1-1: Manufacturer: syz [ 104.608309][ T4234] usb 1-1: SerialNumber: syz [ 106.006659][ T4234] usb 1-1: config 0 descriptor?? [ 106.029915][ T4837] smpboot: CPU 1 is now offline [ 106.075312][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 106.107646][ T4234] usb 1-1: selecting invalid altsetting 2 [ 106.167540][ T4782] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.202323][ T4782] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.237997][ T4782] device bridge_slave_0 entered promiscuous mode [ 106.341188][ T4782] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.348532][ T4233] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 106.416509][ T4782] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.477223][ T4782] device bridge_slave_1 entered promiscuous mode [ 106.503369][ T4231] usb 1-1: USB disconnect, device number 3 [ 108.153106][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 108.243014][ T4233] usb 3-1: device not accepting address 3, error -71 [ 108.365813][ T4860] netlink: 'syz.0.149': attribute type 4 has an invalid length. [ 108.506114][ T4860] netlink: 17 bytes leftover after parsing attributes in process `syz.0.149'. [ 108.618011][ T4864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 108.805344][ T4782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.990760][ T4874] device syzkaller0 entered promiscuous mode [ 109.092756][ T4782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.532907][ T4329] device hsr_slave_0 left promiscuous mode [ 109.603133][ T4329] device hsr_slave_1 left promiscuous mode [ 109.620411][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.652806][ T4898] loop0: detected capacity change from 0 to 2048 [ 109.677079][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.712252][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.728803][ T4898] loop0: p1 p2 p3 p4 [ 109.728803][ T4898] p1: [ 109.760054][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.767867][ T4898] loop0: p1 size 67110656 extends beyond EOD, truncated [ 109.809423][ T4329] device bridge_slave_1 left promiscuous mode [ 109.819222][ T4898] loop0: p3 size 134217728 extends beyond EOD, truncated [ 109.842238][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.865123][ T4898] loop0: p4 size 4278190080 extends beyond EOD, truncated [ 109.897456][ T4898] loop0: p5 size 67110656 extends beyond EOD, truncated [ 109.910590][ T4329] device bridge_slave_0 left promiscuous mode [ 109.938880][ T4898] loop0: p6 size 134217728 extends beyond EOD, truncated [ 109.950818][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.233384][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 110.309899][ T4329] device veth1_macvtap left promiscuous mode [ 110.368203][ T4329] device veth0_macvtap left promiscuous mode [ 110.404920][ T4329] device veth1_vlan left promiscuous mode [ 110.427118][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 110.441460][ T4841] udevd[4841]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 110.454710][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 110.467324][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 110.480199][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 110.492907][ T4899] udevd[4899]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 110.523508][ T4329] device veth0_vlan left promiscuous mode [ 110.657314][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.936645][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 111.084669][ T7] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 111.118675][ T7] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 111.147671][ T7] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 111.177791][ T7] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 111.233327][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 111.261165][ T7] usb 1-1: config 0 has no interface number 0 [ 111.282099][ T7] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 111.301099][ T7] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 111.311433][ T7] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.326556][ T7] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.340972][ T7] usb 1-1: config 0 interface 125 has no altsetting 2 [ 111.418372][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 111.437707][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 111.459242][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.484138][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.518532][ T7] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 111.539167][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.562693][ T7] usb 1-1: Product: syz [ 111.572719][ T7] usb 1-1: Manufacturer: syz [ 111.587240][ T7] usb 1-1: SerialNumber: syz [ 111.611350][ T7] usb 1-1: config 0 descriptor?? [ 111.638927][ T4329] bond0 (unregistering): Released all slaves [ 111.665342][ T7] usb 1-1: selecting invalid altsetting 2 [ 111.779787][ T4782] team0: Port device team_slave_0 added [ 111.961149][ T4782] team0: Port device team_slave_1 added [ 113.500015][ T4782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.549997][ T4782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.576399][ T4231] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 113.691179][ T4782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.346718][ T4782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.429550][ T4782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.573026][ T4231] usb 3-1: device not accepting address 5, error -71 [ 115.693198][ T4782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.775358][ T4925] netlink: 'syz.2.160': attribute type 4 has an invalid length. [ 115.817693][ T4925] netlink: 17 bytes leftover after parsing attributes in process `syz.2.160'. [ 116.236961][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 116.261315][ T4289] usb 1-1: USB disconnect, device number 4 [ 116.472242][ T4782] device hsr_slave_0 entered promiscuous mode [ 116.544338][ T4782] device hsr_slave_1 entered promiscuous mode [ 116.613664][ T4782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.653143][ T4782] Cannot create hsr debugfs directory [ 116.943046][ T4951] device syzkaller0 entered promiscuous mode [ 118.985766][ T4965] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.170'. [ 119.113086][ T4289] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 119.206243][ T4782] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 119.259558][ T4782] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.908592][ T4782] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.934019][ T4289] usb 4-1: device descriptor read/all, error -71 [ 120.997723][ T4782] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.181431][ T4978] netlink: 'syz.2.173': attribute type 4 has an invalid length. [ 121.265932][ T4978] netlink: 17 bytes leftover after parsing attributes in process `syz.2.173'. [ 121.366880][ T4983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 121.511580][ T4983] netlink: 'syz.2.173': attribute type 5 has an invalid length. [ 121.672112][ T4782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.780094][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.826305][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.903750][ T4782] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.017868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.073948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.170627][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.177759][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.398625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.470423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.529190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.582179][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.589353][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.638509][ T4999] loop3: detected capacity change from 0 to 4096 [ 122.697348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.768356][ T4999] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.805141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.883923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.974390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.081807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.106869][ T5006] netlink: 168 bytes leftover after parsing attributes in process `syz.4.178'. [ 123.133749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.196551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.275026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.334724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.411657][ T5006] netlink: 168 bytes leftover after parsing attributes in process `syz.4.178'. [ 123.451625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.503819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.560498][ T4782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.879376][ T5025] device bond0 entered promiscuous mode [ 123.926843][ T5025] device bond_slave_0 entered promiscuous mode [ 123.982163][ T5025] device bond_slave_1 entered promiscuous mode [ 124.156946][ T5016] device syzkaller0 entered promiscuous mode [ 125.987687][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.126678][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.153034][ T13] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 126.199534][ T4782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.972214][ T5050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.185'. [ 128.164139][ T5050] netlink: 'syz.4.185': attribute type 5 has an invalid length. [ 128.817368][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.884202][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.970370][ T4782] device veth0_vlan entered promiscuous mode [ 128.991014][ T5073] loop4: detected capacity change from 0 to 2048 [ 129.052576][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.100818][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.170073][ T5073] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.195083][ T4782] device veth1_vlan entered promiscuous mode [ 129.211158][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.277233][ T5073] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.289808][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.360054][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.423758][ T26] audit: type=1800 audit(1785226375.459:11): pid=5073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.188" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 129.541079][ T4782] device veth0_macvtap entered promiscuous mode [ 129.612310][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 129.721301][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.777214][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.858019][ T4782] device veth1_macvtap entered promiscuous mode [ 129.945844][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.981722][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.085173][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.174436][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.248696][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.334213][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.397787][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.466996][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.515535][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.583745][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.650022][ T4782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.713061][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.746117][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.787060][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.849349][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.891353][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.942877][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.988978][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.052959][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.103026][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.181088][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.242473][ T4782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.293988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.367137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.564229][ T4782] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.743035][ T4782] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.156686][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.211718][ T4782] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.286327][ T4782] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.463070][ T4234] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 133.549786][ T4941] Set syz1 is full, maxelem 65536 reached [ 133.725918][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.805279][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.853701][ T4234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.882250][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.922796][ T4234] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 133.957359][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.998343][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.013126][ T4234] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.066301][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.193174][ T4234] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.242117][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 134.391139][ T4234] usb 5-1: SerialNumber: syz [ 134.674049][ T4234] cdc_ether 5-1:1.0: skipping garbage [ 134.701700][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 134.721691][ T4234] usb 5-1: bad CDC descriptors [ 134.772829][ T4234] usb 5-1: USB disconnect, device number 3 [ 136.729748][ T5163] futex_wake_op: syz.4.199 tries to shift op by 144; fix this program [ 136.760360][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 136.798030][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.806931][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.839834][ T5145] netlink: 'syz.2.198': attribute type 4 has an invalid length. [ 136.926395][ T5145] netlink: 17 bytes leftover after parsing attributes in process `syz.2.198'. [ 136.975337][ T5147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 137.478056][ T5179] netlink: 12 bytes leftover after parsing attributes in process `syz.5.203'. [ 137.684969][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.880736][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.026654][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.108731][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.138984][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.181777][ T5117] device bridge_slave_0 entered promiscuous mode [ 138.250281][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.338717][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.368970][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.419415][ T5117] device bridge_slave_1 entered promiscuous mode [ 138.497555][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.653253][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.746719][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.793108][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 138.970361][ T5117] team0: Port device team_slave_0 added [ 138.977360][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.061568][ T5117] team0: Port device team_slave_1 added [ 139.113599][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.368295][ T4189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.376846][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.714262][ T4189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.797678][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.843104][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.872986][ T4234] Bluetooth: hci5: command 0x040f tx timeout [ 140.943087][ T13] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 141.010612][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.082732][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.130401][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.388704][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.663586][ T5214] futex_wake_op: syz.5.209 tries to shift op by 144; fix this program [ 142.713580][ T13] usb 3-1: device descriptor read/all, error -71 [ 142.895575][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.934634][ T5220] loop5: detected capacity change from 0 to 128 [ 142.954782][ T4233] Bluetooth: hci5: command 0x0419 tx timeout [ 142.999033][ T5220] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.088263][ T5220] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.285442][ T5117] device hsr_slave_0 entered promiscuous mode [ 143.418887][ T4329] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.443488][ T5117] device hsr_slave_1 entered promiscuous mode [ 143.460446][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.496689][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.593978][ T4189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.639610][ T5117] Cannot create hsr debugfs directory [ 143.645757][ T5220] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.794609][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.367299][ T4189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.363809][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 146.399678][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.001628][ T5256] futex_wake_op: syz.5.220 tries to shift op by 144; fix this program [ 147.011665][ T5233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.028948][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.208580][ T1107] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 147.280817][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 147.518663][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.552893][ T5117] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 147.628377][ T9] device hsr_slave_0 left promiscuous mode [ 147.708338][ T9] device hsr_slave_1 left promiscuous mode [ 147.735114][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.792497][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.812982][ T1107] usb 5-1: device not accepting address 4, error -71 [ 147.881334][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.908486][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.987363][ T9] device bridge_slave_1 left promiscuous mode [ 148.016678][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.049762][ T5276] Config c/1 of g_uac2 needs at least one function. [ 148.076421][ T9] device bridge_slave_0 left promiscuous mode [ 148.082696][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.106840][ T5276] udc usbip-vudc.0: failed to start g_uac2: -22 [ 148.321788][ T9] device veth1_macvtap left promiscuous mode [ 148.357372][ T9] device veth0_macvtap left promiscuous mode [ 148.393035][ T4189] Bluetooth: hci0: command 0x041b tx timeout [ 148.407713][ T9] device veth1_vlan left promiscuous mode [ 148.449296][ T9] device veth0_vlan left promiscuous mode [ 148.559650][ T4189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.673762][ T5282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.682775][ T5282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.761153][ T5282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.808129][ T5282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.858048][ T5282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.332740][ T9] team0 (unregistering): Port device team_slave_1 removed [ 149.435372][ T9] team0 (unregistering): Port device team_slave_0 removed [ 149.512786][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.603402][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.251079][ T4189] Bluetooth: hci0: command 0x040f tx timeout [ 151.288723][ T1107] net_ratelimit: 1020 callbacks suppressed [ 151.288739][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.303678][ T4189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.314087][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.344312][ T9] bond0 (unregistering): Released all slaves [ 151.432806][ T5117] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 151.490529][ T5117] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 151.600783][ T5117] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 151.808060][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.868349][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.906010][ T5228] device bridge_slave_0 entered promiscuous mode [ 151.974099][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.023369][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.084825][ T5228] device bridge_slave_1 entered promiscuous mode [ 152.261655][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.325441][ T4189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.370198][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.453567][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.567186][ T5322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.592570][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.635537][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.653333][ T5322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.695436][ T5228] team0: Port device team_slave_0 added [ 152.718126][ T5322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.747804][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.874249][ T5228] team0: Port device team_slave_1 added [ 152.884800][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.946851][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.959419][ T5321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.007778][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.074415][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.081498][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.193810][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.236395][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.273068][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 153.283735][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.393482][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.401841][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.408954][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.491561][ T5335] program syz.4.243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.547818][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.686312][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.730010][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.783628][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.827895][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.880351][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.925231][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.980132][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.024671][ T5117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.085449][ T5117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.125060][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.160178][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.297539][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.363331][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.401224][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.450293][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.504144][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.511474][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.151418][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.549346][ T5228] device hsr_slave_0 entered promiscuous mode [ 157.715490][ C0] net_ratelimit: 4 callbacks suppressed [ 157.715505][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.740576][ T4189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.928992][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.940896][ T5228] device hsr_slave_1 entered promiscuous mode [ 157.976214][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.023165][ T5228] Cannot create hsr debugfs directory [ 158.120126][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.191131][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.233478][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.852423][ T5228] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 158.931264][ T5228] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 158.953571][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.083358][ T5228] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 159.132017][ T5228] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 159.317094][ T5399] netlink: 316 bytes leftover after parsing attributes in process `syz.2.259'. [ 159.624882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.681830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.766909][ T5117] device veth0_vlan entered promiscuous mode [ 159.873125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.881585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.993566][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.031217][ T5117] device veth1_vlan entered promiscuous mode [ 160.118381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.168412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.208005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.275057][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.352837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 160.429656][ T5117] device veth0_macvtap entered promiscuous mode [ 161.735341][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.745711][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.755209][ T4175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.020374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.053660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.111192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.139254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.291052][ T5117] device veth1_macvtap entered promiscuous mode [ 163.627662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.635370][ T13] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 163.768831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.790681][ T4175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.801397][ T4189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.847143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.454723][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.461823][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.482852][ T4189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.491224][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.632008][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.768695][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.856735][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.962796][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.054397][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.107607][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.480665][ T5453] futex_wake_op: syz.4.277 tries to shift op by 144; fix this program [ 167.516107][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.536852][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.588047][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.680388][ T5458] loop4: detected capacity change from 0 to 1024 [ 167.718527][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.889693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.230116][ T5458] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 169.253268][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.262142][ T4175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.279359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.302174][ T5458] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 169.329595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.353079][ T5458] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 169.373554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.392129][ T5458] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 169.409858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.430311][ T5458] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 169.448542][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.455666][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.501457][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.546813][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.589136][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.607868][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.622231][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.640500][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.667058][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.699643][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.728384][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.792064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.842327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.899983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.994393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.609035][ T5117] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.639681][ T4175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.678484][ T5117] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.784367][ T5117] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.830184][ T5117] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.183864][ T5479] futex_wake_op: syz.4.283 tries to shift op by 144; fix this program [ 173.214074][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.222612][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.231314][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.259349][ T5480] netlink: 4 bytes leftover after parsing attributes in process `syz.5.282'. [ 173.411632][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.480007][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.507629][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.548287][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.598370][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.627273][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.658601][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.704262][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.754599][ T5228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.792267][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.813194][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.831337][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.853686][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.908636][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.035451][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.492861][ T5496] futex_wake_op: syz.4.286 tries to shift op by 144; fix this program [ 175.515669][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.537264][ T4175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.570452][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.693353][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.756036][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.802215][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.935842][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.102772][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.218984][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.233346][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.262072][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.584340][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.786621][ T5516] device syzkaller0 entered promiscuous mode [ 178.402411][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.719401][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.773939][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.970293][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.011877][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.100659][ T5228] device veth0_vlan entered promiscuous mode [ 180.488319][ T5545] futex_wake_op: syz.6.292 tries to shift op by 144; fix this program [ 180.591768][ T4175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.622624][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.657777][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.722814][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.753112][ T5549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.828643][ T5228] device veth1_vlan entered promiscuous mode [ 180.853848][ T5549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.914048][ T5552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.984872][ T9] device hsr_slave_0 left promiscuous mode [ 180.991178][ T5552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.031206][ T9] device hsr_slave_1 left promiscuous mode [ 181.037332][ T5552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.103231][ T5552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.145745][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.153558][ T5552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.199693][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.238904][ T5552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.287841][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.314201][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.369121][ T9] device bridge_slave_1 left promiscuous mode [ 181.413419][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.474613][ T9] device bridge_slave_0 left promiscuous mode [ 181.510116][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.722280][ T9] device veth1_macvtap left promiscuous mode [ 181.753712][ T9] device veth0_macvtap left promiscuous mode [ 181.801739][ T9] device veth1_vlan left promiscuous mode [ 181.860594][ T9] device veth0_vlan left promiscuous mode [ 183.214214][ T5569] futex_wake_op: syz.5.296 tries to shift op by 144; fix this program [ 183.886105][ T9] team0 (unregistering): Port device team_slave_1 removed [ 183.941855][ T9] team0 (unregistering): Port device team_slave_0 removed [ 183.979497][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.005251][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.092297][ T9] bond0 (unregistering): Released all slaves [ 184.270883][ T5581] device syzkaller0 entered promiscuous mode [ 184.371663][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.411882][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.571742][ T5228] device veth0_macvtap entered promiscuous mode [ 185.825437][ T4233] net_ratelimit: 43 callbacks suppressed [ 185.825452][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.970773][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.030160][ T5228] device veth1_macvtap entered promiscuous mode [ 186.208468][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.272259][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.315954][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.388237][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.450184][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.522245][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.588486][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.633159][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.674560][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.732020][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.790041][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.822242][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.906199][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.925463][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.994335][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.067334][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.140596][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.219185][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.276669][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.332736][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.388953][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.529159][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.602689][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.652492][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.711985][ T5228] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.782967][ T5228] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.814438][ T5228] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.866450][ T5228] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.949806][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.263448][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.317384][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.714364][ T5639] futex_wake_op: syz.5.309 tries to shift op by 144; fix this program [ 189.747265][ T4231] Bluetooth: hci4: command 0x0409 tx timeout [ 189.764485][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.928052][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.936335][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.127933][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.213570][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.291589][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.365642][ T5612] chnl_net:caif_netlink_parms(): no params data found [ 190.655931][ T5662] netlink: 'syz.7.210': attribute type 4 has an invalid length. [ 190.835705][ T5662] netlink: 17 bytes leftover after parsing attributes in process `syz.7.210'. [ 192.248713][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 192.280280][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 192.298872][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.7.210'. [ 192.327406][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.389843][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.442561][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.476463][ T5612] device bridge_slave_0 entered promiscuous mode [ 192.508935][ T5669] netlink: 'syz.7.210': attribute type 5 has an invalid length. [ 192.532480][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.556017][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.590560][ T5612] device bridge_slave_1 entered promiscuous mode [ 192.728087][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.861784][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.873532][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.962107][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.039251][ T5612] team0: Port device team_slave_0 added [ 193.092981][ T4189] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 193.123225][ T5612] team0: Port device team_slave_1 added [ 193.231152][ T5694] device syzkaller0 entered promiscuous mode [ 193.413571][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.456697][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.483173][ T4189] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 193.497275][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.544458][ T4189] usb 7-1: config 0 has no interface number 0 [ 193.583184][ T4189] usb 7-1: config 0 interface 41 has no altsetting 0 [ 193.753411][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.813671][ T4189] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 193.857855][ T4189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.913620][ T4189] usb 7-1: Product: syz [ 193.934765][ T4189] usb 7-1: Manufacturer: syz [ 193.981784][ T4189] usb 7-1: SerialNumber: syz [ 194.027995][ T4189] usb 7-1: config 0 descriptor?? [ 194.069764][ T5714] netlink: 'syz.4.327': attribute type 4 has an invalid length. [ 194.119574][ T5714] netlink: 17 bytes leftover after parsing attributes in process `syz.4.327'. [ 194.163215][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.213285][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.234158][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.271353][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.397897][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 194.445184][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.518357][ T5716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'. [ 194.531451][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.623093][ T4234] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 194.740269][ T5612] device hsr_slave_0 entered promiscuous mode [ 194.804556][ T5612] device hsr_slave_1 entered promiscuous mode [ 194.983066][ T4189] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 195.036067][ T4234] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.090718][ T4234] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.303182][ T4234] usb 8-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 195.347537][ T4234] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.387318][ T5612] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 195.407180][ T4234] usb 8-1: Product: syz [ 195.429879][ T4234] usb 8-1: Manufacturer: syz [ 195.459684][ T4234] usb 8-1: SerialNumber: syz [ 195.540181][ T5612] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 195.609435][ T5612] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 195.623550][ T4175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.676948][ T5612] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 195.863677][ T4234] usb 8-1: unknown interface protocol 0x26, assuming v1 [ 195.897895][ T4234] usb 8-1: cannot find UAC_HEADER [ 196.109246][ T4234] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 196.143038][ T4189] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 196.170442][ T4234] usb 8-1: USB disconnect, device number 2 [ 196.187803][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.217392][ T4189] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 196.277515][ T4189] CoreChips: probe of 7-1:0.41 failed with error -71 [ 196.337687][ T4189] usb 7-1: USB disconnect, device number 2 [ 196.483395][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.492576][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 196.793198][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.171594][ T4447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.183621][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.214838][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.265213][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.283075][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.470256][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.553068][ T4231] Bluetooth: hci4: command 0x0411 tx timeout [ 198.627440][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.781729][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.943982][ T5770] device syzkaller0 entered promiscuous mode [ 199.221342][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.327251][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.353236][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.391181][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.480147][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.515131][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.564463][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.609168][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.750147][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.757332][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.843098][ T4234] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 199.901744][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.940046][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.990179][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.067935][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.075068][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.158053][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.242495][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.289132][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.297637][ T4234] usb 7-1: unable to get BOS descriptor or descriptor too short [ 200.360161][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.393607][ T4189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.403189][ T4234] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 200.411363][ T4234] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 200.480803][ T4234] usb 7-1: config 63 has no interface number 0 [ 200.505627][ T4234] usb 7-1: config 63 interface 66 has no altsetting 0 [ 200.561725][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.588776][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.618794][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.647981][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.670006][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.683125][ T4234] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 200.708297][ T4234] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.726685][ T4234] usb 7-1: Product: syz [ 200.741572][ T4234] usb 7-1: Manufacturer: syz [ 200.751132][ T4234] usb 7-1: SerialNumber: syz [ 200.791442][ T5612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.828066][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.850294][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.869225][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.143175][ T4234] usb 7-1: Found UVC 0.07 device syz (174f:8acf) [ 201.172870][ T4234] usb 7-1: No valid video chain found. [ 201.221489][ T4234] usb 7-1: USB disconnect, device number 3 [ 201.351763][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.379462][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.433353][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.454277][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.660255][ T9] device hsr_slave_0 left promiscuous mode [ 201.702438][ T9] device hsr_slave_1 left promiscuous mode [ 201.737471][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.777730][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.829448][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.978825][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.999740][ T9] device bridge_slave_1 left promiscuous mode [ 203.343898][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.352154][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.372418][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.451892][ T9] device bridge_slave_0 left promiscuous mode [ 203.470548][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.560477][ T9] device veth1_macvtap left promiscuous mode [ 203.588114][ T9] device veth0_macvtap left promiscuous mode [ 203.611822][ T9] device veth1_vlan left promiscuous mode [ 203.627440][ T9] device veth0_vlan left promiscuous mode [ 203.633418][ T7] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 203.771170][ T4189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.997187][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.023754][ T7] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 204.051437][ T7] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.165838][ T7] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.197614][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 204.229327][ T7] usb 7-1: SerialNumber: syz [ 204.260658][ T9] team0 (unregistering): Port device team_slave_1 removed [ 204.299280][ T9] team0 (unregistering): Port device team_slave_0 removed [ 204.346423][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.430836][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.445396][ T4189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.453975][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.477342][ T1239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.488648][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.500121][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.173197][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.699943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.782787][ T7] cdc_ether 7-1:1.0: skipping garbage [ 205.790038][ T9] bond0 (unregistering): Released all slaves [ 205.813000][ T7] usb 7-1: bad CDC descriptors [ 205.898068][ T7] usb 7-1: USB disconnect, device number 4 [ 206.284847][ T5859] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 206.370499][ T5859] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 206.483115][ T7] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 206.637697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.692021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.858338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.899054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.907176][ T7] usb 8-1: unable to get BOS descriptor or descriptor too short [ 206.964709][ T5612] device veth0_vlan entered promiscuous mode [ 207.016712][ T7] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 207.140655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.185623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.223186][ T7] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 207.248830][ T5612] device veth1_vlan entered promiscuous mode [ 207.264446][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.344556][ T7] usb 8-1: Product: syz [ 207.386628][ T7] usb 8-1: Manufacturer: syz [ 207.391266][ T7] usb 8-1: SerialNumber: syz [ 207.398513][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.449004][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.504344][ T5612] device veth0_macvtap entered promiscuous mode [ 207.578820][ T5612] device veth1_macvtap entered promiscuous mode [ 207.700744][ T5612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.862123][ T7] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 208.873755][ T7] usb 8-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 208.902925][ T5612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.292068][ T7] usb 8-1: found format II with max.bitrate = 4, frame size=7372 [ 209.321056][ T5612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.354127][ T4289] net_ratelimit: 5 callbacks suppressed [ 209.354140][ T4289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.392975][ T5612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.433127][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.454135][ T5612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.507408][ T5612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.518497][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.527341][ T4189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.593218][ T7] usb 8-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 209.622589][ T7] usb 8-1: found format II with max.bitrate = 4, frame size=7372 [ 209.632677][ T13] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 209.641948][ T5612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.704851][ T5612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.760006][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.803060][ T7] usb 8-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 209.821864][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.848486][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.901019][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.938550][ T7] usb 8-1: USB disconnect, device number 3 [ 209.985787][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.033177][ T13] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.052083][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.088021][ T5612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.112991][ T13] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 210.156370][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.173244][ T5612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.196217][ T13] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.252993][ T5612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.297777][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.307164][ T4189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.333445][ T5612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.366885][ T5612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.377997][ T13] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.419893][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 210.462517][ T5612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.495691][ T13] usb 7-1: SerialNumber: syz [ 210.511472][ T5897] dummy_hcd dummy_hcd.0: remove, state 4 [ 210.533632][ T5612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.567105][ T4189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.587365][ T5897] usb usb1: USB disconnect, device number 1 [ 210.606672][ T5612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.661515][ T5897] dummy_hcd dummy_hcd.0: stopped [ 210.675902][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.773861][ T13] cdc_ether 7-1:1.0: skipping garbage [ 210.797518][ T13] usb 7-1: bad CDC descriptors [ 210.802559][ T5897] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 210.814018][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.887368][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.902569][ T13] usb 7-1: USB disconnect, device number 5 [ 210.984287][ T5612] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.083035][ T5612] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.092033][ T5612] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.191600][ T5612] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.559701][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.608923][ T4189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.622195][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.673027][ T4231] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 211.691554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.740288][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.809437][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.870212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.943735][ T4231] usb 8-1: Using ep0 maxpacket: 32 [ 212.067125][ T4231] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 212.112692][ T4231] usb 8-1: config 0 has no interface number 0 [ 213.640731][ T5927] futex_wake_op: syz.8.303 tries to shift op by 144; fix this program [ 213.674556][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.773023][ T4231] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 213.782087][ T4231] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.135127][ T4231] usb 8-1: Product: syz [ 215.389781][ T4231] usb 8-1: Manufacturer: syz [ 215.411719][ T5938] db_root: cannot be changed: target drivers registered [ 215.441054][ T5938] se_dev->se_dev_ptr already set for storage object [ 215.458942][ T4231] usb 8-1: SerialNumber: syz [ 215.509837][ T4231] usb 8-1: config 0 descriptor?? [ 215.623177][ T4231] usb 8-1: can't set config #0, error -71 [ 215.653586][ T5938] filp_open(/var/target/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 215.677960][ T4231] usb 8-1: USB disconnect, device number 4 [ 215.760421][ T7] net_ratelimit: 1 callbacks suppressed [ 215.760434][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.126994][ T4175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.135471][ T4289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.657721][ T4231] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 219.309349][ T5969] futex_wake_op: syz.4.398 tries to shift op by 144; fix this program [ 219.325763][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.393267][ T4231] usb 8-1: device descriptor read/all, error -71 [ 220.575459][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.583827][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.592101][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.600577][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.612781][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.032027][ T4447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.042648][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.052012][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.061661][ T4175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.071988][ T5987] db_root: cannot be changed: target drivers registered [ 222.095895][ T5987] se_dev->se_dev_ptr already set for storage object [ 222.266346][ T5989] filp_open(/var/target/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 223.987777][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.754559][ T6021] futex_wake_op: syz.6.412 tries to shift op by 144; fix this program [ 225.815212][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.824406][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.105198][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.524282][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.539899][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.548513][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.832982][ T4234] Bluetooth: hci2: command 0x0406 tx timeout [ 229.301415][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.611062][ T6052] db_root: cannot be changed: target drivers registered [ 229.641016][ T6052] se_dev->se_dev_ptr already set for storage object [ 231.115324][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.123793][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.132274][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.880319][ T6070] futex_wake_op: syz.4.427 tries to shift op by 144; fix this program [ 232.919294][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.089784][ T5949] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 234.592250][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.603585][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.209677][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 236.251459][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.472277][ T154] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.516727][ T6098] db_root: cannot be changed: target drivers registered [ 236.554288][ T6098] se_dev->se_dev_ptr already set for storage object [ 236.641521][ T154] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.677224][ T6098] filp_open(/var/target/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 236.766297][ T154] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.901111][ T154] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.913023][ T5949] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 237.132288][ T6074] chnl_net:caif_netlink_parms(): no params data found [ 237.142953][ T1107] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 237.273578][ T5949] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.330625][ T5949] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.387699][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.436624][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.444065][ T5949] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 237.471392][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.479039][ T5949] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.508132][ T6074] device bridge_slave_0 entered promiscuous mode [ 237.524937][ T5949] usb 8-1: SerialNumber: syz [ 237.533177][ T1107] usb 7-1: config 24 has too many interfaces: 158, using maximum allowed: 32 [ 237.568748][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.580483][ T1107] usb 7-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 237.603036][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.616328][ T5949] usb 8-1: 0:2 : does not exist [ 237.643583][ T1107] usb 7-1: config 24 has 1 interface, different from the descriptor's value: 158 [ 237.673859][ T6074] device bridge_slave_1 entered promiscuous mode [ 237.700753][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.780056][ T6074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.843180][ T6074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.856869][ T1107] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 237.923015][ T1107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.977252][ T1107] usb 7-1: Product: syz [ 238.009934][ T1107] usb 7-1: Manufacturer: syz [ 238.035009][ T1107] usb 7-1: SerialNumber: syz [ 238.087117][ T4231] usb 8-1: USB disconnect, device number 8 [ 238.204217][ T6074] team0: Port device team_slave_0 added [ 238.258210][ T6074] team0: Port device team_slave_1 added [ 238.313818][ T5949] Bluetooth: hci3: command 0x041b tx timeout [ 239.714377][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.729883][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.780623][ T1107] usb 7-1: 0:1 : does not exist [ 239.807668][ T1107] usb 7-1: unit 80 not found! [ 239.818221][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.901757][ T1107] usb 7-1: USB disconnect, device number 6 [ 240.087753][ T6074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.227580][ T6151] db_root: cannot be changed: target drivers registered [ 240.235285][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.258114][ T6151] se_dev->se_dev_ptr already set for storage object [ 240.332680][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.365105][ T6151] filp_open(/var/target/alua/usb_gadget/1234567890abcdef+1/lun_0) for ALUA metadata failed [ 240.381104][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.606727][ T6074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.236412][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.247868][ T5949] Bluetooth: hci3: command 0x040f tx timeout [ 243.247161][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.773342][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.852069][ T6191] db_root: cannot be changed: target drivers registered [ 244.915263][ T6192] [ 244.924537][ T6192] ====================================================== [ 244.931555][ T6192] WARNING: possible circular locking dependency detected [ 244.938578][ T6192] syzkaller #0 Not tainted [ 244.942984][ T6192] ------------------------------------------------------ [ 244.950008][ T6192] syz.4.460/6192 is trying to acquire lock: [ 244.955904][ T6192] ffffffff8ceceff0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x638/0x980 [ 244.965670][ T6192] [ 244.965670][ T6192] but task is already holding lock: [ 244.973040][ T6192] ffff88805f7e7900 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: vfs_rmdir+0xe1/0x410 [ 244.982694][ T6192] [ 244.982694][ T6192] which lock already depends on the new lock. [ 244.982694][ T6192] [ 244.993101][ T6192] [ 244.993101][ T6192] the existing dependency chain (in reverse order) is: [ 245.002111][ T6192] [ 245.002111][ T6192] -> #2 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 245.010793][ T6192] down_write+0x38/0x60 [ 245.015469][ T6192] configfs_depend_item_unlocked+0x14f/0x430 [ 245.021971][ T6192] usbg_make_tpg+0x1f3/0x580 [ 245.027077][ T6192] target_fabric_make_tpg+0xa0/0x6d0 [ 245.032879][ T6192] configfs_mkdir+0x511/0x9e0 [ 245.038071][ T6192] vfs_mkdir+0x386/0x570 [ 245.042832][ T6192] do_mkdirat+0x1dd/0x5c0 [ 245.047673][ T6192] __x64_sys_mkdir+0x6a/0x80 [ 245.052780][ T6192] do_syscall_64+0x4c/0xa0 [ 245.057710][ T6192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.064125][ T6192] [ 245.064125][ T6192] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 245.071762][ T6192] __mutex_lock_common+0x1e5/0x2400 [ 245.077489][ T6192] mutex_lock_nested+0x17/0x20 [ 245.082771][ T6192] tcm_set_name+0x26/0x90 [ 245.087614][ T6192] function_make+0x195/0x350 [ 245.092734][ T6192] configfs_mkdir+0x511/0x9e0 [ 245.097940][ T6192] vfs_mkdir+0x386/0x570 [ 245.102710][ T6192] do_mkdirat+0x1dd/0x5c0 [ 245.107563][ T6192] __x64_sys_mkdir+0x6a/0x80 [ 245.112673][ T6192] do_syscall_64+0x4c/0xa0 [ 245.117608][ T6192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.124032][ T6192] [ 245.124032][ T6192] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 245.132293][ T6192] __lock_acquire+0x2c66/0x7b50 [ 245.137666][ T6192] lock_acquire+0x19e/0x400 [ 245.142685][ T6192] __mutex_lock_common+0x1e5/0x2400 [ 245.148401][ T6192] mutex_lock_nested+0x17/0x20 [ 245.153683][ T6192] configfs_rmdir+0x638/0x980 [ 245.158874][ T6192] vfs_rmdir+0x19d/0x410 [ 245.163648][ T6192] do_rmdir+0x27f/0x710 [ 245.168321][ T6192] __x64_sys_rmdir+0x45/0x50 [ 245.173443][ T6192] do_syscall_64+0x4c/0xa0 [ 245.178377][ T6192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.184805][ T6192] [ 245.184805][ T6192] other info that might help us debug this: [ 245.184805][ T6192] [ 245.195021][ T6192] Chain exists of: [ 245.195021][ T6192] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#23 [ 245.195021][ T6192] [ 245.209720][ T6192] Possible unsafe locking scenario: [ 245.209720][ T6192] [ 245.217178][ T6192] CPU0 CPU1 [ 245.222539][ T6192] ---- ---- [ 245.227892][ T6192] lock(&sb->s_type->i_mutex_key#23); [ 245.233346][ T6192] lock(&opts->dep_lock); [ 245.240290][ T6192] lock(&sb->s_type->i_mutex_key#23); [ 245.248269][ T6192] lock(gadget_subsys.su_mutex); [ 245.253287][ T6192] [ 245.253287][ T6192] *** DEADLOCK *** [ 245.253287][ T6192] [ 245.261423][ T6192] 3 locks held by syz.4.460/6192: [ 245.266438][ T6192] #0: ffff88801ddde460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 245.275666][ T6192] #1: ffff88805f66dfb0 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1b0/0x710 [ 245.286457][ T6192] #2: ffff88805f7e7900 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: vfs_rmdir+0xe1/0x410 [ 245.296549][ T6192] [ 245.296549][ T6192] stack backtrace: [ 245.302436][ T6192] CPU: 0 PID: 6192 Comm: syz.4.460 Not tainted syzkaller #0 [ 245.309710][ T6192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 245.319774][ T6192] Call Trace: [ 245.323051][ T6192] [ 245.325979][ T6192] dump_stack_lvl+0x188/0x250 [ 245.330671][ T6192] ? load_image+0x410/0x410 [ 245.335204][ T6192] ? show_regs_print_info+0x20/0x20 [ 245.340573][ T6192] ? print_circular_bug+0x12b/0x1a0 [ 245.345782][ T6192] check_noncircular+0x296/0x330 [ 245.350728][ T6192] ? add_chain_block+0x9b0/0x9b0 [ 245.355666][ T6192] ? lockdep_lock+0xf1/0x1f0 [ 245.360256][ T6192] ? __lock_acquire+0x2844/0x7b50 [ 245.365282][ T6192] ? mark_lock+0x94/0x320 [ 245.369610][ T6192] ? _find_first_zero_bit+0xd1/0xf0 [ 245.374808][ T6192] __lock_acquire+0x2c66/0x7b50 [ 245.379682][ T6192] ? __lock_acquire+0x13dc/0x7b50 [ 245.384707][ T6192] ? verify_lock_unused+0x140/0x140 [ 245.389914][ T6192] ? __lock_acquire+0x1305/0x7b50 [ 245.394945][ T6192] lock_acquire+0x19e/0x400 [ 245.399449][ T6192] ? configfs_rmdir+0x638/0x980 [ 245.404305][ T6192] ? __might_sleep+0xf0/0xf0 [ 245.408891][ T6192] ? read_lock_is_recursive+0x10/0x10 [ 245.414281][ T6192] __mutex_lock_common+0x1e5/0x2400 [ 245.419507][ T6192] ? configfs_rmdir+0x638/0x980 [ 245.424359][ T6192] ? configfs_rmdir+0x638/0x980 [ 245.429204][ T6192] ? __rwlock_init+0x140/0x140 [ 245.433963][ T6192] ? rcu_lock_release+0x5/0x20 [ 245.438726][ T6192] ? mutex_lock_io_nested+0x60/0x60 [ 245.443930][ T6192] ? _raw_spin_unlock+0x24/0x40 [ 245.448781][ T6192] mutex_lock_nested+0x17/0x20 [ 245.453541][ T6192] configfs_rmdir+0x638/0x980 [ 245.458217][ T6192] vfs_rmdir+0x19d/0x410 [ 245.462485][ T6192] do_rmdir+0x27f/0x710 [ 245.466635][ T6192] ? d_delete_notify+0x150/0x150 [ 245.471567][ T6192] ? getname_flags+0x1f9/0x4f0 [ 245.476326][ T6192] __x64_sys_rmdir+0x45/0x50 [ 245.480911][ T6192] do_syscall_64+0x4c/0xa0 [ 245.485322][ T6192] ? clear_bhb_loop+0x30/0x80 [ 245.490009][ T6192] ? clear_bhb_loop+0x30/0x80 [ 245.494697][ T6192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.500615][ T6192] RIP: 0033:0x7fe3bba42e99 [ 245.505027][ T6192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.524627][ T6192] RSP: 002b:00007fe3b9c9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 245.533034][ T6192] RAX: ffffffffffffffda RBX: 00007fe3bbccafa0 RCX: 00007fe3bba42e99 [ 245.541026][ T6192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 245.549009][ T6192] RBP: 00007fe3bbad8eaf R08: 0000000000000000 R09: 0000000000000000 [ 245.556976][ T6192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.564956][ T6192] R13: 00007fe3bbccb038 R14: 00007fe3bbccafa0 R15: 00007ffe4f812158 [ 245.572932][ T6192] [ 245.580474][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 245.595884][ T6074] device hsr_slave_0 entered promiscuous mode [ 245.626934][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.651280][ T6074] device hsr_slave_1 entered promiscuous mode [ 245.697470][ T6074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.737362][ T6074] Cannot create hsr debugfs directory [ 245.833404][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.845689][ T154] device hsr_slave_0 left promiscuous mode [ 245.865342][ T154] device hsr_slave_1 left promiscuous mode [ 245.886281][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.913722][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.947566][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.968282][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.996096][ T154] device bridge_slave_1 left promiscuous mode [ 246.002321][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.012554][ T154] device bridge_slave_0 left promiscuous mode [ 246.021372][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.034178][ T154] device veth1_macvtap left promiscuous mode [ 246.040226][ T154] device veth0_macvtap left promiscuous mode [ 246.048275][ T154] device veth1_vlan left promiscuous mode [ 246.054867][ T154] device veth0_vlan left promiscuous mode [ 246.170600][ T154] team0 (unregistering): Port device team_slave_1 removed [ 246.181557][ T154] team0 (unregistering): Port device team_slave_0 removed [ 246.195320][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.209970][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.261320][ T154] bond0 (unregistering): Released all slaves [ 246.507242][ T6074] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 246.549955][ T6074] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 246.587479][ T6074] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 246.632031][ T6074] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 246.817718][ T6074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.865432][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.875870][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.908831][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.944274][ T6074] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.982222][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.016082][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.051700][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.058827][ T4257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.117000][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.151197][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.192201][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.232044][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.239135][ T4257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.299854][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.339279][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.378734][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.424728][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.461428][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.507243][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.558037][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.591217][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.622179][ T6074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.659391][ T6074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.685165][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.700687][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.721627][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.913743][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.930384][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.946949][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.968671][ T6074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.180654][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.197072][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.230426][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.247623][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.266039][ T6074] device veth0_vlan entered promiscuous mode [ 248.273765][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.291369][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.311563][ T6074] device veth1_vlan entered promiscuous mode [ 248.346752][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.362423][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 248.380393][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.401413][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.422247][ T6074] device veth0_macvtap entered promiscuous mode [ 248.441155][ T6074] device veth1_macvtap entered promiscuous mode [ 248.474980][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.498587][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.521075][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.546529][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.570012][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.581197][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.592743][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.604919][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.616475][ T6074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.633287][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.651650][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.668199][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.687068][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.705942][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.730622][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.751124][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.773332][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.796966][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.821360][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.847740][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.868338][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.899950][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.925978][ T6074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.946960][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.957410][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.976123][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.999807][ T6074] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.018717][ T6074] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.040180][ T6074] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.050631][ T6074] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.107247][ T6074] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 249.148721][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.161228][ T6074] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 249.175719][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.196890][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 249.226226][ T4447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.242694][ T4447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.262768][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 249.834118][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.000563][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.033458][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.673022][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.075491][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.113495][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.157348][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.730094][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog