last executing test programs: 4.289322645s ago: executing program 0 (id=65): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.104904439s ago: executing program 2 (id=70): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r4, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0xfb, 0x2, 0x2, 0x2, @remote, @mcast1, 0x7, 0x8, 0x0, 0x9}}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r4, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x88}, 0x4000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc0d5}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.007385502s ago: executing program 3 (id=71): r0 = syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000004080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x414b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x7, 0x0, 0x10, {0x8, 0xb, 0x0, 0x0, 0x1, 0x7, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3f9, 0x4, 0x9, 0x32}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xa, 0x3, {0x8, 0x25, 0x1, 0x80, 0x39, 0xc, 0xfff7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x5, 0x0, {0x8, 0x25, 0x1, 0x1, 0x30, 0x9, 0x9}}}}}}}}]}}, &(0x7f00000045c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f0000004780)={0x14, 0x0, &(0x7f00000046c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000005500)={0x2c, 0x0, &(0x7f0000005380)={0x0, 0x3, 0x18, @string={0x18, 0x3, "e8fff315316a7f46f844ad29b2069319fe2848b6593b"}}, 0x0, 0x0, 0x0}, 0x0) 3.903840004s ago: executing program 2 (id=74): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) 3.332679039s ago: executing program 1 (id=82): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x10000014}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8800) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x7, 0x6, 0x2, 0x4}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r4 = socket(0x11, 0x2, 0x10001) socket(0x1d, 0x800, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x1, [{0xfffffff6, 0x2}]}}) 3.24060607s ago: executing program 1 (id=83): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000440)={0x0, @sdr={0x34565559, 0x8}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000304280100000000080000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c0002800600", @ANYRES32=r10, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r11 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r11, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f903, 0x0, '\x00', @string=0x0}}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r12 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x50000, 0x14000}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r12, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000003c0)="66b9b90b00000f320f72d6920f01c40f20d86635200000000f22d80f00900000f30f51a8802c9a070042000f009200800f01cbddcd", 0x35}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x21, 0xc, 0x0, 0x75, 0x81, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xff, 0x0, '\x00', 0x7}) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.465363049s ago: executing program 0 (id=85): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength=', 0x34) 2.426314241s ago: executing program 0 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.364485692s ago: executing program 1 (id=87): writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000800001f000006060400180000008cdb", 0x38}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.291705684s ago: executing program 4 (id=88): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.217255026s ago: executing program 0 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) close(r0) 2.009680391s ago: executing program 0 (id=90): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0x6, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r9, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000006125ce882cbf400930bf4533f", 0x20}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0", 0xe}], 0x2}, 0x8000) 1.886815023s ago: executing program 4 (id=91): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @remote, 0x5}, 0x1c) getpeername(r0, 0x0, 0x0) 1.845580395s ago: executing program 1 (id=92): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f00000000c0)={0x11, {{0x29, 0x0, 0x3000000, @empty, 0x3}}}, 0x88) 1.751159497s ago: executing program 2 (id=93): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f6164b11d7cf302ca932e56a7ed20656372797074667320757365723a7d20"], 0x2b, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000480)="bc5986ffa62b18f9df15470243f89d053305c679f06682db201f82c9db3a36d4e4b7257ab2065d3fe42bacf4aefd5bdd8bbc854b4fe3678a5056d23200eb1427ccb25c33cd81df1788b890e99a6d5271bac3626a33c93f537aa584", 0x5b, 0xfffffffffffffffe) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x80000001, 0x511640) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffa, 0x82ab01) socket$inet_tcp(0x2, 0x1, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0xff0f) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0xd18e, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) read(r1, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046}) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000280)=""/74, 0x4a}], 0x1) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20080014}, 0x4004000) pselect6(0x40, &(0x7f0000000080)={0x10, 0x0, 0x6, 0x9, 0xa48f, 0x0, 0x80000000}, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x40, &(0x7f0000000540)={[{@redirect_dir_off}, {@userxattr}]}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 1.665249259s ago: executing program 1 (id=94): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.641717569s ago: executing program 3 (id=95): socket$nl_rdma(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180017000000000029000000370000008900000000000000e6a98b4396d3332853eb463fc990373f8ab8dfd18b84d0df6de19a02ae831122fced2786dfd2e15b7a8e541693ed71764aabb03458995868f2f73b77b76f24aeae91191cc1ac1d55e779fd2e3ccb1148e2b5738e98fdebed2c"], 0x18}}], 0x1, 0x400c0c4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="adea08c7beef905d069c564c90c2000000", 0x11) socket$l2tp6(0xa, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) getpeername$l2tp6(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000040)={@empty, @broadcast}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000200), 0x12) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b787c3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x20000840) 1.467341014s ago: executing program 0 (id=96): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x6cb, 0x73f6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x18, "", [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xf, 0xf3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)={0x20, 0xa, 0x93, {0x93, 0xe, "110041c9def12e19019611ad530b5d668b376219b1a01e1cb99264af407df73b2fc9f61499d80800000000000000e59c513a566b7b35fae3f8e35b537ef12c5756c0f00cc8bd2eb000249c178500935a0e71ca2a1e77f5f000182c965990421fe2081b40437d84c63ae71eab647414dc57dbea43f658515c932258699e130bb83954a25f9cd9499679db0275b18fbff57b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.308561568s ago: executing program 3 (id=97): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000440)={0x0, @sdr={0x34565559, 0x8}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000304280100000000080000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c0002800600", @ANYRES32=r10, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r11 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r11, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f903, 0x0, '\x00', @string=0x0}}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r12 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x50000, 0x14000}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r12, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000003c0)="66b9b90b00000f320f72d6920f01c40f20d86635200000000f22d80f00900000f30f51a8802c9a070042000f009200800f01cbddcd", 0x35}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x21, 0xc, 0x0, 0x75, 0x81, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xff, 0x0, '\x00', 0x7}) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 915.246298ms ago: executing program 4 (id=98): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9", 0x40, 0x840, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaac7533137cd4e1eaaaaaaaaaaaa"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000580)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 773.921681ms ago: executing program 2 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write$9p(r0, &(0x7f0000000240)="64a2", 0x2) 647.176214ms ago: executing program 4 (id=100): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000080)={0x3, 0x8, {0x56, 0x8, 0x3, {0x7}, {0x9, 0x5}, @ramp={0x5, 0x7ff, {0xfaec, 0x5, 0x9c0f, 0x3}}}, {0x57, 0x1, 0x7, {0x80, 0x6}, {0x1ff, 0x6}, @const={0x6, {0xdf42, 0x5, 0x1, 0x3}}}}) 551.293176ms ago: executing program 2 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 497.192028ms ago: executing program 4 (id=102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x6}, 0x1, 0x0, 0x0, 0x10}, 0x4040) 402.22348ms ago: executing program 3 (id=103): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x89Z7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\x06\x00\x00\x00\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xfffd) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) 367.342381ms ago: executing program 4 (id=104): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000300)={r0, &(0x7f0000000180)='-\x00', 0x200, &(0x7f0000000240)={@_ha_fsid={[0x9, 0xa9b0]}, {0x8000, 0x0, 0x3, 0xef}}, 0x4, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x8}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) sendmsg$nl_generic(r2, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="84000000230000022dbd7000fedbdf250300000014007000fc0000000000000000000000000000001000338004004e8008000500", @ANYRES32=r3, @ANYBLOB], 0x84}}, 0x40040) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x2}, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x3}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) close(r0) socket(0x28, 0x5, 0x0) unshare(0x2a060400) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) ppoll(&(0x7f0000000140)=[{r4, 0x82d2}, {r4, 0xc122}], 0x2, 0x0, 0x0, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000cc0)=ANY=[], 0x590) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x6, 0x0) close(r9) write(r7, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r10, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_mptcp_buf(r11, 0x11c, 0x4, &(0x7f0000001280)=""/247, &(0x7f0000000200)=0xf7) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x200c0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) 365.882911ms ago: executing program 1 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006f7ffffffffffffff24ac14142600e5ffffffffffff0100"], 0x70}, 0x1, 0x7}, 0x0) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) 227.822294ms ago: executing program 3 (id=106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0x6, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r9, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000006125ce882cbf400930bf4533f", 0x20}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0", 0xe}], 0x2}, 0x8000) 227.324255ms ago: executing program 2 (id=107): socket$nl_rdma(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180017000000000029000000370000008900000000000000e6a98b4396d3332853eb463fc990373f8ab8dfd18b84d0df6de19a02ae831122fced2786dfd2e15b7a8e541693ed71764aabb03458995868f2f73b77b76f24aeae91191cc1ac1d55e779fd2e3ccb1148e2b5738e98fdebed2c"], 0x18}}], 0x1, 0x400c0c4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="adea08c7beef905d069c564c90c2000000", 0x11) socket$l2tp6(0xa, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) getpeername$l2tp6(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000040)={@empty, @broadcast}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000200), 0x12) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b787c3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x20000840) 0s ago: executing program 3 (id=108): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x85, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0xf, 0xd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x20, 0x5, 0x28, {0x28, 0x10, "c26313852642792c3cbdeace918d0fb74237cc0044b72fb0688881ce2a52973661a4080c5544"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. [ 66.202825][ T4174] cgroup: Unknown subsys name 'net' [ 66.342514][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.836068][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.666756][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 69.694626][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 69.741033][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 69.803695][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 69.820934][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 69.858653][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.866680][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.875927][ T4192] device bridge_slave_0 entered promiscuous mode [ 69.900249][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.907649][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.915871][ T4190] device bridge_slave_0 entered promiscuous mode [ 69.930047][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.937370][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.945154][ T4192] device bridge_slave_1 entered promiscuous mode [ 69.963402][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.970764][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.979320][ T4190] device bridge_slave_1 entered promiscuous mode [ 70.037246][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.044451][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.052992][ T4193] device bridge_slave_0 entered promiscuous mode [ 70.073749][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.089519][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.100994][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.110356][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.117613][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.125424][ T4193] device bridge_slave_1 entered promiscuous mode [ 70.138765][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.206695][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.224843][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.233086][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.241822][ T4199] device bridge_slave_0 entered promiscuous mode [ 70.252429][ T4190] team0: Port device team_slave_0 added [ 70.258799][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.266361][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.274609][ T4187] device bridge_slave_0 entered promiscuous mode [ 70.285058][ T4192] team0: Port device team_slave_0 added [ 70.292968][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.302647][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.309824][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.318247][ T4199] device bridge_slave_1 entered promiscuous mode [ 70.326745][ T4190] team0: Port device team_slave_1 added [ 70.332639][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.339985][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.348181][ T4187] device bridge_slave_1 entered promiscuous mode [ 70.356637][ T4192] team0: Port device team_slave_1 added [ 70.403546][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.435009][ T4193] team0: Port device team_slave_0 added [ 70.450278][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.462512][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.473311][ T4193] team0: Port device team_slave_1 added [ 70.487970][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.494941][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.521399][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.534877][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.542093][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.569005][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.580850][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.588004][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.614124][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.633307][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.661497][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.668844][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.695026][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.714086][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.721185][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.747440][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.765722][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.772704][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.804818][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.836974][ T4187] team0: Port device team_slave_0 added [ 70.845856][ T4199] team0: Port device team_slave_0 added [ 70.880442][ T4187] team0: Port device team_slave_1 added [ 70.894424][ T4199] team0: Port device team_slave_1 added [ 70.905855][ T4192] device hsr_slave_0 entered promiscuous mode [ 70.913110][ T4192] device hsr_slave_1 entered promiscuous mode [ 70.938683][ T4190] device hsr_slave_0 entered promiscuous mode [ 70.946456][ T4190] device hsr_slave_1 entered promiscuous mode [ 70.953157][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.961848][ T4190] Cannot create hsr debugfs directory [ 70.991037][ T4193] device hsr_slave_0 entered promiscuous mode [ 70.997938][ T4193] device hsr_slave_1 entered promiscuous mode [ 71.005052][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.012766][ T4193] Cannot create hsr debugfs directory [ 71.026770][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.033756][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.059819][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.078999][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.086237][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.112480][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.124510][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.131705][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.158217][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.170816][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.177848][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.204179][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.296824][ T4199] device hsr_slave_0 entered promiscuous mode [ 71.303549][ T4199] device hsr_slave_1 entered promiscuous mode [ 71.310417][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.318083][ T4199] Cannot create hsr debugfs directory [ 71.337111][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 71.343701][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 71.343848][ T4195] Bluetooth: hci4: command 0x0409 tx timeout [ 71.351539][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 71.362497][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 71.423317][ T4187] device hsr_slave_0 entered promiscuous mode [ 71.433058][ T4187] device hsr_slave_1 entered promiscuous mode [ 71.433086][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.446073][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.455101][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.462915][ T4187] Cannot create hsr debugfs directory [ 71.698359][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.711217][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.721379][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.730682][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.787409][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.803378][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.814143][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.837928][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.914574][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.932250][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.952402][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.967382][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.986498][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.029965][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.039960][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.051506][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.062097][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.075537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.086383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.123974][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.159147][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.191635][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.201102][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.211188][ T1273] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.218645][ T1273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.228175][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.238929][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.248236][ T1273] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.255395][ T1273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.263863][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.281612][ T4199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.294831][ T4199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.329475][ T4199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.342421][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.349555][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.360417][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.369875][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.377998][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.387210][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.397296][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.406194][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.414792][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.433177][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.445920][ T4199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.468579][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.481020][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.489970][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.499534][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.508580][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.517640][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.526901][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.535443][ T1273] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.542530][ T1273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.550909][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.560557][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.570037][ T1273] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.577174][ T1273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.584995][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.594255][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.606599][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.635850][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.645104][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.655358][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.668680][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.677846][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.687364][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.702175][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.746691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.759070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.767975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.778345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.793076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.801164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.815347][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.829959][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.855466][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.882666][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.895181][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.910686][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.922281][ T1273] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.929430][ T1273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.950179][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.977087][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.985418][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.001016][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.010926][ T1273] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.018072][ T1273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.055706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.063245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.073032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.082476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.091554][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.098722][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.113534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.122509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.132540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.142349][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.149493][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.164329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.173681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.186505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.195231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.204644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.221142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.230793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.248364][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.274132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.283930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.293306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.303829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.313130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.322062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.333698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.344661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.364784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.376142][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.384807][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.400824][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.415989][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 73.422602][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 73.427582][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 73.434651][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 73.434925][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 73.459875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.468945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.478353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.486473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.496556][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.509805][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.521332][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.538018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.548882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.563471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.573922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.598194][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.634652][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.645061][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.678223][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.699648][ T4192] device veth0_vlan entered promiscuous mode [ 73.720511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.730131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.739963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.752256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.791153][ T4192] device veth1_vlan entered promiscuous mode [ 73.806737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.814619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.827940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.838584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.847569][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.854643][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.862867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.872209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.881327][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.888463][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.904641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.912615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.920518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.938162][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.949378][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.959329][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.970158][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.989270][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.004895][ T4190] device veth0_vlan entered promiscuous mode [ 74.016088][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.024875][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.061809][ T4190] device veth1_vlan entered promiscuous mode [ 74.072219][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.082191][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.099820][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.108765][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.117803][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.126721][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.135052][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.145305][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.160469][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.169215][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.189162][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.218838][ T4190] device veth0_macvtap entered promiscuous mode [ 74.227041][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.237828][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.247118][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.256164][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.264695][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.273293][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.282668][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.310597][ T4190] device veth1_macvtap entered promiscuous mode [ 74.326726][ T4192] device veth0_macvtap entered promiscuous mode [ 74.346704][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.354996][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.369117][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.381905][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.393848][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.424574][ T4192] device veth1_macvtap entered promiscuous mode [ 74.435137][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.443606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.461410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.472632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.487069][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.497499][ T4187] device veth0_vlan entered promiscuous mode [ 74.510220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.526802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.546165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.559844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.581663][ T4187] device veth1_vlan entered promiscuous mode [ 74.591645][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.602347][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.612497][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.621968][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.630765][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.659323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.669636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.680535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.698711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.710980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.742780][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.753921][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.768283][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.808969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.818391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.827593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.835047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.844487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.853262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.863487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.871837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.883396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.892805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.913556][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.923166][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.935255][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.948977][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.968469][ T4187] device veth0_macvtap entered promiscuous mode [ 74.981795][ T4187] device veth1_macvtap entered promiscuous mode [ 75.000583][ T4193] device veth0_vlan entered promiscuous mode [ 75.013161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.023863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.035063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.051048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.064358][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.079971][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.089218][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.098857][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.160412][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.175405][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.193107][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.195695][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.218662][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.235202][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.253139][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.264427][ T4193] device veth1_vlan entered promiscuous mode [ 75.278553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.289019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.298875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.307903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.325242][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.337450][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.349019][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.362134][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.373811][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.392876][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.401999][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.411363][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.421337][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.439039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.448228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.457535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.492695][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.497180][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 75.506674][ T4176] Bluetooth: hci1: command 0x040f tx timeout [ 75.519844][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.520326][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 75.540446][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 75.548035][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 75.584242][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.593751][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.603258][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.632515][ T4193] device veth0_macvtap entered promiscuous mode [ 75.708474][ T4193] device veth1_macvtap entered promiscuous mode [ 75.727554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.741659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.770608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.782728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.836927][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.841205][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.855966][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.864398][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.875070][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.892023][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.904027][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.920435][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.934725][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.952721][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.961123][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.974364][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.983960][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.995041][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.006581][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.015795][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.028190][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.039073][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.049810][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.060907][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.071877][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.083246][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.094556][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.103632][ T4236] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 76.109283][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.121544][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.131758][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.158233][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.167654][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.176797][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.185069][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.193963][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.202767][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.224069][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.230778][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.242310][ T4199] device veth0_vlan entered promiscuous mode [ 76.250894][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.259646][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.275287][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.283326][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.299919][ T4199] device veth1_vlan entered promiscuous mode [ 76.462295][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.476566][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 76.493834][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.495832][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.517281][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.527174][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.532443][ T4236] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 76.561063][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.571723][ T4199] device veth0_macvtap entered promiscuous mode [ 76.597448][ T4236] usb 2-1: config 0 descriptor?? [ 76.625055][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.638189][ T4199] device veth1_macvtap entered promiscuous mode [ 76.665068][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.681617][ T4278] device batadv1 entered promiscuous mode [ 76.747505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.759805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.769018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.800785][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.812789][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.823355][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.835072][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.853433][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.864679][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.880676][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.891709][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.909961][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.922625][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.931641][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.941787][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.943111][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.962903][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.973453][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.973492][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.984134][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.984147][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.984163][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.023261][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.033944][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.046220][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.056506][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.081995][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.102585][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.120256][ T4236] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 77.134513][ T4236] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 77.148323][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.172256][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.181607][ T4236] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 77.188623][ T4236] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 77.201151][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.210541][ T4236] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 77.223299][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.234894][ T4236] elan 0003:04F3:0755.0001: failed to start in urb: -90 [ 77.254407][ T4236] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 77.299713][ T4296] Zero length message leads to an empty skb [ 77.466136][ T13] usb 2-1: USB disconnect, device number 2 [ 77.489079][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.514740][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.552411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.577586][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 77.586030][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 77.587431][ T4308] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 77.646737][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 77.653900][ T4298] fido_id[4298]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 77.679763][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 77.688705][ T4230] Bluetooth: hci1: command 0x0419 tx timeout [ 77.757467][ T1273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.802611][ T1273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.844051][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.130920][ T4334] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10'. [ 78.208973][ T4327] device syzkaller0 entered promiscuous mode [ 78.530893][ T4353] device batadv1 entered promiscuous mode [ 78.623427][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.983712][ T4377] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.004134][ T13] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 79.027026][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.058521][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.087946][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.108827][ T4387] netlink: 'syz.4.21': attribute type 1 has an invalid length. [ 79.145736][ T13] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.165736][ T4377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 79.187842][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.206816][ T4377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21'. [ 79.232963][ T13] usb 4-1: config 0 descriptor?? [ 79.297013][ T26] audit: type=1326 audit(1785927378.920:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4376 comm="syz.4.21" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5229bd9019 code=0x0 [ 79.670059][ T4410] device syzkaller0 entered promiscuous mode [ 79.717971][ T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 79.742010][ T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 79.760404][ T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 79.775034][ T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 79.798018][ T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 79.805508][ T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 79.835736][ T1336] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.861507][ T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 79.923994][ T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 79.984113][ T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.009167][ T4427] device batadv1 entered promiscuous mode [ 80.027821][ T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.036602][ T4418] device syzkaller0 entered promiscuous mode [ 80.055117][ T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.087879][ T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.095338][ T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.110477][ T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.144773][ T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 80.171379][ T13] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 80.205885][ T1336] usb 3-1: config 1 has an invalid interface number: 15 but max is 1 [ 80.214026][ T1336] usb 3-1: config 1 has an invalid interface number: 6 but max is 1 [ 80.243553][ T13] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 80.291201][ T1336] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.351659][ T13] usb 4-1: USB disconnect, device number 2 [ 80.379090][ T1336] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 2 [ 80.429692][ T1336] usb 3-1: config 1 has no interface number 2 [ 80.489154][ T4443] fido_id[4443]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 80.491081][ T1336] usb 3-1: config 1 has no interface number 3 [ 80.585727][ T1336] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.697291][ T1336] usb 3-1: config 1 interface 15 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 80.742517][ T1336] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 80.800331][ T1336] usb 3-1: config 1 interface 15 has no altsetting 0 [ 80.821804][ T1336] usb 3-1: config 1 interface 1 has no altsetting 0 [ 81.026038][ T1336] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.070049][ T1336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.105126][ T1336] usb 3-1: Product: syz [ 81.119281][ T1336] usb 3-1: Manufacturer: syz [ 81.134178][ T1336] usb 3-1: SerialNumber: syz [ 81.232733][ T1336] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 81.250587][ T1336] cdc_ncm 3-1:1.0: bind() failure [ 81.278859][ T1336] cdc_ncm 3-1:1.6: CDC Union missing and no IAD found [ 81.297382][ T1336] cdc_ncm 3-1:1.6: bind() failure [ 81.361470][ T4477] netlink: 'syz.1.39': attribute type 1 has an invalid length. [ 81.424853][ T4477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 81.500689][ T4477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.39'. [ 81.518455][ T4485] device syzkaller0 entered promiscuous mode [ 81.525242][ T26] audit: type=1326 audit(1785927381.140:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4475 comm="syz.1.39" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a0b61a019 code=0x0 [ 81.585864][ T7] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 81.812586][ T4498] device syzkaller0 entered promiscuous mode [ 81.894727][ T4501] device syzkaller0 entered promiscuous mode [ 81.955843][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.970586][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 82.011351][ T7] usb 4-1: config 1 has no interface number 0 [ 82.045065][ T7] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 82.068444][ T7] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 82.081054][ T7] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 82.094158][ T4510] netlink: 32 bytes leftover after parsing attributes in process `syz.0.45'. [ 82.246726][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.265708][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.294531][ T7] usb 4-1: Product: syz [ 82.325836][ T7] usb 4-1: Manufacturer: syz [ 82.335375][ T7] usb 4-1: SerialNumber: syz [ 82.376164][ T4476] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 82.763361][ T4547] device syzkaller0 entered promiscuous mode [ 82.818531][ T4476] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 82.870529][ T4551] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 82.927293][ T4551] can: request_module (can-proto-0) failed. [ 83.032894][ T4554] netlink: 'syz.4.57': attribute type 1 has an invalid length. [ 83.060603][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.57'. [ 83.072349][ T4554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.57'. [ 83.072841][ T1336] usb 3-1: USB disconnect, device number 2 [ 83.087593][ T7] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 83.093636][ T7] cdc_ncm 4-1:1.1: bind() failure [ 83.097123][ T4311] tipc: Subscription rejected, illegal request [ 83.120898][ T7] usb 4-1: USB disconnect, device number 3 [ 83.135325][ T26] audit: type=1326 audit(1785927382.760:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4553 comm="syz.4.57" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5229bd9019 code=0x0 [ 83.627008][ T4588] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 83.651312][ T4591] netlink: 277 bytes leftover after parsing attributes in process `syz.2.67'. [ 83.739725][ T4594] can: request_module (can-proto-0) failed. [ 83.817204][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.075830][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 84.081120][ T4236] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 84.196349][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.207633][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.222347][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 84.255028][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.271821][ T4233] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.292933][ T7] usb 1-1: config 0 descriptor?? [ 84.352172][ T7] hub 1-1:0.0: USB hub found [ 84.494767][ T4633] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 84.499315][ T4236] usb 4-1: unable to get BOS descriptor or descriptor too short [ 84.537992][ T4633] can: request_module (can-proto-0) failed. [ 84.550407][ T4236] usb 4-1: not running at top speed; connect to a high speed hub [ 84.575853][ T7] hub 1-1:0.0: 1 port detected [ 84.623801][ T4636] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 84.634386][ T4636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 84.644046][ T4236] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 84.689687][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.694152][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d034c00: rx timeout, send abort [ 84.700754][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.720234][ T4233] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.733466][ T4233] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.743334][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.753351][ T26] audit: type=1326 audit(1785927384.370:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.1.83" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a0b61a019 code=0x0 [ 84.767993][ T4233] usb 3-1: config 0 descriptor?? [ 84.835783][ T7] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 84.843094][ T4236] usb 4-1: New USB device found, idVendor=0e41, idProduct=414b, bcdDevice= 0.40 [ 84.852660][ T7] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 84.867678][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.879350][ T4236] usb 4-1: Product: syz [ 84.886765][ T4236] usb 4-1: Manufacturer: syz [ 84.891486][ T4236] usb 4-1: SerialNumber: syz [ 84.985883][ T7] usbhid 1-1:0.0: can't add hid device: -71 [ 84.991918][ T7] usbhid: probe of 1-1:0.0 failed with error -71 [ 85.036603][ T7] usb 1-1: USB disconnect, device number 2 [ 85.194657][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d03fc00: rx timeout, send abort [ 85.210593][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d034c00: abort rx timeout. Force session deactivation [ 85.257963][ T4233] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xe [ 85.266422][ T4233] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 85.274525][ T4233] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 85.293550][ T4233] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 85.412334][ T4650] device syzkaller0 entered promiscuous mode [ 85.460510][ T7] usb 3-1: USB disconnect, device number 3 [ 85.615988][ T4236] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 85.702996][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d03fc00: abort rx timeout. Force session deactivation [ 85.718386][ T4236] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 85.736271][ T4236] snd_usb_podhd 4-1:1.0: Line 6 POD X3 LIVE found [ 85.748016][ T4236] usb 4-1: selecting invalid altsetting 1 [ 85.753880][ T4236] snd_usb_podhd 4-1:1.0: set_interface failed [ 85.760780][ T4236] snd_usb_podhd 4-1:1.0: Line 6 POD X3 LIVE now disconnected [ 85.770870][ T4236] snd_usb_podhd: probe of 4-1:1.0 failed with error -22 [ 85.789752][ T4236] usb 4-1: USB disconnect, device number 4 [ 86.018415][ T4654] udevd[4654]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.109065][ T4674] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid [ 86.282796][ T4683] device batadv1 entered promiscuous mode [ 86.393688][ T4678] ======================================================= [ 86.393688][ T4678] WARNING: The mand mount option has been deprecated and [ 86.393688][ T4678] and is ignored by this kernel. Remove the mand [ 86.393688][ T4678] option from the mount to silence this warning. [ 86.393688][ T4678] ======================================================= [ 86.496987][ T4678] overlayfs: conflicting options: userxattr,redirect_dir=off [ 86.602259][ T4690] netlink: 'syz.3.97': attribute type 1 has an invalid length. [ 86.622959][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 86.645705][ T4236] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 86.697070][ T26] audit: type=1326 audit(1785927386.320:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4689 comm="syz.3.97" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc51b638019 code=0x0 [ 86.780541][ T1110] cfg80211: failed to load regulatory.db [ 87.005939][ T4236] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 87.041451][ T4236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 87.065302][ T4236] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 87.103777][ T4236] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 87.123308][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.145433][ T4236] usb 1-1: config 0 descriptor?? [ 87.515516][ T4710] dummy_hcd dummy_hcd.0: remove, state 1 [ 87.529780][ T4710] usb usb1: USB disconnect, device number 1 [ 87.628791][ T4236] itetech 0003:06CB:73F6.0004: item fetching failed at offset 5/6 [ 87.646294][ T4236] itetech: probe of 0003:06CB:73F6.0004 failed with error -22 [ 87.668520][ T4717] device batadv1 entered promiscuous mode [ 87.676407][ T4236] usb 1-1: USB disconnect, device number 3 [ 87.750082][ T4710] dummy_hcd dummy_hcd.0: stopped [ 87.755484][ T4710] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 87.835405][ T4686] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 87.847272][ T4686] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 87.855732][ T4686] CPU: 0 PID: 4686 Comm: syz.0.96 Not tainted syzkaller #0 [ 87.862964][ T4686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.873067][ T4686] RIP: 0010:set_link_state+0x27/0x11d0 [ 87.878576][ T4686] Code: ff ff 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 50 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 60 88 42 fb 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 0b ab 87 fb 4d 8b 26 4c 89 74 24 10 [ 87.898228][ T4686] RSP: 0018:ffffc90003a87c58 EFLAGS: 00010046 [ 87.904330][ T4686] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88801a1c1dc0 [ 87.912336][ T4686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.920652][ T4686] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 87.928660][ T4686] R10: dffffc0000000000 R11: fffff52000750f78 R12: 0000000000000a06 [ 87.936842][ T4686] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.944856][ T4686] FS: 0000555587322500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 87.953828][ T4686] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.960446][ T4686] CR2: 000000110c437e66 CR3: 000000005c6d1000 CR4: 00000000003506f0 [ 87.968448][ T4686] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.976427][ T4686] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.984417][ T4686] Call Trace: [ 87.987726][ T4686] [ 87.990703][ T4686] ? lock_chain_count+0x20/0x20 [ 87.995585][ T4686] dummy_pullup+0xbd/0x120 [ 88.000073][ T4686] ? dummy_set_selfpowered+0x150/0x150 [ 88.005560][ T4686] usb_gadget_disconnect+0xd0/0x3a0 [ 88.010807][ T4686] usb_gadget_remove_driver+0x4a/0x350 [ 88.016283][ T4686] usb_gadget_unregister_driver+0x15d/0x4c0 [ 88.022301][ T4686] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 88.028295][ T4686] raw_release+0xd6/0x260 [ 88.032634][ T4686] ? raw_open+0x510/0x510 [ 88.036980][ T4686] __fput+0x212/0x8c0 [ 88.041000][ T4686] task_work_run+0x125/0x1a0 [ 88.045615][ T4686] exit_to_user_mode_loop+0x10f/0x130 [ 88.051026][ T4686] exit_to_user_mode_prepare+0xee/0x180 [ 88.056609][ T4686] syscall_exit_to_user_mode+0x16/0x40 [ 88.062081][ T4686] do_syscall_64+0x58/0xa0 [ 88.066507][ T4686] ? clear_bhb_loop+0x30/0x80 [ 88.071200][ T4686] ? clear_bhb_loop+0x30/0x80 [ 88.075899][ T4686] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.081805][ T4686] RIP: 0033:0x7f20c1d94019 [ 88.086231][ T4686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.105865][ T4686] RSP: 002b:00007ffc3e568658 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 88.114320][ T4686] RAX: 0000000000000000 RBX: 00007ffc3e568740 RCX: 00007f20c1d94019 [ 88.122335][ T4686] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 88.130320][ T4686] RBP: 000000000001512c R08: 0000000000000001 R09: 0000000000000000 [ 88.138304][ T4686] R10: 0000001b31620000 R11: 0000000000000246 R12: 00007ffc3e568780 [ 88.146286][ T4686] R13: 00007f20c201bfac R14: 000000000001575c R15: 00007f20c201bfa0 [ 88.154272][ T4686] [ 88.157489][ T4686] Modules linked in: [ 88.161413][ T4686] ---[ end trace 4d44e951045f9b83 ]--- [ 88.166874][ T4686] RIP: 0010:set_link_state+0x27/0x11d0 [ 88.172386][ T4686] Code: ff ff 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 50 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 60 88 42 fb 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 0b ab 87 fb 4d 8b 26 4c 89 74 24 10 [ 88.192087][ T4686] RSP: 0018:ffffc90003a87c58 EFLAGS: 00010046 [ 88.198168][ T4686] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88801a1c1dc0 [ 88.206158][ T4686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.214148][ T4686] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 88.222137][ T4686] R10: dffffc0000000000 R11: fffff52000750f78 R12: 0000000000000a06 [ 88.230134][ T4686] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.238137][ T4686] FS: 0000555587322500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 88.247084][ T4686] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.253710][ T4686] CR2: 000000110c437e66 CR3: 000000005c6d1000 CR4: 00000000003506f0 [ 88.261688][ T4686] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.269661][ T4686] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.277653][ T4686] Kernel panic - not syncing: Fatal exception [ 88.283941][ T4686] Kernel Offset: disabled [ 88.288282][ T4686] Rebooting in 86400 seconds..