last executing test programs: 15.398654142s ago: executing program 2 (id=148): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e20, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x2, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x200000, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) 12.963002359s ago: executing program 2 (id=155): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) getpeername(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x5f501}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 12.691343653s ago: executing program 2 (id=157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r3, 0x0, 0x0, 0x0}, 0x30) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xf5}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f0000000600)=""/117, 0x73}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}}], 0x2, 0x10, 0x0) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2], 0x50}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, 0x0, &(0x7f0000000b00)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)=ANY=[], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) 12.465680387s ago: executing program 2 (id=158): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) open$dir(&(0x7f0000000080)='./file0\x00', 0x220000, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r0, 0x1000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 6.387247241s ago: executing program 0 (id=177): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0xffffffffffffffff) syz_io_uring_setup(0x4169, &(0x7f00000003c0)={0x0, 0xd490, 0x10100, 0x1}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x44c2, 0x0, 0x2, 0xfffffffd}, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2a) 6.181173504s ago: executing program 0 (id=178): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@ccm_128={{0x304}, "40e4c6a4b7409e2f", "ae41f35f3ac57ae5dfc97daf9c1791f7", "7ae9d974", "66a04b4c8e43214a"}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) 5.699250982s ago: executing program 4 (id=182): mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x1010, 0xffffffffffffffff, 0x400000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) r1 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095", @ANYRESDEC=r0, @ANYRESDEC, @ANYRES16=r1, @ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000280)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff00", 0x44}], 0x1) 5.546288284s ago: executing program 3 (id=183): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x57, 0xc2}}}}}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000a6ff00", 0x39}], 0x1) recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000240)=""/254, &(0x7f0000000040)=0xfe) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0xfefc, 0x7}, 0x4) 5.511941734s ago: executing program 0 (id=184): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00\b'], 0x48) syz_open_procfs(r1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x4}}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$dlm_monitor(0xffffff9c, &(0x7f0000003f80), 0x0, 0x0) r7 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000041c0), 0x8000, 0x0) close(r6) dup2(r7, r6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) 4.976523433s ago: executing program 1 (id=186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @random="bfee05ab5ac3", @void, {@ipv6={0x86dd, @dccp_packet={0x3, 0x6, "ec820e", 0x10, 0x21, 0x0, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], {{0x4e20, 0x4e21, 0x4, 0x1, 0xf, 0x0, 0x0, 0x5, 0x7, "03ae81", 0x85, "b925fd"}}}}}}}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.818376645s ago: executing program 4 (id=187): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 4.643630908s ago: executing program 4 (id=188): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0xb0, 0x0, 0x0, [{{0x0, 0x1, 0x40, 0x2, 0x80000000, 0x87d61c5b, {0x1, 0xfff, 0x9, 0x80, 0x8, 0x7, 0x7, 0x7, 0x10000, 0x2000, 0xb, 0x0, r3, 0x9, 0x40}}, {0x6, 0x2, 0x5, 0x6, 'fuse\x00'}}]}, 0x0, 0x0, 0x0}) 4.577790339s ago: executing program 1 (id=189): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='source', &(0x7f0000000380)='%\xd7\xad\xe0\xe9\x056W\xea\xe1\xe26\xdf\xbe\x97\x99\xe4\xe9%\xbe$\xc9\x86JJ\x12\xbc\xf7=\x0f1\v\xa9\xfcU\x96\xbf\xc7x\x83\xec\x11:A\xc5\xb4\x00'/62, 0x0) 4.49731116s ago: executing program 4 (id=190): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000040)={0x0, 0x40, 0xfffffffd, 0x0, 0xd1, 0x81}) r0 = socket(0x10, 0x3, 0x9) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2}, 0xc) 4.410077712s ago: executing program 1 (id=191): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0xffffffffffffffff) syz_io_uring_setup(0x4169, &(0x7f00000003c0)={0x0, 0xd490, 0x10100, 0x1}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x44c2, 0x0, 0x2, 0xfffffffd}, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2a) 4.315500523s ago: executing program 4 (id=192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r3, 0x0, 0x0, 0x0}, 0x30) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xf5}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f0000000600)=""/117, 0x73}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}}], 0x2, 0x10, 0x0) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2], 0x50}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, 0x0, &(0x7f0000000b00)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)=ANY=[], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) 4.100219136s ago: executing program 1 (id=193): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x10001}, 0x18) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) fallocate(0xffffffffffffffff, 0x3, 0x100000000, 0x80000000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000240)={0x4, 0x8000, 0x0, 0x0, 0x1d}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="737461636b203a0007579b8a4f93d6ab29b6bfa3d93cbd980f810fc4fb08447e5cf61cdb7414daf46dc6e0bd627adb04f5753bdde6278433f6a902299b57a439c9ad916f9a507d871406ca2554c7a7755d10699d4d6c1d7f1354aeaf80d100000000ff57317b55f338cafc410835b721f16e5ce656057c2e413a00"/134], 0x8) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x200000c0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) 4.095653766s ago: executing program 4 (id=194): syz_emit_ethernet(0x76, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@private=0xa010101, 0x7}]}, @cipso={0x86, 0x1e, 0x3, [{0x2, 0x2}, {0x6, 0x2}, {0x2, 0x6, "d109567c"}, {0x5, 0xa, "c92d3002d91d907b"}, {0x0, 0x2}, {0x0, 0x2}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "ade34b13"}]}]}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) close(0x3) 3.614768934s ago: executing program 0 (id=195): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0xe39}, 0x8) r4 = fsopen(&(0x7f0000000280)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 2.963532524s ago: executing program 3 (id=196): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@ccm_128={{0x304}, "40e4c6a4b7409e2f", "ae41f35f3ac57ae5dfc97daf9c1791f7", "7ae9d974", "66a04b4c8e43214a"}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) 2.821722196s ago: executing program 3 (id=197): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000002a00)={0x7, 'vlan0\x00', {0xb}, 0xc}) 2.711672598s ago: executing program 3 (id=198): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x2, 0x8001, 0x1, 0x0, 0x2, 0x9, "2636ee87b5f286d158ffffffffff00", 0x0, 0x0, 0x4a, 0x4, 0x3, 0x0, 0x8}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x60000) openat$incfs(0xffffffffffffffff, 0x0, 0x24000, 0x122) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r4, @ANYBLOB="01060000000000000000090000002c00048013000100", @ANYRES8], 0xac}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='ecryptfs\x00', 0x1800408, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') 1.745664343s ago: executing program 2 (id=199): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) futex(0x0, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x6}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000000d28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c52995560a99956bed40cf5a8c1dfd3db7e2378d5afd35f4c16827f55b3af4d07fce7fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af915600020000000000000000000000000000004900", 0xc}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'team_slave_1\x00', 'vxcan1\x00', {0xff}, {}, 0x29, 0x3, 0x3}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x4, 0x0, &(0x7f0000000280)="61df7183", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x200, 0x3d) lseek(r5, 0xfffffffffffffffd, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="8c", 0x1}], 0x1, &(0x7f0000000040)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4800) 1.643417724s ago: executing program 3 (id=200): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000140), 0xfffffffffffffff7, 0x11241) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x0, 0x10, 0x3, 0x9, 0x6, 0x1, 0xf0e8, 0x2, 0x5}, 0x0) syz_emit_ethernet(0x24f, &(0x7f0000000c40)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) r4 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(&(0x7f0000000740), 0x1, 0x2040) syz_clone3(0x0, 0x0) 1.163696512s ago: executing program 0 (id=201): semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) semop(0x0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1) semtimedop(0x0, &(0x7f00000001c0)=[{0x2, 0x100, 0x400}, {0x2, 0xfff, 0x1000}], 0x2, 0x0) 284.782775ms ago: executing program 2 (id=202): socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) fcntl$getown(r0, 0x9) r1 = syz_clone(0x67ac0dfdb255676f, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000001980)={0x0}) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 284.236236ms ago: executing program 0 (id=212): syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d0502002723010203010902"], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) syz_usb_connect$uac1(0x6, 0x71, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003000000086b1d010140000102"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 171.758197ms ago: executing program 3 (id=203): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x2, 0x300) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0xffffffffffffffff) syz_io_uring_setup(0x4169, &(0x7f00000003c0)={0x0, 0xd490, 0x10100, 0x1}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x44c2, 0x0, 0x2, 0xfffffffd}, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8, @ANYRES64=r0], 0x0) 64.090429ms ago: executing program 1 (id=204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r3, 0x0, 0x0, 0x0}, 0x30) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xf5}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f0000000600)=""/117, 0x73}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}}], 0x2, 0x10, 0x0) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2], 0x50}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, 0x0, &(0x7f0000000b00)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)=ANY=[], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) 0s ago: executing program 1 (id=205): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x6, @local, 0x7}}, 0x0, 0x0, 0x3f8, 0x2, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.157' (ED25519) to the list of known hosts. syzkaller login: [ 58.533327][ T4158] cgroup: Unknown subsys name 'net' [ 58.644843][ T4158] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.061479][ T4158] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.387702][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 61.500252][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.507764][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.516339][ T4169] device bridge_slave_0 entered promiscuous mode [ 61.527354][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.534619][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.542575][ T4169] device bridge_slave_1 entered promiscuous mode [ 61.605961][ T4173] chnl_net:caif_netlink_parms(): no params data found [ 61.615151][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 61.640235][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.654722][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.673667][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 61.727362][ T4169] team0: Port device team_slave_0 added [ 61.756153][ T4169] team0: Port device team_slave_1 added [ 61.799264][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 61.810057][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.817023][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.843020][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.878366][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.885445][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.911986][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.927197][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.934475][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.942842][ T4170] device bridge_slave_0 entered promiscuous mode [ 61.968905][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.976522][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.984423][ T4170] device bridge_slave_1 entered promiscuous mode [ 61.991620][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.998682][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.007003][ T4173] device bridge_slave_0 entered promiscuous mode [ 62.039983][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.047056][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.055068][ T4173] device bridge_slave_1 entered promiscuous mode [ 62.081970][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.089036][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.097504][ T4177] device bridge_slave_0 entered promiscuous mode [ 62.137376][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.144620][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.152970][ T4177] device bridge_slave_1 entered promiscuous mode [ 62.162375][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.180779][ T4169] device hsr_slave_0 entered promiscuous mode [ 62.187925][ T4169] device hsr_slave_1 entered promiscuous mode [ 62.210002][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.221079][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.239836][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.246901][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.255328][ T4168] device bridge_slave_0 entered promiscuous mode [ 62.278672][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.292133][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.299204][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.307238][ T4168] device bridge_slave_1 entered promiscuous mode [ 62.315935][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.355971][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.368997][ T4170] team0: Port device team_slave_0 added [ 62.388524][ T4173] team0: Port device team_slave_0 added [ 62.414681][ T4170] team0: Port device team_slave_1 added [ 62.425678][ T4173] team0: Port device team_slave_1 added [ 62.433142][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.474487][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.493514][ T4177] team0: Port device team_slave_0 added [ 62.527025][ T4177] team0: Port device team_slave_1 added [ 62.533179][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.540289][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.566580][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.581834][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.588804][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.615290][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.626844][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.634165][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.660140][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.673859][ T4168] team0: Port device team_slave_0 added [ 62.695957][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.703079][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.729249][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.742016][ T4168] team0: Port device team_slave_1 added [ 62.785006][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.792166][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.818065][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.830440][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.837393][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.863696][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.882143][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.889088][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.915061][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.960516][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.967494][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.993687][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.014381][ T4170] device hsr_slave_0 entered promiscuous mode [ 63.025174][ T4170] device hsr_slave_1 entered promiscuous mode [ 63.032425][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.040473][ T4170] Cannot create hsr debugfs directory [ 63.049751][ T4173] device hsr_slave_0 entered promiscuous mode [ 63.056486][ T4173] device hsr_slave_1 entered promiscuous mode [ 63.063284][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.071049][ T4173] Cannot create hsr debugfs directory [ 63.107906][ T4177] device hsr_slave_0 entered promiscuous mode [ 63.114977][ T4177] device hsr_slave_1 entered promiscuous mode [ 63.122054][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.130375][ T4177] Cannot create hsr debugfs directory [ 63.160090][ T1324] Bluetooth: hci4: command 0x0409 tx timeout [ 63.169417][ T2302] Bluetooth: hci3: command 0x0409 tx timeout [ 63.170078][ T1324] Bluetooth: hci2: command 0x0409 tx timeout [ 63.182109][ T1324] Bluetooth: hci0: command 0x0409 tx timeout [ 63.188190][ T1324] Bluetooth: hci1: command 0x0409 tx timeout [ 63.199757][ T4168] device hsr_slave_0 entered promiscuous mode [ 63.206429][ T4168] device hsr_slave_1 entered promiscuous mode [ 63.213162][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.220966][ T4168] Cannot create hsr debugfs directory [ 63.386156][ T4169] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.414317][ T4169] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.448015][ T4169] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.467500][ T4169] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.532370][ T4173] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.555537][ T4173] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.567907][ T4173] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.577562][ T4173] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.630408][ T4170] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.640905][ T4170] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.650896][ T4170] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.660971][ T4170] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.726235][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.768730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.778233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.788489][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.801768][ T4168] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.825096][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.834503][ T4168] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.844572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.853911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.864160][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.871479][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.897663][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.905765][ T4168] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.916357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.925431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.934214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.950739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.960231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.968571][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.975642][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.983848][ T4168] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.012014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.021545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.030677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.039002][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.046080][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.055393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.064709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.073517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.082279][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.089366][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.097030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.111709][ T4177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.120765][ T4177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.132369][ T4177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.155788][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.165670][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.174769][ T4177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.186886][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.198306][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.211114][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.231922][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.239944][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.248942][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.257887][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.267740][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.277508][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.287917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.298895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.345715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.354924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.364059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.372916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.382895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.391428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.402288][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.413294][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.424339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.433280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.457111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.466343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.475275][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.482435][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.491863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.514130][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.556248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.567242][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.582324][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.589451][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.599942][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.608954][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.618603][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.627517][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.637230][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.646681][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.658727][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.678644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.695994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.727679][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.744984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.759069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.784297][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.802641][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.816519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.825080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.840160][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.858637][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.866964][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.875797][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.884324][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.893633][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.918604][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.934484][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.954014][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.971667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.985188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.994408][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.001697][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.012095][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.018964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.071173][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.078269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.086765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.097355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.107397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.116457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.125667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.135131][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.142261][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.150833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.161198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.170824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.180291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.188614][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.195675][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.204218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.213711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.222177][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.229215][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.237156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.240522][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 65.246136][ T4237] Bluetooth: hci3: command 0x041b tx timeout [ 65.256902][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 65.258271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.271401][ T4237] Bluetooth: hci4: command 0x041b tx timeout [ 65.276546][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 65.304737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.313896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.326003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.335707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.344768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.353195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.361577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.370906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.379172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.387828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.396400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.405983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.414378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.428136][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.439514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.448091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.478689][ T4168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.491192][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.507175][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.523050][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.534815][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.547913][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.556842][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.566423][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.577960][ T4173] device veth0_vlan entered promiscuous mode [ 65.604438][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.626561][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.645307][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.663843][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.672008][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.679684][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.688430][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.702127][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.717522][ T4173] device veth1_vlan entered promiscuous mode [ 65.792695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.801657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.821757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.835361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.853437][ T4169] device veth0_vlan entered promiscuous mode [ 65.880574][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.889127][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.911372][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.918806][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.937535][ T4169] device veth1_vlan entered promiscuous mode [ 65.953447][ T4173] device veth0_macvtap entered promiscuous mode [ 65.963179][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.975543][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.984775][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.992751][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.005546][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.017234][ T4173] device veth1_macvtap entered promiscuous mode [ 66.036648][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.077707][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.086112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.097311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.105725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.115422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.125385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.134551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.156869][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.171495][ T4169] device veth0_macvtap entered promiscuous mode [ 66.178537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.187895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.197462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.207067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.215912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.227109][ T4173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.236370][ T4173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.245198][ T4173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.254308][ T4173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.269905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.278591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.317662][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.326507][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.336868][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.345937][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.354854][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.363968][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.374252][ T4168] device veth0_vlan entered promiscuous mode [ 66.388443][ T4169] device veth1_macvtap entered promiscuous mode [ 66.402339][ T4168] device veth1_vlan entered promiscuous mode [ 66.448067][ T4177] device veth0_vlan entered promiscuous mode [ 66.460560][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.468501][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.476505][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.484786][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.494485][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.502896][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.511521][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.520030][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.527772][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.536490][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.544358][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.556552][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.567481][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.579872][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.632335][ T4170] device veth0_vlan entered promiscuous mode [ 66.638915][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.647954][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.662099][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.673578][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.685813][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.697639][ T4177] device veth1_vlan entered promiscuous mode [ 66.700326][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.719480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.728587][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.734433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.745486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.755214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.765166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.785856][ T4168] device veth0_macvtap entered promiscuous mode [ 66.797898][ T4168] device veth1_macvtap entered promiscuous mode [ 66.807502][ T4170] device veth1_vlan entered promiscuous mode [ 66.833695][ T4169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.844629][ T4169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.853653][ T4169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.864838][ T4169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.893448][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.904320][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.914510][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.926603][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.938263][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.954690][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.971994][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.982488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.991945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.000347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.008807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.018510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.026316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.035004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.043923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.052640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.073003][ T4170] device veth0_macvtap entered promiscuous mode [ 67.090255][ T4177] device veth0_macvtap entered promiscuous mode [ 67.102295][ T4177] device veth1_macvtap entered promiscuous mode [ 67.118609][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.134851][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.145962][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.156652][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.169674][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.196650][ T4170] device veth1_macvtap entered promiscuous mode [ 67.211931][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.224302][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.232807][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.242817][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.251143][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.260216][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.272337][ T4168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.281529][ T4168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.291980][ T4168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.300988][ T4168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.332395][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 67.339782][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 67.341539][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.356306][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 67.362914][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 67.368992][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 67.375472][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.390765][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.409238][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.421724][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.439718][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.462867][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.495913][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.508301][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.521402][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.531971][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.548542][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.568109][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.578791][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.595590][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.608300][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.625123][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.664349][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.674233][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.685042][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.695094][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.705651][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.718344][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.727991][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.736956][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.745662][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.754396][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.763969][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.772766][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.795311][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.818207][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.834153][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.845858][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.862650][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.876619][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.895453][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.908025][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.925351][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.944051][ T4170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.956224][ T4170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.973915][ T4170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.985098][ T4170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.016557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.035858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.070539][ T4177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.079251][ T4177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.083427][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.110727][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.114530][ T4177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.136001][ T4177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.169239][ T4289] netlink: 'syz.1.6': attribute type 3 has an invalid length. [ 68.198253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.258651][ T4256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.290373][ T4256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.316883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.386631][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.406114][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.432489][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.475066][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.498236][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.512816][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.521817][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.543393][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.558432][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.041938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.186730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.231131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.281192][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.299979][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.316609][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.329623][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.355926][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.366915][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.400921][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 69.407054][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 69.474226][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 69.497236][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 69.522523][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 69.639881][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.199552][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.208569][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.679729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.688673][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.697586][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 70.999869][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 71.163995][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.171126][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.319622][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.539819][ T4319] device ip6gre1 entered promiscuous mode [ 71.560208][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 71.619609][ T2237] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.789862][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.820679][ T21] usb 5-1: config 0 has no interfaces? [ 72.000740][ T21] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 72.019446][ T2237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.036795][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.073412][ T2237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.097437][ T21] usb 5-1: Product: syz [ 72.114910][ T2237] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 72.125470][ T21] usb 5-1: Manufacturer: syz [ 72.141286][ T21] usb 5-1: SerialNumber: syz [ 72.183820][ T2237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.225938][ T21] usb 5-1: config 0 descriptor?? [ 72.256523][ T2237] usb 3-1: config 0 descriptor?? [ 72.414979][ T4332] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.447758][ T1108] usb 5-1: USB disconnect, device number 2 [ 73.727413][ T4359] netlink: 108 bytes leftover after parsing attributes in process `syz.3.13'. [ 73.737119][ T4359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13'. [ 73.753879][ T4359] Device name cannot be null; rc = [-22] [ 73.959527][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 75.769484][ T4237] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.929443][ T4378] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 76.059377][ T4237] usb 4-1: Using ep0 maxpacket: 8 [ 76.179559][ T4237] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 76.209755][ T4237] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 76.263720][ T4237] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.304367][ T4237] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.348378][ T4237] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 76.383634][ T4237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.541661][ T4387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.689790][ T4237] usb 4-1: GET_CAPABILITIES returned 0 [ 76.695473][ T4237] usbtmc 4-1:16.0: can't read capabilities [ 76.827963][ T4387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.889423][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.955117][ T4371] usb 4-1: usbtmc_ioctl_clear_in_halt returned -32 [ 77.101962][ T4387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.133591][ T4237] usb 4-1: USB disconnect, device number 2 [ 77.351016][ T1108] usb 5-1: config 0 has no interfaces? [ 77.463710][ T4387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.630625][ T1108] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 77.649408][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.677971][ T1108] usb 5-1: Product: syz [ 77.703421][ T1108] usb 5-1: Manufacturer: syz [ 77.708041][ T1108] usb 5-1: SerialNumber: syz [ 77.740528][ T1108] usb 5-1: config 0 descriptor?? [ 77.791702][ T4387] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.836409][ T4387] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.869439][ T2237] usbhid 3-1:0.0: can't add hid device: -32 [ 77.879694][ T2237] usbhid: probe of 3-1:0.0 failed with error -32 [ 77.926868][ T4387] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.011585][ T4387] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.458359][ T4315] Set syz1 is full, maxelem 65536 reached [ 78.490728][ T4312] usb 3-1: USB disconnect, device number 2 [ 78.709510][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 79.297871][ T4410] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 79.372674][ T4410] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.381009][ T4410] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.731095][ T4414] overlayfs: missing 'workdir' [ 79.749506][ T4236] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.923715][ T4417] overlayfs: missing 'workdir' [ 80.121609][ T4236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.154506][ T4236] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 80.172857][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.201324][ T4236] usb 1-1: config 0 descriptor?? [ 80.506069][ T4312] usb 5-1: USB disconnect, device number 3 [ 80.582034][ T4431] device syzkaller0 entered promiscuous mode [ 80.683482][ T4236] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 80.782351][ T4436] netlink: 108 bytes leftover after parsing attributes in process `syz.4.32'. [ 80.792374][ T4436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.32'. [ 80.811262][ T4436] Device name cannot be null; rc = [-22] [ 81.404088][ T23] cfg80211: failed to load regulatory.db [ 81.636052][ T4236] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5 [ 81.800141][ T4236] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 81.891974][ T4440] Zero length message leads to an empty skb [ 82.219435][ T1108] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.484378][ T4228] usb 1-1: USB disconnect, device number 2 [ 82.589646][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 82.625228][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.644183][ T1108] usb 4-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 82.654852][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.678487][ T1108] usb 4-1: config 0 descriptor?? [ 83.231155][ T4453] netlink: 248 bytes leftover after parsing attributes in process `syz.0.39'. [ 83.243353][ T1108] hid-generic 0003:0458:5005.0002: item fetching failed at offset 0/3 [ 83.253146][ T1108] hid-generic: probe of 0003:0458:5005.0002 failed with error -22 [ 83.398964][ T4457] overlayfs: missing 'workdir' [ 83.445953][ T2237] usb 4-1: USB disconnect, device number 3 [ 83.569241][ T4464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 83.695313][ T4466] device syzkaller0 entered promiscuous mode [ 84.210955][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.459447][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 84.464521][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 84.496857][ T4483] tipc: Started in network mode [ 84.529637][ T4483] tipc: Node identity 7, cluster identity 4711 [ 84.545631][ T4483] tipc: Node number set to 7 [ 84.589598][ T1108] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 84.608287][ T1108] usb 1-1: config 179 has an invalid descriptor of length 48, skipping remainder of the config [ 84.637690][ T1108] usb 1-1: config 179 has no interface number 0 [ 84.648081][ T1108] usb 1-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 84.674441][ T1108] usb 1-1: config 179 interface 65 has no altsetting 0 [ 84.685533][ T1108] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 84.704458][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.729411][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 85.309604][ T4228] usb 1-1: USB disconnect, device number 3 [ 85.605872][ T4494] device dummy0 entered promiscuous mode [ 85.642021][ T4494] device vlan2 entered promiscuous mode [ 85.917956][ T4499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.076087][ T4499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.405701][ T4499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.654716][ T4499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.695143][ T4508] device syzkaller0 entered promiscuous mode [ 86.829621][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 86.838176][ T13] usb 4-1: no configurations [ 86.847224][ T13] usb 4-1: can't read configurations, error -22 [ 86.893734][ T4499] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.895324][ T4514] netlink: get zone limit has 8 unknown bytes [ 86.909473][ T4499] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.936931][ T4499] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.971381][ T4499] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.070439][ T4517] use of bytesused == 0 is deprecated and will be removed in the future, [ 87.079135][ T4517] use the actual size instead. [ 88.350576][ T4237] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.599628][ T4237] usb 3-1: Using ep0 maxpacket: 8 [ 88.739491][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.998282][ T4237] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 89.009443][ T4237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.021414][ T4237] usb 3-1: Product: syz [ 89.025589][ T4237] usb 3-1: Manufacturer: syz [ 89.069839][ T4237] usb 3-1: SerialNumber: syz [ 89.110144][ T4237] usb 3-1: config 0 descriptor?? [ 89.118240][ T4552] device syzkaller0 entered promiscuous mode [ 89.191021][ T4237] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 89.219570][ T13] usb 5-1: config 0 has no interfaces? [ 89.419593][ T13] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 89.447083][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.501715][ T13] usb 5-1: Product: syz [ 89.511448][ T13] usb 5-1: Manufacturer: syz [ 89.525649][ T13] usb 5-1: SerialNumber: syz [ 89.577594][ T13] usb 5-1: config 0 descriptor?? [ 89.893461][ T4549] capability: warning: `syz.4.73' uses deprecated v2 capabilities in a way that may be insecure [ 90.289574][ T4237] gspca_sonixj: reg_w1 err -71 [ 90.359766][ T4237] sonixj: probe of 3-1:0.0 failed with error -71 [ 90.383476][ T4237] usb 3-1: USB disconnect, device number 3 [ 90.694631][ T13] usb 5-1: USB disconnect, device number 4 [ 91.429353][ T1108] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.679439][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 91.929446][ T1108] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.946875][ T1108] usb 3-1: config 0 interface 0 has no altsetting 0 [ 91.960968][ T1108] usb 3-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 91.985012][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.019998][ T1108] usb 3-1: config 0 descriptor?? [ 92.521338][ T1108] hid_mf 0003:0079:1844.0003: hidraw0: USB HID v1.00 Device [HID 0079:1844] on usb-dummy_hcd.2-1/input0 [ 92.558215][ T1108] hid_mf 0003:0079:1844.0003: Invalid report, this should never happen! [ 92.593705][ T1108] hid_mf 0003:0079:1844.0003: Force feedback init failed. [ 92.765682][ T23] usb 3-1: USB disconnect, device number 4 [ 92.788708][ T4593] fido_id[4593]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 93.269016][ T4611] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.368246][ T4604] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 93.412372][ T4620] netlink: 48 bytes leftover after parsing attributes in process `syz.2.97'. [ 93.484832][ T4611] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.619494][ T4331] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 93.816233][ T4611] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.906159][ T4611] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.021157][ T4611] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.040370][ T4331] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.056295][ T4611] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.059074][ T4331] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.084431][ T4611] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.117668][ T4611] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.159931][ T4331] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.184594][ T4331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 94.206119][ T4331] usb 4-1: SerialNumber: syz [ 94.612762][ T4331] usb 4-1: 0:2 : does not exist [ 94.748889][ T4331] usb 4-1: USB disconnect, device number 6 [ 94.966343][ T4637] device syzkaller0 entered promiscuous mode [ 95.051409][ T4187] udevd[4187]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.225418][ T4656] netlink: 48 bytes leftover after parsing attributes in process `syz.1.109'. [ 96.667877][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.853098][ T4666] process 'syz.4.113' launched './file0' with NULL argv: empty string added [ 96.929347][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 97.209637][ T1108] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 97.222239][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.231765][ T1108] usb 3-1: Product: syz [ 97.235931][ T1108] usb 3-1: Manufacturer: syz [ 97.246068][ T1108] usb 3-1: SerialNumber: syz [ 97.249416][ T2237] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 97.262389][ T1108] usb 3-1: config 0 descriptor?? [ 97.301620][ T1108] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 97.458148][ T4673] tipc: Enabling of bearer rejected, failed to enable media [ 97.472876][ T4673] device syzkaller0 entered promiscuous mode [ 97.549629][ T2237] usb 4-1: Using ep0 maxpacket: 8 [ 97.700213][ T4679] usb usb8: usbfs: process 4679 (syz.0.118) did not claim interface 0 before use [ 97.719475][ T2237] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 97.735001][ T2237] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 97.746295][ T2237] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.788430][ T2237] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.821834][ T2237] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.846407][ T2237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.856859][ T4686] netlink: 48 bytes leftover after parsing attributes in process `syz.4.121'. [ 98.139636][ T2237] usb 4-1: GET_CAPABILITIES returned 0 [ 98.148920][ T2237] usbtmc 4-1:16.0: can't read capabilities [ 99.488333][ T4711] tipc: Enabling of bearer rejected, failed to enable media [ 99.514768][ T1108] gspca_stk1135: reg_w 0x203 err -71 [ 99.524081][ T1108] gspca_stk1135: serial bus timeout: status=0x00 [ 99.526657][ T4711] device syzkaller0 entered promiscuous mode [ 99.532484][ T1108] gspca_stk1135: Sensor write failed [ 99.542436][ T1108] gspca_stk1135: serial bus timeout: status=0x00 [ 99.549515][ T1108] gspca_stk1135: Sensor write failed [ 99.556082][ T1108] gspca_stk1135: serial bus timeout: status=0x00 [ 99.621199][ T1108] gspca_stk1135: Sensor read failed [ 99.633312][ T1108] gspca_stk1135: serial bus timeout: status=0x00 [ 99.658436][ T1108] gspca_stk1135: Sensor read failed [ 99.674303][ T1108] gspca_stk1135: Detected sensor type unknown (0x0) [ 99.686385][ T1108] gspca_stk1135: serial bus timeout: status=0x00 [ 99.692864][ T1108] gspca_stk1135: Sensor read failed [ 99.698454][ T1108] gspca_stk1135: serial bus timeout: status=0x00 [ 99.705551][ T1108] gspca_stk1135: Sensor read failed [ 99.711506][ T1108] gspca_stk1135: serial bus timeout: status=0x00 [ 99.717946][ T1108] gspca_stk1135: Sensor write failed [ 99.723947][ T1108] gspca_stk1135: serial bus timeout: status=0x00 [ 99.731211][ T1108] gspca_stk1135: Sensor write failed [ 99.738868][ T1108] stk1135: probe of 3-1:0.0 failed with error -71 [ 99.748493][ T1108] usb 3-1: USB disconnect, device number 5 [ 99.942145][ T13] usb 4-1: USB disconnect, device number 7 [ 100.188377][ T4729] netlink: 48 bytes leftover after parsing attributes in process `syz.1.133'. [ 100.661385][ T4745] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 101.769355][ T2237] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 101.866190][ T4755] netlink: 108 bytes leftover after parsing attributes in process `syz.1.139'. [ 101.875885][ T4755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.139'. [ 101.890848][ T4755] Device name cannot be null; rc = [-22] [ 102.179558][ T2237] usb 4-1: config 0 has no interfaces? [ 102.810030][ T2237] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 102.823416][ T2237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.840414][ T2237] usb 4-1: Product: syz [ 102.844894][ T2237] usb 4-1: Manufacturer: syz [ 102.849749][ T2237] usb 4-1: SerialNumber: syz [ 102.856554][ T2237] usb 4-1: config 0 descriptor?? [ 102.883461][ T4761] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.978814][ T4764] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 103.015182][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.022748][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.050786][ T4768] kvm: pic: non byte write [ 103.055650][ T4768] kvm: pic: non byte write [ 103.060931][ T4768] kvm: pic: non byte write [ 103.065513][ T4768] kvm: pic: non byte write [ 103.073376][ T4768] kvm: pic: non byte write [ 103.077950][ T4768] kvm: pic: non byte write [ 103.082892][ T4768] kvm: pic: non byte write [ 103.087535][ T4768] kvm: pic: non byte write [ 103.092226][ T4768] kvm: pic: non byte write [ 103.096947][ T4768] kvm: pic: non byte write [ 103.104220][ T4768] kvm: pic: level sensitive irq not supported [ 103.118373][ T4768] kvm: pic: level sensitive irq not supported [ 103.125100][ T4750] udc-core: couldn't find an available UDC or it's busy [ 103.158786][ T4750] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 103.183782][ T4761] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.336659][ T4761] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.527204][ T4761] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.668824][ T4761] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.748309][ T4761] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.773540][ T4761] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.829548][ T4761] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.176463][ T4792] netlink: 108 bytes leftover after parsing attributes in process `syz.4.152'. [ 104.186144][ T4792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.152'. [ 104.200087][ T4792] Device name cannot be null; rc = [-22] [ 104.994524][ T2237] usb 4-1: USB disconnect, device number 8 [ 105.840422][ T4801] device geneve2 entered promiscuous mode [ 106.044136][ T4804] syz.2.155 (4804) used greatest stack depth: 20224 bytes left [ 106.435466][ T155] Bluetooth: hci5: Frame reassembly failed (-84) [ 107.030322][ T4829] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.135474][ T4829] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.236858][ T4832] device syzkaller0 entered promiscuous mode [ 107.290626][ T4829] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.384335][ T4829] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.879483][ T4228] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 108.249441][ T4228] usb 5-1: config 0 has no interfaces? [ 108.254979][ T4228] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 108.268253][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.359907][ T4228] usb 5-1: config 0 descriptor?? [ 108.439352][ T2237] Bluetooth: hci5: command 0x1003 tx timeout [ 108.445492][ T4183] Bluetooth: hci5: sending frame failed (-49) [ 108.603710][ T4842] udc-core: couldn't find an available UDC or it's busy [ 108.610786][ T4842] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 108.618865][ T4228] usb 5-1: USB disconnect, device number 5 [ 109.089373][ T4228] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.329524][ T4228] usb 5-1: Using ep0 maxpacket: 16 [ 109.338240][ T4829] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.360376][ T4829] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.392903][ T4829] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.410792][ T4829] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.449565][ T4228] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.468600][ T4228] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.639571][ T4228] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 109.655871][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.689461][ T4228] usb 5-1: Product: syz [ 109.699828][ T4228] usb 5-1: Manufacturer: syz [ 109.704607][ T4228] usb 5-1: SerialNumber: syz [ 109.859344][ T4437] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.219433][ T4437] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.236026][ T4437] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.330563][ T4437] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.342830][ T4437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.355077][ T4437] usb 2-1: SerialNumber: syz [ 110.389549][ T4228] usb 5-1: 0:2 : does not exist [ 110.519553][ T2237] Bluetooth: hci5: command 0x1001 tx timeout [ 110.525838][ T4183] Bluetooth: hci5: sending frame failed (-49) [ 110.859507][ T2237] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.056277][ T4437] usb 2-1: 0:2 : does not exist [ 111.067196][ T4437] usb 2-1: unit 255 not found! [ 111.073485][ T4228] usb 5-1: USB disconnect, device number 6 [ 111.149433][ T2237] usb 1-1: Using ep0 maxpacket: 32 [ 111.279436][ T4437] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 111.289421][ T2237] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 111.301233][ T2237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.313110][ T2237] usb 1-1: config 0 descriptor?? [ 111.483674][ T4437] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 111.532988][ T4437] usb 2-1: USB disconnect, device number 2 [ 111.559494][ T2237] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 111.596949][ T2237] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.640056][ T2237] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 111.647501][ T2237] usb 1-1: media controller created [ 111.697311][ T2237] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.713667][ T4187] udevd[4187]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.810042][ T2237] az6027: usb out operation failed. (-71) [ 111.839434][ T2237] az6027: usb out operation failed. (-71) [ 111.845186][ T2237] stb0899_attach: Driver disabled by Kconfig [ 111.856508][ T2237] az6027: no front-end attached [ 111.856508][ T2237] [ 111.884925][ T2237] az6027: usb out operation failed. (-71) [ 111.895130][ T2237] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 111.908274][ T2237] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 111.919440][ T4437] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.943720][ T2237] dvb-usb: schedule remote query interval to 400 msecs. [ 111.959456][ T2237] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 111.983963][ T2237] usb 1-1: USB disconnect, device number 4 [ 112.046811][ T2237] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 112.159742][ T4437] usb 2-1: Using ep0 maxpacket: 16 [ 112.279811][ T4437] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.308085][ T4437] usb 2-1: config 0 interface 0 has no altsetting 0 [ 112.355684][ T4437] usb 2-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 112.395014][ T4437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.428282][ T4437] usb 2-1: config 0 descriptor?? [ 112.599389][ T4331] Bluetooth: hci5: command 0x1009 tx timeout [ 112.843939][ T4893] tipc: Enabling of bearer rejected, failed to enable media [ 112.861833][ T4893] device syzkaller0 entered promiscuous mode [ 112.953932][ T4437] hid_mf 0003:0079:1844.0004: hidraw0: USB HID v1.00 Device [HID 0079:1844] on usb-dummy_hcd.1-1/input0 [ 112.976263][ T4437] hid_mf 0003:0079:1844.0004: Invalid report, this should never happen! [ 113.018307][ T4437] hid_mf 0003:0079:1844.0004: Force feedback init failed. [ 113.049898][ T4162] udevd[4162]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 113.086918][ T4901] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.176914][ T2237] usb 2-1: USB disconnect, device number 3 [ 113.202826][ T4901] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.284614][ T4901] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.343324][ T4909] fido_id[4909]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 113.420244][ T4901] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.547975][ T4901] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.599541][ T4228] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 113.624302][ T4901] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.681926][ T4901] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.801773][ T4901] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.119419][ T4228] usb 4-1: config 0 has no interfaces? [ 114.419517][ T4228] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 114.445634][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.497068][ T4228] usb 4-1: Product: syz [ 114.503596][ T4228] usb 4-1: Manufacturer: syz [ 114.519467][ T4228] usb 4-1: SerialNumber: syz [ 114.550239][ T4228] usb 4-1: config 0 descriptor?? [ 114.734507][ T4934] tipc: Enabling of bearer rejected, failed to enable media [ 114.757082][ T4934] device syzkaller0 entered promiscuous mode [ 115.049525][ T4228] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.420820][ T4228] usb 2-1: config 0 has no interfaces? [ 115.579600][ T4228] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 115.600099][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.619321][ T4228] usb 2-1: Product: syz [ 115.634856][ T4228] usb 2-1: Manufacturer: syz [ 115.653056][ T4228] usb 2-1: SerialNumber: syz [ 115.696210][ T4228] usb 2-1: config 0 descriptor?? [ 115.714688][ T7] usb 4-1: USB disconnect, device number 9 [ 116.034981][ T4936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.193'. [ 116.045250][ T4936] netlink: 48 bytes leftover after parsing attributes in process `syz.1.193'. [ 116.133102][ T4951] netlink: 108 bytes leftover after parsing attributes in process `syz.3.198'. [ 116.143426][ T4951] netlink: 20 bytes leftover after parsing attributes in process `syz.3.198'. [ 116.156742][ T4951] Device name cannot be null; rc = [-22] [ 118.610313][ T13] usb 2-1: USB disconnect, device number 4 [ 118.699431][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.899385][ T2237] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 119.039431][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 119.160214][ T7] usb 1-1: config 0 has no interfaces? [ 119.320275][ T7] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 119.334341][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.339561][ T2237] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.359330][ T2237] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.376751][ T7] usb 1-1: Product: syz [ 119.381033][ T7] usb 1-1: Manufacturer: syz [ 119.385632][ T7] usb 1-1: SerialNumber: syz [ 119.405975][ T7] usb 1-1: config 0 descriptor?? [ 119.499532][ T2237] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 119.519758][ T2237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 119.529366][ T2237] usb 4-1: SerialNumber: syz [ 119.656605][ T4185] Bluetooth: hci0: Unknown advertising packet type: 0x6e73 [ 119.656665][ T4185] Bluetooth: hci0: Unknown advertising packet type: 0x100 [ 119.664319][ T4185] ================================================================== [ 119.679662][ T4185] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12c0/0x3b80 [ 119.687471][ T4185] Read of size 1 at addr ffff888022bc0c02 by task kworker/u5:8/4185 [ 119.695440][ T4185] [ 119.697760][ T4185] CPU: 0 PID: 4185 Comm: kworker/u5:8 Not tainted 5.15.186-syzkaller #0 [ 119.706074][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.716147][ T4185] Workqueue: hci0 hci_rx_work [ 119.720843][ T4185] Call Trace: [ 119.724135][ T4185] [ 119.725726][ T4250] usb 1-1: USB disconnect, device number 5 [ 119.727087][ T4185] dump_stack_lvl+0x168/0x230 [ 119.737560][ T4185] ? show_regs_print_info+0x20/0x20 [ 119.742749][ T4185] ? load_image+0x3b0/0x3b0 [ 119.747243][ T4185] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 119.752616][ T4185] print_address_description+0x60/0x2d0 [ 119.758151][ T4185] ? hci_le_meta_evt+0x12c0/0x3b80 [ 119.763249][ T4185] kasan_report+0xdf/0x130 [ 119.767670][ T4185] ? hci_le_meta_evt+0x12c0/0x3b80 [ 119.772794][ T4185] hci_le_meta_evt+0x12c0/0x3b80 [ 119.777731][ T4185] ? hci_event_packet+0x260/0x12f0 [ 119.782843][ T4185] ? hci_remote_host_features_evt+0x280/0x280 [ 119.789073][ T4185] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 119.794718][ T4185] ? mark_lock+0x94/0x320 [ 119.799041][ T4185] ? mutex_unlock+0x10/0x10 [ 119.803537][ T4185] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 119.809513][ T4185] ? lock_chain_count+0x20/0x20 [ 119.814359][ T4185] ? __rwlock_init+0x140/0x140 [ 119.819118][ T4185] hci_event_packet+0xe05/0x12f0 [ 119.824051][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 119.829356][ T4185] ? rcu_lock_release+0x20/0x20 [ 119.834225][ T4185] ? hci_send_to_monitor+0x9c/0x4a0 [ 119.839421][ T4185] hci_rx_work+0x255/0xa10 [ 119.843841][ T4185] process_one_work+0x863/0x1000 [ 119.848785][ T4185] ? worker_detach_from_pool+0x240/0x240 [ 119.854411][ T4185] ? lockdep_hardirqs_off+0x70/0x100 [ 119.859699][ T4185] ? _raw_spin_lock_irq+0xab/0xe0 [ 119.864724][ T4185] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 119.870094][ T4185] ? wq_worker_running+0x97/0x170 [ 119.875123][ T4185] worker_thread+0xaa8/0x12a0 [ 119.879793][ T4185] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 119.885701][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 119.890910][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 119.896110][ T4185] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 119.902014][ T4185] kthread+0x436/0x520 [ 119.906088][ T4185] ? rcu_lock_release+0x20/0x20 [ 119.910958][ T4185] ? kthread_blkcg+0xd0/0xd0 [ 119.915579][ T4185] ret_from_fork+0x1f/0x30 [ 119.919998][ T4185] [ 119.923009][ T4185] [ 119.925336][ T4185] Allocated by task 4965: [ 119.929647][ T4185] __kasan_kmalloc+0xb5/0xf0 [ 119.934235][ T4185] __alloc_skb+0x22c/0x750 [ 119.938645][ T4185] vhci_write+0xbc/0x450 [ 119.942880][ T4185] vfs_write+0x712/0xd00 [ 119.947117][ T4185] ksys_write+0x14d/0x250 [ 119.951441][ T4185] do_syscall_64+0x4c/0xa0 [ 119.955845][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.961734][ T4185] [ 119.964048][ T4185] The buggy address belongs to the object at ffff888022bc0800 [ 119.964048][ T4185] which belongs to the cache kmalloc-1k of size 1024 [ 119.978090][ T4185] The buggy address is located 2 bytes to the right of [ 119.978090][ T4185] 1024-byte region [ffff888022bc0800, ffff888022bc0c00) [ 119.991793][ T4185] The buggy address belongs to the page: [ 119.997416][ T4185] page:ffffea00008af000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22bc0 [ 120.007553][ T4185] head:ffffea00008af000 order:3 compound_mapcount:0 compound_pincount:0 [ 120.015862][ T4185] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 120.023836][ T4185] raw: 00fff00000010200 0000000000000000 0000000c00000001 ffff888016841dc0 [ 120.032432][ T4185] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 120.040994][ T4185] page dumped because: kasan: bad access detected [ 120.047395][ T4185] page_owner tracks the page as allocated [ 120.053101][ T4185] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4168, ts 66292237265, free_ts 65834394641 [ 120.072187][ T4185] get_page_from_freelist+0x1b77/0x1c60 [ 120.077725][ T4185] __alloc_pages+0x1e1/0x470 [ 120.082302][ T4185] new_slab+0xc0/0x4b0 [ 120.086360][ T4185] ___slab_alloc+0x81e/0xdf0 [ 120.090940][ T4185] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 120.096734][ T4185] __alloc_skb+0x22c/0x750 [ 120.101141][ T4185] rtmsg_fib+0xe7/0x4b0 [ 120.105293][ T4185] fib_table_insert+0x987/0x1b20 [ 120.110257][ T4185] fib_magic+0x2c1/0x390 [ 120.114494][ T4185] fib_add_ifaddr+0x389/0x5e0 [ 120.119161][ T4185] fib_netdev_event+0x35c/0x480 [ 120.124013][ T4185] raw_notifier_call_chain+0xcb/0x160 [ 120.129392][ T4185] __dev_notify_flags+0x178/0x2d0 [ 120.134409][ T4185] dev_change_flags+0xe3/0x1a0 [ 120.139164][ T4185] do_setlink+0xc01/0x3980 [ 120.143707][ T4185] rtnl_newlink+0x1419/0x17d0 [ 120.148802][ T4185] page last free stack trace: [ 120.153478][ T4185] free_unref_page_prepare+0x637/0x6c0 [ 120.158943][ T4185] free_unref_page+0x94/0x280 [ 120.163640][ T4185] qlist_free_all+0x35/0x90 [ 120.168135][ T4185] kasan_quarantine_reduce+0x150/0x160 [ 120.173586][ T4185] __kasan_slab_alloc+0x2f/0xd0 [ 120.178429][ T4185] slab_post_alloc_hook+0x4c/0x380 [ 120.183531][ T4185] kmem_cache_alloc+0x100/0x290 [ 120.188381][ T4185] vm_area_alloc+0x20/0xe0 [ 120.193041][ T4185] mmap_region+0x945/0x15e0 [ 120.197545][ T4185] do_mmap+0x77a/0xdf0 [ 120.201632][ T4185] vm_mmap_pgoff+0x1b2/0x2b0 [ 120.206237][ T4185] ksys_mmap_pgoff+0x542/0x780 [ 120.211016][ T4185] do_syscall_64+0x4c/0xa0 [ 120.215436][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.221329][ T4185] [ 120.223656][ T4185] Memory state around the buggy address: [ 120.229296][ T4185] ffff888022bc0b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 120.237387][ T4185] ffff888022bc0b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 120.245460][ T4185] >ffff888022bc0c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.253509][ T4185] ^ [ 120.257569][ T4185] ffff888022bc0c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.265638][ T4185] ffff888022bc0d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.273685][ T4185] ================================================================== [ 120.281733][ T4185] Disabling lock debugging due to kernel taint [ 120.291223][ T4185] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 120.298437][ T4185] CPU: 0 PID: 4185 Comm: kworker/u5:8 Tainted: G B 5.15.186-syzkaller #0 [ 120.308166][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.318227][ T4185] Workqueue: hci0 hci_rx_work [ 120.322925][ T4185] Call Trace: [ 120.326196][ T4185] [ 120.329121][ T4185] dump_stack_lvl+0x168/0x230 [ 120.333899][ T4185] ? show_regs_print_info+0x20/0x20 [ 120.339101][ T4185] ? load_image+0x3b0/0x3b0 [ 120.343644][ T4185] panic+0x2c9/0x7f0 [ 120.347541][ T4185] ? bpf_jit_dump+0xd0/0xd0 [ 120.352058][ T4185] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 120.356484][ T2237] usb 4-1: 0:2 : does not exist [ 120.357976][ T4185] ? _raw_spin_unlock+0x40/0x40 [ 120.367702][ T4185] ? hci_le_meta_evt+0x12c0/0x3b80 [ 120.373060][ T4185] check_panic_on_warn+0x80/0xa0 [ 120.378008][ T4185] ? hci_le_meta_evt+0x12c0/0x3b80 [ 120.383112][ T4185] end_report+0x6d/0xf0 [ 120.387282][ T4185] kasan_report+0x102/0x130 [ 120.391779][ T4185] ? hci_le_meta_evt+0x12c0/0x3b80 [ 120.396882][ T4185] hci_le_meta_evt+0x12c0/0x3b80 [ 120.401806][ T4185] ? hci_event_packet+0x260/0x12f0 [ 120.406904][ T4185] ? hci_remote_host_features_evt+0x280/0x280 [ 120.412959][ T4185] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 120.418585][ T4185] ? mark_lock+0x94/0x320 [ 120.422902][ T4185] ? mutex_unlock+0x10/0x10 [ 120.427397][ T4185] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 120.433368][ T4185] ? lock_chain_count+0x20/0x20 [ 120.438204][ T4185] ? __rwlock_init+0x140/0x140 [ 120.442971][ T4185] hci_event_packet+0xe05/0x12f0 [ 120.447896][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 120.453099][ T4185] ? rcu_lock_release+0x20/0x20 [ 120.457952][ T4185] ? hci_send_to_monitor+0x9c/0x4a0 [ 120.463142][ T4185] hci_rx_work+0x255/0xa10 [ 120.467552][ T4185] process_one_work+0x863/0x1000 [ 120.472485][ T4185] ? worker_detach_from_pool+0x240/0x240 [ 120.478106][ T4185] ? lockdep_hardirqs_off+0x70/0x100 [ 120.483387][ T4185] ? _raw_spin_lock_irq+0xab/0xe0 [ 120.488401][ T4185] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 120.493775][ T4185] ? wq_worker_running+0x97/0x170 [ 120.498788][ T4185] worker_thread+0xaa8/0x12a0 [ 120.503450][ T4185] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 120.509345][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 120.514543][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 120.519754][ T4185] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 120.525650][ T4185] kthread+0x436/0x520 [ 120.529705][ T4185] ? rcu_lock_release+0x20/0x20 [ 120.534540][ T4185] ? kthread_blkcg+0xd0/0xd0 [ 120.539120][ T4185] ret_from_fork+0x1f/0x30 [ 120.543528][ T4185] [ 120.547196][ T4185] Kernel Offset: disabled [ 120.551537][ T4185] Rebooting in 86400 seconds..