last executing test programs: 5.755044187s ago: executing program 3 (id=239): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$loop(0x0, 0x2, 0x246000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r4}, 0x38) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x1, 0xa) fchdir(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0xb4) ftruncate(r6, 0x2007ffb) close(r6) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 3.636317649s ago: executing program 3 (id=253): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80047453, 0x0) 3.565874073s ago: executing program 3 (id=255): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000010900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500000000000d000300686173"], 0x5c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, 0x0, &(0x7f0000000140)) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000580)="eda55bcd35b6de17b36efc4229163ce28b38f8dcedd7616b02178c7aa815f84c20e894997cc4813a6e3334e1b724ed1c9c4d4d52926482b75c94d5d8f970282badbcd5710fcc58b4fee4e9f315f4f6d1e123c10c2c6b66557a666320700ac2ae9c491646f8e8e3abb3b3c954d799db165829a704b45164aceb418b57b6faee091f01beaf733a96eb4c", 0x89}], 0x1}, 0x0) recvmmsg(r6, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/211, 0xd3}], 0x1, &(0x7f0000000900)=""/211, 0xd3}, 0x9}], 0x1, 0x0, 0x0) 3.079800498s ago: executing program 4 (id=261): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.775041854s ago: executing program 2 (id=265): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80047453, 0x0) 2.66557897s ago: executing program 2 (id=266): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) r6 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) fsetxattr$system_posix_acl(r6, 0x0, &(0x7f00000001c0)=ANY=[], 0x24, 0x3) unshare(0x2c060000) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000300)={0x3, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x1, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f671d8be1f6c41e1"}) r7 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x1f, &(0x7f0000006680)) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) rt_sigqueueinfo(r7, 0x21, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000100)={0x40000000, 0x100, "2712db36f3c964c0cdd68849d8e85f0130b1fb723f0eb00fc8a12fd500025269", 0x0, 0xfffffffffffffffb, 0x4a10875b, 0x0, 0x0, 0xf, 0x7fff, 0x5, [0x0, 0x9, 0x7, 0x9ae]}) pread64(r2, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 2.66491868s ago: executing program 4 (id=267): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x1, 0x0, 0x6, {0x200809, 0xbdd, 0x200, 0x1}}) 2.552205896s ago: executing program 4 (id=268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) exit(0x100000000000035) tkill(r1, 0x12) ptrace(0x4206, r1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000200)={{r2, r3+60000000}, {r4, r5+60000000}}, &(0x7f0000000280)) wait4(0x0, 0x0, 0x8, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x33, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc048aeca, &(0x7f0000000180)={0x4, 0x0, [{0xb69, 0xec000000, 0x5}, {0x8b2, 0x0, 0x3fc000000000}, {0x40000071}, {0x8a1, 0x0, 0x4422}]}) 2.099646939s ago: executing program 0 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 2.032257783s ago: executing program 3 (id=274): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0x3f, '\x00', @st={0x4, [{0x0, @svalue=0x2}, {0x3, @uvalue=0x3}, {0x1, @svalue=0xff}, {0x0, @uvalue=0x8d3c}]}, 0x4}, {0x39, '\x00', @buffer={"55eb476b13d85ef7a019aef895e9baae03d9827fe704c54bbcd80c0ac8383761", 0x20}, 0x5}, {0x13, '\x00', @data=0x81, 0x3}, {0x28}, {0x3c, '\x00', @data=0x8, 0x1}]}) 1.929654899s ago: executing program 1 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0xa8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xe8}}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) io_uring_setup(0xb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r5, r5, 0x0, 0x800007) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x2, 0x1, 0x4, 0x0, 0x8, 0x1, 0x6, 0x1, 0x8, 0x4, 0x4, 0x40, 0x0, 0x7, 0x8, 0x5, 0x7, 0xce, 0x9, '\x00', 0x9, 0x8}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000840)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 1.929520588s ago: executing program 3 (id=276): r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000440)) 1.887455401s ago: executing program 0 (id=277): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) capset(0x0, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x81, 0xfffffff9, 0xa}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) openat(0xffffffffffffff9c, 0x0, 0x101300, 0x132) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x9, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 1.692293501s ago: executing program 3 (id=278): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f010203010902"], 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRESHEX, @ANYRES8=r0], 0x78) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 1.682575912s ago: executing program 4 (id=279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) close(r0) sync_file_range(0xffffffffffffffff, 0x0, 0x5, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) timer_getoverrun(r1) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x40800) 1.633534924s ago: executing program 1 (id=280): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 1.556227608s ago: executing program 0 (id=281): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d00"/24, 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f00000044c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="ce66558910e6e9bdaf6f602e", 0xc}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x4040000) 1.34078104s ago: executing program 1 (id=282): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44", 0xe}], 0x1}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 1.302726711s ago: executing program 0 (id=283): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000dd0a03"], 0x7c}}, 0x2000c450) 1.164111979s ago: executing program 0 (id=284): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000010900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500000000000d000300686173"], 0x5c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, 0x0, &(0x7f0000000140)) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000580)="eda55bcd35b6de17b36efc4229163ce28b38f8dcedd7616b02178c7aa815f84c20e894997cc4813a6e3334e1b724ed1c9c4d4d52926482b75c94d5d8f970282badbcd5710fcc58b4fee4e9f315f4f6d1e123c10c2c6b66557a666320700ac2ae9c491646f8e8e3abb3b3c954d799db165829a704b45164aceb418b57b6faee091f01beaf733a96eb4c", 0x89}], 0x1}, 0x0) recvmmsg(r6, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/211, 0xd3}], 0x1, &(0x7f0000000900)=""/211, 0xd3}, 0x9}], 0x1, 0x0, 0x0) 1.163771739s ago: executing program 1 (id=285): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000004c0)=0x2) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000000c0)={"49841ada71cfe011e10532489ef0a3127f9f67568978975321ebdb7108d333a8df648f920da594ae3a327a3f1292465c016dbc5261414bd85acd87473d61390f4bbded57a902b5deb9c23c641914f6b147db6146e946ce31b52ff43219cbc1574ebc8f47d0d2a02b89dc02c49f25471af4f2435dd40d0481fe6f0124e4aa9849c9b8358074976ba0dd502c77e65623e41c8ce041fe7058274e54be3d84f5aa382e9032df7a279d491a51e7480061ebb983305b23e584f6b47af6d615b2f0a182d7c0095f222a4a176472ebbd1021d2eb285ff99ea7601c4e25ecd4c055c59c3964e30b2f8567d69324b6828cc0e9c3528f1f4e27527d98bca370c165bfd88348ca0eb405029367247b738c6cce89e3efd4479d8f2fc7dbd015046860acb8a71106b920b09e661065bf765a03317feb4f54d4382ac41850982313319363b14557a5b8a18d60e425b3db6bcd35b03c810c9d398c9d91902878258419a4b02fc4bdc3b69da6c5c27f5a507005a24a3fef74f0b287c3a4cd1517537dc8cf5cf0efd75c11e803e972ecc24c500cc49001f231f74f7120f55004d5621655ba535c8c8a91d2fec5656526974aef9f08d835f6c3c7c570d047312da759708349121ee9f7078926baa412b4ae8076f6b7f2bf46ffe08878e0281bb42ace8eca796933daf7f65530e30eb6b0695a450e50aea20fcabb5fca187f8ee62b93dee581774cefb953b396e5b8a1e3cc1062b001082aa5a434d9f03407c4239d0fcb779eba5a32f473d142ac92042c2b140f12a0181a4d98a0a5a1c80de2363a80dfc365d26e0332ee63e84500f086fffded2d72500cfb5b3b16aefef5d5808f29e1c572df8af9ca90b714fe6c71a1097e58ccb7945341445d2a0c271f5d15a1462be10d757de7cfd980459469387c5049cebcdb62a24cf04418634944354b4690d4974a26ca113eefe5a71b23aa2fbd989f7b6fcf490ed465f219e70b3397dbc63e21b9d3998c4580570c40a2e75cb6845b34236f5a38dde94ae6fac7a994b21e829bdb618b0910b71608ed7893bc927afa06b1d08d18f684d7972e5467ddfebe1982924658db3e5aee3e443f1cd7017d7a27e6e2620673e9afd67c69ae555ec3e67863f1a9ac7d653d38125f51db870ffa8887c08c455a536d70ea0cae525218e8d06865b553b17bacd52630e4765af1036c834e96c193523d8b3bc399ac296fbe53ed4bd454c669f01cb0915cf9fc03b54d93fbc37ace112d4643c64842b60ee6b979703b6448fe7ddaab8d2fc2d417a12f138d61cc3ca311aa09adbad1a0647a62208ca7f9f2a9e6a6c42e6ae926b15d094886a7d6ae787c8238ab4c235541b1432b9e9407d18a0399dfa98b8ee84ccbe16bf8c30e7cf7071ab10eb8ffb0334d2b91135e3294efd14dd06db46be1032a472cdd54bd015f2937fe3d7d691fa9d0b55a0d5d17a9"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r1, 0x1000002, 0x13, r4, 0x0) 800.470418ms ago: executing program 1 (id=286): openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x31000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x4cd29724, 0xff, 0x32315559, 0x3, 0x0, 0x0, 0x0, 0x3672, 0x0, 0x0, 0x2, 0x2}}) 707.824113ms ago: executing program 4 (id=287): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x1ff, 0x56}]}}}}}}}, 0x0) 600.735678ms ago: executing program 4 (id=288): prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) shutdown(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x7ff, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r4, 0x80086303, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) mknod(&(0x7f0000000100)='./file0\x00', 0x8, 0xd) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) getpriority(0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4010) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_create(0x5, &(0x7f0000000040)={0x0, 0x17, 0x4}, 0x0) timer_gettime(r5, &(0x7f00000000c0)) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c903f00000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 392.278319ms ago: executing program 2 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001000)=ANY=[@ANYBLOB="1400000010000100000000000000e3ffffff000a38000000060a01010000000000000000020000000900020073797a32000000000900010073797a30000000000c00034000ff"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 353.944522ms ago: executing program 2 (id=290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0xa8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xe8}}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) io_uring_setup(0xb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r5, r5, 0x0, 0x800007) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000840)={"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"}) 133.779043ms ago: executing program 2 (id=291): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000880)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[], 0x5c}}, 0x4004040) 4.23347ms ago: executing program 0 (id=292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x3c}}, 0x0) 3.99683ms ago: executing program 1 (id=293): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x696, 0x9, 0x1, 0xc}, 0xb, 0x40000003, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 2 (id=294): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000005, 0x31, r0, 0xc5373000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0x541b, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x25, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x7) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x20000000e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) mprotect(&(0x7f0000585000/0x3000)=nil, 0x3000, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_open_dev$video(&(0x7f0000000440), 0x7, 0x1ebd41) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. syzkaller login: [ 61.020339][ T4173] cgroup: Unknown subsys name 'net' [ 61.171149][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.662516][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.164974][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 64.204241][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 64.279614][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 64.330619][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 64.356815][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.363923][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.372674][ T4185] device bridge_slave_0 entered promiscuous mode [ 64.402123][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.409379][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.417470][ T4185] device bridge_slave_1 entered promiscuous mode [ 64.430101][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 64.467398][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.474654][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.482665][ T4187] device bridge_slave_0 entered promiscuous mode [ 64.515947][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.523164][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.531725][ T4187] device bridge_slave_1 entered promiscuous mode [ 64.540805][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.574950][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.589515][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.596695][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.604619][ T4188] device bridge_slave_0 entered promiscuous mode [ 64.623916][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.631464][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.640149][ T4186] device bridge_slave_0 entered promiscuous mode [ 64.660284][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.667532][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.675219][ T4188] device bridge_slave_1 entered promiscuous mode [ 64.684305][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.693769][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.702007][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.710092][ T4186] device bridge_slave_1 entered promiscuous mode [ 64.750795][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.762326][ T4185] team0: Port device team_slave_0 added [ 64.781864][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.791486][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.799058][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.807461][ T4189] device bridge_slave_0 entered promiscuous mode [ 64.821316][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.828552][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.836530][ T4189] device bridge_slave_1 entered promiscuous mode [ 64.845181][ T4185] team0: Port device team_slave_1 added [ 64.852767][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.863597][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.904834][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.911869][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.938200][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.951384][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.963111][ T4187] team0: Port device team_slave_0 added [ 64.982502][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.989811][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.016936][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.039757][ T4187] team0: Port device team_slave_1 added [ 65.048141][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.059534][ T4186] team0: Port device team_slave_0 added [ 65.095105][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.106373][ T4186] team0: Port device team_slave_1 added [ 65.120608][ T4188] team0: Port device team_slave_0 added [ 65.127413][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.134387][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.160922][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.200932][ T4185] device hsr_slave_0 entered promiscuous mode [ 65.208658][ T4185] device hsr_slave_1 entered promiscuous mode [ 65.217155][ T4188] team0: Port device team_slave_1 added [ 65.224118][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.231379][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.258048][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.283042][ T4189] team0: Port device team_slave_0 added [ 65.308986][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.316363][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.342628][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.355297][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.362776][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.388917][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.401892][ T4189] team0: Port device team_slave_1 added [ 65.441765][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.448982][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.475185][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.489827][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.497128][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.525500][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.538736][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.546051][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.572748][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.607883][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.614984][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.641165][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.681441][ T4186] device hsr_slave_0 entered promiscuous mode [ 65.688888][ T4186] device hsr_slave_1 entered promiscuous mode [ 65.696999][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.704846][ T4186] Cannot create hsr debugfs directory [ 65.719602][ T4187] device hsr_slave_0 entered promiscuous mode [ 65.726613][ T4187] device hsr_slave_1 entered promiscuous mode [ 65.733456][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.741614][ T4187] Cannot create hsr debugfs directory [ 65.821863][ T4188] device hsr_slave_0 entered promiscuous mode [ 65.829080][ T4188] device hsr_slave_1 entered promiscuous mode [ 65.836746][ T1325] Bluetooth: hci0: command 0x0409 tx timeout [ 65.841652][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.851429][ T4188] Cannot create hsr debugfs directory [ 65.882325][ T4189] device hsr_slave_0 entered promiscuous mode [ 65.889277][ T4189] device hsr_slave_1 entered promiscuous mode [ 65.896131][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.903780][ T4189] Cannot create hsr debugfs directory [ 65.924753][ T4194] Bluetooth: hci1: command 0x0409 tx timeout [ 65.925738][ T1325] Bluetooth: hci2: command 0x0409 tx timeout [ 65.931519][ T4194] Bluetooth: hci3: command 0x0409 tx timeout [ 65.955476][ T1325] Bluetooth: hci4: command 0x0409 tx timeout [ 66.186226][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.202899][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.212624][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.223929][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.272317][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.281283][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.302076][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.311386][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.393369][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.409297][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.419571][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.429461][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.455200][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.504422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.515089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.531799][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.540855][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.567471][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.579731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.590612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.600499][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.607932][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.633765][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.644223][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.654668][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.666884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.689324][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.698066][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.710610][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.734343][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.742573][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.752775][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.771709][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.780900][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.791472][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.798696][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.817837][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.844286][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.852053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.861114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.890486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.900420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.909580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.918863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.928443][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.935672][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.944754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.953465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.981432][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.999315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.009015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.018631][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.025793][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.033657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.042651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.051287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.061444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.070252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.082860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.093021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.102424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.111347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.119978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.128216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.137332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.147320][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.154392][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.162263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.171958][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.181348][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.193248][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.212273][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.220772][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.230973][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.240785][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.248295][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.293951][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.305210][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.318300][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.337768][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.350442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.360390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.390345][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.402741][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.430132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.441220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.451134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.460942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.470477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.480757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.490975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.501447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.510105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.527021][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.543467][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.561805][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.571350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.587574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.612909][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.626492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.646736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.658248][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.676705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.689973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.704940][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.728950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.745878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.754368][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.761527][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.771546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.802519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.812859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.827995][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.835287][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.848517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.858353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.867522][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.874857][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.882962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.892912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.901894][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.909048][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.919393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.929903][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 67.936242][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.943840][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.972016][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.981132][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.990277][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.997988][ T2290] Bluetooth: hci2: command 0x041b tx timeout [ 68.001540][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.004556][ T2290] Bluetooth: hci3: command 0x041b tx timeout [ 68.012697][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 68.020732][ T2290] Bluetooth: hci1: command 0x041b tx timeout [ 68.025676][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.039764][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.050604][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.060356][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.070275][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.079985][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.100602][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.110502][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.122488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.132226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.144030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.153060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.162087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.170068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.180794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.191301][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.228088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.242610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.254025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.264618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.274655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.289694][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.310990][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.320917][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.373267][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.388463][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.407317][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.417195][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.426563][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.435271][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.444371][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.453364][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.464279][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.474772][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.487909][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.514355][ T4185] device veth0_vlan entered promiscuous mode [ 68.521555][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.530417][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.562717][ T4187] device veth0_vlan entered promiscuous mode [ 68.591293][ T4185] device veth1_vlan entered promiscuous mode [ 68.607673][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.617011][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.626649][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.635118][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.643242][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.659265][ T4188] device veth0_vlan entered promiscuous mode [ 68.683419][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.691586][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.709024][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.726214][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.735023][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.743097][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.750875][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.759337][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.773447][ T4187] device veth1_vlan entered promiscuous mode [ 68.790003][ T4188] device veth1_vlan entered promiscuous mode [ 68.813628][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.823636][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.833821][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.842782][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.851320][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.860333][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.871949][ T4185] device veth0_macvtap entered promiscuous mode [ 68.898838][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.908570][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.916663][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.931780][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.942935][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.959041][ T4185] device veth1_macvtap entered promiscuous mode [ 68.978774][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.018895][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.031346][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.041673][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.052022][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.061495][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.073945][ T4187] device veth0_macvtap entered promiscuous mode [ 69.084285][ T4188] device veth0_macvtap entered promiscuous mode [ 69.099935][ T4186] device veth0_vlan entered promiscuous mode [ 69.113366][ T4187] device veth1_macvtap entered promiscuous mode [ 69.127367][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.143844][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.153029][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.162594][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.171608][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.180842][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.189932][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.200638][ T4188] device veth1_macvtap entered promiscuous mode [ 69.216498][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.224114][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.233810][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.243537][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.265149][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.280008][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.294054][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.312012][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.335761][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.352346][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.365348][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.374751][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.387639][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.400353][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.412211][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.429432][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.441765][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.455073][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.466892][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.478533][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.487837][ T4186] device veth1_vlan entered promiscuous mode [ 69.495983][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.504668][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.514793][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.523973][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.538238][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.548455][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.557556][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.566970][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.580172][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.590325][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.599408][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.609406][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.622469][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.634860][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.647357][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.658689][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.669885][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.718045][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.728501][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.780470][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.794411][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.803678][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.812812][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.822992][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.832207][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.881032][ T4186] device veth0_macvtap entered promiscuous mode [ 69.888855][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.898575][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.907658][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.944265][ T4186] device veth1_macvtap entered promiscuous mode [ 69.966332][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.969980][ T4189] device veth0_vlan entered promiscuous mode [ 69.975503][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.988880][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.997922][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.006353][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 70.007420][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.021742][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.040228][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.051862][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.072507][ T4189] device veth1_vlan entered promiscuous mode [ 70.083378][ T2290] Bluetooth: hci4: command 0x040f tx timeout [ 70.094855][ T2290] Bluetooth: hci1: command 0x040f tx timeout [ 70.101548][ T2290] Bluetooth: hci3: command 0x040f tx timeout [ 70.108235][ T2290] Bluetooth: hci2: command 0x040f tx timeout [ 70.136993][ T1281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.145052][ T1281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.153354][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.165346][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.175638][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.188826][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.199150][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.210150][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.222492][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.233855][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.248203][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.258541][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.269524][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.279780][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.290712][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.303440][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.312563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.321332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.330392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.338622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.348466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.359389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.368430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.379717][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.395176][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.421908][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.429273][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.439280][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.446032][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.457460][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.466514][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.483096][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.492589][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.500566][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.507589][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.517226][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.527176][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.534898][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.543668][ T4189] device veth0_macvtap entered promiscuous mode [ 70.575287][ T4189] device veth1_macvtap entered promiscuous mode [ 70.646417][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.662851][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.695958][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.718457][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.742228][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.771715][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.791875][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.804676][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.815156][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.826096][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.837359][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.848703][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.866352][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.882286][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.892712][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.931517][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.959576][ T4272] binder: 4269:4272 ioctl 4018620d 0 returned -22 [ 70.976074][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.993036][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.013612][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.037963][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.048220][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.064057][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.085071][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.100056][ T4227] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.113902][ T4272] ODEBUG: Out of memory. ODEBUG disabled [ 71.130890][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.149466][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.165292][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.175791][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.184676][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.201901][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.259807][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.286293][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.313992][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.331370][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.369562][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.390166][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 71.424365][ T371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.449963][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.457952][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.465253][ T371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.473400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.553815][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.562812][ T4227] usb 4-1: unable to get BOS descriptor or descriptor too short [ 71.585100][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.625656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.638890][ T4272] syz.1.2 (4272): drop_caches: 2 [ 71.656276][ T4227] usb 4-1: config 4 has an invalid interface number: 127 but max is 0 [ 71.686965][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.694925][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.702893][ T4227] usb 4-1: config 4 has no interface number 0 [ 71.715622][ T4227] usb 4-1: config 4 interface 127 has no altsetting 0 [ 71.737126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.852316][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.876143][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.950014][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.966224][ T4227] usb 4-1: string descriptor 0 read error: -22 [ 71.972775][ T4227] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 72.004334][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.004415][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.027615][ T4285] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.076071][ T4248] Bluetooth: hci0: command 0x0419 tx timeout [ 72.178909][ T4228] Bluetooth: hci2: command 0x0419 tx timeout [ 72.201104][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 72.220254][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 72.227381][ T4228] Bluetooth: hci4: command 0x0419 tx timeout [ 72.271507][ T4290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 72.352322][ T4227] usb 4-1: USB disconnect, device number 2 [ 72.417541][ T4290] device veth0_macvtap left promiscuous mode [ 73.280156][ T1325] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.405559][ T2290] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 73.450364][ T4310] syz.0.9 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 73.555531][ T1325] usb 5-1: Using ep0 maxpacket: 8 [ 73.691717][ T1325] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 73.705618][ T1325] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.745589][ T1325] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.777023][ T1325] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.808124][ T1325] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.868984][ T1325] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 73.900371][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.914901][ T9] tipc: Subscription rejected, illegal request [ 73.979032][ T2290] usb 4-1: unable to get BOS descriptor or descriptor too short [ 74.055631][ T4227] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.065716][ T2290] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 74.083818][ T2290] usb 4-1: can't read configurations, error -71 [ 74.225610][ T1325] usb 5-1: usb_control_msg returned -32 [ 74.231445][ T1325] usbtmc 5-1:16.0: can't read capabilities [ 74.424734][ T1325] usb 5-1: USB disconnect, device number 2 [ 74.435748][ T4227] usb 1-1: config index 0 descriptor too short (expected 1572, got 36) [ 74.450541][ T4227] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.637048][ T4227] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 74.665124][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.694173][ T4227] usb 1-1: Product: syz [ 74.708109][ T4227] usb 1-1: Manufacturer: syz [ 74.712933][ T4227] usb 1-1: SerialNumber: syz [ 74.829140][ T4227] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 74.852549][ T4323] netlink: 'syz.3.14': attribute type 4 has an invalid length. [ 74.897024][ T4323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.045754][ T3547] bcm5974 1-1:1.0: could not read from device [ 75.075614][ T4227] bcm5974 1-1:1.0: could not read from device [ 75.105528][ T3547] bcm5974 1-1:1.0: could not read from device [ 75.137769][ T4227] input: failed to attach handler mousedev to device input5, error: -5 [ 75.175657][ T3547] bcm5974 1-1:1.0: could not read from device [ 75.187040][ T4227] usb 1-1: USB disconnect, device number 2 [ 75.241841][ T4329] device syzkaller0 entered promiscuous mode [ 75.425484][ T2290] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.491383][ T4291] udevd[4291]: Error opening device "/dev/input/event4": No such file or directory [ 75.545854][ T4291] udevd[4291]: Unable to EVIOCGABS device "/dev/input/event4" [ 75.582511][ T4291] udevd[4291]: Unable to EVIOCGABS device "/dev/input/event4" [ 75.618272][ T4291] udevd[4291]: Unable to EVIOCGABS device "/dev/input/event4" [ 75.629367][ T4291] udevd[4291]: Unable to EVIOCGABS device "/dev/input/event4" [ 75.867156][ T2290] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.909364][ T2290] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 75.929688][ T4335] netlink: 'syz.2.19': attribute type 1 has an invalid length. [ 75.930441][ T2290] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 75.977501][ T2290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.003607][ T4335] device bond0 entered promiscuous mode [ 76.036185][ T4330] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 76.048968][ T4335] device bond_slave_0 entered promiscuous mode [ 76.064276][ T4335] device bond_slave_1 entered promiscuous mode [ 76.133980][ T4337] device bridge1 entered promiscuous mode [ 76.168408][ T4337] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 76.262487][ T4337] syz.2.19 uses obsolete (PF_INET,SOCK_PACKET) [ 76.312617][ T4335] device bridge2 entered promiscuous mode [ 76.358736][ T4335] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 76.415714][ T4335] Zero length message leads to an empty skb [ 76.442239][ T4337] device syzkaller1 entered promiscuous mode [ 76.672589][ T4354] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 76.873077][ T4360] tipc: Started in network mode [ 76.884655][ T4360] tipc: Node identity 761c83775738, cluster identity 4711 [ 76.892598][ T4360] tipc: Enabled bearer , priority 0 [ 76.919312][ T4360] device syzkaller0 entered promiscuous mode [ 76.963697][ T4360] tipc: Resetting bearer [ 76.999098][ T4358] tipc: Resetting bearer [ 77.051929][ T4358] tipc: Disabling bearer [ 77.125459][ T4372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 77.125534][ T2290] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.144670][ T4372] device veth0_macvtap left promiscuous mode [ 77.204889][ T4374] IPVS: set_ctl: invalid protocol: 59 10.1.1.3:20257 [ 77.215046][ T4374] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.239996][ T4374] IPVS: rr: FWM 3 0x00000003 - no destination available [ 77.262856][ T4375] device syzkaller0 entered promiscuous mode [ 77.455452][ T2290] usb 1-1: Using ep0 maxpacket: 8 [ 77.595625][ T2290] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 77.605538][ T2290] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.622417][ T2290] usb 1-1: config 0 has no interface number 0 [ 77.633756][ T2290] usb 1-1: config 0 interface 113 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 77.843559][ T2290] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 77.853668][ T2290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.855941][ T1325] usb 5-1: USB disconnect, device number 3 [ 77.866490][ T2290] usb 1-1: Product: syz [ 77.872234][ T2290] usb 1-1: Manufacturer: syz [ 77.877979][ T2290] usb 1-1: SerialNumber: syz [ 77.901069][ T2290] usb 1-1: config 0 descriptor?? [ 77.967812][ T2290] ttusb_dec_send_command: command bulk message failed: error -22 [ 77.990465][ T2290] ttusb-dec: probe of 1-1:0.113 failed with error -22 [ 78.022491][ T2290] usbhid 1-1:0.113: couldn't find an input interrupt endpoint [ 78.171295][ T13] usb 1-1: USB disconnect, device number 3 [ 78.412490][ T4384] netlink: 'syz.3.34': attribute type 1 has an invalid length. [ 78.432856][ T4384] device caif0 entered promiscuous mode [ 78.597209][ T4396] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 78.913545][ T4411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.46'. [ 79.099877][ T4427] netlink: 44 bytes leftover after parsing attributes in process `syz.3.54'. [ 79.205887][ T4433] fuse: Unknown parameter 'user_i00000000000000000000' [ 79.810650][ T4473] program syz.2.73 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.822072][ T4469] program syz.3.72 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.986952][ T4485] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.799638][ T4526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 80.821882][ T4526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.964318][ T4526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.132683][ T4531] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 81.141747][ T4531] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 81.150483][ T4531] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 81.679381][ T1347] cfg80211: failed to load regulatory.db [ 82.845538][ T2290] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.097973][ T2290] usb 2-1: Using ep0 maxpacket: 32 [ 83.215793][ T2290] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.242116][ T2290] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 83.260640][ T2290] usb 2-1: config 0 interface 0 has no altsetting 0 [ 83.269494][ T2290] usb 2-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 83.283905][ T2290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.302169][ T2290] usb 2-1: config 0 descriptor?? [ 83.639337][ T4655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 83.665986][ T2290] usbhid 2-1:0.0: can't add hid device: -71 [ 83.673557][ T2290] usbhid: probe of 2-1:0.0 failed with error -71 [ 83.724285][ T2290] usb 2-1: USB disconnect, device number 2 [ 83.844389][ T4655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.924191][ T4655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.990474][ T4655] bond0 (unregistering): Released all slaves [ 84.162497][ T4662] syz.0.133 (4662) used greatest stack depth: 20944 bytes left [ 84.895444][ T4227] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.135477][ T4227] usb 2-1: Using ep0 maxpacket: 32 [ 85.256529][ T4227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.278768][ T4227] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.332604][ T4711] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.395865][ T4227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.414384][ T4227] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.445485][ T1325] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.555678][ T4227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.575781][ T4227] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.725546][ T1325] usb 3-1: Using ep0 maxpacket: 8 [ 85.809488][ T4227] usb 2-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 85.839232][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.858499][ T4227] usb 2-1: Product: syz [ 85.865730][ T4227] usb 2-1: Manufacturer: syz [ 85.875767][ T1325] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 85.875961][ T4227] usb 2-1: SerialNumber: syz [ 85.894489][ T1325] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.929875][ T1325] usb 3-1: config 0 has no interface number 0 [ 85.940560][ T1347] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 85.941385][ T4227] usb 2-1: config 0 descriptor?? [ 85.959296][ T1325] usb 3-1: config 0 interface 113 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 86.029556][ T4227] usb 2-1: bad CDC descriptors [ 86.046423][ T4227] usb 2-1: bad CDC descriptors [ 86.062153][ T4227] cdc_acm 2-1:0.0: Zero length descriptor references [ 86.085198][ T4227] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 86.161547][ T1325] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 86.181950][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.198650][ T1325] usb 3-1: Product: syz [ 86.202888][ T1325] usb 3-1: Manufacturer: syz [ 86.225553][ T1347] usb 4-1: Using ep0 maxpacket: 16 [ 86.255588][ T1325] usb 3-1: SerialNumber: syz [ 86.272590][ T1325] usb 3-1: config 0 descriptor?? [ 86.328585][ T1325] ttusb_dec_send_command: command bulk message failed: error -22 [ 86.355100][ T1325] ttusb-dec: probe of 3-1:0.113 failed with error -22 [ 86.367775][ T1325] usbhid 3-1:0.113: couldn't find an input interrupt endpoint [ 86.416381][ T26] audit: type=1326 audit(1777253271.950:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b2c34dd9 code=0x7ffc0000 [ 86.446704][ T26] audit: type=1326 audit(1777253271.950:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b2c34dd9 code=0x7ffc0000 [ 86.451246][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 86.469859][ T26] audit: type=1326 audit(1777253271.980:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3b2c34dd9 code=0x7ffc0000 [ 86.513187][ T26] audit: type=1326 audit(1777253271.980:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b2c34dd9 code=0x7ffc0000 [ 86.545502][ T1108] usb 3-1: USB disconnect, device number 2 [ 86.566467][ T26] audit: type=1326 audit(1777253271.980:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b2c34dd9 code=0x7ffc0000 [ 86.572929][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 86.598571][ T26] audit: type=1326 audit(1777253271.980:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd3b2c34dd9 code=0x7ffc0000 [ 86.628132][ T1347] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 86.641768][ T4738] udc-core: couldn't find an available UDC or it's busy [ 86.665536][ T4738] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 86.686797][ T4689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.142'. [ 86.693432][ T1347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.719773][ T1347] usb 4-1: Product: syz [ 86.724237][ T1347] usb 4-1: Manufacturer: syz [ 86.735665][ T1347] usb 4-1: SerialNumber: syz [ 86.741170][ T26] audit: type=1326 audit(1777253271.980:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b2c34dd9 code=0x7ffc0000 [ 86.784545][ T1347] usb 4-1: config 0 descriptor?? [ 86.797887][ T26] audit: type=1326 audit(1777253271.980:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b2c34dd9 code=0x7ffc0000 [ 86.826850][ T4685] ALSA: mixer_oss: invalid OSS volume 'u' [ 86.849487][ T1347] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 86.860126][ T1108] usb 2-1: USB disconnect, device number 3 [ 86.896486][ T1347] usb 4-1: Detected FT232BM [ 86.928202][ T26] audit: type=1326 audit(1777253271.980:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3b2c34dd9 code=0x7ffc0000 [ 86.959219][ T26] audit: type=1326 audit(1777253271.980:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.1.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3b2c34dd9 code=0x7ffc0000 [ 87.065637][ T1347] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 87.085649][ T1347] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 87.109765][ T1347] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 87.187643][ T1347] usb 4-1: USB disconnect, device number 5 [ 87.210257][ T4750] netlink: 'syz.2.161': attribute type 21 has an invalid length. [ 87.266535][ T1347] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 87.327257][ T1347] ftdi_sio 4-1:0.0: device disconnected [ 87.749779][ T4769] device ipvlan2 entered promiscuous mode [ 87.777651][ T4769] team0: Device ipvlan2 failed to register rx_handler [ 88.055544][ T1347] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.485690][ T1347] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.513017][ T1347] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 88.540263][ T4789] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.685812][ T1347] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 88.708428][ T1347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.729749][ T1347] usb 5-1: Product: syz [ 88.739566][ T1347] usb 5-1: Manufacturer: syz [ 88.744217][ T1347] usb 5-1: SerialNumber: syz [ 88.777396][ T1347] usb 5-1: config 0 descriptor?? [ 88.996362][ T4812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.183'. [ 89.520028][ T4848] device syzkaller0 entered promiscuous mode [ 89.856818][ T4862] netlink: 'syz.1.203': attribute type 32 has an invalid length. [ 90.259735][ T4875] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.508515][ T4883] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.655184][ T4890] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 90.672817][ T4890] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 90.771290][ T1108] usb 5-1: USB disconnect, device number 4 [ 90.813553][ T4901] fuse: Unknown parameter 'user_i00000000000000000000' [ 91.025451][ T1347] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.181962][ T4227] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 91.287474][ T4915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.224'. [ 91.435513][ T4227] usb 4-1: Using ep0 maxpacket: 8 [ 91.451295][ T1347] usb 3-1: config 0 has no interfaces? [ 91.457383][ T1347] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 91.477492][ T1347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.521028][ T1347] usb 3-1: config 0 descriptor?? [ 91.555903][ T4227] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 91.570829][ T4227] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.602867][ T4227] usb 4-1: config 0 has no interface number 0 [ 91.616742][ T4227] usb 4-1: config 0 interface 113 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 91.794043][ T2290] usb 3-1: USB disconnect, device number 3 [ 91.805956][ T4227] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 91.815046][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.859964][ T4227] usb 4-1: Product: syz [ 91.864204][ T4227] usb 4-1: Manufacturer: syz [ 91.885494][ T4227] usb 4-1: SerialNumber: syz [ 91.894953][ T4227] usb 4-1: config 0 descriptor?? [ 91.951377][ T4227] ttusb_dec_send_command: command bulk message failed: error -22 [ 91.974152][ T4227] ttusb-dec: probe of 4-1:0.113 failed with error -22 [ 91.983653][ T4227] usbhid 4-1:0.113: couldn't find an input interrupt endpoint [ 92.167702][ T4227] usb 4-1: USB disconnect, device number 6 [ 92.666298][ T4940] fuse: Unknown parameter 'user_i00000000000000000000' [ 93.030510][ T4950] Can't find ip_set type has [ 94.021944][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 94.021961][ T26] audit: type=1800 audit(1777253279.550:22): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.239" name="bus" dev="ramfs" ino=36888 res=0 errno=0 [ 94.416120][ T4980] kvm: pic: non byte write [ 94.879921][ T4998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.894293][ T4998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.926221][ T4998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.967460][ T4998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.296663][ T5013] fuse: Unknown parameter 'user_i00000000000000000000' [ 95.544538][ C1] sd 0:0:1:0: tag#3414 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 95.554598][ C1] sd 0:0:1:0: tag#3414 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00 [ 96.003508][ T26] audit: type=1326 audit(1777253281.530:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5036 comm="syz.1.264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3b2c34dd9 code=0x0 [ 96.576237][ T5060] fuse: Bad value for 'fd' [ 96.960183][ T5070] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 96.969286][ T5070] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 96.978007][ T5070] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 96.985402][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 97.415601][ T1347] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 97.705528][ T1347] usb 4-1: Using ep0 maxpacket: 16 [ 97.862293][ T1347] usb 4-1: config 0 has no interfaces? [ 98.057476][ T1347] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 98.085715][ T1347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.115491][ T1347] usb 4-1: Product: syz [ 98.119737][ T1347] usb 4-1: Manufacturer: syz [ 98.177610][ T1347] usb 4-1: SerialNumber: syz [ 98.194074][ T1347] usb 4-1: config 0 descriptor?? [ 98.513316][ T2290] usb 4-1: USB disconnect, device number 7 [ 98.828510][ T5142] device syzkaller0 entered promiscuous mode [ 98.848842][ T5142] [ 98.851796][ T5142] ============================= [ 98.856827][ T5142] WARNING: suspicious RCU usage [ 98.861941][ T5142] syzkaller #0 Not tainted [ 98.866459][ T5142] ----------------------------- [ 98.871294][ T5142] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 98.879730][ T5142] [ 98.879730][ T5142] other info that might help us debug this: [ 98.879730][ T5142] [ 98.890089][ T5142] [ 98.890089][ T5142] rcu_scheduler_active = 2, debug_locks = 1 [ 98.898267][ T5142] 4 locks held by syz.1.293/5142: [ 98.903284][ T5142] #0: ffffffff8c31eb80 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 98.912891][ T5142] #1: ffff888020357108 (&sch->q.lock){+...}-{2:2}, at: __dev_queue_xmit+0xa2a/0x2f80 [ 98.922536][ T5142] #2: ffff888020357148 (dev->qdisc_running_key ?: &qdisc_running_key){+...}-{0:0}, at: packet_sendmsg+0x3dba/0x5060 [ 98.935038][ T5142] #3: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 98.944376][ T5142] [ 98.944376][ T5142] stack backtrace: [ 98.950283][ T5142] CPU: 1 PID: 5142 Comm: syz.1.293 Not tainted syzkaller #0 [ 98.957649][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 98.967884][ T5142] Call Trace: [ 98.971159][ T5142] [ 98.974215][ T5142] dump_stack_lvl+0x188/0x250 [ 98.978991][ T5142] ? show_regs_print_info+0x20/0x20 [ 98.984189][ T5142] ? lockdep_rcu_suspicious+0x110/0x180 [ 98.989828][ T5142] qdisc_lookup+0xa6/0x650 [ 98.994254][ T5142] qdisc_tree_reduce_backlog+0x190/0x430 [ 98.999881][ T5142] sfq_enqueue+0x14ad/0x2280 [ 99.004565][ T5142] ? ktime_get+0x7b/0x270 [ 99.009002][ T5142] ? decrement_one_qlen+0x550/0x550 [ 99.014398][ T5142] netem_dequeue+0xd4c/0x1410 [ 99.019171][ T5142] ? verify_lock_unused+0x140/0x140 [ 99.024384][ T5142] ? netem_enqueue+0x3800/0x3800 [ 99.029332][ T5142] __qdisc_run+0x236/0x1490 [ 99.034015][ T5142] __dev_queue_xmit+0xe3d/0x2f80 [ 99.038979][ T5142] ? dev_queue_xmit+0x20/0x20 [ 99.043945][ T5142] ? virtio_net_hdr_to_skb+0xae3/0x11f0 [ 99.049632][ T5142] ? packet_cached_dev_get+0x270/0x270 [ 99.055186][ T5142] ? skb_copy_datagram_from_iter+0x5e3/0x6a0 [ 99.061272][ T5142] packet_sendmsg+0x3dba/0x5060 [ 99.066137][ T5142] ? __might_sleep+0xf0/0xf0 [ 99.070907][ T5142] ? aa_sk_perm+0x7dc/0x910 [ 99.075602][ T5142] ? packet_getsockopt+0x9a0/0x9a0 [ 99.080719][ T5142] ? aa_sock_msg_perm+0x94/0x150 [ 99.085830][ T5142] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 99.091294][ T5142] ? security_socket_sendmsg+0x7c/0xa0 [ 99.096926][ T5142] __sys_sendto+0x46d/0x620 [ 99.101670][ T5142] ? __ia32_sys_getpeername+0x80/0x80 [ 99.107070][ T5142] ? __lock_acquire+0x7d10/0x7d10 [ 99.112110][ T5142] ? lock_chain_count+0x20/0x20 [ 99.117152][ T5142] ? vtime_user_exit+0x2c8/0x3e0 [ 99.122200][ T5142] __x64_sys_sendto+0xda/0xf0 [ 99.126917][ T5142] do_syscall_64+0x4c/0xa0 [ 99.131349][ T5142] ? clear_bhb_loop+0x30/0x80 [ 99.136236][ T5142] ? clear_bhb_loop+0x30/0x80 [ 99.141023][ T5142] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.147005][ T5142] RIP: 0033:0x7fd3b2c34dd9 [ 99.151653][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.171340][ T5142] RSP: 002b:00007fd3b0e8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 99.179752][ T5142] RAX: ffffffffffffffda RBX: 00007fd3b2eadfa0 RCX: 00007fd3b2c34dd9 [ 99.187906][ T5142] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 99.196144][ T5142] RBP: 00007fd3b2ccad69 R08: 0000200000000140 R09: 0000000000000014 [ 99.204145][ T5142] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 99.212299][ T5142] R13: 00007fd3b2eae038 R14: 00007fd3b2eadfa0 R15: 00007fffbc86fab8 [ 99.220291][ T5142]