last executing test programs: 4.929263644s ago: executing program 2 (id=247): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x23a, &(0x7f00000004c0)={0x0, 0x1c2a, 0x10100, 0x2, 0x30e, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r5, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) 4.371989683s ago: executing program 1 (id=252): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') 4.026926534s ago: executing program 1 (id=253): syz_open_dev$video(0x0, 0x3f9, 0x141842) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 3.933272332s ago: executing program 2 (id=254): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc4}}, 0x0) 3.748229649s ago: executing program 2 (id=256): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902"], 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000b80)) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r3) r7 = fcntl$dupfd(r2, 0x406, r5) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)={0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) 3.673369595s ago: executing program 1 (id=257): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f58000/0x3000)=nil, 0x7ffffffa, &(0x7f0000000080)=[{0xc6, 0x20006, 0xfffffffffffffffc}], 0x1, 0x2, 0x0, 0x2, 0x7, 0x8}) 3.177301869s ago: executing program 4 (id=260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000140)={0x0, 0x107000}) 3.154479211s ago: executing program 4 (id=261): socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x82a00) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 3.097020976s ago: executing program 4 (id=262): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0x2000c5fb, @value=0x3}) r0 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9", 0x12, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 2.993227216s ago: executing program 4 (id=263): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0x3) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, 0x0) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000140)) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 2.775331525s ago: executing program 1 (id=265): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 2.721258559s ago: executing program 3 (id=266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) 2.680571363s ago: executing program 3 (id=268): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xe, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) clock_adjtime(0xa00, &(0x7f0000000780)={0xe627, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffc, 0xcb, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8000, 0x2, 0x5}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x570}]}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x8}, 0x7, 0x0, &(0x7f0000000180)={0x1, 0x11, 0x0, 0x5, 0x4}, 0x8, 0xa24, 0x7fffffff, 0x0, 0x565, 0x8, &(0x7f0000000680)="f14a1f6cea5b1c64d4ba089ce01fbfd9f31b425114c63dc2b2731a6e76f0db981d75ab1bda9aa841a6c6efaab52fef85d856604c2d9d10dbcf393f6fcd54d7798b9fcd1fcec633239ebc6ef04090346f08043e16d6d0db1eaeafcc1105863a44b3cef7e69fbd04fe5fb4ce31c3c76e4541467549cd8e35e392782af06624b5720327d2bcfe11bb82f5935fda6dc93e68f68e47fb1ad69d46df71c0db71c79a2f6555559af9d8713c8cdf21c22ce02a9dc9cd09af0be834af0d62568f3276ceae1a0e"}) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "f64d87da603fa09a", "ec9580400006000000ba6a6b247009d4", "de59eeea", '\x00\x00\x00\x00\x00\x00\b\x00'}, 0x28) sendmsg(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[{0x10, 0x11a, 0x10801}], 0x10}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x4000800) 2.622388948s ago: executing program 1 (id=270): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x20000080) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x7, 0x9, 0xa83, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x20008040) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 2.444744084s ago: executing program 0 (id=273): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x8a}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xa, 0x2, 0x0, 0x0, 0x4ffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 2.340151983s ago: executing program 0 (id=274): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}}, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c200000000000000000086dd60cb3e0200403a00fc020000000000000000000000000000ff02000000000000000000000000000104009078000061302543000000001100fe8000000000000000000000000000aafe80000000000000000000007c9517ba81000000000000002c"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) 2.253187971s ago: executing program 1 (id=275): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0xa003) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000200)={0x0, 0x3d, 0x3, &(0x7f00000001c0)={0x19, "0fd62f5244b23de763e6acba8d11e6daa6c4ee99000000000000040200"}}) 2.236210392s ago: executing program 0 (id=276): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) write$tun(r1, 0x0, 0xa2) 2.184275297s ago: executing program 0 (id=277): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 2.144945791s ago: executing program 3 (id=278): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) sendmmsg$alg(r1, &(0x7f0000000e40)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="55e978ec3c821069ddcf7aa53cd7962802", 0x11}], 0x1, 0x0, 0x0, 0x24000004}], 0x1, 0x90) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}]) 2.089166625s ago: executing program 4 (id=279): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000002100)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e20, @rand_addr=0x64010101}]}, &(0x7f0000000100)=0xc) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000000)=@fragment={0x3b, 0x0, 0x1, 0x0, 0x0, 0x6, 0x68}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r2) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001040)={{}, 0x0, 0x2, @inherit={0x48, &(0x7f0000000fc0)={0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, {0x2a, 0xca8, 0x8, 0x0, 0x9}}}, @devid}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10, 0x1, 0x1, [r4]}}], 0x10}, 0x0) recvmmsg$unix(r4, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/146}], 0x0, &(0x7f0000000280)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @cred, @cred, @cred, @cred, @rights]}}, {{&(0x7f0000000340), 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/111}], 0x0, &(0x7f0000000480)=[@rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights, @rights]}}, {{&(0x7f0000000540)=@abs, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/28}, {&(0x7f0000000680)=""/18}], 0x0, &(0x7f0000000700)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}, {{&(0x7f0000000780), 0x0, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/190}, {&(0x7f00000008c0)=""/64}, {&(0x7f0000000900)=""/99}, {&(0x7f0000000980)=""/222}, {&(0x7f0000000a80)=""/224}, {&(0x7f0000000b80)=""/4}, {&(0x7f0000000bc0)=""/237}, {&(0x7f0000000cc0)=""/60}, {&(0x7f0000000d00)=""/226}], 0x0, &(0x7f0000000e80)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}], 0x7e4, 0x2, 0x0) 2.054055669s ago: executing program 0 (id=280): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x1, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000f000037ca00005800000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22000001}, 0x0) 2.016539822s ago: executing program 0 (id=281): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7cb, &(0x7f0000000100)={&(0x7f0000000380)={{@local, 0x1}, {@local, 0x6}, 0x400, "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"}, 0x418, 0x5}) ioctl$IOCTL_VMCI_SET_NOTIFY(r2, 0x7cb, &(0x7f0000000140)={0x0, 0x10000}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r4, 0x107, 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r5, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000ba451ebee75e1000e7ff000000129d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r10}) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 1.933279139s ago: executing program 3 (id=282): mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) 1.92577108s ago: executing program 3 (id=283): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x558, 0xffffffffffffffff, &(0x7f0000000340)="073b12", 0x3, 0x7}]) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 1.856066416s ago: executing program 3 (id=284): writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x95, 0x5a, 0x4f, 0x40, 0xcf3, 0xe019, 0xfb4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x80, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x94, 0x9, 0x2, 0x74, 0x83, 0x31, 0x80, [], [{{0x9, 0x5, 0x7, 0x0, 0x0, 0x6, 0x8, 0x0, [@generic={0x9, 0x11, "62b367e12306af"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x81, 0x5, 0x9}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'macsec0\x00'}, 0x18) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2450000380067000000019078ac1e0001ac1414aa030190781200183e250000000000d181fe010000e000006371ae83430300"/70], 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b01, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x9, 0x401, 0x3032344d, 0x32315559, 0x7, [{0x9, 0xc369}, {0xe, 0xd}, {0x7, 0xa00}, {0x8, 0x7fff}, {0xf, 0x4}, {0x5, 0x401}, {0xf, 0x9}, {0x2240, 0x6}], 0x6, 0x9, 0x1, 0x2, 0x5}}) readv(r5, &(0x7f0000000280)=[{0x0}], 0x1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c000300000005000d000000000006000100070000000c0010000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r10, 0x400c620e, &(0x7f0000000180)={0x0, 0x1, 0xfffffffe}) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x1f0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb8100000008004c7001de006800007006000000000000ac1e00018313f0ffffffffac14142f64010100e0000001440c9020000080000000000307135dac14140ae0000002ac1414bbac1414aa071725e0000001e0000001e00000020a010102ac1414aa890f3cac1414237f000001e000000244045e6f0c20880b00000000000effff05000800000400029f8fe9416ee954e80d2fb45ee54c5e4ac4950337599b67f843d1a406a992231d7629f377e0db814029d76d3d351d4866607c4dcb77dfc27b2b760154c65878e90f5c9f8a602af2e33838cf66697bd692c18e18a22b43a152090086dd0000fe5192c52baa6f45f0cd7f8f807cdea3e27dc15ee72cbe22e7c00cb4b1478819b92ffb4a001081e75bf2c6c6d39f7bfe5037d9b5ac3e27f091f2d12ab7e25cd128fd33dca7989c0441a8b6b93157a0aebaa2790ea8fc54abe60b4869fdf09b9b06f7b0080088be000000041603810401000000ffffffff080022eb000000002900a340020000000000000700028a150800655800000001f96b8720a502df30996774749f0863926573fd7168cf19f6a88a3b3109140df44c519fa286ba45b6bc1e9a413d33cab986cbdb41bf7013f1420d1a49dfabfd371b1ff4a01ee3751f0810bc5b187d685c1210401f00df0b71a06a61fdfb77b30804628a3c53e7b42648d6459933dea884976a905bbfc431611eb231470b8376132a4c8f6a44e7f6ce24f8a8e257ab89f1dca13916da476395f261301731e2c4f11285fba2f154df8324703c410d4bce604e8e3ddfb274a77a0ad3d3d2fafc1d582c2e96bdee72e709e5b559270f71121d4f7eb1269071af3d22309dec8073f54831ac20c8aececc984ef101ea1a"], 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000080)) 1.653953194s ago: executing program 2 (id=285): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20040000) sendmmsg$inet(r0, &(0x7f0000006540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)='#NB\f', 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x8811) 1.513204726s ago: executing program 2 (id=286): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xfffffff9}]}}}]}, 0x3c}}, 0x4000010) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffd, 0xffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xc, 0x18, 0xd, 0x1, 0x8, 0xfffffffe}}, {0x4}}]}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r6, 0x701, 0x0, 0x25dfdbfc, {0x41}}, 0x14}}, 0x4c000) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x222f10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x8c, r6, 0x100, 0x1, 0x2, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 113.514871ms ago: executing program 4 (id=287): modify_ldt$write(0x1, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xd2, 0xe, 0x9}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x4008550d) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0xffffffffffffff8e, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2a, 0x3, 0x4) gettid() r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0xfffffffc}, 0x1c) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2000) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x89, 0x4, 0x0, @loopback, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @rand_addr=0x64010102, @empty}}}}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001a40)="a1"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00'}) 0s ago: executing program 2 (id=288): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts. [ 59.562015][ T4170] cgroup: Unknown subsys name 'net' [ 59.696115][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.106063][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.561757][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 62.694866][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.702181][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.711295][ T4182] device bridge_slave_0 entered promiscuous mode [ 62.726911][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.734958][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.743189][ T4182] device bridge_slave_1 entered promiscuous mode [ 62.809405][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 62.823554][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 62.838115][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.865852][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.907646][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 62.950199][ T4182] team0: Port device team_slave_0 added [ 62.975449][ T4182] team0: Port device team_slave_1 added [ 63.040766][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.047951][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.056048][ T4190] device bridge_slave_0 entered promiscuous mode [ 63.064161][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.071388][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.097432][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.110910][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.117886][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.143905][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.164671][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.172184][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.180253][ T4180] device bridge_slave_0 entered promiscuous mode [ 63.194779][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.202045][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.210417][ T4190] device bridge_slave_1 entered promiscuous mode [ 63.220739][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 63.230798][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.237973][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.246366][ T4180] device bridge_slave_1 entered promiscuous mode [ 63.289855][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.313849][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.321377][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.329997][ T4181] device bridge_slave_0 entered promiscuous mode [ 63.343441][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.361813][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.371399][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.378474][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.387057][ T4181] device bridge_slave_1 entered promiscuous mode [ 63.416214][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.446643][ T4182] device hsr_slave_0 entered promiscuous mode [ 63.453766][ T4182] device hsr_slave_1 entered promiscuous mode [ 63.481022][ T4190] team0: Port device team_slave_0 added [ 63.498231][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.512934][ T4190] team0: Port device team_slave_1 added [ 63.530187][ T4180] team0: Port device team_slave_0 added [ 63.543088][ T4180] team0: Port device team_slave_1 added [ 63.550316][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.602204][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.609195][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.635661][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.647720][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.654936][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.663817][ T4194] device bridge_slave_0 entered promiscuous mode [ 63.679177][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.686570][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.694599][ T4194] device bridge_slave_1 entered promiscuous mode [ 63.717237][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.724401][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.750774][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.775771][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.782861][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.808907][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.822696][ T4181] team0: Port device team_slave_0 added [ 63.829061][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.837177][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.863397][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.892883][ T4181] team0: Port device team_slave_1 added [ 63.900608][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.919757][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.979992][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.986972][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.013026][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.027179][ T4194] team0: Port device team_slave_0 added [ 64.052685][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.060027][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.086283][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.098913][ T4194] team0: Port device team_slave_1 added [ 64.118465][ T4180] device hsr_slave_0 entered promiscuous mode [ 64.125363][ T4180] device hsr_slave_1 entered promiscuous mode [ 64.132454][ T4180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.140722][ T4180] Cannot create hsr debugfs directory [ 64.149452][ T4190] device hsr_slave_0 entered promiscuous mode [ 64.156498][ T4190] device hsr_slave_1 entered promiscuous mode [ 64.163349][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.171272][ T4190] Cannot create hsr debugfs directory [ 64.225030][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.232284][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.258495][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.298915][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.306275][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.332648][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.357926][ T4181] device hsr_slave_0 entered promiscuous mode [ 64.364992][ T4181] device hsr_slave_1 entered promiscuous mode [ 64.371940][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.379501][ T4181] Cannot create hsr debugfs directory [ 64.380617][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 64.389713][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 64.398754][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 64.405733][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 64.414601][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 64.467966][ T4194] device hsr_slave_0 entered promiscuous mode [ 64.474889][ T4194] device hsr_slave_1 entered promiscuous mode [ 64.481887][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.489467][ T4194] Cannot create hsr debugfs directory [ 64.684873][ T4182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.708378][ T4182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.724691][ T4182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.734464][ T4182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.773993][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.787324][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.797707][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.814322][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.876833][ T4180] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.887055][ T4180] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.910336][ T4180] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.930794][ T4180] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.013372][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.025219][ T4181] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.037935][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.053271][ T4181] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.063096][ T4181] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.076484][ T4181] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.093736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.108883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.133680][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.143800][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.152638][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.178656][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.200414][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.211453][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.221130][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.228362][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.244736][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.255459][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.267265][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.277448][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.288603][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.299040][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.308442][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.317353][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.324459][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.334543][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.345938][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.354906][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.362324][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.397214][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.405799][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.415629][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.425376][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.432532][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.441138][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.450543][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.463570][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.473166][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.483116][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.492797][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.504558][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.528098][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.538240][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.561699][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.575080][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.586256][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.603779][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.614510][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.623669][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.632362][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.640966][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.648682][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.657886][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.666758][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.675847][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.684899][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.693696][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.703565][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.711960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.755310][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.774571][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.788990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.805563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.814283][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.821426][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.836519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.845566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.854620][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.861742][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.870438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.878916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.887768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.897457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.907783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.916344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.945357][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.956160][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.966785][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.976637][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.986268][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.995785][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.018619][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.050801][ T4180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.073961][ T4180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.101413][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.118656][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.127696][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.138022][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.147288][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.156091][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.178494][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.203256][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.218200][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.227798][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.237280][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.268975][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.281088][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.292606][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.304432][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.311561][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.323824][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.333380][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.342957][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.350114][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.370845][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.385571][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.405623][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.415316][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.425474][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.434621][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.444317][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.460063][ T4237] Bluetooth: hci0: command 0x041b tx timeout [ 66.466397][ T4237] Bluetooth: hci1: command 0x041b tx timeout [ 66.472650][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.473865][ T4237] Bluetooth: hci3: command 0x041b tx timeout [ 66.485900][ T4237] Bluetooth: hci4: command 0x041b tx timeout [ 66.499819][ T4237] Bluetooth: hci2: command 0x041b tx timeout [ 66.506314][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.515112][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.525649][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.536422][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.546863][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.555582][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.563554][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.586221][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.600154][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.608274][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.625002][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.635982][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.655157][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.664758][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.708413][ T4182] device veth0_vlan entered promiscuous mode [ 66.715816][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.726003][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.736154][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.743282][ T4263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.753393][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.764428][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.773459][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.780575][ T4263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.797470][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.807853][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.816944][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.826562][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.835407][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.844498][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.853240][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.868249][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.890455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.898666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.920116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.928079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.943173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.958396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.969316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.979368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.994468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.006973][ T4190] device veth0_vlan entered promiscuous mode [ 67.030492][ T4182] device veth1_vlan entered promiscuous mode [ 67.044908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.053261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.064655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.073537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.082652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.090569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.099020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.116908][ T4190] device veth1_vlan entered promiscuous mode [ 67.129008][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.142035][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.155579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.163876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.172650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.181383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.190355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.205105][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.216988][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.242378][ T4182] device veth0_macvtap entered promiscuous mode [ 67.261503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.276886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.302100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.317594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.334390][ T4182] device veth1_macvtap entered promiscuous mode [ 67.361018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.369081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.385920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.413189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.423751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.439135][ T4190] device veth0_macvtap entered promiscuous mode [ 67.453001][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.467134][ T4180] device veth0_vlan entered promiscuous mode [ 67.475715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.487101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.497264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.507475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.516533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.528081][ T4190] device veth1_macvtap entered promiscuous mode [ 67.539132][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.559069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.580959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.588900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.604107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.616543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.643792][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.655419][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.666925][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.680673][ T4182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.690147][ T4182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.698865][ T4182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.708004][ T4182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.725176][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.734219][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.745789][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.756980][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.774905][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.786642][ T4180] device veth1_vlan entered promiscuous mode [ 67.813657][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.830457][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.845833][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.855788][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.871863][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.882222][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.892308][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.901952][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.924810][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.035758][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.044920][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.054380][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.065818][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.076067][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.085258][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.104625][ T4180] device veth0_macvtap entered promiscuous mode [ 68.147531][ T4180] device veth1_macvtap entered promiscuous mode [ 68.161388][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.180692][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.188445][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.202493][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.213491][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.221365][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.234265][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.242562][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.251122][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.259461][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.284693][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.293698][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.305892][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.314828][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.323876][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.332546][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.344286][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.354831][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.365014][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.375746][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.387547][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.405281][ T4194] device veth0_vlan entered promiscuous mode [ 68.416596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.427411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.437548][ T4181] device veth0_vlan entered promiscuous mode [ 68.445678][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.457009][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.467837][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.478757][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.491598][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.531118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.540690][ T4237] Bluetooth: hci2: command 0x040f tx timeout [ 68.546891][ T4237] Bluetooth: hci4: command 0x040f tx timeout [ 68.553843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.562270][ T4237] Bluetooth: hci3: command 0x040f tx timeout [ 68.570625][ T4237] Bluetooth: hci1: command 0x040f tx timeout [ 68.576818][ T4237] Bluetooth: hci0: command 0x040f tx timeout [ 68.578171][ T4180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.592620][ T4180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.601717][ T4180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.610963][ T4180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.623851][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.632758][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.637331][ T4181] device veth1_vlan entered promiscuous mode [ 68.646981][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.655074][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.671467][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.679736][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.687825][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.696944][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.724501][ T4194] device veth1_vlan entered promiscuous mode [ 68.787385][ T4181] device veth0_macvtap entered promiscuous mode [ 68.806325][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.827290][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.854838][ T4181] device veth1_macvtap entered promiscuous mode [ 68.880328][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.890798][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.943893][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.965565][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.983557][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.999062][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.009853][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.022509][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.041967][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.072493][ T4194] device veth0_macvtap entered promiscuous mode [ 69.080338][ T1271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.100691][ T1271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.108261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.123670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.144904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.157338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.170917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.185776][ T4194] device veth1_macvtap entered promiscuous mode [ 69.215830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.232224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.261181][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.281998][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.299691][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.321378][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.335337][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.348763][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.363733][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.382513][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.396941][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.424980][ T4181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.446802][ T4181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.458650][ T4181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.473251][ T4181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.491741][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.512338][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.525852][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.543509][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.557719][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 69.574806][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.589097][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.604583][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.617476][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.633350][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.648959][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.670869][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.705864][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.721337][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.734843][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.763718][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.792211][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.806781][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.823781][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.838616][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.854372][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.869679][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.883321][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.944811][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.975265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.030444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.087364][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.133786][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.161913][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.179600][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.211656][ T4303] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 70.310215][ T4304] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 70.368133][ T4304] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.398594][ T4304] bond0: (slave team0): Enslaving as an active interface with an up link [ 70.427228][ T1271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.460382][ T1271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.498678][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.525484][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.557125][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.632534][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 70.638638][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 70.652577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.672720][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 70.699854][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 70.710613][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.718573][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.729731][ T4304] syz.1.7 (4304) used greatest stack depth: 20832 bytes left [ 70.749743][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 70.754419][ T4311] capability: warning: `syz.0.9' uses deprecated v2 capabilities in a way that may be insecure [ 70.767330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.876732][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.919825][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.970310][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.188343][ T4318] input: syz0 as /devices/virtual/input/input5 [ 71.263888][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.270556][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.356489][ T4330] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 71.363278][ T4330] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 71.450805][ T4330] vhci_hcd vhci_hcd.0: Device attached [ 71.458034][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 71.527652][ T4331] vhci_hcd: connection closed [ 71.534791][ T144] vhci_hcd: stop threads [ 71.553001][ T144] vhci_hcd: release socket [ 71.566121][ T144] vhci_hcd: disconnect device [ 72.696867][ T4352] program syz.3.14 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.785494][ T4352] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 72.830477][ T4352] syzkaller1: linktype set to 823 [ 72.850543][ T4353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14'. [ 73.139702][ T4219] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.579765][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 73.588712][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 73.597676][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 73.606697][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 73.615608][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 73.624492][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 73.633398][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 73.642388][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 73.724686][ T4219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.768317][ T4219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.788880][ T4219] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 73.804028][ T4219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.825071][ T4219] usb 2-1: config 0 descriptor?? [ 73.883421][ T4366] ubi31: attaching mtd0 [ 73.929354][ T4366] ubi31: scanning is finished [ 73.960399][ T4366] ubi31: empty MTD device detected [ 74.261061][ T4366] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 74.315104][ T4219] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x1 [ 74.372811][ T4219] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 74.495880][ T4370] device syzkaller0 entered promiscuous mode [ 74.540419][ T4219] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 74.784344][ T4378] process 'syz.4.22' launched './file0' with NULL argv: empty string added [ 75.179844][ T4219] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 75.236560][ T4219] usb 2-1: USB disconnect, device number 2 [ 75.404796][ T4386] fido_id[4386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 75.640595][ T21] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 75.737849][ T4400] misc userio: The device must be registered before sending interrupts [ 75.810395][ T4402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'. [ 75.871364][ T4402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 75.918844][ T4402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 76.019829][ T21] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 76.028120][ T4219] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 76.046556][ T21] usb 1-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 76.082234][ T21] usb 1-1: config 0 has no interface number 0 [ 76.095845][ T21] usb 1-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.177077][ T21] usb 1-1: config 0 interface 113 has no altsetting 0 [ 76.349899][ T21] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 76.385873][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.399930][ T4219] usb 3-1: No LPM exit latency info found, disabling LPM. [ 76.445649][ T21] usb 1-1: Product: syz [ 76.475082][ T21] usb 1-1: Manufacturer: syz [ 76.489886][ T4219] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.510244][ T21] usb 1-1: SerialNumber: syz [ 76.522068][ T4219] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 76.593613][ T21] usb 1-1: config 0 descriptor?? [ 76.680728][ T21] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 76.889774][ T4251] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 76.929793][ T4219] usb 3-1: string descriptor 0 read error: -22 [ 76.937700][ T4219] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 77.003425][ T4219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.199825][ T4251] usb 2-1: Using ep0 maxpacket: 32 [ 77.335179][ T4394] mmap: syz.2.29 (4394) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 77.360394][ T4251] usb 2-1: config 0 has no interfaces? [ 77.365902][ T4251] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 77.466783][ T4251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.533623][ T4251] usb 2-1: config 0 descriptor?? [ 77.568812][ T4219] usb 1-1: USB disconnect, device number 2 [ 77.815435][ T4412] udc-core: couldn't find an available UDC or it's busy [ 77.839799][ T4412] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.890980][ T4412] udc-core: couldn't find an available UDC or it's busy [ 77.922798][ T4412] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.991772][ T4251] usb 2-1: USB disconnect, device number 3 [ 78.537548][ T4252] usb 3-1: USB disconnect, device number 2 [ 78.870180][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 79.240301][ T7] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 79.248472][ T7] usb 2-1: config 0 has no interface number 0 [ 79.500573][ T7] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 79.523163][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.554202][ T7] usb 2-1: Product: syz [ 79.558420][ T7] usb 2-1: Manufacturer: syz [ 79.564666][ T7] usb 2-1: SerialNumber: syz [ 79.588847][ T7] usb 2-1: config 0 descriptor?? [ 79.850964][ T7] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 79.925953][ T7] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 80.026435][ T7] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 80.106392][ T7] usb 2-1: media controller created [ 80.164169][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.319892][ T7] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 80.470436][ T7] usb 2-1: USB disconnect, device number 4 [ 80.487778][ T4467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.52'. [ 80.508140][ T4462] sctp: failed to load transform for md5: -2 [ 81.007186][ T4487] input: syz0 as /devices/virtual/input/input6 [ 81.311523][ T4494] Zero length message leads to an empty skb [ 81.340513][ T4251] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.497330][ T4496] netlink: 'syz.2.61': attribute type 1 has an invalid length. [ 81.555765][ T4496] netlink: 'syz.2.61': attribute type 2 has an invalid length. [ 81.740026][ T4251] usb 1-1: config 0 has no interfaces? [ 81.795931][ T4501] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.939923][ T4251] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.990033][ T4251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.998597][ T4251] usb 1-1: Product: syz [ 82.046742][ T4251] usb 1-1: Manufacturer: syz [ 82.089564][ T4251] usb 1-1: SerialNumber: syz [ 82.106274][ T4251] usb 1-1: config 0 descriptor?? [ 82.145119][ T21] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 82.200211][ T21] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 82.218786][ T21] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 82.238139][ T21] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 82.251587][ T21] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 82.279604][ T21] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 82.300209][ T21] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 82.317912][ T21] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 82.338253][ T21] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 82.372252][ T21] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 82.414792][ T21] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 82.414893][ T21] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 82.414916][ T21] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 82.458944][ T21] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 82.490350][ T21] hid-generic 00A0:0006:0003.0002: hidraw0: HID v0.05 Device [syz1] on syz0 [ 82.688056][ T4514] netlink: 'syz.2.68': attribute type 29 has an invalid length. [ 82.757255][ T4251] usb 1-1: USB disconnect, device number 3 [ 82.819750][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.099736][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 83.148543][ T21] usb 4-1: no configurations [ 83.153557][ T21] usb 4-1: can't read configurations, error -22 [ 83.330223][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.579780][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 83.621958][ T21] usb 4-1: no configurations [ 83.626594][ T21] usb 4-1: can't read configurations, error -22 [ 83.643678][ T21] usb usb4-port1: attempt power cycle [ 84.096948][ T26] audit: type=1326 audit(1767849768.637:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5d22b749 code=0x7ffc0000 [ 84.119674][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 84.176207][ T26] audit: type=1326 audit(1767849768.687:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f3c5d22b749 code=0x7ffc0000 [ 84.240007][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 84.249834][ T26] audit: type=1326 audit(1767849768.687:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5d22b749 code=0x7ffc0000 [ 84.295337][ T21] usb 4-1: no configurations [ 84.300378][ T21] usb 4-1: can't read configurations, error -22 [ 84.350195][ T26] audit: type=1326 audit(1767849768.687:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5d22b749 code=0x7ffc0000 [ 84.460685][ T26] audit: type=1326 audit(1767849768.687:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f3c5d22b749 code=0x7ffc0000 [ 84.489685][ T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 84.531776][ T26] audit: type=1326 audit(1767849768.687:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5d22b749 code=0x7ffc0000 [ 84.616251][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 84.662217][ T26] audit: type=1326 audit(1767849768.687:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c5d22b749 code=0x7ffc0000 [ 84.689978][ T21] usb 4-1: no configurations [ 84.695071][ T21] usb 4-1: can't read configurations, error -22 [ 84.720151][ T21] usb usb4-port1: unable to enumerate USB device [ 85.329479][ T4599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 85.379635][ T21] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 85.740431][ T4223] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.890306][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 85.949893][ T21] usb 1-1: not running at top speed; connect to a high speed hub [ 85.980158][ T4223] usb 5-1: Using ep0 maxpacket: 16 [ 86.039904][ T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.093712][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.102234][ T4223] usb 5-1: config 0 has an invalid interface number: 59 but max is 0 [ 86.118265][ T4223] usb 5-1: config 0 has no interface number 0 [ 86.152608][ T4223] usb 5-1: config 0 interface 59 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 86.195528][ T4223] usb 5-1: config 0 interface 59 altsetting 0 endpoint 0x1 has an invalid bInterval 113, changing to 7 [ 86.224264][ T4223] usb 5-1: config 0 interface 59 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 86.419836][ T4223] usb 5-1: New USB device found, idVendor=0bda, idProduct=5088, bcdDevice=dc.23 [ 86.429266][ T21] usb 1-1: string descriptor 0 read error: -22 [ 86.437679][ T21] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.450119][ T4223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.481256][ T4223] usb 5-1: Product: syz [ 86.492566][ T4223] usb 5-1: Manufacturer: syz [ 86.507300][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.524279][ T4223] usb 5-1: SerialNumber: syz [ 86.546719][ T4223] usb 5-1: config 0 descriptor?? [ 86.621899][ T1108] cfg80211: failed to load regulatory.db [ 86.643558][ T21] usb 1-1: 0:2 : does not exist [ 86.894525][ T4649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.102'. [ 87.196001][ T4653] loop5: detected capacity change from 0 to 7 [ 87.244027][ T4653] loop5: [ 87.250030][ T4653] loop5: partition table partially beyond EOD, truncated [ 87.364670][ T4276] usb 5-1: USB disconnect, device number 2 [ 87.671173][ T4662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'. [ 87.849803][ T4276] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.153659][ T4673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'. [ 88.163092][ T4673] device veth0_to_hsr entered promiscuous mode [ 88.173808][ T4673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'. [ 88.259907][ T4276] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 88.288145][ T4276] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 88.300042][ T4276] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.319718][ T4223] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 88.461675][ T21] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 88.549754][ T4276] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 88.549787][ T4276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 88.549808][ T4276] usb 5-1: Product: syz [ 88.549824][ T4276] usb 5-1: Manufacturer: syz [ 88.549839][ T4276] usb 5-1: SerialNumber: syz [ 88.780003][ T21] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 88.797687][ T21] usb 1-1: USB disconnect, device number 4 [ 88.850472][ T4223] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 88.850502][ T4223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.850523][ T4223] usb 4-1: Product: syz [ 88.850539][ T4223] usb 4-1: Manufacturer: syz [ 88.850554][ T4223] usb 4-1: SerialNumber: syz [ 88.867783][ T4276] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 88.882238][ T4223] usb 4-1: config 0 descriptor?? [ 89.034879][ T4276] usb 5-1: USB disconnect, device number 3 [ 89.045476][ T4276] usblp0: removed [ 89.049889][ T4219] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 89.144023][ T4223] usb-storage 4-1:0.0: USB Mass Storage device detected [ 89.319610][ T4219] usb 2-1: Using ep0 maxpacket: 8 [ 89.439701][ T4219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 89.462910][ T4219] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.479264][ T4219] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 89.489092][ T4219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.510866][ T4219] usb 2-1: config 0 descriptor?? [ 89.921114][ T4698] device veth1_macvtap left promiscuous mode [ 89.929833][ T4698] device macsec0 entered promiscuous mode [ 89.974759][ T4701] device veth1_macvtap entered promiscuous mode [ 90.015883][ T4701] device macsec0 left promiscuous mode [ 90.069805][ T4219] usbhid 2-1:0.0: can't add hid device: -71 [ 90.086347][ T4219] usbhid: probe of 2-1:0.0 failed with error -71 [ 90.136248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.152457][ T4219] usb 2-1: USB disconnect, device number 5 [ 90.797064][ T4713] ALSA: mixer_oss: invalid OSS volume '¼' [ 90.894439][ T4288] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 90.962945][ T4719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.126'. [ 90.977643][ T4719] device syz_tun entered promiscuous mode [ 90.989808][ T4276] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 90.999208][ T4719] device syz_tun left promiscuous mode [ 91.040320][ T13] usb 4-1: USB disconnect, device number 6 [ 91.189963][ T4288] usb 1-1: Using ep0 maxpacket: 8 [ 91.268806][ T4276] usb 5-1: Using ep0 maxpacket: 8 [ 91.335147][ T4288] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 91.354787][ T4288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.417694][ T4288] pvrusb2: Hardware description: Terratec Grabster AV400 [ 91.429577][ T4288] pvrusb2: ********** [ 91.433610][ T4288] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 91.449626][ T4276] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 91.460237][ T4223] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.488288][ T4288] pvrusb2: Important functionality might not be entirely working. [ 91.508527][ T4288] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 91.551659][ T4740] netlink: 92 bytes leftover after parsing attributes in process `syz.1.134'. [ 91.552530][ T4288] pvrusb2: ********** [ 91.631539][ T2425] pvrusb2: Invalid write control endpoint [ 91.650003][ T4276] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 91.659097][ T4276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.661737][ T4223] usb 3-1: device descriptor read/64, error -71 [ 91.693281][ T4276] usb 5-1: Product: syz [ 91.700313][ T4276] usb 5-1: Manufacturer: syz [ 91.704957][ T4276] usb 5-1: SerialNumber: syz [ 91.741262][ T4276] usb 5-1: config 0 descriptor?? [ 91.762323][ T2425] pvrusb2: Invalid write control endpoint [ 91.771475][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 91.785083][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 91.794412][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 91.806536][ T4276] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 91.806857][ T2425] pvrusb2: Device being rendered inoperable [ 91.824106][ T4276] usb 5-1: setting power ON [ 91.829152][ T4276] dvb-usb: bulk message failed: -22 (2/0) [ 91.838027][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 91.854307][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 91.863679][ T4276] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.879442][ T2425] pvrusb2: Attached sub-driver cx25840 [ 91.896029][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 91.908726][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 91.921274][ T4288] usb 1-1: USB disconnect, device number 5 [ 91.940065][ T4276] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 91.952274][ T4276] usb 5-1: media controller created [ 91.960327][ T4223] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.977905][ T4276] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.025581][ T4276] usb 5-1: selecting invalid altsetting 6 [ 92.038242][ T4276] usb 5-1: digital interface selection failed (-22) [ 92.045296][ T4276] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 92.100182][ T4276] usb 5-1: setting power OFF [ 92.107203][ T4276] dvb-usb: bulk message failed: -22 (2/0) [ 92.120245][ T4276] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 92.134833][ T4276] (NULL device *): no alternate interface [ 92.150236][ T4223] usb 3-1: device descriptor read/64, error -71 [ 92.185829][ T4276] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 92.215921][ T4276] usb 5-1: USB disconnect, device number 4 [ 92.289906][ T4223] usb usb3-port1: attempt power cycle [ 92.700284][ T4223] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 92.791739][ T4223] usb 3-1: device descriptor read/8, error -71 [ 92.953964][ T4791] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.069622][ T4223] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 93.135477][ T26] audit: type=1326 audit(1767849777.677:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4802 comm="syz.3.152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19c1c4f749 code=0x0 [ 93.180386][ T4223] usb 3-1: device descriptor read/8, error -71 [ 93.270154][ T4251] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 93.300296][ T4223] usb usb3-port1: unable to enumerate USB device [ 93.369666][ T4276] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 93.389891][ T4288] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 93.621903][ T4276] usb 1-1: Using ep0 maxpacket: 16 [ 93.678450][ T4251] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.692357][ T4251] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 93.711146][ T4251] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.725000][ T4251] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 93.734346][ T4251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.770213][ T4276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.781463][ T4276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.792955][ T4251] hub 2-1:1.0: bad descriptor, ignoring hub [ 93.798882][ T4251] hub: probe of 2-1:1.0 failed with error -5 [ 93.805810][ T4276] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 93.818683][ T4288] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 93.848366][ T4276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.860011][ T4288] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 93.878608][ T4276] usb 1-1: config 0 descriptor?? [ 93.883877][ T4288] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 35185, setting to 64 [ 93.918594][ T4288] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.950299][ T4288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.006079][ T4800] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 94.016612][ T4800] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 94.155720][ T4288] usb 2-1: USB disconnect, device number 6 [ 94.370991][ T4276] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 94.411861][ T4276] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 94.429203][ T4817] netlink: 104 bytes leftover after parsing attributes in process `syz.2.155'. [ 94.445904][ T4276] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 94.475377][ T4276] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 94.594641][ T4276] usb 1-1: USB disconnect, device number 6 [ 94.619875][ T4288] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 95.060156][ T4288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.108507][ T4288] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 95.190767][ T4288] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.242751][ T4288] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 95.265120][ T4288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.340776][ T4288] hub 2-1:1.0: bad descriptor, ignoring hub [ 95.349594][ T4288] hub: probe of 2-1:1.0 failed with error -5 [ 95.551467][ T4792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 95.819874][ T4288] usb 2-1: USB disconnect, device number 7 [ 96.966863][ T4251] usb 5-1: USB disconnect, device number 5 [ 98.689148][ T4892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 99.750216][ T4927] netlink: 92 bytes leftover after parsing attributes in process `syz.2.190'. [ 100.014529][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.023379][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.038891][ T4930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.423955][ T4940] device syzkaller0 entered promiscuous mode [ 100.746114][ T4946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 100.853762][ T4946] device bond_slave_0 entered promiscuous mode [ 100.860477][ T4946] device bond_slave_1 entered promiscuous mode [ 100.937844][ T4946] device macvtap1 entered promiscuous mode [ 100.980153][ T4946] device bond0 entered promiscuous mode [ 101.011040][ T4946] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 101.086564][ T4947] device bond0 left promiscuous mode [ 101.103259][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 101.118067][ T4947] device bond_slave_0 left promiscuous mode [ 101.124071][ T4947] device bond_slave_1 left promiscuous mode [ 103.419244][ T5023] netlink: 132 bytes leftover after parsing attributes in process `syz.4.222'. [ 103.694904][ T5035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.227'. [ 103.735130][ T5035] device batadv0 entered promiscuous mode [ 103.777242][ T5035] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 103.806146][ T5035] device batadv0 left promiscuous mode [ 104.020097][ T4223] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 104.390374][ T4223] usb 4-1: config 0 has no interfaces? [ 104.551117][ T4223] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.593349][ T4223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.612701][ T4223] usb 4-1: Product: syz [ 104.636675][ T4223] usb 4-1: Manufacturer: syz [ 104.650908][ T4223] usb 4-1: SerialNumber: syz [ 104.676895][ T4223] usb 4-1: config 0 descriptor?? [ 105.015443][ T4497] usb 4-1: USB disconnect, device number 7 [ 105.470318][ T5073] netlink: set zone limit has 8 unknown bytes [ 105.827070][ T26] audit: type=1326 audit(1767849790.367:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8384500749 code=0x7ffc0000 [ 105.906119][ T26] audit: type=1326 audit(1767849790.397:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f8384500749 code=0x7ffc0000 [ 105.930909][ T26] audit: type=1326 audit(1767849790.397:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8384500749 code=0x7ffc0000 [ 105.954475][ T26] audit: type=1326 audit(1767849790.397:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8384500749 code=0x7ffc0000 [ 105.976591][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.013810][ T26] audit: type=1326 audit(1767849790.397:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8384500783 code=0x7ffc0000 [ 106.070254][ T26] audit: type=1326 audit(1767849790.397:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8384500783 code=0x7ffc0000 [ 106.098557][ T26] audit: type=1326 audit(1767849790.397:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8384500749 code=0x7ffc0000 [ 106.294657][ T26] audit: type=1326 audit(1767849790.397:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8384500749 code=0x7ffc0000 [ 106.385392][ T26] audit: type=1326 audit(1767849790.397:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8384500749 code=0x7ffc0000 [ 106.419656][ T26] audit: type=1326 audit(1767849790.397:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5085 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8384500749 code=0x7ffc0000 [ 106.760044][ T5100] tipc: Started in network mode [ 106.765036][ T5100] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 106.806633][ T5100] tipc: Enabling of bearer rejected, failed to enable media [ 107.207601][ T4191] Bluetooth: hci0: hardware error 0xff [ 107.335212][ T4276] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 107.769763][ T4276] usb 3-1: config 0 has no interfaces? [ 107.960349][ T4276] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.977363][ T4276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.016290][ T4276] usb 3-1: Product: syz [ 108.025194][ T4276] usb 3-1: Manufacturer: syz [ 108.035639][ T4276] usb 3-1: SerialNumber: syz [ 108.056236][ T4276] usb 3-1: config 0 descriptor?? [ 108.452620][ T4223] usb 3-1: USB disconnect, device number 7 [ 108.517662][ T5164] loop9: detected capacity change from 0 to 7 [ 108.537598][ T5164] Dev loop9: unable to read RDB block 7 [ 108.550286][ T5164] loop9: AHDI p2 [ 108.553998][ T5164] loop9: partition table partially beyond EOD, truncated [ 108.660202][ T1108] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 108.753403][ T5179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.283'. [ 109.030299][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.054763][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.114827][ T1108] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 109.186752][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.227027][ T5186] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 109.255717][ T1108] usb 2-1: config 0 descriptor?? [ 109.274029][ T5186] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 109.390151][ T4497] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 109.743167][ T1108] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 109.760186][ T4497] usb 4-1: config 128 has an invalid interface number: 148 but max is 0 [ 109.802799][ T4497] usb 4-1: config 128 has no interface number 0 [ 109.816061][ T1108] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 109.844873][ T4497] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 109.885509][ T4497] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 109.941466][ T5157] udc-core: couldn't find an available UDC or it's busy [ 109.981379][ T5157] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 110.010265][ T1108] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 110.100147][ T4497] usb 4-1: config 128 interface 148 has no altsetting 0 [ 110.280530][ T4497] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 110.371622][ T4497] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.396942][ T4497] usb 4-1: Product: syz [ 110.407104][ T4497] usb 4-1: Manufacturer: syz [ 110.435552][ T4497] usb 4-1: SerialNumber: syz [ 110.671571][ T5157] cp2112 0003:10C4:EA90.0004: Error starting transaction: -38 [ 110.720441][ T5194] ================================================================== [ 110.730068][ T5194] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 110.731223][ T1108] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 110.739305][ T5194] Read of size 1 at addr ffff8880602c6608 by task syz.2.288/5194 [ 110.739351][ T5194] [ 110.739365][ T5194] CPU: 1 PID: 5194 Comm: syz.2.288 Not tainted syzkaller #0 [ 110.739386][ T5194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.774061][ T5194] Call Trace: [ 110.777353][ T5194] [ 110.780295][ T5194] dump_stack_lvl+0x168/0x230 [ 110.785006][ T5194] ? show_regs_print_info+0x20/0x20 [ 110.790229][ T5194] ? load_image+0x3b0/0x3b0 [ 110.794762][ T5194] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 110.800176][ T5194] ? xfrm_pol_bin_obj+0x140/0x140 [ 110.805244][ T5194] print_address_description+0x60/0x2d0 [ 110.810820][ T5194] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 110.817336][ T5194] kasan_report+0xdf/0x130 [ 110.821790][ T5194] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 110.828308][ T5194] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 110.834653][ T5194] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 110.840827][ T5194] ? xfrm_policy_alloc+0x75/0x2b0 [ 110.845900][ T5194] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 110.852079][ T5194] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 110.857997][ T5194] xfrm_policy_inexact_insert+0xe0/0x1460 [ 110.863748][ T5194] ? __get_hash_thresh+0x105/0x410 [ 110.868921][ T5194] ? policy_hash_bysel+0x10a/0x570 [ 110.874067][ T5194] xfrm_policy_insert+0x112/0x930 [ 110.879103][ T5194] xfrm_add_policy+0x4d6/0x860 [ 110.883880][ T5194] ? xfrm_dump_sa_done+0xc0/0xc0 [ 110.888833][ T5194] ? apparmor_capable+0x12c/0x190 [ 110.893863][ T5194] ? __nla_parse+0x3c/0x50 [ 110.898286][ T5194] xfrm_user_rcv_msg+0x58d/0x860 [ 110.903239][ T5194] ? xfrm_netlink_rcv+0x90/0x90 [ 110.908125][ T5194] ? xfrm_netlink_rcv+0x66/0x90 [ 110.912973][ T5194] ? xfrm_netlink_rcv+0x66/0x90 [ 110.917826][ T5194] ? xfrm_netlink_rcv+0x66/0x90 [ 110.922674][ T5194] ? __mutex_lock_common+0x431/0x2390 [ 110.928064][ T5194] ? __skb_clone+0x480/0x790 [ 110.932681][ T5194] netlink_rcv_skb+0x1e0/0x430 [ 110.937467][ T5194] ? xfrm_netlink_rcv+0x90/0x90 [ 110.942330][ T5194] ? netlink_ack+0xb60/0xb60 [ 110.946928][ T5194] ? __lock_acquire+0x7c60/0x7c60 [ 110.951964][ T5194] xfrm_netlink_rcv+0x75/0x90 [ 110.956648][ T5194] netlink_unicast+0x774/0x920 [ 110.961435][ T5194] netlink_sendmsg+0x8ab/0xbc0 [ 110.966207][ T5194] ? netlink_getsockopt+0x560/0x560 [ 110.971416][ T5194] ? aa_sock_msg_perm+0x94/0x150 [ 110.976381][ T5194] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 110.981676][ T5194] ? security_socket_sendmsg+0x7c/0xa0 [ 110.987138][ T5194] ? netlink_getsockopt+0x560/0x560 [ 110.992342][ T5194] ____sys_sendmsg+0x5a2/0x8c0 [ 110.997115][ T5194] ? memset+0x1e/0x40 [ 111.001101][ T5194] ? __sys_sendmsg_sock+0x30/0x30 [ 111.006163][ T5194] ? import_iovec+0x6f/0xa0 [ 111.010676][ T5194] ___sys_sendmsg+0x1f0/0x260 [ 111.015356][ T5194] ? __sys_sendmsg+0x250/0x250 [ 111.020141][ T5194] ? percpu_counter_add_batch+0x13b/0x160 [ 111.025898][ T5194] ? __fdget+0x18b/0x210 [ 111.030155][ T5194] __se_sys_sendmsg+0x190/0x250 [ 111.035033][ T5194] ? __x64_sys_sendmsg+0x80/0x80 [ 111.039978][ T5194] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 111.045992][ T5194] ? lockdep_hardirqs_on+0x94/0x140 [ 111.051219][ T5194] do_syscall_64+0x4c/0xa0 [ 111.055669][ T5194] ? clear_bhb_loop+0x30/0x80 [ 111.060357][ T5194] ? clear_bhb_loop+0x30/0x80 [ 111.065077][ T5194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.070995][ T5194] RIP: 0033:0x7f8384500749 [ 111.075418][ T5194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.095036][ T5194] RSP: 002b:00007f8382767038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.103467][ T5194] RAX: ffffffffffffffda RBX: 00007f8384756fa0 RCX: 00007f8384500749 [ 111.111446][ T5194] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 111.119423][ T5194] RBP: 00007f8384584f91 R08: 0000000000000000 R09: 0000000000000000 [ 111.127404][ T5194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.135381][ T5194] R13: 00007f8384757038 R14: 00007f8384756fa0 R15: 00007fff0a22e4d8 [ 111.143371][ T5194] [ 111.146392][ T5194] [ 111.148723][ T5194] Allocated by task 5194: [ 111.153052][ T5194] __kasan_kmalloc+0xb5/0xf0 [ 111.157646][ T5194] sk_prot_alloc+0xe7/0x210 [ 111.162151][ T5194] sk_alloc+0x2f/0x310 [ 111.166220][ T5194] pfkey_create+0xd8/0x560 [ 111.170640][ T5194] __sock_create+0x47b/0x900 [ 111.175253][ T5194] __sys_socket+0xe2/0x170 [ 111.179679][ T5194] __x64_sys_socket+0x76/0x80 [ 111.184381][ T5194] do_syscall_64+0x4c/0xa0 [ 111.188797][ T5194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.194687][ T5194] [ 111.197012][ T5194] The buggy address belongs to the object at ffff8880602c6000 [ 111.197012][ T5194] which belongs to the cache kmalloc-2k of size 2048 [ 111.211063][ T5194] The buggy address is located 1544 bytes inside of [ 111.211063][ T5194] 2048-byte region [ffff8880602c6000, ffff8880602c6800) [ 111.224508][ T5194] The buggy address belongs to the page: [ 111.230149][ T5194] page:ffffea000180b000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x602c0 [ 111.240320][ T5194] head:ffffea000180b000 order:3 compound_mapcount:0 compound_pincount:0 [ 111.248661][ T5194] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 111.256686][ T5194] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016842000 [ 111.265268][ T5194] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 111.273846][ T5194] page dumped because: kasan: bad access detected [ 111.280315][ T5194] page_owner tracks the page as allocated [ 111.286039][ T5194] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4180, ts 64221167719, free_ts 21046013361 [ 111.304532][ T5194] get_page_from_freelist+0x1b77/0x1c60 [ 111.310089][ T5194] __alloc_pages+0x1e1/0x470 [ 111.314815][ T5194] new_slab+0xc0/0x4b0 [ 111.318887][ T5194] ___slab_alloc+0x81e/0xdf0 [ 111.323475][ T5194] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 111.329288][ T5194] pskb_expand_head+0x127/0x10f0 [ 111.334230][ T5194] netlink_trim+0x180/0x220 [ 111.338740][ T5194] netlink_broadcast_filtered+0x7c/0x1170 [ 111.344459][ T5194] nlmsg_notify+0xec/0x1a0 [ 111.348873][ T5194] __dev_notify_flags+0xde/0x2d0 [ 111.353809][ T5194] rtnl_configure_link+0x21f/0x320 [ 111.358944][ T5194] veth_newlink+0x756/0xda0 [ 111.363445][ T5194] rtnl_newlink+0x114c/0x17d0 [ 111.368124][ T5194] rtnetlink_rcv_msg+0x7ff/0xe90 [ 111.373062][ T5194] netlink_rcv_skb+0x1e0/0x430 [ 111.377830][ T5194] netlink_unicast+0x774/0x920 [ 111.382593][ T5194] page last free stack trace: [ 111.387256][ T5194] free_unref_page_prepare+0x637/0x6c0 [ 111.392740][ T5194] free_unref_page+0x94/0x280 [ 111.397423][ T5194] free_contig_range+0x96/0xf0 [ 111.402187][ T5194] destroy_args+0x100/0xa20 [ 111.406690][ T5194] debug_vm_pgtable+0x318/0x370 [ 111.411555][ T5194] do_one_initcall+0x1ee/0x680 [ 111.416316][ T5194] do_initcall_level+0x137/0x1f0 [ 111.421256][ T5194] do_initcalls+0x4b/0x90 [ 111.425585][ T5194] kernel_init_freeable+0x3ce/0x560 [ 111.430797][ T5194] kernel_init+0x19/0x1b0 [ 111.435140][ T5194] ret_from_fork+0x1f/0x30 [ 111.439560][ T5194] [ 111.441900][ T5194] Memory state around the buggy address: [ 111.447541][ T5194] ffff8880602c6500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 111.455598][ T5194] ffff8880602c6580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 111.463655][ T5194] >ffff8880602c6600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 111.471709][ T5194] ^ [ 111.476038][ T5194] ffff8880602c6680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 111.484092][ T5194] ffff8880602c6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 111.492156][ T5194] ================================================================== [ 111.500211][ T5194] Disabling lock debugging due to kernel taint [ 111.506436][ T5194] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 111.513634][ T5194] CPU: 1 PID: 5194 Comm: syz.2.288 Tainted: G B syzkaller #0 [ 111.522298][ T5194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.532349][ T5194] Call Trace: [ 111.535623][ T5194] [ 111.538559][ T5194] dump_stack_lvl+0x168/0x230 [ 111.543235][ T5194] ? show_regs_print_info+0x20/0x20 [ 111.548437][ T5194] ? load_image+0x3b0/0x3b0 [ 111.552946][ T5194] panic+0x2c9/0x7f0 [ 111.556839][ T5194] ? bpf_jit_dump+0xd0/0xd0 [ 111.561337][ T5194] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 111.567239][ T5194] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 111.573128][ T5194] ? _raw_spin_unlock+0x40/0x40 [ 111.577976][ T5194] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 111.584478][ T5194] check_panic_on_warn+0x80/0xa0 [ 111.589412][ T5194] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 111.595912][ T5194] end_report+0x6d/0xf0 [ 111.600077][ T5194] kasan_report+0x102/0x130 [ 111.604595][ T5194] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 111.611097][ T5194] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 111.617424][ T5194] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 111.623579][ T5194] ? xfrm_policy_alloc+0x75/0x2b0 [ 111.628604][ T5194] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 111.634756][ T5194] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 111.640668][ T5194] xfrm_policy_inexact_insert+0xe0/0x1460 [ 111.646426][ T5194] ? __get_hash_thresh+0x105/0x410 [ 111.651541][ T5194] ? policy_hash_bysel+0x10a/0x570 [ 111.656672][ T5194] xfrm_policy_insert+0x112/0x930 [ 111.661702][ T5194] xfrm_add_policy+0x4d6/0x860 [ 111.666471][ T5194] ? xfrm_dump_sa_done+0xc0/0xc0 [ 111.671409][ T5194] ? apparmor_capable+0x12c/0x190 [ 111.676429][ T5194] ? __nla_parse+0x3c/0x50 [ 111.680855][ T5194] xfrm_user_rcv_msg+0x58d/0x860 [ 111.685833][ T5194] ? xfrm_netlink_rcv+0x90/0x90 [ 111.690725][ T5194] ? xfrm_netlink_rcv+0x66/0x90 [ 111.695589][ T5194] ? xfrm_netlink_rcv+0x66/0x90 [ 111.700441][ T5194] ? xfrm_netlink_rcv+0x66/0x90 [ 111.705304][ T5194] ? __mutex_lock_common+0x431/0x2390 [ 111.710682][ T5194] ? __skb_clone+0x480/0x790 [ 111.715303][ T5194] netlink_rcv_skb+0x1e0/0x430 [ 111.720074][ T5194] ? xfrm_netlink_rcv+0x90/0x90 [ 111.724941][ T5194] ? netlink_ack+0xb60/0xb60 [ 111.729542][ T5194] ? __lock_acquire+0x7c60/0x7c60 [ 111.734587][ T5194] xfrm_netlink_rcv+0x75/0x90 [ 111.739261][ T5194] netlink_unicast+0x774/0x920 [ 111.744026][ T5194] netlink_sendmsg+0x8ab/0xbc0 [ 111.748789][ T5194] ? netlink_getsockopt+0x560/0x560 [ 111.753983][ T5194] ? aa_sock_msg_perm+0x94/0x150 [ 111.758914][ T5194] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 111.764193][ T5194] ? security_socket_sendmsg+0x7c/0xa0 [ 111.769647][ T5194] ? netlink_getsockopt+0x560/0x560 [ 111.774840][ T5194] ____sys_sendmsg+0x5a2/0x8c0 [ 111.779609][ T5194] ? memset+0x1e/0x40 [ 111.783606][ T5194] ? __sys_sendmsg_sock+0x30/0x30 [ 111.788632][ T5194] ? import_iovec+0x6f/0xa0 [ 111.793144][ T5194] ___sys_sendmsg+0x1f0/0x260 [ 111.797819][ T5194] ? __sys_sendmsg+0x250/0x250 [ 111.802577][ T5194] ? percpu_counter_add_batch+0x13b/0x160 [ 111.808303][ T5194] ? __fdget+0x18b/0x210 [ 111.812544][ T5194] __se_sys_sendmsg+0x190/0x250 [ 111.817389][ T5194] ? __x64_sys_sendmsg+0x80/0x80 [ 111.822321][ T5194] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 111.828308][ T5194] ? lockdep_hardirqs_on+0x94/0x140 [ 111.833507][ T5194] do_syscall_64+0x4c/0xa0 [ 111.837920][ T5194] ? clear_bhb_loop+0x30/0x80 [ 111.842589][ T5194] ? clear_bhb_loop+0x30/0x80 [ 111.847263][ T5194] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.853157][ T5194] RIP: 0033:0x7f8384500749 [ 111.857570][ T5194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.877169][ T5194] RSP: 002b:00007f8382767038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.885585][ T5194] RAX: ffffffffffffffda RBX: 00007f8384756fa0 RCX: 00007f8384500749 [ 111.893556][ T5194] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 111.901525][ T5194] RBP: 00007f8384584f91 R08: 0000000000000000 R09: 0000000000000000 [ 111.909522][ T5194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.917517][ T5194] R13: 00007f8384757038 R14: 00007f8384756fa0 R15: 00007fff0a22e4d8 [ 111.925506][ T5194] [ 111.928845][ T5194] Kernel Offset: disabled [ 111.933189][ T5194] Rebooting in 86400 seconds..