last executing test programs: 3.159099896s ago: executing program 4 (id=5): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x1, 0x5, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x0, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0xfece, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x0, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0x8, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x9, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100006, 0x8000, 0x404, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xc3c2, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x4, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x6, 0x7, {0x0, 0xfffd, 0x9782, 0x1, 0xb4, 0x7fff, 0x0, 0x3, 0x8, 0x4000, 0xfffc, 0xa911, 0x1000, 0x1000, "40bb886fa9dca35c5ce36ce7ca8ca6d55c697c4b6abe916ae363ab4b8be78d45"}}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {0x0, 0x8}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.977965647s ago: executing program 1 (id=2): r0 = fanotify_init(0x40, 0x2) write$binfmt_elf64(r0, &(0x7f0000000840)=ANY=[], 0x40) 2.823518686s ago: executing program 1 (id=6): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc22d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.557917311s ago: executing program 3 (id=4): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="74000000020802030000000000000000050000000900fb0073797a3100000000040004801c0004800800024000d3746286ad77fb44ec9664f3da0000000800024000010001080002400000000c05000300210000000000000000000002"], 0x74}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.413936909s ago: executing program 0 (id=7): unshare(0x4020400) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f00000000c0)) 2.187501972s ago: executing program 0 (id=9): r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) openat$dir(0xffffffffffffff9c, 0x0, 0x1010c0, 0x12) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_io_uring_setup(0x18b0, 0x0, 0x0, &(0x7f0000000340)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), 0x0, &(0x7f0000000240)) syz_io_uring_submit(0x0, r2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(0x0, 0x0, 0x0) fcntl$notify(r3, 0x402, 0x25) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) 2.143351705s ago: executing program 0 (id=11): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00', @ANYRES32=r2, @ANYBLOB="0800c300741300000800c40001"], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.091777038s ago: executing program 4 (id=12): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002340)=[{0x0}, {&(0x7f0000002040)=' ', 0x1}], 0x2}}], 0x1, 0x4040) 2.033121382s ago: executing program 2 (id=13): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000010280)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) 1.967333165s ago: executing program 0 (id=14): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair(0x1d, 0x2, 0x2, 0x0) getpgrp(0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x3810744, &(0x7f0000000200)={[{@noauto_da_alloc}, {@test_dummy_encryption}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {}, {@nodiscard}, {@grpid}, {@errors_remount}, {@abort}, {@test_dummy_encryption}]}, 0x1, 0x479, &(0x7f0000000480)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) 1.939436887s ago: executing program 4 (id=15): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC=0x0, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESDEC, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 1.880563971s ago: executing program 2 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1.53944467s ago: executing program 4 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)='C\a', 0x2}], 0x2}, 0x4) 1.538499871s ago: executing program 3 (id=18): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000006c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x7, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000680)=['']}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f406", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.363354061s ago: executing program 3 (id=19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010000000120000000000900020073797a30000000000800410072786500140041"], 0x38}, 0x1, 0x0, 0x0, 0x808}, 0x4004000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) sendto$inet6(0xffffffffffffffff, &(0x7f0000000ec0)='\n', 0x1, 0x44000, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.290469685s ago: executing program 0 (id=20): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x3, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 1.225131629s ago: executing program 4 (id=21): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) connect$inet(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x18, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) fanotify_mark(0xffffffffffffffff, 0x641, 0x1002, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0x8000000000008) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r0, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.055954119s ago: executing program 4 (id=22): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122"], 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="3607a6"], 0x0, 0x0, 0x0, 0x0}) 914.609447ms ago: executing program 2 (id=23): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000006c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 857.66188ms ago: executing program 0 (id=24): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0xc000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102020000082505a1a4400001020397ba5bc70002010720070904000001020d0000052406000105240000010d240f0106000000810001000906241a220018090581031000e803040904010000020d00010102020d0000090582020004070e0b090503"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 695.87205ms ago: executing program 2 (id=25): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = syz_io_uring_setup(0xed0, &(0x7f0000000200)={0x0, 0xc2ca, 0x10300, 0x3, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000e00)=""/65) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000180)=ANY=[], 0x2, 0x22d, &(0x7f0000000a40)="$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") r4 = open(&(0x7f0000000000)='./bus\x00', 0x145143, 0x8) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x8, 0x5, "7bdf00e1e77a6b0b50470eeeff00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) unshare(0x2040400) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$addseals(r7, 0x409, 0x47e8c3b29599b862) shutdown(r0, 0x1) r9 = openat$drirender128(0xffffffffffffff9c, 0x0, 0xa000, 0x0) ioctl$DRM_IOCTL_VERSION(r9, 0xc0406400, 0x0) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x80, 0x8000, 0x2, 0x8000000, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x68, 0x0, 0x6, 0x4, 0x0, @multicast2, @private=0xa010100, {[@ra={0x94, 0x4}]}}}}}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route(r10, 0x0, 0x4001804) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, 0x0) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x30000080) sendto$inet6(r4, 0x0, 0x0, 0x8000, 0x0, 0x0) 403.207657ms ago: executing program 3 (id=26): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0x10, 0xb}, {0x0, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4028040) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 375.829938ms ago: executing program 2 (id=27): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc0}}, 0x200000b0) mount$fuseblk(&(0x7f00000002c0), &(0x7f0000000240)='./file0\x00', 0x0, 0x80, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x4040000) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x20000000000002, 0x4000004, 0xefffffffffffffff, 0x400000, 0xfffffffffffffffd, 0x2000000, 0x0, 0x1d, 0x0, 0xffffffffffffffff, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 294.733703ms ago: executing program 1 (id=28): syz_mount_image$minix(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x100c2, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="3575b272517c76ecb97634fd4ce37868151ca895fc2d87825aad7751797d470c943734a4232cebb063d472c98eb6b39184bb", @ANYRES64, @ANYRES16], 0x1, 0x1a7, &(0x7f0000000300)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) writev(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40e8662e, &(0x7f0000000000)={0x9, 0x4000009, 0x7fffffffffffffff, 0x3, 0xffffffff, 0xa}) ptrace(0x10, r2) splice(r1, &(0x7f0000000640)=0xc, r1, &(0x7f0000000680)=0xfffffffffffffffe, 0x380000000, 0x3) ptrace$cont(0x1f, r2, 0x6, 0xf) 218.889318ms ago: executing program 3 (id=29): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2b, 0x1, 0x1) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140)=[0x4], 0x0, 0x1}) 186.502989ms ago: executing program 2 (id=30): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x5, 0x0, 0x0, 0x5}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 0s ago: executing program 1 (id=31): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@grpjquota}, {@grpquota}]}, 0x5, 0x4ee, &(0x7f0000001140)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.8' (ED25519) to the list of known hosts. [ 53.342227][ T4172] cgroup: Unknown subsys name 'net' [ 53.477294][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.821797][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.160583][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 56.204268][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 56.218711][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 56.244393][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 56.385396][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 56.421540][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.428760][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.437309][ T4187] device bridge_slave_0 entered promiscuous mode [ 56.456660][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.464116][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.472408][ T4190] device bridge_slave_0 entered promiscuous mode [ 56.480403][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.487821][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.496159][ T4185] device bridge_slave_0 entered promiscuous mode [ 56.504849][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.512089][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.519880][ T4185] device bridge_slave_1 entered promiscuous mode [ 56.527880][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.535127][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.543527][ T4187] device bridge_slave_1 entered promiscuous mode [ 56.562207][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.569303][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.577805][ T4186] device bridge_slave_0 entered promiscuous mode [ 56.585868][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.593363][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.601157][ T4190] device bridge_slave_1 entered promiscuous mode [ 56.641693][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.648886][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.657531][ T4186] device bridge_slave_1 entered promiscuous mode [ 56.677294][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.692596][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.710496][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.722225][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.733557][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.760605][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.796408][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.813452][ T4185] team0: Port device team_slave_0 added [ 56.833636][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.840829][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.848930][ T4196] device bridge_slave_0 entered promiscuous mode [ 56.858403][ T4187] team0: Port device team_slave_0 added [ 56.865873][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.877366][ T4190] team0: Port device team_slave_0 added [ 56.884738][ T4185] team0: Port device team_slave_1 added [ 56.891274][ T4190] team0: Port device team_slave_1 added [ 56.897294][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.904902][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.913085][ T4196] device bridge_slave_1 entered promiscuous mode [ 56.920803][ T4187] team0: Port device team_slave_1 added [ 56.974569][ T4186] team0: Port device team_slave_0 added [ 56.992921][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.999894][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.026497][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.039403][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.046500][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.072439][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.085970][ T4186] team0: Port device team_slave_1 added [ 57.093106][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.100064][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.126233][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.139498][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.149520][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.156693][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.182778][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.194757][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.201971][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.228031][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.258275][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.265875][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.291855][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.304873][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.333899][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.341006][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.369175][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.387418][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.394444][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.420684][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.465053][ T4187] device hsr_slave_0 entered promiscuous mode [ 57.472018][ T4187] device hsr_slave_1 entered promiscuous mode [ 57.492872][ T4196] team0: Port device team_slave_0 added [ 57.507857][ T4190] device hsr_slave_0 entered promiscuous mode [ 57.514750][ T4190] device hsr_slave_1 entered promiscuous mode [ 57.522147][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.529917][ T4190] Cannot create hsr debugfs directory [ 57.544851][ T4196] team0: Port device team_slave_1 added [ 57.559648][ T4186] device hsr_slave_0 entered promiscuous mode [ 57.566557][ T4186] device hsr_slave_1 entered promiscuous mode [ 57.573310][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.581053][ T4186] Cannot create hsr debugfs directory [ 57.625243][ T4185] device hsr_slave_0 entered promiscuous mode [ 57.632590][ T4185] device hsr_slave_1 entered promiscuous mode [ 57.639098][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.646849][ T4185] Cannot create hsr debugfs directory [ 57.653146][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.660119][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.686156][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.723832][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.730823][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.757003][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.853352][ T4196] device hsr_slave_0 entered promiscuous mode [ 57.860490][ T4196] device hsr_slave_1 entered promiscuous mode [ 57.867173][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.874986][ T4196] Cannot create hsr debugfs directory [ 57.902217][ T4198] Bluetooth: hci4: command 0x0409 tx timeout [ 57.908881][ T4198] Bluetooth: hci3: command 0x0409 tx timeout [ 57.912331][ T2341] Bluetooth: hci1: command 0x0409 tx timeout [ 57.926293][ T2341] Bluetooth: hci2: command 0x0409 tx timeout [ 57.942128][ T2341] Bluetooth: hci0: command 0x0409 tx timeout [ 58.122553][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.135654][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.146416][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.155996][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.216878][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.237279][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.257522][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.273283][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.344567][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.358034][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.368175][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.397567][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.405776][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.431011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.443237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.465592][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.479423][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.501065][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.511096][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.537039][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.545962][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.555112][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.565066][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.572362][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.580819][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.590961][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.599564][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.606662][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.615294][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.639454][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.648941][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.674368][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.685734][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.694541][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.719126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.728267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.738468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.747393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.762565][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.769415][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.785429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.794878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.815039][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.826264][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.835573][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.845767][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.871243][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.880236][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.906544][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.922089][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.946377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.956438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.967644][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.974824][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.002025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.010527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.026673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.038028][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.045168][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.060147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.077773][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.112156][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.121180][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.129364][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.137659][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.148389][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.157240][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.166353][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.175745][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.188090][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.196874][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.205385][ T1571] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.212746][ T1571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.246083][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.254332][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.264678][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.277229][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.292751][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.305230][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.322542][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.365746][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.374302][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.385171][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.393872][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.402634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.411224][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.419735][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.426802][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.440666][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.449727][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.458894][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.467991][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.477126][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.486469][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.495828][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.504412][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.524762][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.537023][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.558269][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.572006][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.580123][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.593338][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.626141][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.649066][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.662679][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.671482][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.679961][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.687087][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.695088][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.704401][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.714309][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.721391][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.729115][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.737812][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.746739][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.755386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.772624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.780720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.802598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.840163][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.859059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.871122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.920265][ T4196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.939577][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.956239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.964483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.973803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.981806][ T1110] Bluetooth: hci3: command 0x041b tx timeout [ 59.988057][ T4256] Bluetooth: hci0: command 0x041b tx timeout [ 59.994539][ T4256] Bluetooth: hci2: command 0x041b tx timeout [ 60.000572][ T4256] Bluetooth: hci1: command 0x041b tx timeout [ 60.007059][ T4256] Bluetooth: hci4: command 0x041b tx timeout [ 60.008270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.022271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.030612][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.037709][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.046281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.055158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.064135][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.071523][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.079278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.087682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.096324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.105843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.114539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.123038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.141904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.149958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.157817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.165289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.173544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.182911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.206376][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.222402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.230264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.267567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.286555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.295614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.320314][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.337161][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.363521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.372820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.381648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.390071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.399558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.408605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.440652][ T4187] device veth0_vlan entered promiscuous mode [ 60.459897][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.482555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.491068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.499680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.508402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.516363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.539052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.554801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.570687][ T4187] device veth1_vlan entered promiscuous mode [ 60.618570][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.626825][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.634717][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.644907][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.660640][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.683210][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.692297][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.720359][ T4187] device veth0_macvtap entered promiscuous mode [ 60.730780][ T4186] device veth0_vlan entered promiscuous mode [ 60.739503][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.748011][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.758588][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.766995][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.774836][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.784220][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.793198][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.808741][ T4187] device veth1_macvtap entered promiscuous mode [ 60.820166][ T4186] device veth1_vlan entered promiscuous mode [ 60.827378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.837517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.845922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.855213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.864428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.873499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.883112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.890847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.901805][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.914781][ T4185] device veth0_vlan entered promiscuous mode [ 60.940574][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.955846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.964703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.973831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.984879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.993915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.014294][ T4185] device veth1_vlan entered promiscuous mode [ 61.020874][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.029547][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.042418][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.054758][ T4186] device veth0_macvtap entered promiscuous mode [ 61.071589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.079618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.089234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.113856][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.124961][ T4186] device veth1_macvtap entered promiscuous mode [ 61.133075][ T4196] device veth0_vlan entered promiscuous mode [ 61.140499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.150225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.158786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.167176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.176349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.186611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.204466][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.215283][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.224631][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.233621][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.251053][ T4196] device veth1_vlan entered promiscuous mode [ 61.259918][ T4190] device veth0_vlan entered promiscuous mode [ 61.268003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.277113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.286626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.300909][ T4185] device veth0_macvtap entered promiscuous mode [ 61.332502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.340489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.353556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.364631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.374094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.383835][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.394641][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.406126][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.415761][ T4185] device veth1_macvtap entered promiscuous mode [ 61.425854][ T4190] device veth1_vlan entered promiscuous mode [ 61.438539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.449827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.458778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.467673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.476602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.487439][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.498053][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.512733][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.528433][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.545555][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.555904][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.566681][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.579670][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.592621][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.603862][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.613856][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.624338][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.636036][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.658789][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.668728][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.678139][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.687075][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.697945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.707033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.718052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.726861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.736444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.746183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.777104][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.795017][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.807607][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.816565][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.842505][ T4196] device veth0_macvtap entered promiscuous mode [ 61.854032][ T4196] device veth1_macvtap entered promiscuous mode [ 61.868530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.877625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.886205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.896514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.917934][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.928506][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.940061][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.950731][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.960822][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.972680][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.985188][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.027176][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.036784][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.047990][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.057773][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.063020][ T1110] Bluetooth: hci4: command 0x040f tx timeout [ 62.073449][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.084275][ T1110] Bluetooth: hci1: command 0x040f tx timeout [ 62.086085][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.090465][ T1110] Bluetooth: hci2: command 0x040f tx timeout [ 62.106324][ T1110] Bluetooth: hci0: command 0x040f tx timeout [ 62.112524][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.113593][ T1110] Bluetooth: hci3: command 0x040f tx timeout [ 62.130462][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.140466][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.152296][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.163972][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.172193][ T4190] device veth0_macvtap entered promiscuous mode [ 62.196117][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.207713][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.217703][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.228585][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.238171][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.247344][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.258920][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.275358][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.285439][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.305719][ T4190] device veth1_macvtap entered promiscuous mode [ 62.318327][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.327668][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.369350][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.381885][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.396429][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.407107][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.418167][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.428912][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.441155][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.452599][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.464432][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.492783][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.500647][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.510808][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.525886][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.534870][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.546723][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.557861][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.568895][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.579566][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.589506][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.600058][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.610122][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.621189][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.636188][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.652955][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.663657][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.676359][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.685760][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.695081][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.705605][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.732844][ T1571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.740696][ T1571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.766839][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.783883][ T1571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.806817][ T1571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.830654][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.839629][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.856795][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.872941][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.896378][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.909377][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.923496][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.963824][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.975421][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.008812][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.043973][ T4295] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.080577][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.113168][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.160101][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.171407][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.202094][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.215483][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.285053][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.311754][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.325416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.532484][ T4318] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 63.654825][ T4318] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 63.705481][ T4321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.734942][ T4318] syz.2.3 (4318) used greatest stack depth: 20720 bytes left [ 63.779053][ T4256] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.899334][ T4334] kernel read not supported for file /bus (pid: 4334 comm: syz.0.9) [ 63.908785][ T26] audit: type=1800 audit(1770709631.301:2): pid=4334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9" name="bus" dev="mqueue" ino=31643 res=0 errno=0 [ 64.074488][ T4256] usb 2-1: Using ep0 maxpacket: 16 [ 64.142211][ T4198] Bluetooth: hci3: command 0x0419 tx timeout [ 64.149839][ T4198] Bluetooth: hci0: command 0x0419 tx timeout [ 64.189203][ T4344] loop0: detected capacity change from 0 to 512 [ 64.198066][ T4198] Bluetooth: hci2: command 0x0419 tx timeout [ 64.214723][ T4198] Bluetooth: hci1: command 0x0419 tx timeout [ 64.227796][ T4346] loop4: detected capacity change from 0 to 128 [ 64.234466][ T4256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.237022][ T4198] Bluetooth: hci4: command 0x0419 tx timeout [ 64.254772][ T4256] usb 2-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 64.272704][ T4344] ======================================================= [ 64.272704][ T4344] WARNING: The mand mount option has been deprecated and [ 64.272704][ T4344] and is ignored by this kernel. Remove the mand [ 64.272704][ T4344] option from the mount to silence this warning. [ 64.272704][ T4344] ======================================================= [ 64.314636][ T4256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.325467][ T4346] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.371050][ T4348] device syzkaller0 entered promiscuous mode [ 64.409496][ T4256] usb 2-1: config 0 descriptor?? [ 64.440748][ T4346] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.513107][ T4346] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 64.522424][ T4346] FAT-fs (loop4): Filesystem has been set read-only [ 64.580730][ T4344] EXT4-fs (loop0): Test dummy encryption mode enabled [ 64.604267][ T4344] EXT4-fs (loop0): Test dummy encryption mode enabled [ 64.659554][ T4357] device syzkaller0 entered promiscuous mode [ 64.667720][ T4344] EXT4-fs error (device loop0): __ext4_iget:4912: inode #11: block 1: comm syz.0.14: invalid block [ 64.682323][ T4344] EXT4-fs (loop0): Remounting filesystem read-only [ 64.689486][ T4344] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.14: couldn't read orphan inode 11 (err -117) [ 64.719614][ T4344] EXT4-fs (loop0): Remounting filesystem read-only [ 64.741446][ T4344] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,test_dummy_encryption,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,grpid,errors=remount-ro,abort,test_dummy_encryption,. Quota mode: none. [ 64.964667][ T4373] process 'syz.4.21' launched './file0' with NULL argv: empty string added [ 64.997578][ T4256] lg-g15 0003:046D:C22D.0001: unknown main item tag 0x0 [ 65.000130][ T4371] device syzkaller0 entered promiscuous mode [ 65.023010][ T4256] lg-g15 0003:046D:C22D.0001: unknown main item tag 0x0 [ 65.062628][ T4256] lg-g15 0003:046D:C22D.0001: unknown main item tag 0x0 [ 65.072102][ T4256] lg-g15 0003:046D:C22D.0001: unknown main item tag 0x0 [ 65.079187][ T4256] lg-g15 0003:046D:C22D.0001: unknown main item tag 0x0 [ 65.093906][ T4256] lg-g15 0003:046D:C22D.0001: hidraw0: USB HID v0.05 Device [HID 046d:c22d] on usb-dummy_hcd.1-1/input0 [ 65.240024][ T4242] usb 2-1: USB disconnect, device number 2 [ 65.341049][ T4377] fido_id[4377]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 65.447122][ T4385] loop2: detected capacity change from 0 to 16 [ 65.475024][ T4385] erofs: (device loop2): mounted with root inode @ nid 36. [ 65.499466][ T4385] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 65.531602][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.574403][ T4385] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 65.588476][ T4385] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 65.608508][ T4386] erofs: (device loop2): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 65.625119][ T4386] attempt to access beyond end of device [ 65.625119][ T4386] loop2: rw=0, want=304, limit=16 [ 65.650907][ T4386] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 65.671570][ T4386] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 65.733815][ T4256] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 65.755720][ T4388] device syzkaller0 entered promiscuous mode [ 65.803158][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 65.846415][ T4393] loop1: detected capacity change from 0 to 47 [ 65.941731][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.941806][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 65.941846][ T13] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 65.941871][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.947593][ T13] usb 5-1: config 0 descriptor?? [ 65.984416][ T4397] input: syz1 as /devices/virtual/input/input5 [ 66.017400][ T13] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 66.074718][ T4186] MINIX-fs: deleted inode referenced: 9 [ 66.084106][ T4186] MINIX-fs: deleted inode referenced: 9 [ 66.090421][ T4186] MINIX-fs: deleted inode referenced: 9 [ 66.127287][ T4186] MINIX-fs: deleted inode referenced: 9 [ 66.134911][ T4203] Bluetooth: hci0: Unknown advertising packet type: 0x2e70 [ 66.135132][ T4203] ================================================================== [ 66.150587][ T4203] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1324/0x3c90 [ 66.158428][ T4203] Read of size 1 at addr ffff88802c5eb405 by task kworker/u5:7/4203 [ 66.166420][ T4203] [ 66.168769][ T4203] CPU: 1 PID: 4203 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 66.176328][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 66.186393][ T4203] Workqueue: hci0 hci_rx_work [ 66.191098][ T4203] Call Trace: [ 66.194399][ T4203] [ 66.197340][ T4203] dump_stack_lvl+0x188/0x250 [ 66.202054][ T4203] ? show_regs_print_info+0x20/0x20 [ 66.207274][ T4203] ? load_image+0x400/0x400 [ 66.211797][ T4203] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 66.217289][ T4203] print_address_description+0x60/0x2d0 [ 66.222859][ T4203] ? hci_le_meta_evt+0x1324/0x3c90 [ 66.228003][ T4203] kasan_report+0xdf/0x130 [ 66.232445][ T4203] ? hci_le_meta_evt+0x1324/0x3c90 [ 66.237585][ T4203] hci_le_meta_evt+0x1324/0x3c90 [ 66.242578][ T4203] ? hci_remote_host_features_evt+0x280/0x280 [ 66.248675][ T4203] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 66.254340][ T4203] ? mark_lock+0x94/0x320 [ 66.258707][ T4203] ? mutex_unlock+0x10/0x10 [ 66.263245][ T4203] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 66.269356][ T4203] ? lock_chain_count+0x20/0x20 [ 66.274225][ T4203] ? __rwlock_init+0x140/0x140 [ 66.279012][ T4203] hci_event_packet+0xe48/0x1370 [ 66.283982][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 66.285603][ T4256] usb 1-1: unable to get BOS descriptor or descriptor too short [ 66.289207][ T4203] ? rcu_lock_release+0x20/0x20 [ 66.301710][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 66.306935][ T4203] hci_rx_work+0x255/0xa10 [ 66.311390][ T4203] process_one_work+0x85f/0x1010 [ 66.316369][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 66.322024][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 66.327337][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 66.332381][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 66.337954][ T4203] ? wq_worker_running+0x97/0x170 [ 66.343005][ T4203] worker_thread+0xaa6/0x1290 [ 66.347418][ T4256] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 66.347723][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 66.360723][ T4203] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 66.366656][ T4203] kthread+0x436/0x520 [ 66.370744][ T4203] ? rcu_lock_release+0x20/0x20 [ 66.375617][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 66.380227][ T4203] ret_from_fork+0x1f/0x30 [ 66.384684][ T4203] [ 66.387722][ T4203] [ 66.390084][ T4203] Allocated by task 4382: [ 66.394437][ T4203] __kasan_kmalloc+0xb5/0xf0 [ 66.399048][ T4203] __alloc_skb+0x22c/0x750 [ 66.403484][ T4203] vhci_write+0xbc/0x450 [ 66.407762][ T4203] vfs_write+0x745/0xd60 [ 66.412021][ T4203] ksys_write+0x152/0x260 [ 66.416374][ T4203] do_syscall_64+0x4c/0xa0 [ 66.420811][ T4203] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.426724][ T4203] [ 66.429058][ T4203] Last potentially related work creation: [ 66.434808][ T4203] kasan_save_stack+0x35/0x60 [ 66.439509][ T4203] kasan_record_aux_stack+0xb8/0x100 [ 66.444827][ T4203] kvfree_call_rcu+0x105/0x7d0 [ 66.449615][ T4203] ops_init+0x2dc/0x600 [ 66.453803][ T4203] register_pernet_operations+0x2af/0x610 [ 66.459549][ T4203] register_pernet_device+0x26/0x70 [ 66.464769][ T4203] dp_init+0x91/0x140 [ 66.468768][ T4203] do_one_initcall+0x272/0x730 [ 66.473555][ T4203] do_initcall_level+0x137/0x1f0 [ 66.478528][ T4203] do_initcalls+0x4b/0x90 [ 66.482874][ T4203] kernel_init_freeable+0x3e9/0x570 [ 66.488226][ T4203] kernel_init+0x19/0x1b0 [ 66.492585][ T4203] ret_from_fork+0x1f/0x30 [ 66.497032][ T4203] [ 66.499371][ T4203] The buggy address belongs to the object at ffff88802c5eb000 [ 66.499371][ T4203] which belongs to the cache kmalloc-1k of size 1024 [ 66.513443][ T4203] The buggy address is located 5 bytes to the right of [ 66.513443][ T4203] 1024-byte region [ffff88802c5eb000, ffff88802c5eb400) [ 66.527182][ T4203] The buggy address belongs to the page: [ 66.532841][ T4203] page:ffffea0000b17a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c5e8 [ 66.543026][ T4203] head:ffffea0000b17a00 order:3 compound_mapcount:0 compound_pincount:0 [ 66.551394][ T4203] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 66.559421][ T4203] raw: 00fff00000010200 ffffea000067fe00 0000000200000002 ffff888016c41dc0 [ 66.568025][ T4203] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 66.576619][ T4203] page dumped because: kasan: bad access detected [ 66.583050][ T4203] page_owner tracks the page as allocated [ 66.588785][ T4203] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, ts 16960915934, free_ts 0 [ 66.591518][ T4256] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 66.604682][ T4203] get_page_from_freelist+0x1bbd/0x1ca0 [ 66.604711][ T4203] __alloc_pages+0x1ee/0x480 [ 66.604728][ T4203] alloc_page_interleave+0x24/0x1e0 [ 66.604746][ T4203] new_slab+0xc0/0x4b0 [ 66.631682][ T4203] ___slab_alloc+0x80a/0xdd0 [ 66.636302][ T4203] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 66.641709][ T4203] tipc_link_create+0x120/0xce0 [ 66.646585][ T4203] tipc_link_bc_create+0xe7/0x420 [ 66.651626][ T4203] tipc_bcast_init+0x194/0x330 [ 66.656404][ T4203] tipc_init_net+0x26c/0x320 [ 66.661007][ T4203] ops_init+0x357/0x600 [ 66.665182][ T4203] register_pernet_operations+0x2af/0x610 [ 66.670918][ T4203] register_pernet_device+0x26/0x70 [ 66.675488][ T4256] usb 1-1: can't read configurations, error -71 [ 66.676124][ T4203] tipc_init+0x52/0x180 [ 66.686517][ T4203] do_one_initcall+0x272/0x730 [ 66.691299][ T4203] do_initcall_level+0x137/0x1f0 [ 66.696253][ T4203] page_owner free stack trace missing [ 66.701633][ T4203] [ 66.703968][ T4203] Memory state around the buggy address: [ 66.709619][ T4203] ffff88802c5eb300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.717691][ T4203] ffff88802c5eb380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.725764][ T4203] >ffff88802c5eb400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 66.733850][ T4203] ^ [ 66.737942][ T4203] ffff88802c5eb480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 66.746016][ T4203] ffff88802c5eb500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 66.754086][ T4203] ================================================================== [ 66.762156][ T4203] Disabling lock debugging due to kernel taint [ 66.768397][ C1] vkms_vblank_simulate: vblank timer overrun [ 66.781278][ T4203] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 66.788497][ T4203] CPU: 1 PID: 4203 Comm: kworker/u5:7 Tainted: G B syzkaller #0 [ 66.797448][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 66.807514][ T4203] Workqueue: hci0 hci_rx_work [ 66.812214][ T4203] Call Trace: [ 66.815509][ T4203] [ 66.818443][ T4203] dump_stack_lvl+0x188/0x250 [ 66.823143][ T4203] ? show_regs_print_info+0x20/0x20 [ 66.828372][ T4203] ? load_image+0x400/0x400 [ 66.832915][ T4203] panic+0x2e5/0x810 [ 66.836838][ T4203] ? bpf_jit_dump+0xd0/0xd0 [ 66.841358][ T4203] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 66.847347][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 66.852212][ T4203] ? hci_le_meta_evt+0x1324/0x3c90 [ 66.857346][ T4203] check_panic_on_warn+0x80/0xa0 [ 66.862313][ T4203] ? hci_le_meta_evt+0x1324/0x3c90 [ 66.867437][ T4203] end_report+0x6d/0xf0 [ 66.871609][ T4203] kasan_report+0x102/0x130 [ 66.876142][ T4203] ? hci_le_meta_evt+0x1324/0x3c90 [ 66.881270][ T4203] hci_le_meta_evt+0x1324/0x3c90 [ 66.886253][ T4203] ? hci_remote_host_features_evt+0x280/0x280 [ 66.892342][ T4203] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 66.897993][ T4203] ? mark_lock+0x94/0x320 [ 66.902329][ T4203] ? mutex_unlock+0x10/0x10 [ 66.906841][ T4203] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 66.912845][ T4203] ? lock_chain_count+0x20/0x20 [ 66.917891][ T4203] ? __rwlock_init+0x140/0x140 [ 66.922677][ T4203] hci_event_packet+0xe48/0x1370 [ 66.927642][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 66.932859][ T4203] ? rcu_lock_release+0x20/0x20 [ 66.937734][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 66.942947][ T4203] hci_rx_work+0x255/0xa10 [ 66.947396][ T4203] process_one_work+0x85f/0x1010 [ 66.952370][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 66.958018][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 66.963318][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 66.968359][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 66.973912][ T4203] ? wq_worker_running+0x97/0x170 [ 66.978944][ T4203] worker_thread+0xaa6/0x1290 [ 66.983641][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 66.988876][ T4203] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 66.994793][ T4203] kthread+0x436/0x520 [ 66.998870][ T4203] ? rcu_lock_release+0x20/0x20 [ 67.003743][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 67.008358][ T4203] ret_from_fork+0x1f/0x30 [ 67.012794][ T4203] [ 67.015910][ T4203] Kernel Offset: disabled [ 67.020270][ T4203] Rebooting in 86400 seconds..