last executing test programs: 11.202666887s ago: executing program 1 (id=33): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), 0x0}, 0x20) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) writev(r2, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@loopback, 0x80}) ftruncate(0xffffffffffffffff, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) ioctl(r3, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") 10.743615238s ago: executing program 1 (id=35): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904008100000000000000000a00000800040001000000", 0x24) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x17, 0x3, "91abc12404cf378042f26c43f91f68d8a90767"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x94}}, 0x0) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f00000001c0)=0xffffffc3, 0x389) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r7], 0xa8}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000004) socket$inet_udp(0x2, 0x2, 0x0) 5.666618142s ago: executing program 2 (id=45): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), 0x0}, 0x20) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) writev(r2, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@loopback, 0x80}) ftruncate(0xffffffffffffffff, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) ioctl(r3, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") 5.258696871s ago: executing program 2 (id=47): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) userfaultfd(0x801) 5.220694262s ago: executing program 4 (id=48): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) setresuid(0x0, 0x0, 0x0) 4.958541228s ago: executing program 0 (id=50): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x46, &(0x7f0000000000), 0x4) 4.957700659s ago: executing program 4 (id=51): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x90, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.780322623s ago: executing program 0 (id=52): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.708260085s ago: executing program 4 (id=53): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 4.48632521s ago: executing program 0 (id=54): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x48d, 0x8595, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xb4, 0x83, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='*\n-\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r5, 0x0, 0x18, &(0x7f0000000000)="0e", 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 4.233463696s ago: executing program 4 (id=55): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x4, 0x7f, 0xac, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x4, 0x4c78, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xbffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x400003ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x400, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x82, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x5, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9620, 0x64, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x10000, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffb29d, 0x8001, 0xd1ad045825a3ada6, 0x4, 0x7}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef) 3.576318542s ago: executing program 4 (id=57): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), 0x0}, 0x20) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) writev(r3, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000140)={@loopback, 0x80}) ftruncate(0xffffffffffffffff, 0x8008976) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) ioctl(r4, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") 3.464241025s ago: executing program 1 (id=58): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)='N', 0x1}], 0x1}, 0x4000890) r1 = socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x3, 0x20, "c7e2443d07c7e490f5ad9e75082ea54b91f49cf1b01e115d64d76b9397dcf8c5"}, 0x28) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="d9ea693249ca", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) 3.305554589s ago: executing program 4 (id=60): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$midi(0x0, 0x4b, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x39, 0x1, 0x1, 0x8, 0x30, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x1, [@ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0x3, 0x10, 0x40, 0x8, 0x6f, 0x20, {0x5, 0x25, 0x1, 0x1, "a2"}}}, {{0x9, 0x5, 0xf, 0x76f40b2c72d285e5, 0x400, 0xb, 0x0, 0x4, {0x9, 0x25, 0x1, 0x5, "37ce0645fe"}}}]}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.868785509s ago: executing program 3 (id=63): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x90, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.787296652s ago: executing program 3 (id=64): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.575599726s ago: executing program 2 (id=65): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.575072726s ago: executing program 3 (id=66): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000040)='1\x00', 0x1) 2.357235752s ago: executing program 1 (id=67): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='htcp', 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94", 0x79}], 0x2}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)=""/97, 0x6}, {&(0x7f0000000200)=""/80, 0x50}, {&(0x7f0000001240)=""/111, 0x6f}, {&(0x7f0000000e80)=""/16, 0x10}], 0x4}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) socket$packet(0x11, 0x2, 0x300) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0), 0x8) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000300)) sendfile(0xffffffffffffffff, r3, &(0x7f00000001c0), 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)={"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"}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c00078006000440000000000600054000000000080006"], 0x64}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4000010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0xffffffffffffff52, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 2.277780914s ago: executing program 2 (id=68): madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4e22, 0x7, @empty, 0x1}}}, 0x108) socket$inet(0xa, 0x801, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 2.217197555s ago: executing program 0 (id=69): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}}) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900), 0x0, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0), 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 1.805485535s ago: executing program 0 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), 0x0}, 0x20) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) writev(r3, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000140)={@loopback, 0x80}) ftruncate(0xffffffffffffffff, 0x8008976) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) ioctl(r4, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") 1.572898501s ago: executing program 3 (id=71): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x3, 0xff) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x20) 1.552392662s ago: executing program 0 (id=72): unshare(0x22020600) r0 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd08}}]}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x11000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x176b90bd46832ffe}, {0xfff3, 0xe}, {0xd, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x11) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4e0, &(0x7f0000000480)=ANY=[]) 1.455698734s ago: executing program 1 (id=73): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 1.240187289s ago: executing program 3 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) connect$netlink(r1, &(0x7f0000000280)=@unspec, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x401}}]}, 0x154}}, 0x24000058) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000002540)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002500)={&(0x7f0000002300)={0x1c0, r8, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd43}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @remote, 0x8001}}}}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x89}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x368}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x31a}]}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe8d6}]}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4850}, 0x8000000) fstat(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r10, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r10, &(0x7f0000000140)={0x90, 0x0, r11, {0x4000000000007, 0x0, 0x8, 0xe, 0x0, 0x1, {0x2000000002, 0x0, 0x6, 0x5, 0x8, 0x7, 0x7, 0x3, 0x7ff, 0x2000, 0x7, r12, r13, 0x5, 0xfff}}}, 0x90) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000300)={r0, r9, r13}, 0xc) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) 1.149122291s ago: executing program 2 (id=75): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, &(0x7f0000000000), 0x4) 907.365997ms ago: executing program 1 (id=76): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10001}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048024}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 869.721348ms ago: executing program 2 (id=77): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 0s ago: executing program 3 (id=78): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd26, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 89.795284][ T4260] cgroup: Unknown subsys name 'net' [ 89.933831][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.613548][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 93.739431][ T4291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.740326][ T4290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.751920][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.761830][ T4290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.768608][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.780119][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.789199][ T4291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.789812][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.802926][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.810062][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.816954][ T4291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.822294][ T4290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.833267][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.837157][ T4290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.849296][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.859374][ T4291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.860727][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.871418][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.875485][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.882725][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.895138][ T4290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.895637][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.904555][ T4291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.911873][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.918866][ T4291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.928677][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.967653][ T4291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.987640][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.997274][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.016967][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.642447][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 94.660670][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 94.793924][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 94.839829][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 94.854389][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 94.876928][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.885310][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.898083][ T4276] device bridge_slave_0 entered promiscuous mode [ 94.916118][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.924448][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.935841][ T4276] device bridge_slave_1 entered promiscuous mode [ 95.015580][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.028297][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.040103][ T4273] device bridge_slave_0 entered promiscuous mode [ 95.059997][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.098977][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.108289][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.120227][ T4273] device bridge_slave_1 entered promiscuous mode [ 95.137665][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.239878][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.252223][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.263318][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.273660][ T4278] device bridge_slave_0 entered promiscuous mode [ 95.293415][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.301679][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.312087][ T4278] device bridge_slave_1 entered promiscuous mode [ 95.325322][ T4276] team0: Port device team_slave_0 added [ 95.335151][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.355252][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.369600][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.380624][ T4277] device bridge_slave_0 entered promiscuous mode [ 95.404833][ T4276] team0: Port device team_slave_1 added [ 95.431089][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.438919][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.448534][ T4277] device bridge_slave_1 entered promiscuous mode [ 95.472734][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.481128][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.495504][ T4274] device bridge_slave_0 entered promiscuous mode [ 95.529229][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.557895][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.568518][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.578557][ T4274] device bridge_slave_1 entered promiscuous mode [ 95.590695][ T4273] team0: Port device team_slave_0 added [ 95.610134][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.624648][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.639167][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.676894][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.701996][ T4273] team0: Port device team_slave_1 added [ 95.720009][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.744439][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.752853][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.786623][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.827670][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.857029][ T4278] team0: Port device team_slave_0 added [ 95.875184][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.885734][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.894468][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.926557][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.952143][ T4278] team0: Port device team_slave_1 added [ 95.972270][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.983987][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.995495][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.027356][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 96.027483][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.076772][ T4276] device hsr_slave_0 entered promiscuous mode [ 96.084113][ T4276] device hsr_slave_1 entered promiscuous mode [ 96.107034][ T4290] Bluetooth: hci1: command 0x0409 tx timeout [ 96.115556][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 96.122859][ T4293] Bluetooth: hci4: command 0x0409 tx timeout [ 96.122880][ T4292] Bluetooth: hci3: command 0x0409 tx timeout [ 96.145390][ T4277] team0: Port device team_slave_0 added [ 96.153929][ T4277] team0: Port device team_slave_1 added [ 96.217050][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.224969][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.254676][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.287870][ T4273] device hsr_slave_0 entered promiscuous mode [ 96.295582][ T4273] device hsr_slave_1 entered promiscuous mode [ 96.302854][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.311715][ T4273] Cannot create hsr debugfs directory [ 96.320269][ T4274] team0: Port device team_slave_0 added [ 96.332999][ T4274] team0: Port device team_slave_1 added [ 96.340186][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.354743][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.391260][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.405629][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.414966][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.445600][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.460324][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.467894][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.498665][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.574317][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.583549][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.613265][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.670853][ T4277] device hsr_slave_0 entered promiscuous mode [ 96.688728][ T4277] device hsr_slave_1 entered promiscuous mode [ 96.706007][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.714641][ T4277] Cannot create hsr debugfs directory [ 96.750511][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.760530][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.802049][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.927389][ T4278] device hsr_slave_0 entered promiscuous mode [ 96.936259][ T4278] device hsr_slave_1 entered promiscuous mode [ 96.944354][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.952688][ T4278] Cannot create hsr debugfs directory [ 97.066055][ T4274] device hsr_slave_0 entered promiscuous mode [ 97.078047][ T4274] device hsr_slave_1 entered promiscuous mode [ 97.087147][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.095737][ T4274] Cannot create hsr debugfs directory [ 97.296117][ T4276] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.332494][ T4276] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.373451][ T4276] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.390124][ T127] cfg80211: failed to load regulatory.db [ 97.410126][ T4276] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.554043][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.583871][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.610308][ T4277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.622885][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.636830][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.652781][ T4277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.672054][ T4277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.720301][ T4277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.845467][ T4278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.861734][ T4278] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.882401][ T4278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.932721][ T4278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.959196][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.019469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.044865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.071373][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.089107][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.107047][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 98.117009][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.130808][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.144950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.160148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.172964][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.183510][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.188724][ T4290] Bluetooth: hci3: command 0x041b tx timeout [ 98.198170][ T4293] Bluetooth: hci1: command 0x041b tx timeout [ 98.201441][ T4291] Bluetooth: hci4: command 0x041b tx timeout [ 98.207932][ T4293] Bluetooth: hci2: command 0x041b tx timeout [ 98.230453][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.288781][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.305544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.317768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.328725][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.338228][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.352007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.366334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.381909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.405622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.415371][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.426878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.487926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.498992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.511155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.522872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.533896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.546216][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.567252][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.611364][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.652202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.662788][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.674758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.691300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.706990][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.727128][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.747314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.767984][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.780150][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.791073][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.827427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.847466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.877607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.888282][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.900301][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.916976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.937646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.958712][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.968356][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.985578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.030320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.059677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.079690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.100518][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.111256][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.120906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.138355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.152211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.165117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.187301][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.270154][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.288062][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.309362][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.327666][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.344922][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.356226][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.374830][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.391146][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.413932][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.449887][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.465466][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.488662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.502067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.517816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.527474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.541410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.561066][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.576107][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.595877][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.609955][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.622652][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.633298][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.644923][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.661240][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.673965][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.681856][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.691332][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.705802][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.730660][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.757879][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.774812][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.802888][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.815802][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.870387][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.888303][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.898771][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.907680][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.918682][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.929843][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.940904][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.949477][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.976370][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.989306][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.999548][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.011209][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.023707][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.064236][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.090170][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.119817][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.132855][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.157465][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.177009][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.197284][ T4293] Bluetooth: hci0: command 0x040f tx timeout [ 100.206229][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.229027][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.240165][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.251926][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.265222][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.277552][ T4293] Bluetooth: hci2: command 0x040f tx timeout [ 100.278414][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 100.289791][ T4293] Bluetooth: hci3: command 0x040f tx timeout [ 100.297361][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 100.370808][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.413260][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.459715][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.477259][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.497231][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.516359][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.532179][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.550520][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.561393][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.571799][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.583721][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.599651][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.616571][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.634748][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.649116][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.701225][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.967335][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.975763][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.036837][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.139568][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.177318][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.259436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.297273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.330961][ T4273] device veth0_vlan entered promiscuous mode [ 101.348186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.362752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.404291][ T4273] device veth1_vlan entered promiscuous mode [ 101.524627][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.563387][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.598226][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.617720][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.655813][ T4273] device veth0_macvtap entered promiscuous mode [ 101.703219][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.728556][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.757249][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.778804][ T4273] device veth1_macvtap entered promiscuous mode [ 101.827819][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.839113][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.850779][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.883089][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.900162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.913088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.934679][ T4276] device veth0_vlan entered promiscuous mode [ 101.955386][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.983100][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.999996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.014580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.033459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.042195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.051906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.061330][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.080522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.091972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.115508][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.148643][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.162024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.177608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.198965][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.212942][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.225347][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.238498][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.267552][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 102.277886][ T4276] device veth1_vlan entered promiscuous mode [ 102.328758][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.347457][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 102.356153][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 102.359469][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.371624][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 102.394006][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 102.402355][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.421137][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.431113][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.475642][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.502734][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.514704][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.530450][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.541073][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.573534][ T4277] device veth0_vlan entered promiscuous mode [ 102.630536][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.648429][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.671684][ T4278] device veth0_vlan entered promiscuous mode [ 102.697131][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.713710][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.728663][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.744364][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.758052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.768673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.781494][ T4276] device veth0_macvtap entered promiscuous mode [ 102.797855][ T4277] device veth1_vlan entered promiscuous mode [ 102.808749][ T4276] device veth1_macvtap entered promiscuous mode [ 102.829054][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.842907][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.851612][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.865543][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.878793][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.888556][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.898909][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.909892][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.922503][ T4278] device veth1_vlan entered promiscuous mode [ 102.936060][ T4274] device veth0_vlan entered promiscuous mode [ 102.956922][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.970145][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.981582][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.005842][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.018289][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.032887][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.076322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.087909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.098954][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.109346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.127296][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.139801][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.155940][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.171377][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.181587][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.193306][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.205376][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.228501][ T4278] device veth0_macvtap entered promiscuous mode [ 103.243194][ T4274] device veth1_vlan entered promiscuous mode [ 103.252245][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.262672][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.274757][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.294077][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.309231][ T4278] device veth1_macvtap entered promiscuous mode [ 103.324269][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.337956][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.348305][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.363538][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.372976][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.423668][ T4277] device veth0_macvtap entered promiscuous mode [ 103.476045][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.494290][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.505301][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.518922][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.532481][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.542992][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.554934][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.565053][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.574776][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.584710][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.606949][ T4274] device veth0_macvtap entered promiscuous mode [ 103.622176][ T4277] device veth1_macvtap entered promiscuous mode [ 103.662613][ T4274] device veth1_macvtap entered promiscuous mode [ 103.683513][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.731159][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.742824][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.756045][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.768866][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.804509][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.818452][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.829457][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.838613][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.848233][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.870540][ T4278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.881028][ T4278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.890392][ T4278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.899921][ T4278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.931302][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.959985][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.970443][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.986486][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.996376][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.013737][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.038006][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.046189][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.071773][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.090605][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.104752][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.127961][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.145132][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.167782][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.184529][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.201830][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.225827][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.234704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.245159][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.258765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.275141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.289509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.305277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.320826][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.337110][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.350842][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.365044][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.375315][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.386148][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.401410][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.421822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.436231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.447202][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.461992][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.472638][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.486489][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.496790][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.510206][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.520381][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.532175][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.544903][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.562244][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.571212][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.584071][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.593536][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.611427][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.622412][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.635474][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.644699][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.654742][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.666037][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.697696][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.705665][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.794296][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.965289][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.030075][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.112514][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.123541][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.145547][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.188649][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.214241][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.235396][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.301100][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.351021][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.374021][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.448955][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.509097][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.529902][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.584085][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.619596][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.665709][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.702010][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.945808][ T4383] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.976868][ T1172] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.201253][ T1172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.242623][ T1172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.276022][ T1172] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.342452][ T1172] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.386632][ T1172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.444956][ T1172] usb 1-1: config 0 descriptor?? [ 106.673328][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10'. [ 106.766228][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10'. [ 106.867180][ T4397] syz.4.10: vmalloc error: size 8796093022411, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 106.919240][ T1172] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 106.949494][ T4397] CPU: 1 PID: 4397 Comm: syz.4.10 Not tainted syzkaller #0 [ 106.956912][ T4397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.967306][ T4397] Call Trace: [ 106.970648][ T4397] [ 106.973694][ T4397] dump_stack_lvl+0x188/0x24e [ 106.978516][ T4397] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 106.986100][ T4397] ? show_regs_print_info+0x12/0x12 [ 106.991347][ T4397] ? load_image+0x410/0x410 [ 106.996082][ T4397] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 107.003178][ T4397] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 107.009929][ T4397] warn_alloc+0x242/0x330 [ 107.015063][ T4397] ? zone_watermark_ok_safe+0x270/0x270 [ 107.021064][ T4397] ? __mutex_trylock_common+0x15c/0x260 [ 107.026959][ T4397] __vmalloc_node_range+0x11e/0x1380 [ 107.032854][ T4397] ? rcu_is_watching+0x11/0xa0 [ 107.040153][ T4397] ? trace_contention_end+0x5f/0x170 [ 107.046307][ T4397] ? __mutex_lock+0x1ab/0xae0 [ 107.051150][ T4397] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 107.058864][ T4397] ? preempt_schedule_notrace+0x120/0x120 [ 107.064939][ T4397] ? dvb_dvr_do_ioctl+0x75/0x220 [ 107.071443][ T4397] ? lock_chain_count+0x20/0x20 [ 107.076710][ T4397] ? free_vm_area+0x50/0x50 [ 107.082681][ T4397] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 107.089652][ T4397] ? lockdep_hardirqs_on+0x94/0x140 [ 107.095654][ T4397] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 107.100942][ T4397] vmalloc+0x75/0x80 [ 107.104924][ T4397] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 107.110982][ T4397] dvb_dvr_do_ioctl+0x12a/0x220 [ 107.117843][ T4397] dvb_usercopy+0x191/0x2b0 [ 107.122408][ T4397] ? dvb_dvr_release+0x3d0/0x3d0 [ 107.127850][ T4397] ? dvb_generic_ioctl+0xb0/0xb0 [ 107.133072][ T4397] ? dvb_dvr_poll+0x230/0x230 [ 107.138363][ T4397] dvb_dvr_ioctl+0x25/0x30 [ 107.142920][ T4397] __se_sys_ioctl+0xfa/0x170 [ 107.147837][ T4397] do_syscall_64+0x4c/0xa0 [ 107.152324][ T4397] ? clear_bhb_loop+0x60/0xb0 [ 107.157187][ T4397] ? clear_bhb_loop+0x60/0xb0 [ 107.162025][ T4397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.168537][ T4397] RIP: 0033:0x7f44f039e0d9 [ 107.173222][ T4397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.195316][ T4397] RSP: 002b:00007f44f1186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.204830][ T4397] RAX: ffffffffffffffda RBX: 00007f44f0626090 RCX: 00007f44f039e0d9 [ 107.214616][ T4397] RDX: 00000800000000cb RSI: 0000000000006f2d RDI: 0000000000000003 [ 107.223457][ T4397] RBP: 00007f44f0435024 R08: 0000000000000000 R09: 0000000000000000 [ 107.232421][ T4397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.240524][ T4397] R13: 00007f44f0626128 R14: 00007f44f0626090 R15: 00007ffe8c446d78 [ 107.248810][ T4397] [ 107.358638][ T1172] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 107.450560][ T1172] usb 1-1: USB disconnect, device number 2 [ 107.486636][ T4397] Mem-Info: [ 107.587652][ T4397] active_anon:6998 inactive_anon:0 isolated_anon:0 [ 107.587652][ T4397] active_file:1064 inactive_file:39951 isolated_file:0 [ 107.587652][ T4397] unevictable:768 dirty:1774 writeback:0 [ 107.587652][ T4397] slab_reclaimable:20972 slab_unreclaimable:91233 [ 107.587652][ T4397] mapped:31714 shmem:1361 pagetables:651 [ 107.587652][ T4397] sec_pagetables:0 bounce:0 [ 107.587652][ T4397] kernel_misc_reclaimable:0 [ 107.587652][ T4397] free:1335670 free_pcp:14010 free_cma:0 [ 107.826921][ T4338] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.836517][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.026562][ T4338] usb 4-1: Using ep0 maxpacket: 16 [ 108.056528][ T22] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 108.091542][ T4338] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.116673][ T22] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 108.145858][ T4405] fido_id[4405]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 108.166684][ T4338] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.200012][ T22] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 108.233891][ T4338] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.261503][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.296054][ T4397] Node 0 active_anon:24816kB inactive_anon:0kB active_file:4296kB inactive_file:159712kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127152kB dirty:7116kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10816kB pagetables:2628kB sec_pagetables:0kB all_unreclaimable? no [ 108.362863][ T4397] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 108.397606][ T4338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.425808][ T4396] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 108.454622][ T4338] usb 4-1: Product: syz [ 108.494177][ T4338] usb 4-1: Manufacturer: syz [ 108.501383][ T4397] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 108.521937][ T4338] usb 4-1: SerialNumber: syz [ 108.536562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 108.556997][ T4324] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.576143][ T4397] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 108.584863][ T4397] Node 0 DMA32 free:1442632kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:24352kB inactive_anon:0kB active_file:4364kB inactive_file:159712kB unevictable:1536kB writepending:7196kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:19796kB local_pcp:17328kB free_cma:0kB [ 108.634486][ T4397] lowmem_reserve[]: 0 0 1 1 1 [ 108.640500][ T4397] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 108.686454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 108.700093][ T4397] lowmem_reserve[]: 0 0 0 0 0 [ 108.706256][ T4397] Node 1 Normal free:3901476kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19136kB local_pcp:13312kB free_cma:0kB [ 108.768716][ T4397] lowmem_reserve[]: 0 0 0 0 0 [ 108.779891][ T4397] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 108.797371][ T4324] usb 3-1: Using ep0 maxpacket: 8 [ 108.803244][ T4397] Node 0 DMA32: 14*4kB (ME) 1048*8kB (UME) 317*16kB (UME) 46*32kB (UM) 17*64kB (UME) 10*128kB (UME) 2*256kB (UM) 1*512kB (U) 2*1024kB (UE) 2*2048kB (UM) 346*4096kB (M) = 1441736kB [ 108.906367][ T4338] usb 4-1: 0:2 : does not exist [ 108.929041][ T4338] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 108.996158][ T4397] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 109.046064][ T4397] Node 1 Normal: 217*4kB (UME) 42*8kB (UME) 25*16kB (UME) 61*32kB (UME) 19*64kB (UME) 7*128kB (UME) 2*256kB (UE) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 950*4096kB (M) = 3901476kB [ 109.075940][ T4397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.088744][ T4397] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 109.148114][ T4397] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.196724][ T4338] usb 4-1: USB disconnect, device number 2 [ 109.205693][ T4397] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.299805][ T4397] 42438 total pagecache pages [ 109.352606][ T4397] 0 pages in swap cache [ 109.390734][ T4397] Free swap = 124996kB [ 109.404537][ T4324] usb 3-1: unable to get BOS descriptor or descriptor too short [ 109.440759][ T4397] Total swap = 124996kB [ 109.447288][ T4324] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 109.461606][ T4397] 2097051 pages RAM [ 109.465882][ T4397] 0 pages HighMem/MovableOnly [ 109.473572][ T4324] usb 3-1: can't read configurations, error -71 [ 109.485621][ T4397] 415222 pages reserved [ 109.503121][ T4397] 0 pages cma reserved [ 109.522651][ T4420] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET) [ 109.636773][ T4279] udevd[4279]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 110.226541][ T4338] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 110.437817][ T4338] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 110.482012][ T4338] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 110.530049][ T4338] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 110.581010][ T4338] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 110.610949][ T4324] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.619804][ T4338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.651734][ T4338] usb 1-1: Product: syz [ 110.701996][ T4338] usb 1-1: Manufacturer: syz [ 110.711564][ T4338] usb 1-1: SerialNumber: syz [ 110.830973][ T4324] usb 3-1: unable to get BOS descriptor or descriptor too short [ 110.855234][ T4324] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.976168][ T4324] usb 3-1: string descriptor 0 read error: -22 [ 111.022710][ T4324] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 111.091568][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.474123][ T4432] loop2: detected capacity change from 0 to 512 [ 111.658055][ T4432] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 111.751030][ T4432] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.896178][ T7] usb 2-1: USB disconnect, device number 2 [ 112.250408][ T4324] usb 3-1: current rate 262176 is different from the runtime rate 48000 [ 112.260435][ T4454] capability: warning: `syz.3.21' uses deprecated v2 capabilities in a way that may be insecure [ 112.355431][ T4338] usb 1-1: Can't get UAC3 power state for id 10 [ 112.404624][ T4338] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 112.496552][ T4338] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 112.579672][ T4338] usb 1-1: USB disconnect, device number 3 [ 112.635962][ T4324] usb 3-1: USB disconnect, device number 3 [ 113.030719][ T4295] udevd[4295]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.187318][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 113.427146][ T4466] netlink: 188 bytes leftover after parsing attributes in process `syz.4.25'. [ 113.746630][ T4324] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.904875][ T4474] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 113.948901][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.976969][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.014700][ T4474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 114.092330][ T4324] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.174524][ T4324] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.210499][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.221013][ T4481] ip_tables: iptables: counters copy to user failed while replacing table [ 114.277180][ T4324] usb 3-1: config 0 descriptor?? [ 114.740332][ T4324] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 114.824352][ T4324] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 115.259866][ T4490] Zero length message leads to an empty skb [ 115.407719][ C1] plantronics 0003:047F:FFFF.0002: Event data for report 0 was too short (4043 vs 186) [ 115.626010][ T4324] usb 3-1: USB disconnect, device number 4 [ 116.908593][ T1172] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.036620][ T4508] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 117.259681][ T1172] usb 5-1: unable to get BOS descriptor or descriptor too short [ 117.556501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 117.576683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 117.589774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 117.602052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 117.614021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 117.629605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 117.640863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 117.652356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 117.938196][ T1172] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.040655][ T1172] usb 5-1: string descriptor 0 read error: -22 [ 118.092794][ T1172] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 118.170302][ T1172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.671354][ T4514] CUSE: unknown device info "" [ 118.676620][ T4514] CUSE: unknown device info "" [ 118.682327][ T4514] CUSE: unknown device info "" [ 118.690279][ T4514] CUSE: unknown device info "" [ 118.699165][ T4514] CUSE: unknown device info "ÿ" [ 118.705395][ T4514] CUSE: zero length info key specified [ 119.168900][ T4503] loop4: detected capacity change from 0 to 512 [ 119.520177][ T4503] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 119.607053][ T4503] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.122793][ T1172] usb 5-1: current rate 262176 is different from the runtime rate 48000 [ 120.186513][ T4325] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.392673][ T4338] usb 5-1: USB disconnect, device number 2 [ 120.406500][ T4325] usb 1-1: Using ep0 maxpacket: 16 [ 120.419883][ T4325] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.472164][ T4325] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.580512][ T4325] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.667497][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.719264][ T4325] usb 1-1: Product: syz [ 120.790452][ T4325] usb 1-1: Manufacturer: syz [ 120.852037][ T4325] usb 1-1: SerialNumber: syz [ 121.074297][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 121.134692][ T4325] usb 1-1: 0:2 : does not exist [ 121.222670][ T4325] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 121.327473][ T4325] usb 1-1: USB disconnect, device number 4 [ 121.610400][ T4279] udevd[4279]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.993165][ T4325] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.200992][ T4325] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 122.229073][ T4325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.256548][ T4325] usb 3-1: Product: syz [ 122.265573][ T4325] usb 3-1: Manufacturer: syz [ 122.290523][ T4325] usb 3-1: SerialNumber: syz [ 122.723060][ T4325] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 122.806571][ T22] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 123.018879][ T22] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.066209][ T22] usb 1-1: config 0 interface 0 has no altsetting 0 [ 123.075688][ T22] usb 1-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 123.087125][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.102284][ T22] usb 1-1: config 0 descriptor?? [ 123.522311][ T22] itetech 0003:048D:8595.0003: unknown main item tag 0x0 [ 123.548470][ T22] itetech 0003:048D:8595.0003: unknown main item tag 0x0 [ 123.569263][ T22] itetech 0003:048D:8595.0003: collection stack underflow [ 123.583986][ T4325] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 123.601514][ T22] itetech 0003:048D:8595.0003: item 0 0 0 12 parsing failed [ 123.612452][ T4325] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 123.624258][ T22] itetech: probe of 0003:048D:8595.0003 failed with error -22 [ 123.634856][ T4325] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 123.675829][ T4325] lan78xx: probe of 3-1:1.0 failed with error -71 [ 123.715881][ T4325] usb 3-1: USB disconnect, device number 5 [ 123.818199][ T4324] usb 1-1: USB disconnect, device number 5 [ 123.826628][ T4329] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 124.030546][ T4329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.051139][ T4329] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 124.061924][ T4329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.086577][ T4329] usb 5-1: config 0 descriptor?? [ 124.320462][ T4329] usbhid 5-1:0.0: can't add hid device: -71 [ 124.331642][ T4329] usbhid: probe of 5-1:0.0 failed with error -71 [ 124.361402][ T4329] usb 5-1: USB disconnect, device number 3 [ 124.908669][ T4329] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.117022][ T4329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.146681][ T4329] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 125.210214][ T4329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.252152][ T4329] usb 5-1: config 0 descriptor?? [ 125.372158][ T4616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 125.434552][ T4621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 125.696526][ T4328] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.914886][ T4328] usb 1-1: config index 0 descriptor too short (expected 64776, got 92) [ 125.951334][ T4328] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.984551][ T4585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.034227][ T4585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.050867][ T4328] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 126.187058][ T4624] CUSE: unknown device info "" [ 126.193305][ T4624] CUSE: unknown device info "" [ 126.199229][ T4624] CUSE: unknown device info "" [ 126.204716][ T4624] CUSE: unknown device info "" [ 126.211269][ T4624] CUSE: unknown device info "ÿ" [ 126.217547][ T4624] CUSE: zero length info key specified [ 126.516366][ T4631] device syzkaller0 entered promiscuous mode [ 126.581017][ T4631] tipc: Started in network mode [ 126.610592][ T4631] tipc: Node identity b20bd0e66eaa, cluster identity 4711 [ 126.627827][ T4631] tipc: Enabled bearer , priority 0 [ 126.642678][ T4630] tipc: Resetting bearer [ 126.712521][ T4630] tipc: Disabling bearer [ 126.750514][ T4328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.762020][ T4329] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 126.770031][ T4328] usb 1-1: Product: syz [ 126.775227][ T4328] usb 1-1: Manufacturer: syz [ 126.783483][ T4329] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 126.794286][ T4328] usb 1-1: SerialNumber: syz [ 126.809452][ C0] ================================================================================ [ 126.821199][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 126.831242][ C0] index 65092 is out of range for type 'const int[34]' [ 126.838826][ C0] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted syzkaller #0 [ 126.848092][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.859157][ C0] Workqueue: events kfree_rcu_work [ 126.865376][ C0] Call Trace: [ 126.868806][ C0] [ 126.871715][ C0] dump_stack_lvl+0x188/0x24e [ 126.876772][ C0] ? show_regs_print_info+0x12/0x12 [ 126.882075][ C0] ? load_image+0x410/0x410 [ 126.887362][ C0] ubsan_epilogue+0xa/0x30 [ 126.892048][ C0] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 126.902130][ C0] aiptek_irq+0x1e87/0x28f0 [ 126.907274][ C0] ? kcov_remote_start+0x86/0x7e0 [ 126.914089][ C0] ? led_trigger_blink_setup+0x37/0x230 [ 126.920511][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 126.926063][ C0] dummy_timer+0xa21/0x3420 [ 126.930768][ C0] ? dummy_free_streams+0x520/0x520 [ 126.936023][ C0] __hrtimer_run_queues+0x522/0xc90 [ 126.942540][ C0] ? dummy_free_streams+0x520/0x520 [ 126.948139][ C0] ? hrtimer_interrupt+0x980/0x980 [ 126.954085][ C0] hrtimer_run_softirq+0x173/0x290 [ 126.959585][ C0] handle_softirqs+0x291/0x910 [ 126.964614][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 126.969642][ C0] ? do_softirq+0x210/0x210 [ 126.975190][ C0] ? hrtimer_interrupt+0x775/0x980 [ 126.981431][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 126.986792][ C0] __irq_exit_rcu+0x13b/0x230 [ 126.992330][ C0] ? irq_exit_rcu+0x20/0x20 [ 126.999001][ C0] irq_exit_rcu+0x5/0x20 [ 127.003428][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 127.009218][ C0] [ 127.013002][ C0] [ 127.016504][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 127.022584][ C0] RIP: 0010:preempt_count_sub+0x3b/0x160 [ 127.028586][ C0] Code: c1 96 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 bd 00 00 00 83 3d 46 b3 68 15 00 75 25 65 8b 05 45 b1 a9 7e 89 c1 81 e1 ff ff ff 7f <39> cf 7f 25 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 53 [ 127.050624][ C0] RSP: 0018:ffffc900000c7578 EFLAGS: 00000202 [ 127.059019][ C0] RAX: 0000000080000001 RBX: dffffc0000000000 RCX: 0000000000000001 [ 127.067916][ C0] RDX: ffffc900000c7601 RSI: dffffc0000000000 RDI: 0000000000000001 [ 127.079159][ C0] RBP: dffffc0000000000 R08: ffffc900000c7710 R09: ffffc900000c76d8 [ 127.087547][ C0] R10: dffffc0000000000 R11: fffff52000018edd R12: ffffc900000c0000 [ 127.097570][ C0] R13: dffffc0000000000 R14: ffffc900000c7698 R15: ffffc900000c7720 [ 127.107555][ C0] unwind_next_frame+0x1719/0x1fd0 [ 127.112917][ C0] ? arch_stack_walk+0xda/0x140 [ 127.118085][ C0] __unwind_start+0x51a/0x650 [ 127.122882][ C0] ? stack_trace_save+0xf0/0xf0 [ 127.128378][ C0] arch_stack_walk+0xda/0x140 [ 127.133245][ C0] ? stack_trace_save+0xa6/0xf0 [ 127.142069][ C0] stack_trace_save+0xa6/0xf0 [ 127.146891][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 127.152514][ C0] kasan_set_track+0x4b/0x70 [ 127.157400][ C0] ? kmem_cache_free_bulk+0x364/0x480 [ 127.163257][ C0] kasan_save_free_info+0x27/0x40 [ 127.168560][ C0] ____kasan_slab_free+0x126/0x1f0 [ 127.174806][ C0] slab_free_freelist_hook+0x133/0x1b0 [ 127.181330][ C0] kmem_cache_free_bulk+0x364/0x480 [ 127.187332][ C0] ? kfree_rcu_work+0x35c/0xa20 [ 127.192619][ C0] ? kfree_rcu_work+0x2da/0xa20 [ 127.198032][ C0] kfree_rcu_work+0x35c/0xa20 [ 127.204474][ C0] ? kfree_rcu_work+0x2da/0xa20 [ 127.210042][ C0] ? rcu_core+0x1740/0x1740 [ 127.214931][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 127.221333][ C0] ? _raw_spin_unlock+0x40/0x40 [ 127.226951][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 127.232245][ C0] ? process_one_work+0x7b4/0x1160 [ 127.238147][ C0] process_one_work+0x8ab/0x1160 [ 127.244380][ C0] ? worker_detach_from_pool+0x240/0x240 [ 127.250732][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 127.255966][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 127.262567][ C0] ? wq_worker_running+0x97/0x190 [ 127.267733][ C0] worker_thread+0xaf5/0x12a0 [ 127.272594][ C0] kthread+0x29d/0x330 [ 127.277224][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 127.282583][ C0] ? kthread_blkcg+0xd0/0xd0 [ 127.287594][ C0] ret_from_fork+0x1f/0x30 [ 127.292074][ C0] [ 127.295376][ C0] ================================================================================ [ 127.306956][ C0] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 127.315676][ C0] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted syzkaller #0 [ 127.322933][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.334682][ C0] Workqueue: events kfree_rcu_work [ 127.341426][ C0] Call Trace: [ 127.344948][ C0] [ 127.348852][ C0] dump_stack_lvl+0x188/0x24e [ 127.354061][ C0] ? memcpy+0x3c/0x60 [ 127.358459][ C0] ? show_regs_print_info+0x12/0x12 [ 127.364692][ C0] ? load_image+0x410/0x410 [ 127.369525][ C0] panic+0x2d3/0x710 [ 127.374118][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 127.379421][ C0] check_panic_on_warn+0x80/0xa0 [ 127.384838][ C0] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 127.391352][ C0] aiptek_irq+0x1e87/0x28f0 [ 127.396730][ C0] ? kcov_remote_start+0x86/0x7e0 [ 127.402708][ C0] ? led_trigger_blink_setup+0x37/0x230 [ 127.411552][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 127.418233][ C0] dummy_timer+0xa21/0x3420 [ 127.422845][ C0] ? dummy_free_streams+0x520/0x520 [ 127.428201][ C0] __hrtimer_run_queues+0x522/0xc90 [ 127.433750][ C0] ? dummy_free_streams+0x520/0x520 [ 127.439449][ C0] ? hrtimer_interrupt+0x980/0x980 [ 127.444992][ C0] hrtimer_run_softirq+0x173/0x290 [ 127.450182][ C0] handle_softirqs+0x291/0x910 [ 127.455033][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 127.459943][ C0] ? do_softirq+0x210/0x210 [ 127.465638][ C0] ? hrtimer_interrupt+0x775/0x980 [ 127.472036][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 127.477280][ C0] __irq_exit_rcu+0x13b/0x230 [ 127.482468][ C0] ? irq_exit_rcu+0x20/0x20 [ 127.488347][ C0] irq_exit_rcu+0x5/0x20 [ 127.493019][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 127.499923][ C0] [ 127.503162][ C0] [ 127.506468][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 127.514103][ C0] RIP: 0010:preempt_count_sub+0x3b/0x160 [ 127.521571][ C0] Code: c1 96 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 bd 00 00 00 83 3d 46 b3 68 15 00 75 25 65 8b 05 45 b1 a9 7e 89 c1 81 e1 ff ff ff 7f <39> cf 7f 25 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 53 [ 127.543128][ C0] RSP: 0018:ffffc900000c7578 EFLAGS: 00000202 [ 127.550292][ C0] RAX: 0000000080000001 RBX: dffffc0000000000 RCX: 0000000000000001 [ 127.560879][ C0] RDX: ffffc900000c7601 RSI: dffffc0000000000 RDI: 0000000000000001 [ 127.571436][ C0] RBP: dffffc0000000000 R08: ffffc900000c7710 R09: ffffc900000c76d8 [ 127.581122][ C0] R10: dffffc0000000000 R11: fffff52000018edd R12: ffffc900000c0000 [ 127.589628][ C0] R13: dffffc0000000000 R14: ffffc900000c7698 R15: ffffc900000c7720 [ 127.598722][ C0] unwind_next_frame+0x1719/0x1fd0 [ 127.604950][ C0] ? arch_stack_walk+0xda/0x140 [ 127.611963][ C0] __unwind_start+0x51a/0x650 [ 127.618453][ C0] ? stack_trace_save+0xf0/0xf0 [ 127.623487][ C0] arch_stack_walk+0xda/0x140 [ 127.629755][ C0] ? stack_trace_save+0xa6/0xf0 [ 127.635635][ C0] stack_trace_save+0xa6/0xf0 [ 127.640895][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 127.646915][ C0] kasan_set_track+0x4b/0x70 [ 127.652846][ C0] ? kmem_cache_free_bulk+0x364/0x480 [ 127.658945][ C0] kasan_save_free_info+0x27/0x40 [ 127.668223][ C0] ____kasan_slab_free+0x126/0x1f0 [ 127.673854][ C0] slab_free_freelist_hook+0x133/0x1b0 [ 127.680605][ C0] kmem_cache_free_bulk+0x364/0x480 [ 127.686504][ C0] ? kfree_rcu_work+0x35c/0xa20 [ 127.692162][ C0] ? kfree_rcu_work+0x2da/0xa20 [ 127.697990][ C0] kfree_rcu_work+0x35c/0xa20 [ 127.702967][ C0] ? kfree_rcu_work+0x2da/0xa20 [ 127.708155][ C0] ? rcu_core+0x1740/0x1740 [ 127.713406][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 127.719990][ C0] ? _raw_spin_unlock+0x40/0x40 [ 127.725890][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 127.731177][ C0] ? process_one_work+0x7b4/0x1160 [ 127.737327][ C0] process_one_work+0x8ab/0x1160 [ 127.742772][ C0] ? worker_detach_from_pool+0x240/0x240 [ 127.748828][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 127.755022][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 127.761108][ C0] ? wq_worker_running+0x97/0x190 [ 127.766408][ C0] worker_thread+0xaf5/0x12a0 [ 127.771432][ C0] kthread+0x29d/0x330 [ 127.775717][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 127.781184][ C0] ? kthread_blkcg+0xd0/0xd0 [ 127.786067][ C0] ret_from_fork+0x1f/0x30 [ 127.790575][ C0] [ 127.794663][ C0] Kernel Offset: disabled [ 127.799415][ C0] Rebooting in 86400 seconds..