last executing test programs: 8.347341848s ago: executing program 4 (id=5): r0 = io_uring_setup(0xfc8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) io_submit(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.23082975s ago: executing program 4 (id=6): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x138e, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x3, 0xa4}, &(0x7f00000006c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8.166056037s ago: executing program 4 (id=7): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x40840, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 7.625468944s ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14}}, 0x9c}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, 0x0}}], 0x1, 0x20000800) r2 = syz_open_dev$vbi(&(0x7f0000001340), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000013c0)=@fd={0x7, 0xe, 0x4, 0x2000, 0x27, {0x77359400}, {0x1, 0xc, 0x0, 0xb2, 0x5, 0xf7, "230b6991"}, 0x7ff, 0x4, {}, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x4008880) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x1b, 0x80, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, 0xffffffffffffffff, 0x1}}, 0x48) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 7.56696433s ago: executing program 2 (id=3): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x15c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd0d5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffecc, @private2, 0xfff0}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10001, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000001) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000900)="bada30fbc99b5400040000ea0756159288a8", 0x36, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) 7.522209444s ago: executing program 0 (id=8): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x22, 0x2, 0x3) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0x8800, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000440)=@gcm_256={{0x303}, "113231dd22a2cca0", "42453182ab16baecc298d72135efedb21321d994bce76093af886973649e5d43", "8c4e6e09", "52c7bfc246eb5ec8"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x1) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000003300"], 0xfdef) close(r5) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x200, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 7.009267589s ago: executing program 2 (id=11): socket(0x28, 0x5, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) epoll_create(0xff9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r2, 0x2) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 5.546498343s ago: executing program 0 (id=14): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000b00)={0x40, 0x8, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.912772646s ago: executing program 2 (id=18): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x103040, 0x0) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2240, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b0, 0xffffffff, 0xffffffff, 0x2b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x2, 0x1}}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r4 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xb80a7000) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000020300000000000000000000050000002509170200000000050108000055dd62efa8982863e96a56bbdab8b1fb71f2b8893b23bec4a18edfbcdbf15997cc1dbe1b459a651f36ab4e98eaa0b67245ec376a51e873909526740c1a8d07e77eb56b2cc73617c7cea66240c9169a6c84529a72f5018410039ca1a256d855a7479f3c191cb48fd785b8d10be101382eab76f0ce11167d015be181838892e9f00c70bc31a97f461c3d109638aaf48e4dc80ec667a6ba2b7673e210c39aaa"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) 3.174971684s ago: executing program 4 (id=30): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "f50a5159"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 3.010467652s ago: executing program 1 (id=21): r0 = io_uring_setup(0xfc8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) io_submit(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.887736415s ago: executing program 1 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x15c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd0d5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffecc, @private2, 0xfff0}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10001, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000001) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000900)="bada30fbc99b5400040000ea0756159288a8", 0x36, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2.64679975s ago: executing program 1 (id=23): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) close(0x3) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x8000288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) creat(0x0, 0x1) r7 = inotify_init1(0x80000) inotify_add_watch(r7, 0x0, 0x14) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000004280), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2.116072696s ago: executing program 2 (id=25): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x0, 0xab, 0x8, &(0x7f0000000180)={0x2a, "247f23e017bb486c5c4b7165a6d6af0b920bf04121f0339400"}}) 1.518956739s ago: executing program 3 (id=27): syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) pipe(&(0x7f0000000080)) socket$unix(0x1, 0x1, 0x0) inotify_init1(0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0xfffffffffffffffe, 0x0, 0x4000000000009, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.255892777s ago: executing program 1 (id=28): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909", 0x1c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) openat$dsp(0xffffffffffffff9c, 0x0, 0x840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) getgid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(0xfffffffffffffffc, 0x9, 0x4, 0x0, 0x0, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0xa, 0xcf) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYBLOB="200001"], 0x38}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_emit_ethernet(0x76, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a5c000000060a0b04000000000000000002000000300004802c0001800a00010071756575650000001c0002800600024000060000060001400003000006000340000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x84}}, 0x40) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) 765.994669ms ago: executing program 0 (id=29): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) 667.01532ms ago: executing program 0 (id=31): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000580), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @rand_addr=0x1}]}, &(0x7f0000000200)=0x10) 645.269802ms ago: executing program 3 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 558.978291ms ago: executing program 3 (id=33): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000002000000ffffac1414aa", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00('], 0x50}}], 0x1, 0x0) 468.57257ms ago: executing program 3 (id=34): r0 = open(&(0x7f0000000000)='./file0\x00', 0x60840, 0x0) r1 = open(0x0, 0x149040, 0x10) fcntl$setlease(r1, 0x400, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x5}]}, 0x30}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) readv(r2, &(0x7f0000001840)=[{&(0x7f0000000200)=""/24, 0x18}], 0x1) fcntl$setlease(r0, 0x400, 0x0) 195.227829ms ago: executing program 3 (id=35): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x15c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd0d5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffecc, @private2, 0xfff0}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10001, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000001) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000900)="bada30fbc99b5400040000ea0756159288a8", 0x36, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) 112.636848ms ago: executing program 4 (id=36): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xfffffffffffffffd) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x9, 0x7}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 30.942226ms ago: executing program 1 (id=37): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea", 0xc}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002240)="6e2ebb87dca38cb8b3378e86c02cafa0bd62c7a2cddda54f6a0a1c1b92bae9731f4063d80b5110c9d03f91a7a36de1b85a723f5902e290250ad0f1ba3a09733260816749c0336324bd84b178c88fa2d67602e2444a7e61aa569282cd7ce83e6c2faa97a4f99d042e50e79936490023", 0x6f}], 0x1}}], 0x2, 0x2090) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) 16.159688ms ago: executing program 3 (id=38): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x1935, 0x0) r3 = syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x41, 0x0, @fd_index=0x1, 0x8, 0x0, 0x10000, 0x0, 0x1}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x80000000, 0x7, 0x8, 0x100, 0x1, 0xed}) unshare(0x2a020600) r6 = timerfd_create(0x0, 0x80800) timerfd_settime(r6, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r6, 0x0) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.nlink\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x12bc80, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000140)='debug', &(0x7f0000000180)='./file0\x00', r10) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x23e, 0x0, 0x2}]}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32], 0x50}, 0x1, 0xba01}, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x10000000) socket(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=39): r0 = userfaultfd(0x40800) socket(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8982, &(0x7f0000000000)={0x7, 'wg1\x00', {0x401}, 0x7}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) sendmsg$NFT_BATCH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008850) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x48}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.232' (ED25519) to the list of known hosts. [ 48.478148][ T4172] cgroup: Unknown subsys name 'net' [ 48.575599][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.790622][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.696329][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 51.764269][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 51.787017][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 51.858340][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 51.875108][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.883236][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.891327][ T4182] device bridge_slave_0 entered promiscuous mode [ 51.923638][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.930766][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.938343][ T4182] device bridge_slave_1 entered promiscuous mode [ 51.958425][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 51.991916][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.998983][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.007411][ T4192] device bridge_slave_0 entered promiscuous mode [ 52.018804][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.026107][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.034414][ T4192] device bridge_slave_1 entered promiscuous mode [ 52.072121][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.083468][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.095328][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.103495][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.111345][ T4190] device bridge_slave_0 entered promiscuous mode [ 52.143166][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.150235][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.158557][ T4190] device bridge_slave_1 entered promiscuous mode [ 52.169367][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.203191][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.214977][ T4182] team0: Port device team_slave_0 added [ 52.221597][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.228654][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.236582][ T4183] device bridge_slave_0 entered promiscuous mode [ 52.265491][ T4182] team0: Port device team_slave_1 added [ 52.271656][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.278709][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.286601][ T4183] device bridge_slave_1 entered promiscuous mode [ 52.303390][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.345575][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.362412][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.369518][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.377289][ T4197] device bridge_slave_0 entered promiscuous mode [ 52.387114][ T4192] team0: Port device team_slave_0 added [ 52.393781][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.401013][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.427009][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.440236][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.460748][ T4190] team0: Port device team_slave_0 added [ 52.466766][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.474400][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.482101][ T4197] device bridge_slave_1 entered promiscuous mode [ 52.490144][ T4192] team0: Port device team_slave_1 added [ 52.496637][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.503666][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.529786][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.542323][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.561196][ T4190] team0: Port device team_slave_1 added [ 52.611585][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.618551][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.644892][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.658454][ T4183] team0: Port device team_slave_0 added [ 52.671454][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.681242][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.688193][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.714204][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.730351][ T4183] team0: Port device team_slave_1 added [ 52.736915][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.743962][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.770089][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.788091][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.817669][ T4182] device hsr_slave_0 entered promiscuous mode [ 52.824534][ T4182] device hsr_slave_1 entered promiscuous mode [ 52.840315][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.847614][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.873644][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.925707][ T4197] team0: Port device team_slave_0 added [ 52.937530][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.944710][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.970847][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.996076][ T4197] team0: Port device team_slave_1 added [ 53.006427][ T4192] device hsr_slave_0 entered promiscuous mode [ 53.013562][ T4192] device hsr_slave_1 entered promiscuous mode [ 53.020080][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.028052][ T4192] Cannot create hsr debugfs directory [ 53.034290][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.041384][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.067426][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.113428][ T4190] device hsr_slave_0 entered promiscuous mode [ 53.120252][ T4190] device hsr_slave_1 entered promiscuous mode [ 53.127181][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.134870][ T4190] Cannot create hsr debugfs directory [ 53.155557][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.162686][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.188738][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.200824][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.207774][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.234548][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.324326][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.331609][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.338114][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.345823][ T4183] Cannot create hsr debugfs directory [ 53.391259][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 53.397724][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 53.400680][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 53.416740][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 53.423060][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 53.433983][ T4197] device hsr_slave_0 entered promiscuous mode [ 53.440466][ T4197] device hsr_slave_1 entered promiscuous mode [ 53.447159][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.455263][ T4197] Cannot create hsr debugfs directory [ 53.628150][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.639603][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.648675][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.659729][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.709164][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.718240][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.744020][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.757479][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.817163][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.825638][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.855390][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.871421][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.880067][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.890335][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.911386][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.926403][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.946761][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.972769][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.986102][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.998615][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.010131][ T4197] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.019785][ T4197] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.044889][ T4197] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.054269][ T4197] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.072771][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.083178][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.092418][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.099608][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.108167][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.145740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.156843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.165582][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.172688][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.180274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.188812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.225966][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.235130][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.244549][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.267917][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.280360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.290008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.299028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.309689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.318364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.327082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.355783][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.367382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.376417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.389044][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.400420][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.411151][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.434314][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.448116][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.457731][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.465111][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.479119][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.493551][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.502813][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.511888][ T3029] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.518934][ T3029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.526706][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.542582][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.556277][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.568913][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.578456][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.587018][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.595686][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.604950][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.613863][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.622591][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.631955][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.640289][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.652808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.662756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.671886][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.678926][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.712545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.722471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.730285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.738867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.748392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.757317][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.764369][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.774440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.783329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.792160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.800933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.809193][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.816239][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.824409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.834511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.843100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.851951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.860125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.868645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.877184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.885796][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.892891][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.902065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.911209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.918678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.926148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.935583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.945681][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.956550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.969767][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.010336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.022984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.034808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.044897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.054475][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.061572][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.070121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.079738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.088918][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.096021][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.108354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.117580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.126678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.135379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.148795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.157669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.166605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.174614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.184744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.193657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.203153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.212867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.221457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.232466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.242636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.268400][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.279395][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.294644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.305466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.314603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.323827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.332729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.352375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.361171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.371002][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.395245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.404571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.413746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.422754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.431869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.440192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.449000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.473216][ T4258] Bluetooth: hci0: command 0x041b tx timeout [ 55.474802][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.487067][ T4242] Bluetooth: hci4: command 0x041b tx timeout [ 55.492221][ T4258] Bluetooth: hci1: command 0x041b tx timeout [ 55.499555][ T4258] Bluetooth: hci2: command 0x041b tx timeout [ 55.507028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.524128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.530711][ T4258] Bluetooth: hci3: command 0x041b tx timeout [ 55.539881][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.586820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.606469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.651838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.666594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.714066][ T4182] device veth0_vlan entered promiscuous mode [ 55.726415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.734766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.744341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.753835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.769575][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.777370][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.788985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.798873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.811780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.819508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.836195][ T4182] device veth1_vlan entered promiscuous mode [ 55.846606][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.856718][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.865207][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.873829][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.882038][ T4192] device veth0_vlan entered promiscuous mode [ 55.895420][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.915688][ T4192] device veth1_vlan entered promiscuous mode [ 55.937910][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.946708][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.956141][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.966145][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.973953][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.981612][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.990104][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.004635][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.032777][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.042200][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.051959][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.060469][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.076467][ T4182] device veth0_macvtap entered promiscuous mode [ 56.089380][ T4182] device veth1_macvtap entered promiscuous mode [ 56.106179][ T4183] device veth0_vlan entered promiscuous mode [ 56.116705][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.126096][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.134270][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.143004][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.152050][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.160106][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.168825][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.177010][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.187433][ T4192] device veth0_macvtap entered promiscuous mode [ 56.204240][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.222545][ T4183] device veth1_vlan entered promiscuous mode [ 56.229657][ T4192] device veth1_macvtap entered promiscuous mode [ 56.245213][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.254814][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.263379][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.272799][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.281814][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.290312][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.298959][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.307469][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.315952][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.324857][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.332801][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.365089][ T4197] device veth0_vlan entered promiscuous mode [ 56.375136][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.393886][ T4190] device veth0_vlan entered promiscuous mode [ 56.405316][ T4183] device veth0_macvtap entered promiscuous mode [ 56.415147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.424031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.432733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.442851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.451431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.459632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.468473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.477360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.485522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.494134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.504280][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.514609][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.523398][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.532171][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.554187][ T4183] device veth1_macvtap entered promiscuous mode [ 56.567128][ T4197] device veth1_vlan entered promiscuous mode [ 56.587750][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.599174][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.610526][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.638874][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.647304][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.657241][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.665552][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.675940][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.685445][ T4190] device veth1_vlan entered promiscuous mode [ 56.696779][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.708029][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.719305][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.741701][ T4197] device veth0_macvtap entered promiscuous mode [ 56.754576][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.767424][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.777449][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.788096][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.799660][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.807564][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.815753][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.824565][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.834076][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.843050][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.851832][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.860362][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.868965][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.877943][ T3029] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.896220][ T4197] device veth1_macvtap entered promiscuous mode [ 56.918442][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.931868][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.942051][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.954279][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.965295][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.975426][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.984708][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.996064][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.006228][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.039567][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.050513][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.061127][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.072120][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.082138][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.092628][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.104175][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.113078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.127698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.136374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.145783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.155130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.166597][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.175639][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.184528][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.193255][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.221051][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.232370][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.242768][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.253241][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.263155][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.274682][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.285589][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.299797][ T4197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.308943][ T4197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.318319][ T4197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.327256][ T4197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.344529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.353299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.384606][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.386907][ T4190] device veth0_macvtap entered promiscuous mode [ 57.404045][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.422894][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.435434][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.444483][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.464059][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.467385][ T4190] device veth1_macvtap entered promiscuous mode [ 57.478598][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.500239][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.508638][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.517902][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.551275][ T4293] Bluetooth: hci1: command 0x040f tx timeout [ 57.571600][ T4293] Bluetooth: hci0: command 0x040f tx timeout [ 57.576869][ T4242] Bluetooth: hci3: command 0x040f tx timeout [ 57.583923][ T4242] Bluetooth: hci2: command 0x040f tx timeout [ 57.591240][ T4242] Bluetooth: hci4: command 0x040f tx timeout [ 57.605009][ T453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.615965][ T453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.627509][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.631246][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.648781][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.658850][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.669742][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.671001][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.680456][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.697475][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.707991][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.719840][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.731868][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.746830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.756025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.764030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.772733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.792939][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.804857][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.817223][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.841315][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.851864][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.863178][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.874565][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.885075][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.896613][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.914198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.932125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.957149][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.962504][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.981643][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.990300][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.999616][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.020817][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.060025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.088037][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.097457][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.114760][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.116773][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.137213][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.157487][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.204337][ T3029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.236058][ T3029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.257745][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.286070][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.298302][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.315050][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.414195][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.429312][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.469565][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.575591][ T4242] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 58.755610][ T4315] device syzkaller0 entered promiscuous mode [ 59.004029][ T4321] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 59.161458][ T4242] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 59.170910][ T4243] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.202948][ T4242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.212211][ T4242] usb 5-1: Product: syz [ 59.216513][ T4242] usb 5-1: Manufacturer: syz [ 59.221587][ T4242] usb 5-1: SerialNumber: syz [ 59.241674][ T4242] usb 5-1: config 0 descriptor?? [ 59.523687][ T4242] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 59.630968][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.640260][ T4228] Bluetooth: hci4: command 0x0419 tx timeout [ 59.670647][ T4228] Bluetooth: hci2: command 0x0419 tx timeout [ 59.681388][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 59.697924][ T4228] Bluetooth: hci0: command 0x0419 tx timeout [ 59.718337][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 59.761095][ T4243] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 59.778908][ T4243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.795983][ T4243] usb 2-1: Product: syz [ 59.806498][ T4243] usb 2-1: Manufacturer: syz [ 59.817317][ T4243] usb 2-1: SerialNumber: syz [ 59.882745][ T4243] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 59.886779][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.191512][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.200896][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.416779][ T4337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 60.500908][ T4332] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 60.840925][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 60.848484][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.920614][ T4293] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.937805][ T1108] usb 2-1: USB disconnect, device number 2 [ 61.100728][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 61.151030][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.180715][ T4293] usb 1-1: Using ep0 maxpacket: 32 [ 61.300779][ T4293] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 61.309040][ T4293] usb 1-1: config 0 has no interface number 0 [ 61.315734][ T4293] usb 1-1: config 0 interface 12 has no altsetting 0 [ 61.391538][ T13] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 61.400941][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.409000][ T13] usb 4-1: Product: syz [ 61.413310][ T13] usb 4-1: Manufacturer: syz [ 61.417922][ T13] usb 4-1: SerialNumber: syz [ 61.442950][ T13] usb 4-1: config 0 descriptor?? [ 61.480929][ T4293] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 61.495932][ T4293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.505162][ T13] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 61.512342][ T4293] usb 1-1: Product: syz [ 61.520508][ T4293] usb 1-1: Manufacturer: syz [ 61.525213][ T4293] usb 1-1: SerialNumber: syz [ 61.548067][ T4293] usb 1-1: config 0 descriptor?? [ 61.561098][ T4332] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 61.570601][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 61.585716][ T4332] ath9k_htc: Failed to initialize the device [ 61.594409][ T1108] usb 2-1: ath9k_htc: USB layer deinitialized [ 61.631141][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.694684][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 61.708303][ T4339] udc-core: couldn't find an available UDC or it's busy [ 61.709207][ T4242] usb 5-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 61.715711][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.725076][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.743139][ T4339] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 61.761081][ T4339] udc-core: couldn't find an available UDC or it's busy [ 61.768167][ T4339] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 61.768653][ T4242] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 61.776812][ T4339] udc-core: couldn't find an available UDC or it's busy [ 61.792565][ T4339] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 61.797142][ T4242] usb 5-1: media controller created [ 61.806710][ T4339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'. [ 61.823433][ T4242] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 61.826556][ T4339] device ip6tnl0 entered promiscuous mode [ 61.881774][ T13] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 61.897033][ T4242] i2c i2c-1: Added multiplexed i2c bus 2 [ 61.904191][ T4242] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 61.921537][ T4242] usb 5-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 61.941830][ T4242] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 61.955608][ T13] visor: probe of 4-1:0.0 failed with error -71 [ 62.001245][ T13] usb 4-1: USB disconnect, device number 2 [ 62.007797][ T4242] DVB: Unable to find symbol r820t_attach() [ 62.098144][ T4242] usb 5-1: USB disconnect, device number 2 [ 62.742117][ T4362] Cannot find set identified by id 0 to match [ 63.290623][ T2240] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 63.353957][ T4377] device syzkaller0 entered promiscuous mode [ 63.690908][ T2240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.708942][ T2240] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 63.730656][ T2240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.769911][ T2240] usb 5-1: config 0 descriptor?? [ 64.252466][ T2240] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 64.280935][ T2240] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input6 [ 64.350723][ T4258] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 64.422395][ T2240] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 64.730750][ T4258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.753220][ T4258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.777552][ T4258] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 64.787910][ T4258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.817491][ T4258] usb 3-1: config 0 descriptor?? [ 65.070904][ T4293] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: b8 failed: -71 [ 65.080177][ T4293] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 65.087730][ T4293] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 65.095434][ T4293] f81534: probe of 1-1:0.12 failed with error -71 [ 65.109008][ T4293] usb 1-1: USB disconnect, device number 2 [ 65.212587][ T4396] IPVS: You probably need to specify IP address on multicast interface. [ 65.226156][ T4396] IPVS: Error connecting to the multicast addr [ 65.302343][ T4258] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 65.318685][ T4258] cp2112 0003:10C4:EA90.0002: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 65.521231][ T4258] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 65.548400][ T4402] tipc: Started in network mode [ 65.554270][ T4402] tipc: Node identity ac14140f, cluster identity 4711 [ 65.573754][ T4402] tipc: Enabled bearer , priority 10 [ 65.689167][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.707854][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.724765][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.773195][ T4332] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 65.857460][ T4408] device syzkaller0 entered promiscuous mode [ 66.022914][ T4411] device syzkaller0 entered promiscuous mode [ 66.029075][ T1108] usb 5-1: USB disconnect, device number 3 [ 66.128526][ T4413] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.165687][ T4385] ================================================================== [ 66.173926][ T4385] BUG: KASAN: stack-out-of-bounds in cp2112_xfer+0x87c/0xe00 [ 66.181304][ T4385] Read of size 42 at addr ffffc900040cfd41 by task syz.2.25/4385 [ 66.189000][ T4385] [ 66.191315][ T4385] CPU: 0 PID: 4385 Comm: syz.2.25 Not tainted syzkaller #0 [ 66.198492][ T4385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.208537][ T4385] Call Trace: [ 66.211806][ T4385] [ 66.214726][ T4385] dump_stack_lvl+0x168/0x230 [ 66.219391][ T4385] ? show_regs_print_info+0x20/0x20 [ 66.224584][ T4385] ? _printk+0xcc/0x110 [ 66.228886][ T4385] ? load_image+0x3b0/0x3b0 [ 66.233382][ T4385] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 66.238751][ T4385] print_address_description+0x60/0x2d0 [ 66.244288][ T4385] ? cp2112_xfer+0x87c/0xe00 [ 66.248873][ T4385] kasan_report+0xdf/0x130 [ 66.253283][ T4385] ? cp2112_xfer+0x87c/0xe00 [ 66.257858][ T4385] ? cp2112_xfer+0x87c/0xe00 [ 66.262441][ T4385] kasan_check_range+0x27b/0x290 [ 66.267364][ T4385] memcpy+0x25/0x60 [ 66.271159][ T4385] cp2112_xfer+0x87c/0xe00 [ 66.275564][ T4385] ? cp2112_i2c_xfer+0xf20/0xf20 [ 66.280492][ T4385] ? lock_chain_count+0x20/0x20 [ 66.285334][ T4385] __i2c_smbus_xfer+0x733/0x1d50 [ 66.290262][ T4385] ? cp2112_i2c_xfer+0xf20/0xf20 [ 66.295194][ T4385] ? i2c_smbus_write_i2c_block_data+0x1a0/0x1a0 [ 66.301419][ T4385] ? rt_mutex_lock_nested+0x15a/0x1c0 [ 66.306780][ T4385] ? i2c_smbus_xfer+0x11d/0x3a0 [ 66.311614][ T4385] ? rwsem_down_read_slowpath+0x990/0x990 [ 66.317329][ T4385] ? __might_fault+0xb7/0x110 [ 66.321994][ T4385] i2c_smbus_xfer+0x263/0x3a0 [ 66.326657][ T4385] ? i2c_smbus_read_byte+0x1b0/0x1b0 [ 66.331928][ T4385] ? __might_fault+0xb3/0x110 [ 66.336592][ T4385] i2cdev_ioctl_smbus+0x3e3/0x650 [ 66.341608][ T4385] ? i2cdev_ioctl_rdwr+0x6c0/0x6c0 [ 66.346722][ T4385] ? __might_fault+0xb3/0x110 [ 66.351384][ T4385] ? _copy_from_user+0x111/0x170 [ 66.356306][ T4385] i2cdev_ioctl+0x545/0x750 [ 66.360795][ T4385] ? i2cdev_write+0x120/0x120 [ 66.365460][ T4385] ? bpf_lsm_file_ioctl+0x5/0x10 [ 66.370380][ T4385] ? security_file_ioctl+0x7c/0xa0 [ 66.375478][ T4385] ? i2cdev_write+0x120/0x120 [ 66.380139][ T4385] __se_sys_ioctl+0xfa/0x170 [ 66.384719][ T4385] do_syscall_64+0x4c/0xa0 [ 66.389118][ T4385] ? clear_bhb_loop+0x30/0x80 [ 66.393780][ T4385] ? clear_bhb_loop+0x30/0x80 [ 66.398442][ T4385] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.404337][ T4385] RIP: 0033:0x7f64b7615749 [ 66.408742][ T4385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.428333][ T4385] RSP: 002b:00007f64b587c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.436736][ T4385] RAX: ffffffffffffffda RBX: 00007f64b786bfa0 RCX: 00007f64b7615749 [ 66.444694][ T4385] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 66.452649][ T4385] RBP: 00007f64b7699f91 R08: 0000000000000000 R09: 0000000000000000 [ 66.460605][ T4385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.468562][ T4385] R13: 00007f64b786c038 R14: 00007f64b786bfa0 R15: 00007ffecfb7fc58 [ 66.476530][ T4385] [ 66.479532][ T4385] [ 66.481834][ T4385] [ 66.484139][ T4385] addr ffffc900040cfd41 is located in stack of task syz.2.25/4385 at offset 33 in frame: [ 66.493918][ T4385] i2cdev_ioctl_smbus+0x0/0x650 [ 66.498761][ T4385] [ 66.501063][ T4385] this frame has 1 object: [ 66.505453][ T4385] [32, 66) 'temp' [ 66.505463][ T4385] [ 66.511453][ T4385] Memory state around the buggy address: [ 66.517150][ T4385] ffffc900040cfc00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 [ 66.525189][ T4385] ffffc900040cfc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.533231][ T4385] >ffffc900040cfd00: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 02 f3 f3 f3 [ 66.541268][ T4385] ^ [ 66.548437][ T4385] ffffc900040cfd80: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.556475][ T4385] ffffc900040cfe00: f1 f1 f1 f1 04 f2 00 00 f2 f2 00 00 f3 f3 f3 f3 [ 66.564511][ T4385] ================================================================== [ 66.572554][ T4385] Disabling lock debugging due to kernel taint [ 66.580491][ T4332] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 66.590041][ T4332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.619132][ T4385] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 66.626359][ T4385] CPU: 0 PID: 4385 Comm: syz.2.25 Tainted: G B syzkaller #0 [ 66.634946][ T4385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.644997][ T4385] Call Trace: [ 66.648269][ T4385] [ 66.651193][ T4385] dump_stack_lvl+0x168/0x230 [ 66.655869][ T4385] ? show_regs_print_info+0x20/0x20 [ 66.661065][ T4385] ? load_image+0x3b0/0x3b0 [ 66.665571][ T4385] panic+0x2c9/0x7f0 [ 66.669462][ T4385] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 66.675616][ T4385] ? bpf_jit_dump+0xd0/0xd0 [ 66.680118][ T4385] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 66.686010][ T4385] ? _raw_spin_unlock+0x40/0x40 [ 66.690862][ T4385] ? cp2112_xfer+0x87c/0xe00 [ 66.695448][ T4385] check_panic_on_warn+0x80/0xa0 [ 66.700382][ T4385] ? cp2112_xfer+0x87c/0xe00 [ 66.704971][ T4385] end_report+0x6d/0xf0 [ 66.709124][ T4385] kasan_report+0x102/0x130 [ 66.713642][ T4385] ? cp2112_xfer+0x87c/0xe00 [ 66.718232][ T4385] ? cp2112_xfer+0x87c/0xe00 [ 66.722821][ T4385] kasan_check_range+0x27b/0x290 [ 66.727765][ T4385] memcpy+0x25/0x60 [ 66.731575][ T4385] cp2112_xfer+0x87c/0xe00 [ 66.735990][ T4385] ? cp2112_i2c_xfer+0xf20/0xf20 [ 66.740929][ T4385] ? lock_chain_count+0x20/0x20 [ 66.745782][ T4385] __i2c_smbus_xfer+0x733/0x1d50 [ 66.750715][ T4385] ? cp2112_i2c_xfer+0xf20/0xf20 [ 66.755654][ T4385] ? i2c_smbus_write_i2c_block_data+0x1a0/0x1a0 [ 66.761895][ T4385] ? rt_mutex_lock_nested+0x15a/0x1c0 [ 66.767267][ T4385] ? i2c_smbus_xfer+0x11d/0x3a0 [ 66.772114][ T4385] ? rwsem_down_read_slowpath+0x990/0x990 [ 66.777844][ T4385] ? __might_fault+0xb7/0x110 [ 66.782522][ T4385] i2c_smbus_xfer+0x263/0x3a0 [ 66.787195][ T4385] ? i2c_smbus_read_byte+0x1b0/0x1b0 [ 66.792476][ T4385] ? __might_fault+0xb3/0x110 [ 66.797153][ T4385] i2cdev_ioctl_smbus+0x3e3/0x650 [ 66.802179][ T4385] ? i2cdev_ioctl_rdwr+0x6c0/0x6c0 [ 66.807292][ T4385] ? __might_fault+0xb3/0x110 [ 66.810787][ T4332] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 66.811963][ T4385] ? _copy_from_user+0x111/0x170 [ 66.825364][ T4332] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 66.825878][ T4385] i2cdev_ioctl+0x545/0x750 [ 66.838317][ T4385] ? i2cdev_write+0x120/0x120 [ 66.842553][ T4332] usb 1-1: Manufacturer: syz [ 66.842995][ T4385] ? bpf_lsm_file_ioctl+0x5/0x10 [ 66.852480][ T4385] ? security_file_ioctl+0x7c/0xa0 [ 66.857613][ T4385] ? i2cdev_write+0x120/0x120 [ 66.862291][ T4385] __se_sys_ioctl+0xfa/0x170 [ 66.866880][ T4385] do_syscall_64+0x4c/0xa0 [ 66.871292][ T4385] ? clear_bhb_loop+0x30/0x80 [ 66.875974][ T4385] ? clear_bhb_loop+0x30/0x80 [ 66.880647][ T4385] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.886534][ T4385] RIP: 0033:0x7f64b7615749 [ 66.890945][ T4385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.910545][ T4385] RSP: 002b:00007f64b587c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.918957][ T4385] RAX: ffffffffffffffda RBX: 00007f64b786bfa0 RCX: 00007f64b7615749 [ 66.926921][ T4385] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 66.934884][ T4385] RBP: 00007f64b7699f91 R08: 0000000000000000 R09: 0000000000000000 [ 66.942837][ T4385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.950789][ T4385] R13: 00007f64b786c038 R14: 00007f64b786bfa0 R15: 00007ffecfb7fc58 [ 66.958750][ T4385] [ 66.962027][ T4385] Kernel Offset: disabled [ 66.966344][ T4385] Rebooting in 86400 seconds..