last executing test programs: 12.355908044s ago: executing program 3 (id=4): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000080)=0xffffff7e, 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c6012837000300"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) mq_notify(0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x40000) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000017}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x134, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffff8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x840}, 0x4004000) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'nr0\x00', &(0x7f0000000200)=@ethtool_gstrings={0x1b, 0x5, 0x67, "fea939254c0ad8db16f30cb90b3b9791df80371e415d5f0c1396dee10adfeaf7f0f2b0f92c46b713da1606f1ecfb726619c4b5c6e4464305643acb6233bd2c161ba75b2ef6166e53180f3e48868a0dce91fdebf1fc8794f19916d52f087db1d8ab891a16fd4d6e"}}) 11.927327125s ago: executing program 2 (id=3): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0x1a0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @loopback, 0x0, 0xff, 'nr0\x00', 'nr0\x00', {0xff}, {}, 0x33, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x17, 0x0, 0x5, 0x6], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x6, 0x20, 0x5], 0x3, 0x6}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xffffffff, 0xffffffff, 'bridge_slave_0\x00', 'geneve1\x00', {0xff}, {0xff}, 0x2, 0x0, 0x6}, 0x287, 0x70, 0xd0, 0x2000000}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x7ff, 0xc, [0x2e, 0x36, 0x14, 0x1a, 0x22, 0x14, 0x3b, 0x12, 0x5, 0x1a, 0x2d, 0x12, 0x28, 0xe, 0xc, 0x37], 0x0, 0x48, 0x2}}}, {{@ip={@rand_addr=0x64010102, @local, 0xffffffff, 0xffffffff, 'macvlan1\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x84, 0x3, 0x35}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) 11.76153158s ago: executing program 2 (id=7): r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000180)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000240)}}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)}}], 0x1, 0x4000000) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000abe92710b1134200fe76010203010902240001040000000904090202c918020009050402100000fa000905840240"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323900080003400000000720000480060001000002000005000200110000000c000300080001000000001e14000000110001"], 0xcd0}}, 0x0) close(0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x2c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x20}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x4c}}, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r6 = syz_open_pts(r3, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r6, 0x540b, 0x2) syz_emit_ethernet(0x16, &(0x7f0000000340)={@link_local, @dev, @void, {@llc={0x4, {@snap={0xaa, 0xff, 'o', "e8309b", 0xf3fb}}}}}, 0x0) r7 = syz_open_dev$sndpcmc(0x0, 0x3, 0x100) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r7, 0xc0984124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) sendmmsg$inet(r1, 0x0, 0x0, 0x4000900) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 11.607721884s ago: executing program 1 (id=8): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote, 0x4, 0x0, 0x3, 0x6, 0x5}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f00000001c0)=0x5, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000003e00290200000000fcdbdb250a00000004"], 0x18}}, 0x8000) 11.530463386s ago: executing program 1 (id=9): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000041000701fefffffffeffffff017c0000040042800c000180060006008d0a00ec0b000280040014"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x3, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4006f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x7f, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x368, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0xe65f, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x2, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file2\x00', 0xc000, 0x3d) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11.145619306s ago: executing program 3 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbf7, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000499f2abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c00028005000100060000007b3aa591f3245259b80b8356197386ea7c7ace93162af4a0933a765d44c5a0ed586fb140ef6e"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0xc0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000340)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x56d, 0xe5c7, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x6, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x49, 0xff}}}}}]}}]}}, 0x0) write$UHID_INPUT2(r7, &(0x7f0000000500)=ANY=[@ANYBLOB='\f\x00\x00\x00g\x000'], 0xc) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 10.310813968s ago: executing program 1 (id=12): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="201019"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000340)={0x40, 0xd, 0x2, 'SE'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 8.930357784s ago: executing program 2 (id=14): syz_usb_connect(0x6, 0x0, 0x0, 0x0) socket(0x1d, 0x3, 0xa) socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000002100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) rseq(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) r1 = fsopen(&(0x7f0000002180)='hfs\x00', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="0100000001001000050000000500000001000000", @ANYRES32, @ANYBLOB="000000000000000000c300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002280), &(0x7f00000022c0), 0x20000402, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002300)={r2, &(0x7f0000002340), &(0x7f0000002380)=""/20}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x80) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) socket$kcm(0x10, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000023c0)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002400)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4010, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 6.663600404s ago: executing program 2 (id=19): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x2003) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000300)={&(0x7f00000003c0)=[{0x3, 0x6800, 0x0, 0x0}, {0x8, 0x3c01, 0xe2, &(0x7f0000000400)="c287ef6ac319c3defc6084491c73bcbcdbb78420cefc2bbb401ae022a01e89c6c4669af05543b4facaaa5771bf92a172636b1a7fb26259d4fbded2f9dce6fe61e705a58dbee7c55dbda17b204f326506aee39f7feaafb4b90d5117498cb588ac8fc6ba56579f4bcfac4126a9212cf2dbfe418e4d3cb70ea9c1a0a2115db089019ec53fba963d0da22ddc9650a5f039f7f690c3ffcad987844270c7442393ff1b922677fbcfa30007a18a65e43d73bcc7a1342892bc18419cd8ac9f2eab8e7865feade9d04a3570dc21db7e053ff98cbbb81f79bbd3285eba976c7a587141ab2979d7"}], 0x2}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x2, 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000001140)={0xffffffffffffffff, &(0x7f0000001180)='(\x00', 0x400240, &(0x7f00000011c0)={@align=0x9, {0x1, 0x4, 0x1, 0x9}}, 0x69, &(0x7f0000001200), &(0x7f0000001240)}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001280)={@cgroup=r9, 0x5, 0x1, 0x7fffffff, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001300), &(0x7f0000001340)=[0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000013c0)={'ip6gre0\x00', &(0x7f0000001400)={'syztnl1\x00', 0x0, 0x29, 0x0, 0xa, 0x8, 0x14, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x700, 0x7, 0x6}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001480)=ANY=[@ANYRES32=r11, @ANYRES32=r7, @ANYBLOB="0f976c4eaf008a3d9a790000", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r10], 0x20) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001500), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)={@ifindex=r3, 0xffffffffffffffff, 0x19, 0x5, 0xffffffffffffffff, @void, @value=r12, @void, @void, r10}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$can_j1939(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)="6fb2408855b1627eb20f37b7ed64d5ac009897fdedfc9952369cf57df7b7b884ac6f2c412f3f37bfde46cb5a72d3d6abfee4fede670899b7dce34a5502eb06e1ea856291b9f903553b6205ce01c637", 0x4f}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 5.974438972s ago: executing program 4 (id=21): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffd64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write(r2, &(0x7f0000000380)='transport=fc,traddr=nn-33333333333333:pnp0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2232222222222222,nqn=n', 0x79) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = dup(0xffffffffffffffff) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r5, 0x58483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000030601080000000000000000050000070900020073797a32000000000900020073797a300000000005000100070000000900020073797a3000000000e1"], 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x8000) r6 = socket$inet_sctp(0x2, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{r8, 0x1100}], 0x1, 0x20002081) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x800000, '\x00', @ptr}}) close_range(r6, 0xffffffffffffffff, 0x0) 5.594194982s ago: executing program 4 (id=22): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.393592717s ago: executing program 1 (id=23): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)}, 0x4}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001740)=""/35, 0x23}, {&(0x7f0000001780)=""/178, 0xb2}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x5}, 0x9}], 0x2, 0x2, 0x0) 5.31410071s ago: executing program 4 (id=24): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x2, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x20, 0x7}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x44800}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0xfdef) 5.2848831s ago: executing program 1 (id=25): syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x3, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0x0, 0xb0a416110c21569d, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000894}, 0x4) ioctl(r0, 0xc4c85512, &(0x7f0000000300)) 4.998877448s ago: executing program 4 (id=26): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00001003c0)={0x0, 0x0, &(0x7f0000100400)={&(0x7f0000100440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000100940)={0x0, 0x0, &(0x7f0000100980)={&(0x7f00001009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d6974000000140002800800014080000001080002400000000114000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000100f00)={0x0, 0x0, &(0x7f0000100f40)={&(0x7f0000100f80)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044}, 0x8000) 4.90593899s ago: executing program 4 (id=27): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="401505"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000640), 0x82, 0x2) syz_open_dev$hidraw(&(0x7f0000000680), 0x0, 0xe6582) write$hidraw(r1, 0x0, 0x0) 4.762444084s ago: executing program 2 (id=28): epoll_create(0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r4, &(0x7f00000005c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f00000195c0)=0x7) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000019600)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000019640)='mtd0\x00', 0x28a440, 0x20) execve(&(0x7f0000019680)='./file0\x00', 0x0, &(0x7f00000196c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000197c0)='./file0\x00', 0x0) mount(&(0x7f0000019800)=@filename='mtd0\x00', &(0x7f0000019840)='./file0\x00', &(0x7f0000019880)='jffs2\x00', 0x800000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019980)=ANY=[@ANYBLOB="02000000040000000800010001"], 0x50) io_uring_enter(0xffffffffffffffff, 0x213c, 0xf924, 0x41, &(0x7f0000000080)={[0x1]}, 0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$uac3(r7, &(0x7f0000000240)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000a53a000b0984666d2981df5f31bc000c00000000"], 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x494, &(0x7f00000002c0)=ANY=[]) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000019a00)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=r5, @ANYRES64=r7, @ANYRES32=r5], 0xfc}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 2.439183805s ago: executing program 0 (id=30): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x358f, 0x0, 0x0, 0x0, 0x3, 0x2}, 0x18, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x89901) fchdir(r1) close(r1) creat(&(0x7f0000000200)='./file0\x00', 0xdafbe5d6891b6fc) 2.24259537s ago: executing program 1 (id=31): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="6005060000002328"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0}, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x40, 0xc}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x4, 0x5, 0x8, 0x1d, 0x1, 0x3, 0x0, 0x5, 0x1ff, 0x0, 0x3, 0x6}}, 0x0, &(0x7f0000000600)={0x20, 0x83, 0x2}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0x3}, 0x0}) 1.558100169s ago: executing program 0 (id=32): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000a40)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000084000000b7000000000000009500"/64], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x6, 0x1, 0x6, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x20, 0xfffffffb, 0x31b8}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x80, 0x7, 0x2, 0x7, {{0x17, 0x4, 0x1, 0xe, 0x5c, 0x67, 0x0, 0x6, 0x29, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x24, 0x0, [{0x1, 0x4, "16f3"}, {0x0, 0x9, "b2e7080c2bbf33"}, {0x1, 0xa, "51d89d8c2009e570"}, {0x1, 0x7, "b37e2c121e"}]}, @generic={0x94, 0x12, "9dcfa7499cd05441d63514580faa5627"}, @generic={0x83, 0xe, "fbe2bb4b316bcd83ee610ece"}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x7, 0x0, 0xfffffeff, 0x8001, {{0x28, 0x4, 0x0, 0x2, 0xa0, 0x68, 0x6, 0x9, 0x2f, 0x0, @empty, @rand_addr=0x64010101, {[@cipso={0x86, 0x5d, 0x0, [{0x6, 0xb, "1ed69d0ff6914396ce"}, {0x2, 0xb, "472077550c70327580"}, {0x0, 0xc, "e257aa5358272828c31c"}, {0x1, 0xf, "2278418b2d39c470aa857b3d12"}, {0x7, 0x3, "ab"}, {0x2, 0x7, "383d4d8be2"}, {0x6, 0xa, "e3c917de7f8bde88"}, {0x1, 0x6, "4df7a35d"}, {0x2, 0x3, "10"}, {0x1, 0x9, "cd01083d1d59d7"}]}, @noop, @end, @timestamp_prespec={0x44, 0x2c, 0x54, 0x3, 0x9, [{@empty, 0x400}, {@private=0xa010101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0xace}, {@empty, 0x5}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x4, 0x80, 0xae, 0x4, 0x50, @local, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x8000, 0x0, 0x5}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r0, 0x58, &(0x7f0000000900)}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x10c000) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000000c0)={0x1, 0xe4ff71c170d132d5, &(0x7f0000000400)="fccdccc6aefa"}) 1.192666478s ago: executing program 0 (id=33): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, &(0x7f0000000440), 0x0, &(0x7f0000589000/0x2000)=nil, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000007f000001000000000000000014000200026d00000000000000000000000000000d0001007564703a73"], 0x54}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) r6 = syz_open_dev$radio(&(0x7f0000000080), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r6, 0xc02c5625, &(0x7f0000000100)={0x98f907, 0x4, @value=0x2}) listen(r5, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000140), &(0x7f00000001c0)=0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r4, 0x0, 0x0) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendto$inet(r9, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c9754a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c6", 0x96, 0x12, 0x0, 0x0) 771.939469ms ago: executing program 3 (id=34): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="201019"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000340)={0x40, 0xd, 0x2, 'SE'}, 0x0, 0x0}) 283.098302ms ago: executing program 4 (id=35): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x30, 0x4, 0x0, {0x3, 0xb34, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x8082, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) 166.654915ms ago: executing program 2 (id=36): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 145.185656ms ago: executing program 0 (id=37): openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000100)={'pcmmio\x00', [0x2000, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x7, 0x3, 0x6, 0x4006, 0x0, 0x3]}) socket(0x40000000015, 0x5, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 50.850888ms ago: executing program 0 (id=38): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) 0s ago: executing program 0 (id=39): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e820d41"], 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. [ 64.908449][ T4177] cgroup: Unknown subsys name 'net' [ 65.060228][ T4177] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.627187][ T4177] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.164507][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 68.280500][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.290678][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.300025][ T4189] device bridge_slave_0 entered promiscuous mode [ 68.334976][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.342372][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.350653][ T4189] device bridge_slave_1 entered promiscuous mode [ 68.375661][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.406572][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.418053][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 68.509912][ T4189] team0: Port device team_slave_0 added [ 68.519220][ T4189] team0: Port device team_slave_1 added [ 68.537149][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 68.579277][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 68.621082][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.628136][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.654276][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.672796][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.679958][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.705979][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.721122][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.728365][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.738691][ T4194] device bridge_slave_0 entered promiscuous mode [ 68.761449][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 68.770880][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.778259][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.786802][ T4194] device bridge_slave_1 entered promiscuous mode [ 68.864637][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.871748][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.880077][ T4196] device bridge_slave_0 entered promiscuous mode [ 68.894785][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.906736][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.931967][ T4189] device hsr_slave_0 entered promiscuous mode [ 68.939814][ T4189] device hsr_slave_1 entered promiscuous mode [ 68.947598][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.954962][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.963182][ T4196] device bridge_slave_1 entered promiscuous mode [ 69.020458][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.027748][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.036253][ T4193] device bridge_slave_0 entered promiscuous mode [ 69.051669][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.060413][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.068905][ T4200] device bridge_slave_0 entered promiscuous mode [ 69.082893][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.090916][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.099269][ T4200] device bridge_slave_1 entered promiscuous mode [ 69.109333][ T4194] team0: Port device team_slave_0 added [ 69.116177][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.123356][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.132078][ T4193] device bridge_slave_1 entered promiscuous mode [ 69.152372][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.165060][ T4194] team0: Port device team_slave_1 added [ 69.172364][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.248632][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.260110][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.268079][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.295994][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.314608][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.321618][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.347966][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.365780][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.377727][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.390092][ T4196] team0: Port device team_slave_0 added [ 69.420974][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.433453][ T4194] device hsr_slave_0 entered promiscuous mode [ 69.441172][ T4194] device hsr_slave_1 entered promiscuous mode [ 69.448541][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.457009][ T4194] Cannot create hsr debugfs directory [ 69.464221][ T4196] team0: Port device team_slave_1 added [ 69.508141][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.515301][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.542264][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.573300][ T4193] team0: Port device team_slave_0 added [ 69.580274][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.589045][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.615620][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.629822][ T4200] team0: Port device team_slave_0 added [ 69.643778][ T4200] team0: Port device team_slave_1 added [ 69.656800][ T4193] team0: Port device team_slave_1 added [ 69.727861][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.735687][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.764211][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.783748][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.791224][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.817718][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.830037][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.837193][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.863847][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.865696][ T2285] Bluetooth: hci0: command 0x0409 tx timeout [ 69.890240][ T4196] device hsr_slave_0 entered promiscuous mode [ 69.897598][ T4196] device hsr_slave_1 entered promiscuous mode [ 69.905025][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.912616][ T4196] Cannot create hsr debugfs directory [ 69.923363][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.931102][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.957289][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.969051][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 70.023782][ T2285] Bluetooth: hci3: command 0x0409 tx timeout [ 70.038971][ T2285] Bluetooth: hci2: command 0x0409 tx timeout [ 70.070789][ T4193] device hsr_slave_0 entered promiscuous mode [ 70.078169][ T4193] device hsr_slave_1 entered promiscuous mode [ 70.085386][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.092990][ T4193] Cannot create hsr debugfs directory [ 70.103574][ T2285] Bluetooth: hci4: command 0x0409 tx timeout [ 70.140433][ T4200] device hsr_slave_0 entered promiscuous mode [ 70.147577][ T4200] device hsr_slave_1 entered promiscuous mode [ 70.154660][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.162367][ T4200] Cannot create hsr debugfs directory [ 70.258499][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.292058][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.331272][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.342450][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.437741][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.456149][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.479424][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.489108][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.573048][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.598095][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.626033][ T4200] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.642033][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.651787][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.665607][ T4200] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.678418][ T4200] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.690011][ T4200] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.749581][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.775617][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.789962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.799151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.811464][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.821517][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.838877][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.855524][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.873250][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.907837][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.927251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.938016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.948031][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.955548][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.966688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.975961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.984706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.994968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.004508][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.011688][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.020262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.030429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.040262][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.047649][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.059549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.068372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.079832][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.089683][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.100038][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.107350][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.130530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.140395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.177162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.186903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.198053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.208196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.218990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.248156][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.258822][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.269428][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.279069][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.294751][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.307658][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.315157][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.342871][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.356052][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.380500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.390660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.400829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.409785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.419327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.428711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.448315][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.462326][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.477077][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.491316][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.504793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.513305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.521956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.530848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.540559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.562829][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.606068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.622895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.632509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.648007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.659639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.680559][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.730461][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.746359][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.760651][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.770075][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.777211][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.788401][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.798049][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.807161][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.814926][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.822831][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.833213][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.843270][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.850941][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.860176][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.869290][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.878327][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.885471][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.893277][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.902486][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.916025][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.943728][ T2285] Bluetooth: hci0: command 0x041b tx timeout [ 71.970619][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.993734][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.009455][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.020126][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.029823][ T4210] Bluetooth: hci1: command 0x041b tx timeout [ 72.046996][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.064471][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.084262][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.100620][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.108905][ T4210] Bluetooth: hci2: command 0x041b tx timeout [ 72.115095][ T4210] Bluetooth: hci3: command 0x041b tx timeout [ 72.118849][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.130415][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.139791][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.149079][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.160558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.172002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.184973][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 72.217742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.227622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.237061][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.244532][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.252511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.262439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.271286][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.278529][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.288211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.296775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.304634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.312161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.319912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.330177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.339036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.352450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.361044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.370202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.378734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.387448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.396038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.406035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.418043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.426667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.447300][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.456030][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.471168][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.495651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.513442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.529978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.540040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.555509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.601817][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.620828][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.636901][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.655310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.673891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.693420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.704103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.712808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.722711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.747301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.764413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.843026][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.864310][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.887021][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.913317][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.930735][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.945112][ T4194] device veth0_vlan entered promiscuous mode [ 72.956026][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.964770][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.995984][ T4194] device veth1_vlan entered promiscuous mode [ 73.022823][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.042040][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.053129][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.127215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.137187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.146306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.162207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.170864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.179296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.188204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.198580][ T4196] device veth0_vlan entered promiscuous mode [ 73.215070][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.236081][ T4194] device veth0_macvtap entered promiscuous mode [ 73.247807][ T4196] device veth1_vlan entered promiscuous mode [ 73.257615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.266179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.275506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.290097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.298986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.309269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.338555][ T4194] device veth1_macvtap entered promiscuous mode [ 73.352997][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.364179][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.373129][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.381093][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.406314][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.418027][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.433387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.446385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.456119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.466788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.499271][ T4189] device veth0_vlan entered promiscuous mode [ 73.510107][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.518868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.527573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.537253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.548684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.557935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.567796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.586946][ T4196] device veth0_macvtap entered promiscuous mode [ 73.600487][ T4189] device veth1_vlan entered promiscuous mode [ 73.610305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.619713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.628616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.638363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.655790][ T4196] device veth1_macvtap entered promiscuous mode [ 73.682426][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.693036][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.702612][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.712727][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.724059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.732179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.741238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.751038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.762852][ T4200] device veth0_vlan entered promiscuous mode [ 73.799817][ T4193] device veth0_vlan entered promiscuous mode [ 73.808728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.818975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.827168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.835749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.850245][ T4189] device veth0_macvtap entered promiscuous mode [ 73.868554][ T4200] device veth1_vlan entered promiscuous mode [ 73.882080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.896917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.905988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.915859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.924813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.933476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.942766][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.953963][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.966049][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.980739][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.992538][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.004718][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.025691][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 74.032545][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.042629][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.051728][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.061430][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.072072][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.084539][ T4189] device veth1_macvtap entered promiscuous mode [ 74.096075][ T4193] device veth1_vlan entered promiscuous mode [ 74.105394][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 74.115274][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.127353][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.138148][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.147312][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.183974][ T2285] Bluetooth: hci3: command 0x040f tx timeout [ 74.200654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.210042][ T2285] Bluetooth: hci2: command 0x040f tx timeout [ 74.231022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.239643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.251485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.260552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.264934][ T2285] Bluetooth: hci4: command 0x040f tx timeout [ 74.283311][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.294167][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.304960][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.315732][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.328482][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.345265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.360583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.379311][ T4193] device veth0_macvtap entered promiscuous mode [ 74.388885][ T4200] device veth0_macvtap entered promiscuous mode [ 74.418241][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.428220][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.441141][ T4193] device veth1_macvtap entered promiscuous mode [ 74.457294][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.470292][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.481276][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.492113][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.503722][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.522798][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.531511][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.540160][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.550268][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.562740][ T4200] device veth1_macvtap entered promiscuous mode [ 74.580366][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.590244][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.606503][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.609584][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.616841][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.632205][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.669221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.694833][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.706898][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.719632][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.730990][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.741745][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.755347][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.767982][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.780463][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.792085][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.803834][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.816657][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.827483][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.838612][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.850194][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.858577][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.869947][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.880146][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.890964][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.902305][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.913756][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.923972][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.934812][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.946665][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.960916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.974550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.985872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.995571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.005084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.014388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.043872][ T375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.051758][ T375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.071386][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.087062][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.096948][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.106042][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.131344][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.141243][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.152291][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.162305][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.172805][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.182839][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.193523][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.203369][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.214677][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.228855][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.253056][ T375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.275985][ T375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.287325][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.298781][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.308373][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.322962][ T4200] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.333170][ T4200] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.344751][ T4200] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.355409][ T4200] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.372701][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.380971][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.429940][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.543906][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.551793][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.598267][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.644323][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.645145][ T1220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.652317][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.679230][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.708988][ T1220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.721714][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.742847][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.769739][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.788886][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.836884][ T1220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.856652][ T1220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.864702][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.879868][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.907992][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.925617][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.105263][ T4210] Bluetooth: hci0: command 0x0419 tx timeout [ 76.166610][ T4283] SET target dimension over the limit! [ 76.173787][ T1108] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.184552][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 76.264864][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 76.272084][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 76.295275][ T4272] Zero length message leads to an empty skb [ 76.344230][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 76.443627][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 76.489333][ T4292] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.581238][ T1108] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 76.593672][ T1108] usb 1-1: config 0 has no interface number 0 [ 76.664577][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.784000][ T1108] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 76.793095][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.816356][ T1108] usb 1-1: Product: syz [ 76.821323][ T1108] usb 1-1: Manufacturer: syz [ 76.843536][ T1108] usb 1-1: SerialNumber: syz [ 76.862446][ T1108] usb 1-1: config 0 descriptor?? [ 76.953632][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 76.966099][ T4302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.042176][ T2239] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 77.060362][ T2239] wiimote 0005:057E:0306.0001: New device registered [ 77.093924][ T7] usb 3-1: config 4 has an invalid interface number: 9 but max is 0 [ 77.103924][ T7] usb 3-1: config 4 has no interface number 0 [ 77.127087][ T7] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 77.137371][ T7] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64 [ 77.160773][ T7] usb 3-1: config 4 interface 9 has no altsetting 0 [ 77.333886][ T7] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 77.343012][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.377825][ T7] usb 3-1: Product: syz [ 77.382071][ T7] usb 3-1: Manufacturer: syz [ 77.387198][ T13] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 77.406598][ T7] usb 3-1: SerialNumber: syz [ 77.436501][ T2239] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 77.454029][ T4287] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 77.461683][ T4287] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 77.515395][ T7] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 77.756237][ T4302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 77.773623][ T4302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 77.827034][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.831759][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 77.849918][ T4302] bond1: (slave bond0): making interface the new active one [ 77.867241][ T13] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 77.878805][ T13] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.896320][ T4302] bond1: (slave bond0): Enslaving as an active interface with an up link [ 77.913945][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 77.983696][ T21] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 77.994396][ T4300] wiimote 0005:057E:0306.0001: Device removed [ 78.033786][ T2239] usb 4-1: unable to get BOS descriptor or descriptor too short [ 78.093845][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.104229][ T4210] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 78.106698][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.151327][ T4210] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input6 [ 78.169565][ T2239] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 78.174099][ T13] usb 5-1: Product: syz [ 78.187986][ T2239] usb 4-1: can't read configurations, error -71 [ 78.191977][ T13] usb 5-1: Manufacturer: syz [ 78.199300][ T13] usb 5-1: SerialNumber: syz [ 78.241885][ T4210] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input7 [ 78.281535][ T4210] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input5 [ 78.315008][ T13] cdc_mbim 5-1:1.0: skipping garbage [ 78.333954][ T1108] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 78.340577][ T1108] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 78.365127][ T1108] usb 1-1: Failed to create links for entity 5 [ 78.371556][ T1108] usb 1-1: Failed to register entities (-22). [ 78.383817][ T21] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 78.401505][ T1108] usb 1-1: USB disconnect, device number 2 [ 78.430076][ T21] usb 2-1: config 0 has no interface number 0 [ 78.449376][ T21] usb 2-1: config 0 interface 41 has no altsetting 0 [ 78.514196][ T1220] usb 3-1: Failed to submit usb control message: -71 [ 78.530646][ T4303] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 78.538297][ T1220] usb 3-1: unable to send the bmi data to the device: -71 [ 78.554445][ T1220] usb 3-1: unable to get target info from device [ 78.561714][ T4232] usb 3-1: USB disconnect, device number 2 [ 78.569507][ T1220] usb 3-1: could not get target info (-71) [ 78.577287][ T1220] usb 3-1: could not probe fw (-71) [ 78.633883][ T21] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 78.644108][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.652340][ T21] usb 2-1: Product: syz [ 78.656854][ T21] usb 2-1: Manufacturer: syz [ 78.662014][ T21] usb 2-1: SerialNumber: syz [ 78.676825][ T21] usb 2-1: config 0 descriptor?? [ 78.989404][ T4303] udc-core: couldn't find an available UDC or it's busy [ 78.997236][ T13] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 79.004057][ T13] cdc_mbim 5-1:1.0: bind() failure [ 79.009407][ T4303] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.022322][ T13] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 79.038769][ T13] cdc_ncm 5-1:1.1: bind() failure [ 79.066116][ T13] usb 5-1: USB disconnect, device number 2 [ 79.253630][ T4232] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 79.593731][ T21] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 79.603584][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 79.664107][ T4232] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 79.676103][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.692918][ T4232] usb 1-1: config 0 descriptor?? [ 79.735854][ T4326] device bond_slave_0 entered promiscuous mode [ 79.745485][ T4232] cp210x 1-1:0.0: cp210x converter detected [ 79.896472][ T4302] syz.3.10 (4302) used greatest stack depth: 20208 bytes left [ 80.055181][ T4330] input: syz1 as /devices/virtual/input/input8 [ 80.063042][ T4331] nftables ruleset with unbound set [ 80.303521][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 80.313534][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 80.323519][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 80.893842][ T4232] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 80.915786][ T4232] cp210x 1-1:0.0: querying part number failed [ 80.927213][ T4232] usb 1-1: cp210x converter now attached to ttyUSB0 [ 80.942258][ T4232] usb 1-1: USB disconnect, device number 3 [ 80.971649][ T4232] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 80.987842][ T4232] cp210x 1-1:0.0: device disconnected [ 81.003739][ T21] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffe0 [ 81.273962][ T21] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffe0 [ 81.634053][ T2285] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.883579][ T2285] usb 3-1: Using ep0 maxpacket: 32 [ 81.888978][ T2239] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.993873][ T21] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 82.043793][ T21] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 82.073905][ T21] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 82.085835][ T4346] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 82.123840][ T21] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 82.151227][ T4348] process 'syz.4.21' launched './file2' with NULL argv: empty string added [ 82.154837][ T21] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 82.174109][ T2285] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 82.187848][ T2285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.196447][ T2285] usb 3-1: Product: syz [ 82.200836][ T2285] usb 3-1: Manufacturer: syz [ 82.206110][ T21] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 82.217332][ T2285] usb 3-1: SerialNumber: syz [ 82.235124][ T21] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 82.253717][ T2285] usb 3-1: config 0 descriptor?? [ 82.263949][ T2239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.291188][ T2239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.301784][ T21] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 82.315311][ T2285] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 82.338133][ T2285] dvb-usb: bulk message failed: -22 (4/0) [ 82.351266][ T2239] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.364939][ T21] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336:ffffffb9 [ 82.381031][ T2285] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 82.392176][ T21] CoreChips: probe of 2-1:0.41 failed with error -71 [ 82.399675][ T2285] dvb-usb: bulk message failed: -22 (5/0) [ 82.406497][ T2239] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.426504][ T2285] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 82.440906][ T21] usb 2-1: USB disconnect, device number 2 [ 82.447010][ T2239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.465757][ T4351] netlink: 'syz.4.22': attribute type 1 has an invalid length. [ 82.479444][ T2285] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 82.492647][ T2239] usb 1-1: config 0 descriptor?? [ 82.506307][ T4342] ttusb2: i2c rd len=194 too high [ 82.513021][ T2285] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 82.527707][ T2285] usb 3-1: media controller created [ 82.562901][ T4342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 82.574675][ T2285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.594583][ T4342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 82.621098][ T2285] usb 3-1: selecting invalid altsetting 3 [ 82.633790][ T2285] ttusb2: set interface to alts=3 failed [ 82.680924][ T2285] DVB: Unable to find symbol tda10086_attach() [ 82.690917][ T2285] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 82.750291][ T2285] dvb-usb: bulk message failed: -22 (4/0) [ 82.759748][ T2285] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 82.770727][ T2285] dvb-usb: bulk message failed: -22 (5/0) [ 82.778163][ T2285] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 82.789727][ T2285] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 82.816565][ T2285] usb 3-1: USB disconnect, device number 3 [ 82.861265][ T2285] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 82.996393][ T2239] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 83.010894][ T2239] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 83.018988][ T2239] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 83.029927][ T2239] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 83.038093][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.063231][ T2239] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 83.961723][ T4367] jffs2: notice: (4367) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.223532][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 84.233501][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 84.243510][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 84.253491][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 84.263496][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 84.273508][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 84.895226][ T13] usb 1-1: USB disconnect, device number 4 [ 84.953914][ T4232] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.053955][ T21] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 85.062576][ T21] usb 2-1: config 1 has no interface number 0 [ 85.173692][ T4229] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.477294][ T21] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 85.504669][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.512704][ T21] usb 2-1: Product: syz [ 85.517101][ T21] usb 2-1: Manufacturer: syz [ 85.521722][ T21] usb 2-1: SerialNumber: syz [ 85.633906][ T4232] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.644697][ T4232] usb 5-1: config 0 has no interfaces? [ 85.650231][ T4232] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 85.660031][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.679210][ T4232] usb 5-1: config 0 descriptor?? [ 85.693786][ T4229] usb 3-1: Using ep0 maxpacket: 8 [ 85.807917][ T21] usb 2-1: 3:1 : does not exist [ 85.816207][ T21] usb 2-1: 3:2 : does not exist [ 85.846321][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.859171][ T4229] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 85.870140][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.886716][ T4229] usb 3-1: config 0 descriptor?? [ 85.911491][ T21] usb 2-1: USB disconnect, device number 3 [ 86.194370][ T4229] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 86.379356][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.633275][ T4382] wiimote 0005:057E:0306.0001: pid 4382 passed too short report [ 86.642068][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 86.669009][ T23] cfg80211: failed to load regulatory.db [ 86.817402][ T4384] tipc: Enabling of bearer rejected, failed to enable media [ 86.923806][ T21] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 86.937580][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.954025][ T21] usb 2-1: Product: syz [ 86.964720][ T21] usb 2-1: Manufacturer: syz [ 86.981273][ T21] usb 2-1: SerialNumber: syz [ 87.006279][ T21] usb 2-1: config 0 descriptor?? [ 87.313806][ T21] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 87.564697][ T4264] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 87.689034][ T1334] usb 5-1: USB disconnect, device number 3 [ 87.767748][ T4229] usb 3-1: USB disconnect, device number 4 [ 87.858442][ T4391] genirq: Flags mismatch irq 32. 00000000 (pcmmio) vs. 00000000 (virtio1-output.0) [ 87.953987][ T4264] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 87.971483][ T4264] usb 4-1: config 0 has no interface number 0 [ 87.995150][ T4264] usb 4-1: config 0 interface 41 has no altsetting 0 [ 88.028120][ T146] ================================================================== [ 88.036567][ T146] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12ea/0x3ca0 [ 88.044426][ T146] Read of size 1 at addr ffff888062ad8604 by task kworker/u5:0/146 [ 88.052669][ T146] [ 88.055059][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 88.062568][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 88.072765][ T146] Workqueue: hci2 hci_rx_work [ 88.077527][ T146] Call Trace: [ 88.080851][ T146] [ 88.083833][ T146] dump_stack_lvl+0x188/0x250 [ 88.088576][ T146] ? show_regs_print_info+0x20/0x20 [ 88.093838][ T146] ? load_image+0x410/0x410 [ 88.098599][ T146] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 88.104470][ T146] print_address_description+0x60/0x2d0 [ 88.110078][ T146] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 88.115233][ T146] kasan_report+0xdf/0x130 [ 88.119711][ T146] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 88.124886][ T146] hci_le_meta_evt+0x12ea/0x3ca0 [ 88.131016][ T146] ? hci_event_packet+0x363/0x1310 [ 88.136209][ T146] ? __lock_acquire+0x7d40/0x7d40 [ 88.141616][ T146] ? hci_remote_host_features_evt+0x240/0x240 [ 88.148048][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 88.153738][ T146] ? mark_lock+0x94/0x320 [ 88.158119][ T146] ? mutex_unlock+0x10/0x10 [ 88.162677][ T146] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 88.168969][ T146] ? lock_chain_count+0x20/0x20 [ 88.173874][ T146] ? __rwlock_init+0x140/0x140 [ 88.178697][ T146] hci_event_packet+0xe0b/0x1310 [ 88.183708][ T146] ? _raw_spin_unlock+0x40/0x40 [ 88.188619][ T146] ? rcu_lock_release+0x20/0x20 [ 88.193530][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 88.194525][ T4264] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 88.198784][ T146] hci_rx_work+0x255/0xa10 [ 88.212471][ T146] process_one_work+0x867/0xff0 [ 88.217392][ T146] ? worker_detach_from_pool+0x240/0x240 [ 88.223174][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 88.228601][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 88.233681][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 88.239300][ T146] ? wq_worker_running+0x97/0x170 [ 88.244394][ T146] worker_thread+0xad7/0x12a0 [ 88.249359][ T146] kthread+0x42e/0x520 [ 88.252625][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.253473][ T146] ? rcu_lock_release+0x20/0x20 [ 88.253504][ T146] ? kthread_blkcg+0xd0/0xd0 [ 88.253529][ T146] ret_from_fork+0x1f/0x30 [ 88.253571][ T146] [ 88.253580][ T146] [ 88.253586][ T146] Allocated by task 4396: [ 88.253610][ T146] __kasan_kmalloc+0xaf/0xe0 [ 88.253635][ T146] __alloc_skb+0x22c/0x750 [ 88.294561][ T146] vhci_write+0xbd/0x440 [ 88.298865][ T146] vfs_write+0x748/0xd70 [ 88.303155][ T146] ksys_write+0x153/0x260 [ 88.307765][ T146] do_syscall_64+0x4c/0xa0 [ 88.312272][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.314941][ T4264] usb 4-1: Product: syz [ 88.318214][ T146] [ 88.318224][ T146] The buggy address belongs to the object at ffff888062ad8400 [ 88.318224][ T146] which belongs to the cache kmalloc-512 of size 512 [ 88.318244][ T146] The buggy address is located 4 bytes to the right of [ 88.318244][ T146] 512-byte region [ffff888062ad8400, ffff888062ad8600) [ 88.318266][ T146] The buggy address belongs to the page: [ 88.360151][ T146] page:ffffea00018ab600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62ad8 [ 88.360733][ T4264] usb 4-1: Manufacturer: syz [ 88.370562][ T146] head:ffffea00018ab600 order:2 compound_mapcount:0 compound_pincount:0 [ 88.370585][ T146] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 88.370635][ T146] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017841c80 [ 88.370660][ T146] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 88.370672][ T146] page dumped because: kasan: bad access detected [ 88.370690][ T146] page_owner tracks the page as allocated [ 88.370697][ T146] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4196, ts 68533654841, free_ts 25164218426 [ 88.370733][ T146] get_page_from_freelist+0x24f6/0x2670 [ 88.441188][ T4264] usb 4-1: SerialNumber: syz [ 88.441353][ T146] __alloc_pages+0x1ee/0x480 [ 88.459637][ T146] new_slab+0xc0/0x4b0 [ 88.463797][ T146] ___slab_alloc+0x807/0xdd0 [ 88.468445][ T146] kmem_cache_alloc_trace+0xf9/0x290 [ 88.473789][ T146] device_add+0xb2/0x1050 [ 88.478347][ T146] netdev_register_kobject+0x184/0x320 [ 88.485087][ T146] register_netdevice+0x10e8/0x1720 [ 88.490951][ T146] rtnl_newlink+0x14fe/0x1920 [ 88.496368][ T146] rtnetlink_rcv_msg+0x7f1/0xf10 [ 88.501758][ T146] netlink_rcv_skb+0x1e9/0x430 [ 88.506596][ T146] netlink_unicast+0x78f/0x940 [ 88.511421][ T146] netlink_sendmsg+0x8ba/0xbe0 [ 88.516233][ T146] __sys_sendto+0x46d/0x620 [ 88.521015][ T146] __x64_sys_sendto+0xda/0xf0 [ 88.525787][ T146] do_syscall_64+0x4c/0xa0 [ 88.530256][ T146] page last free stack trace: [ 88.534950][ T4264] usb 4-1: config 0 descriptor?? [ 88.535098][ T146] free_unref_page_prepare+0x637/0x6c0 [ 88.535128][ T146] free_unref_page+0x8f/0x2a0 [ 88.552079][ T146] free_contig_range+0x96/0xf0 [ 88.557251][ T146] destroy_args+0xef/0xa00 [ 88.562189][ T146] debug_vm_pgtable+0x321/0x380 [ 88.567099][ T146] do_one_initcall+0x272/0x730 [ 88.571945][ T146] do_initcall_level+0x13d/0x1f0 [ 88.576932][ T146] do_initcalls+0x4b/0x90 [ 88.581314][ T146] kernel_init_freeable+0x3d5/0x560 [ 88.586574][ T146] kernel_init+0x19/0x1b0 [ 88.591207][ T146] ret_from_fork+0x1f/0x30 [ 88.595666][ T146] [ 88.598021][ T146] Memory state around the buggy address: [ 88.603785][ T146] ffff888062ad8500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 88.611887][ T146] ffff888062ad8580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 88.619985][ T146] >ffff888062ad8600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.628084][ T146] ^ [ 88.632191][ T146] ffff888062ad8680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.640291][ T146] ffff888062ad8700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.648391][ T146] ================================================================== [ 88.656571][ T146] Disabling lock debugging due to kernel taint [ 88.669557][ T146] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.676803][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Tainted: G B syzkaller #0 [ 88.685676][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 88.695769][ T146] Workqueue: hci2 hci_rx_work [ 88.700488][ T146] Call Trace: [ 88.703944][ T146] [ 88.706905][ T146] dump_stack_lvl+0x188/0x250 [ 88.711620][ T146] ? show_regs_print_info+0x20/0x20 [ 88.716851][ T146] ? load_image+0x410/0x410 [ 88.721400][ T146] panic+0x2f8/0x850 [ 88.725444][ T146] ? bpf_jit_dump+0xd0/0xd0 [ 88.729989][ T146] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 88.736018][ T146] ? _raw_spin_unlock+0x40/0x40 [ 88.740910][ T146] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 88.746236][ T146] check_panic_on_warn+0x80/0xa0 [ 88.751236][ T146] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 88.756483][ T146] end_report+0x6d/0xf0 [ 88.760677][ T146] kasan_report+0x102/0x130 [ 88.765218][ T146] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 88.770376][ T146] hci_le_meta_evt+0x12ea/0x3ca0 [ 88.775360][ T146] ? hci_event_packet+0x363/0x1310 [ 88.780512][ T146] ? __lock_acquire+0x7d40/0x7d40 [ 88.785586][ T146] ? hci_remote_host_features_evt+0x240/0x240 [ 88.791693][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 88.797369][ T146] ? mark_lock+0x94/0x320 [ 88.801776][ T146] ? mutex_unlock+0x10/0x10 [ 88.806342][ T146] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 88.812363][ T146] ? lock_chain_count+0x20/0x20 [ 88.817256][ T146] ? __rwlock_init+0x140/0x140 [ 88.822059][ T146] hci_event_packet+0xe0b/0x1310 [ 88.827123][ T146] ? _raw_spin_unlock+0x40/0x40 [ 88.832009][ T146] ? rcu_lock_release+0x20/0x20 [ 88.836902][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 88.842147][ T146] hci_rx_work+0x255/0xa10 [ 88.846645][ T146] process_one_work+0x867/0xff0 [ 88.851563][ T146] ? worker_detach_from_pool+0x240/0x240 [ 88.857237][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 88.862574][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 88.867639][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 88.873217][ T146] ? wq_worker_running+0x97/0x170 [ 88.878294][ T146] worker_thread+0xad7/0x12a0 [ 88.883023][ T146] kthread+0x42e/0x520 [ 88.887124][ T146] ? rcu_lock_release+0x20/0x20 [ 88.892007][ T146] ? kthread_blkcg+0xd0/0xd0 [ 88.896648][ T146] ret_from_fork+0x1f/0x30 [ 88.901105][ T146] [ 88.904402][ T146] Kernel Offset: disabled [ 88.908759][ T146] Rebooting in 86400 seconds..