last executing test programs: 14.747550999s ago: executing program 4 (id=117): syz_usb_connect(0x5, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12011003607483201d0680c1909c01020301090212000100ff500d09044d800073bc2aff1bb12768ec05db5c492ef23c79a1dd71a5e87bc5b87157886463f9bec681ac83fb520eeb6279599c6447c159802e2d2842c4a304b6349592793e8f1e1414baeea96f18dbf7749b8b53be06602d8089a2e52c128bd5ce1bc6b16d2e9ffb42bb932004ae4565e716b69b9cc84a25a2eb9cbabecdb1d56b5ebd9b1f60feb46141accd61b634f7d9fd6a8abf08a6cb886ecbd70a2764fd0abafe106e7754b31c5d19ff8dcda9632b0a9c16f0fa4722955701530a3134e64cfc18276d28ecfa8c16f8031f036470155fafde783f"], 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000001c0)={0x200000, 0x200004, 0x0, 0x0, 0x0, 0x5}) socket$igmp(0x2, 0x3, 0x2) iopl(0x7) r0 = memfd_create(&(0x7f00000001c0)='\xf1q\x97.\x8e\xc3\xfe\r\a\xee\xc9[\x9a%=\x01#\x00\r\x9a\xbf\xd9\xcb\xe4\"mqo\xa1\xd2dhV\xf3\n*_A\xef\xc7\xa4\xee\xb2z\xc0\r\n\xd2\xa3\x98_\xf6\xb6\f\xbdOS\t\xfe\x8a\xf9>\x05+\xfc\x9c\xa5y\xf8\x17Vo\x00l\v\xe5\xff\x92\xc9\xaeH\xeeK\x00S\xf6\xecz\x87iiO\xdauvJ\xad\x82\xa5\xa1]\xd5+=\xb4\xf0\x02\xadT\x81\x00\x00\x017\xc5\x8e\\\x00\x8a\x0e\xc50L \xd5\xf3\xee\xa8\x82-\xcb\x00\x00\x00\x00\x00\x00\x00\x04\xa6\x19\xe1\b\x84a\xb9^\xc4\xa3\xa2\xd8\x82\xd0\x8e\xd2\xd2m\xea\x92\xd4\x1f\x1d\xeb\xa0\xf7\x00\xf8\x00Wzh\xd6\x9a\x1d-\x03m^c\x05O\xa2wVA\xe2\xc0\"\xa9\x15\x1e\x13\x82o\xfe\x0e:\x1a\xbb_.Bt\xa7\x8c\v\x92\x90H\xb9\xfd\xf4c\f{\x86\xfd`\xce_k\x17\xf9r\xe8^\xc0N\x8b>\xd6:\x1d\x02z\xec\x9d\xd64/\xc7&\x91\xa3C\xd4\xf8\x16\x82aS]\xa0\x9a\x9bE{\xf6\xfc\x8b\xfb\x96k\xfc\xe3\xf3 \x1d\xd9@\xf6\xdcQG\'\xed(G\xb0\xba\xee8\xa5\xa8\x8c\xb1\xab\x8b\xc8e}\a\x1f\x84(\x85HB\x119\x8d\xab\\\\\xba\xb3\x89>~s1@\x9e\x8dD\xb5\x8c\xb6H\xbfJ5R\x06/.\xc5\xd4o\x0e\xa0\xdd\xb5\x8b\xddwU\xd91\xd2\xcfj\xc4=-\xdb\xa8\xb5r\x9f\xa3\x9f*}\r7B\x9e\xc20\xf5\xe8B\xd0\xb6\x00\xd52\xc9w\x8bAu,\x8b\xdc\xe7\xd8\x8d\x85\xd0\xa8\xf0\xfe\xa9\xf1\x92\x18?\xc1\x02w/\xef\xdb\x02\x87_\x89 \x14T\x9c\xc1\xf6ck\x14 \x18\x10\xb3`\xf4\'Oz\x12\xd2Wr\xc6\xba\x00\x99\x8b\xfd\xdbz\x1e\x1d\xd1\xadFb\xe7\xcb\xf52?\xfbH\xf7\x9bE\x13\xe9\xec\xea)A\x87\xfb+Y.\x85\xd5\xca\xf3F\x13L\xf3\xe7Kd\xe3\xe0*M\xdc\r\x06{.+0\xab\x86\xe7\"\xdf\x05\x90|\t}\x85\xfa\x8a=\xf7\xa0\xbd^F\xf1\'\x9c\xd7\xfc\x01p\x1frn\x83\x10u\xc6M\xfb\x92r\x1f\x8d!\xe5\xf3\xd2\x80!w\xf5\xa6\xac\v\xccr\xf7o\xbbq\x03\xd8\x90\x9a\x1d\xa6}\xf1\x88\x036\xfa\x15\xed9\xc52d\xb1\xd0:\x91\xb5K\xf0\x14\xf3d\x91w\xf2\xa2j\x91U\x02!&\x19\x12\xaeg\x12x\xb3\'xd\xddG5\xc9\xb1\x0e/\xfc\x81\xa6&\xdb\xb5e\x1d\xc9\xffK(\x9d\xdf\x8d\xc6N\xdb\xd50mY\xfbE.\x13\xddw\x8a\xef\xd2l[\x84\xbf\x0f\xa9\x18\xe9\xcfL5\xa7\x14\xcc\x92\xde\xf2X\xb6\xbb\xe3\xa4\xcc\xfb7[\xebS\x9cL\xed\xda\x04\xce/f\xa6<\xea\xee(t\x10G\x10r{\xa9\x9b\x85\xb93\xc7\x8a\'', 0x6) fcntl$addseals(r0, 0x409, 0xc) fallocate(r0, 0x3, 0x0, 0x40) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) read$FUSE(r1, &(0x7f0000002900)={0x2020}, 0x2020) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r1, 0x0, r3, 0x0, 0x7c1c, 0x8) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000140)=0x2) memfd_create(&(0x7f0000000700)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf7[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\x10s\xb9k\xbd\x96b\xf5\x7f+o\xf0\xe7:\xc4\xb1\xa2\x1c\xffC;\x94Q\xa3\xdfyJ\xa2\xf3F\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\x99I\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\x9b\x9cv\f\xcc\x1a\x9b\x10Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xe1\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gE\x95\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\xb0$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xee\x01\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x00_\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82\xe8\xcfOKC\x0f\xef\x0e\xafe\xb5*\x89\x18\xb2w\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xd1\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xd4\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xbf\xe8\xb9\x02\xdaYQ<\xf2\xad\xe7\xd3\x95\xf5-,-Lh\xf7H\xd3\x86\x0e\x90\xe4\x18\xa5\xf0?\x11\f=\rk\xaa\x00\xed\x92\xf9\x98\x8e\xde|\xaa\x9a\xf5\x9d\x99Y\x1c\x15\x88O\xb3\x9a\xe3\xb2\x9f\x80/\xf7\xfe\x964\xd2\xf8W1\xc8\\\x16\x87\xf0w\xb4\x04\x05\x92\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8cz\xd1n\x1cl\xf4\x1ai4\xa1\xe3E\xbd\xcci\xbe\xe4! \xfd\x85\a\xab\x82\t74P`f3\xd3\xc6z\xa8\x05\x98\xfc\xc4\x86\x02\x9a\xeb\x80\xe3I4\xd9T\xe7\x00\xb8]e0\x1f\xd6dA\x11G\r\xe8\xaf\xf9=7\x05s\x9f\xc9\xa9\x1f35 v\xf6LY\xa3-\xd5\x1f\xc6\xca\xd9a\xabv\xb5\x92\x05\x1c\xady\xfd\x0e\xde\x15\xd63\x12T\xde\xaa H@~\x9a\xcaa\xc6\xb6\xfc\x84\xd2e4,Z8\x82\x8e\x8c\x96CU\xf3\xe7z\x03\xba\t\xedX\x03\xec\xd6v\xdf\x1e\x80\x9f\xec\xb5\xd3\xee\xfd\x93+\xbf\x13\x06(\xc5\x9c\x89\x1b\xaa&\xc7\x1a\xee\xf5\x100\xbcq\xf7[?\x85\x04\x91\x8eQ\xba\xa6\xdc\x02\x81\xde\xaf\xd0\xbd\xb4\"RW2\xb7\xa3vP&\x1e\xf0\xf8E4H\x14\x1f\xe6\x8b\xe5\xc9\x1bOz\xc8\xa2\x1b\x11\xc1\xb1\x8a{Z\xe5\x9fg\xee\xaa\x80\xfdV\x00\x9fO\x1e\x9c\x1e\x86\xf8\x03\xd6\x1a\xa2)\x12]\x99+\xc4\xae\xa0\xca\x85IE\x8a\xf7*O?\x9au\xc9\xc5\xdb#\xfd\\S\xfdv\xb2P\xbe\xa0\xf1\r\xc8\xa9@\xf7\x01\x03r\f\xe1\xcbX\x8e\xefe\xee\xe6\x1bh\x92\xcayoHcci\xc6B\x1b#.\x92h\x1a\xe7\x91Zj+\xbc*\xdb\xdd\xc6\v\xdd\x1c\x84\xf3_\xe25\xce:#\xc0L\xf1\x88\xbd\xbd\xb3\xb6\xddN\xabT\xc4p\x15\xbey\a\xe5\xdb\xb3A\xd1\bR\x1b%\xe5\x15PW-\x85\xfd\xf3\x94\nkm\xc3h\xe5\x7f\xb36c\x881J\x11\a', 0x3) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f00000c5000/0x4000)=nil, 0x4000, 0x100000d, 0x4c013, 0xffffffffffffffff, 0xccf29000) socket$xdp(0x2c, 0x3, 0x0) r4 = syz_ublk_setup_io_uring(0x18f2, &(0x7f0000000340)={0x0, 0xe114, 0x800, 0x3, 0x1f}, &(0x7f00000003c0), &(0x7f0000000500), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r6, 0xff06, 0x0) r7 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x8, 0x1, 0x1, 0xd59f83, 0x6, 0x42, 0x4, 0x3, 0x3, 0x1, 0x2800, 0x2, 0xba5, 0x4, 0x3c, {0x8, 0xffffffff}, 0x0, 0x9}}) 13.584717414s ago: executing program 2 (id=120): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x4c0c0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000700)={0x20020000, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) r1 = signalfd4(r0, &(0x7f0000000300)={[0x1]}, 0x8, 0x7a6842b437a49e6b) r2 = syz_open_dev$cec(0x0, 0x0, 0x400000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000480)={0x10}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000200)="0615", 0x2}], 0x1) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000004c0)={0x9, 0x4, 0x9, 0x8001, 0x6}) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 12.501569058s ago: executing program 4 (id=123): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x8001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.570504256s ago: executing program 4 (id=124): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) mount(&(0x7f0000000240), 0x0, &(0x7f0000000140)='ufs\x00', 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x7fffffff, 0x1, 0x40000, 0x7c6d, 0xffffffff, 0x8001, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x7, 0xd0, 0x0, 0xff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) 10.879294048s ago: executing program 4 (id=126): r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e25, @local}], 0xfedf) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000040)={0x1, 0x2}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc) dup2(r5, r3) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) signalfd(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) keyctl$revoke(0x3, r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008030000b70400000100000085000000330000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000010000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0xffffffffffffff79, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) 8.972479166s ago: executing program 0 (id=135): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="17", 0x1) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xe9, @loopback}, 0x1e) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000008c0)={0x21c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4b8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x786d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x536}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x240}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "29bd10ed0c54343db13748451112f33c39107f9d5242c65e29293ff992"}}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000010) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a"], 0xe8}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xb, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x696, 0x9, 0x1, 0xc}, 0xb, 0x40000003, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r3, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) pipe2(&(0x7f00000000c0), 0x0) 7.310454077s ago: executing program 2 (id=136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x460183, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x19) r6 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r7, 0x0) socket(0x1, 0x2, 0x0) setpriority(0x2, 0xff, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r9, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {r9, 0x4, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}}, 0x118) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/158, 0x9e, 0x1, 0x0}, &(0x7f0000000180)=0x3b) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c", 0x11, 0x4, &(0x7f0000000140)={0x11, 0x13, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.172595031s ago: executing program 1 (id=138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b0000000500000001"], 0x50) r3 = fanotify_init(0x8, 0x1) write$binfmt_elf64(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000001180)={{0x3, 0x2, 0x80000000, 0x100, 'syz0\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0xfff, 0x1000000009, 0x6, 0x7, 0xdb, 0x40000000, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x6, 0x4000002938, 0x108, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x5, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x100000005, 0x100, 0x9, 0xb, 0x1a7427cb, 0x7, 0x8, 0xffffffffffffffff, 0x6, 0x5, 0x7, 0xffffffff, 0xffffffffffffff3d, 0x800, 0x5, 0xe4e, 0x9, 0x6, 0xa8, 0x659, 0xc2, 0xfff, 0x2000002, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x100000000004, 0x7, 0xffffffffffffffff, 0x2, 0x40d1c, 0x0, 0x9, 0x8001, 0x0, 0x1, 0x6, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe3, 0x9, 0x9, 0xffffffffffffbffd, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x2, 0x7, 0x5, 0x1ff, 0xa46, 0xfff7fffffffffb27, 0x100, 0x5, 0x6, 0x5, 0x3, 0xfffffdfffffffff9, 0x6, 0x8, 0x3, 0x4, 0x6, 0x800027ee, 0x0, 0x0, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8000000000000001, 0x4, 0x3, 0x1, 0x4, 0x8001, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x6, 0x1, 0x1f0]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250500000008000600", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r11], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x0, 0xfff3}, {0xd, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) 6.438522403s ago: executing program 2 (id=139): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) syz_usb_connect(0x3, 0x24, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x7, 0x4) 4.003003867s ago: executing program 1 (id=141): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000003780)={0x18, 0x0, {0x3, @empty, 'wg2\x00'}}, 0x1e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000c9c0)=[{{0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000003c40)="ff", 0x1}], 0x1}}], 0x1, 0x4000091) 4.002547178s ago: executing program 0 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x70bd2c, 0x8000dc, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffc, 0x0, 0x2}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x4008804) 4.002232127s ago: executing program 4 (id=143): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') openat$drirender128(0xffffff9c, 0x0, 0x410000, 0x0) open$dir(0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4040054) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="e74ca0ab180ef9b4e6c685510bef94448008b4cc6b00215d92314d1f1bd594c982c7d5c4adce77a577caf3802ccc92c9c8d26c7a31160b36ae38c586ff1865e89158c9156e43dd1bce8ef1f876472f5c17462b55ee17e59b004697482c285cc58f4896372e95a1ffff3987277e716fca30206e07e37c7bf96622f177bfbae1937e51230a1c06052e9c18bcd5c5f1e9d19465f9e31c0489c3e4705e5031c9ae0cc15af78d9efe66ef73b697ed32f838c2a23f5cb0bc372f26b2566e13b74b928718311f35c1af7dc0bf904f4ecd6259e497b829b0cd856305c2c1b3396d73dd74", @ANYBLOB="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", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}]}}]}, 0x38}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2bfdffff110001000000"], 0x28}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r8, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 3.884669761s ago: executing program 0 (id=144): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 3.884274371s ago: executing program 1 (id=146): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_FSBULKSTAT(0xffffffffffffffff, 0xc0205865, 0x0) eventfd(0x7e) 3.658275368s ago: executing program 0 (id=147): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10000, 0x0, 0x70000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) pipe2(0x0, 0x80000) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x20000000002, &(0x7f0000000000)="801edf37d3b43ba337ae8a17f0e8fb17c7bf91b1793e2385bc7f99bb264a59a2b339d5a0890a6db5917d24dc7b88c60be058a0a37cb235f8442a0d24160ef3f3403691386ab58b49c1da50a8391d5ae17c5d3194fe2be466738be68c90098994b5f957fc1aabaacd2fb31e9e5ded07471e44efc2e262e3c621767d99b9c0e25f31b70b") ptrace$cont(0x21, r4, 0x80000001, 0x4) 3.343819458s ago: executing program 2 (id=148): r0 = openat(0xffffffffffffff9c, 0x0, 0x6043, 0x15) sendmsg$kcm(r0, &(0x7f0000000dc0)={&(0x7f00000000c0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1ff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f00000008c0), 0x0, 0x0, 0x418}, 0x890) faccessat(r0, 0x0, 0x20) pwrite64(r0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r2, r3, 0x0, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001080)={0x64, r4, 0x1, 0x30bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="705effb8438274ae9bf026777d19f4bb"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="56250b9a40e4f4b93c4ccac798007d426c65fe42c7980d1f3e51ec5cc7e3973a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1caf73c1ff197423"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xcd}, 0x448d0) openat(r0, 0x0, 0x244283, 0x164) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.068720246s ago: executing program 1 (id=149): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r0, 0x80047437, 0x1) 2.830233673s ago: executing program 3 (id=150): r0 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x3}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0xc0844123, &(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r6 = dup2(r4, r5) close_range(r6, 0xffffffffffffffff, 0x0) 2.781184215s ago: executing program 1 (id=151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_getoverrun(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'macvlan0\x00', @local}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setrlimit(0x8, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000100000085"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getcwd(0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) 2.696700887s ago: executing program 3 (id=152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0xd, 0x5, 0x80000001, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff07, 0x1, 0x9, 0x6}}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) pread64(r3, &(0x7f0000000180)=""/14, 0xe, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x20, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x2, '\x00', r2, @fallback=0x18, r3, 0x8, &(0x7f0000000340)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, r4, r1, 0x0, &(0x7f00000003c0)=[r0, r0, r0, r0], 0x0, 0x10, 0x71}, 0x94) 2.592645381s ago: executing program 3 (id=153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x74}}, 0x0) 2.548903282s ago: executing program 4 (id=154): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) 1.163823705s ago: executing program 2 (id=155): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000000, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) connect$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 804.735796ms ago: executing program 3 (id=156): syz_open_dev$sg(0x0, 0x6f5e, 0xaac00) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) close(r0) 745.592237ms ago: executing program 2 (id=157): socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424060244"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 362.706569ms ago: executing program 0 (id=158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 184.744584ms ago: executing program 3 (id=159): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x88000, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000980)={0x1, 0x8, 0x1ffffff7e, 0xbb0, 0x40, 0x5, 0x10, 0xffff, 0x1, 0x401, 0x1, 0x400, 0x0, 0x0, 0x0}) 164.927995ms ago: executing program 0 (id=160): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002300)={0x7, {"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", 0x10af}}, 0x1006) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1, 0xe, 0x6) 94.522857ms ago: executing program 3 (id=161): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = getuid() quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, r1, &(0x7f0000000180)) ioctl$KVM_NMI(r0, 0xae9a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x4c8, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2f, 0x4ba, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4a6, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x100, @val=0x80}, "2b47019676fb912bfb3979bb82d94c42da0498ad601e4b92fe2c62ba4d6bdd44d280dada5a5650e1edaecb4fd923a6ded85d084df9d5e7bffddda34d04e5cdb51ef2fe8703b3988bb47989823d53b49308c5d2977c173d08535eaf56e740391766d74589e9806165ef3d4085755bbaa162e74e4dc541aa6004761f6a43e20556918bb04da9070b3cc89472820459902b3342031e1571d32a8b78f2da2a8e73e26af9389dced48cdcaf0a714363789e4acd9373813e2729986552c1cdbeabd3a03d7684ead62926c387b1552066f9751c9f0fa935afda36cf2fb30bba0cb8007f3bd1fea86ef3b7f8434e250f2a09e6a3b569c8c0519adc93f8b909470f39920551618ecfe04ff0cc4b1ed29eee56dcd976a79181e4d3218b51150ce595c25371293ec4d05e4aa411ef3b190554c6a2e06ee6374d80a3c511603a8a20b75f8075d0d83d31b86be7d2d785e6d60c07b515fe04bd55e20bcfe799a3e66c93744c52d0d34880ab42354859d5d1a9d0d65b52a0819b19c2d7f7a285d401825bf40ccc355b1aecb100c3f86c71607b00c59c7a8c0d8ae35a0a0e20f189568cb1a386c9d799f2c5ba6cce4e6ae0dce69f7391a4f4b011b27ad89ecaca95b90be9e517d39fa47ab5d08fd75233c1b0b604c169ebdc29efe713e9ecd551fc383be78cc5afccee1d8bb067e64054734b61c99f1055748b335ea261b9a6ccd1b3362a0c9d26c74bcda8e4d1efca7f614a61b8dfa2508a39f78901cf7ab2f15409f1da06432db0b50f00e16a77ceece0e315fc63c46cd418a1d259ba713bc5a26a49bdc202cf04e02149cf29c1f617f0898321ecf9d395f349e276480b42147d4dc1af6491e05cff9a33517437cb21125f6945e0b727576880a89ef6d53375bb901e14ae1a2dd27a5bf67012b8e4515023dba602d2e5293da914c199c0c0d610bf6461cd7bba6c8b948e96f395c39a7a0b93df65368f8eaa306fdcf87522ac1a36c427d98af77c3a3afa33dc3e8e070a1a2f66a4877abbeef23ff67befdcc9532cf3990918fb778d7799ee1f26b469c37f3c9578b8f8f2d00d32fc839171b9474e76f03d827a4eac2802322f3d68b03d1516aec9566bba3acc0bcf0d6a551c412f080d8c7fe0c60e23cdb328920263477470ea4f23e23d5aebbfda173aa781f89bf0cdfce2003ed3c010c511b3b489eab29453a365b839cca172e3abbcbab0203899bdb4f14a3423c2293166145760e61c3c188c3e0888ee817f0772ff89e02df8f42b9951e1661b39def34308c46e8ec1e4e5b68e88140ac7dc993523191fdb71db3a2677a3bd666e6180a96c9846bce6cb6c16e379bf29e1769a66da2f6781e79f082cb80662d72adbb21240cef87dc3079a822b2a791753fcd12a7ec362088d76237370bcd5d5daa440ba735b4e29cf2cb93583a5080270d1a3fd40183dc04f30e01c428f92e595c89fcbd1fc52962eedea82e2772b5f5fa3dad0f908fe6a48fffcc69df60f34ef9d9ba7609d16cdf733ca77785c0ab6f536b79ffde4ff9b835bfcaffef0d15ae69c26c0588f1acd5a648fde52568c713163717eb77f863d20dda0f1ca2c0306748544d3763c1cfa82f1785f047c842cadc4f8ac1906ab6ad8f6425bb9efbe97ee62ea7e40ec6ac342f457f00626f907ed939864"}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, &(0x7f0000000140), 0x4003) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004881) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0xffff, 0x167200) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000001b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="fd", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x2, 0x4000000) 0s ago: executing program 1 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000, 0x40000000}], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. [ 61.194282][ T4175] cgroup: Unknown subsys name 'net' [ 61.323875][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.785679][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.174401][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 64.284147][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 64.307383][ T4202] chnl_net:caif_netlink_parms(): no params data found [ 64.384736][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.392815][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.401789][ T4188] device bridge_slave_0 entered promiscuous mode [ 64.425636][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 64.436482][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.443723][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.451979][ T4188] device bridge_slave_1 entered promiscuous mode [ 64.488744][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.495920][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.504027][ T4202] device bridge_slave_0 entered promiscuous mode [ 64.518642][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 64.545549][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.552956][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.561162][ T4202] device bridge_slave_1 entered promiscuous mode [ 64.589586][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.596924][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.605360][ T4190] device bridge_slave_0 entered promiscuous mode [ 64.633775][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.659923][ T4202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.669358][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.676799][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.685098][ T4190] device bridge_slave_1 entered promiscuous mode [ 64.694473][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.721380][ T4202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.781365][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.798045][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.805196][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.813730][ T4189] device bridge_slave_0 entered promiscuous mode [ 64.824237][ T4202] team0: Port device team_slave_0 added [ 64.838342][ T4202] team0: Port device team_slave_1 added [ 64.845599][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.861566][ T4188] team0: Port device team_slave_0 added [ 64.868441][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.875579][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.884331][ T4189] device bridge_slave_1 entered promiscuous mode [ 64.896386][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.904044][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.912426][ T4193] device bridge_slave_0 entered promiscuous mode [ 64.926366][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.933810][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.942405][ T4193] device bridge_slave_1 entered promiscuous mode [ 64.951100][ T4188] team0: Port device team_slave_1 added [ 64.979920][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.012999][ T4190] team0: Port device team_slave_0 added [ 65.019964][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.026949][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.053479][ T4202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.067384][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.077080][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.084320][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.110475][ T4202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.141427][ T4190] team0: Port device team_slave_1 added [ 65.163250][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.179971][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.186969][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.213804][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.232588][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.239929][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.266205][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.299363][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.309272][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.316280][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.342590][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.355866][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.363234][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.389569][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.418867][ T4202] device hsr_slave_0 entered promiscuous mode [ 65.426695][ T4202] device hsr_slave_1 entered promiscuous mode [ 65.436550][ T4193] team0: Port device team_slave_0 added [ 65.463465][ T4193] team0: Port device team_slave_1 added [ 65.472427][ T4189] team0: Port device team_slave_0 added [ 65.507847][ T4189] team0: Port device team_slave_1 added [ 65.517098][ T4188] device hsr_slave_0 entered promiscuous mode [ 65.524705][ T4188] device hsr_slave_1 entered promiscuous mode [ 65.531861][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.540345][ T4188] Cannot create hsr debugfs directory [ 65.589422][ T4190] device hsr_slave_0 entered promiscuous mode [ 65.596733][ T4190] device hsr_slave_1 entered promiscuous mode [ 65.604053][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.612074][ T4190] Cannot create hsr debugfs directory [ 65.622671][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.629933][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.656287][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.675488][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.682876][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.710221][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.722512][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.729730][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.756846][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.776884][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.784167][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.810480][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.918264][ T4194] Bluetooth: hci3: command 0x0409 tx timeout [ 65.927694][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 65.934012][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 65.945302][ T4194] Bluetooth: hci0: command 0x0409 tx timeout [ 65.949017][ T4189] device hsr_slave_0 entered promiscuous mode [ 65.952020][ T4194] Bluetooth: hci2: command 0x0409 tx timeout [ 65.966605][ T4189] device hsr_slave_1 entered promiscuous mode [ 65.973917][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.981682][ T4189] Cannot create hsr debugfs directory [ 66.054128][ T4193] device hsr_slave_0 entered promiscuous mode [ 66.061455][ T4193] device hsr_slave_1 entered promiscuous mode [ 66.068609][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.076201][ T4193] Cannot create hsr debugfs directory [ 66.252209][ T4202] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.276295][ T4202] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.293901][ T4202] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.304436][ T4202] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.378745][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.399009][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.409755][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.421253][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.511531][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.528604][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.563666][ T4202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.571194][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.585020][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.614208][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.624445][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.634592][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.647857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.661665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.674778][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.702696][ T4202] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.739867][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.751078][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.760185][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.772490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.783082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.792976][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.800385][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.809665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.819790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.830596][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.837865][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.846141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.860740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.892808][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.931509][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.952390][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.962336][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.973071][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.982751][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.998531][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.030574][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.043617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.052810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.085300][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.100115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.109773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.120596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.129335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.137938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.147018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.156003][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.163131][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.172534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.185946][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.222233][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.231629][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.240004][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.250391][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.261153][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.268297][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.276316][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.287606][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.296895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.307579][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.316963][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.340949][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.357626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.366531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.380279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.391352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.400848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.411194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.450618][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.463733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.473547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.483311][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.490469][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.499892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.509118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.518247][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.525349][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.542941][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.561435][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.572301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.580974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.614620][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.624866][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.649019][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.658514][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.681864][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.700413][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.709307][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.731634][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.746301][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.760953][ T3047] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.768659][ T3047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.778131][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.789049][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.799942][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.809030][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.843406][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.853917][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.866633][ T3047] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.873826][ T3047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.882587][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.894092][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.903586][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.913319][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.923484][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.932594][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.943959][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.953397][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.982116][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.003950][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.013009][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 68.025873][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 68.032458][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 68.038041][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.039454][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 68.053218][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 68.061867][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.071908][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.081688][ T3047] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.089012][ T3047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.099648][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.110431][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.120233][ T3047] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.127385][ T3047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.135600][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.146091][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.155386][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.165009][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.176022][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.206483][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.221282][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.240231][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.250280][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.258816][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.266403][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.276940][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.288312][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.296913][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.306139][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.316149][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.333776][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.354755][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.376204][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.393329][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.415664][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.424197][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.435054][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.445215][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.454764][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.465069][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.475940][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.489289][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.538432][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.558380][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.576196][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.584691][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.613564][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.626282][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.636279][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.668597][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.688747][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.701731][ T4202] device veth0_vlan entered promiscuous mode [ 68.752590][ T4202] device veth1_vlan entered promiscuous mode [ 68.786620][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.811774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.820572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.831764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.841011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.850612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.859105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.897996][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.916071][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.925746][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.939665][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.952830][ T4189] device veth0_vlan entered promiscuous mode [ 68.974107][ T4202] device veth0_macvtap entered promiscuous mode [ 68.989866][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.000123][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.010297][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.021146][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.031090][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.041156][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.056293][ T4189] device veth1_vlan entered promiscuous mode [ 69.063949][ T4188] device veth0_vlan entered promiscuous mode [ 69.073438][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.083650][ T4202] device veth1_macvtap entered promiscuous mode [ 69.092058][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.101547][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.109983][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.120114][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.129115][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.137529][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.145575][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.165427][ T4188] device veth1_vlan entered promiscuous mode [ 69.212729][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.221439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.230335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.240063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.248680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.256157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.264755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.273766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.296648][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.328180][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.339475][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.365687][ T4189] device veth0_macvtap entered promiscuous mode [ 69.378043][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.388504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.396952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.406567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.415715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.425582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.442295][ T4202] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.452613][ T4202] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.462450][ T4202] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.473101][ T4202] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.486546][ T4189] device veth1_macvtap entered promiscuous mode [ 69.506331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.514800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.524474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.542974][ T4188] device veth0_macvtap entered promiscuous mode [ 69.562062][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.577771][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.586300][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.617089][ T4190] device veth0_vlan entered promiscuous mode [ 69.629305][ T4188] device veth1_macvtap entered promiscuous mode [ 69.652262][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.662826][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.671458][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.691823][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.711270][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.751825][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.776120][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.790329][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.800568][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.811117][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.824894][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.834900][ T4190] device veth1_vlan entered promiscuous mode [ 69.842693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.851869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.861120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.870535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.880627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.893129][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.904996][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.916499][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.931994][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.946746][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.956864][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.967411][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.985610][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.999466][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.009433][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.018456][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.027773][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.036455][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.050805][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.059660][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.068557][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.077808][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 70.084154][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 70.084474][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.091377][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 70.105705][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 70.113065][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 70.130266][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.142622][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.151724][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.161322][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.228711][ T4190] device veth0_macvtap entered promiscuous mode [ 70.236684][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.250224][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.259786][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.269212][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.278164][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.291673][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.301149][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.318440][ T4190] device veth1_macvtap entered promiscuous mode [ 70.350895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.399088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.410852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.419850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.428282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.442212][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.453707][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.464559][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.475143][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.491277][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.503052][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.515011][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.524756][ T4193] device veth0_vlan entered promiscuous mode [ 70.553510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.565364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.578161][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.591627][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.602481][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.613378][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.623671][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.634943][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.647537][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.656378][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.663288][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.675086][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.684659][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.684862][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.701249][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.731555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.740556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.752221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.770422][ T4193] device veth1_vlan entered promiscuous mode [ 70.846913][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.866734][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.884458][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.889337][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.904163][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.917728][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.926741][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.943754][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.999615][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.011753][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.040315][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.041687][ T4193] device veth0_macvtap entered promiscuous mode [ 71.059035][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.080053][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.088601][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.098227][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.106168][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.116014][ T3047] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.134090][ T4193] device veth1_macvtap entered promiscuous mode [ 71.189607][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.209767][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.231673][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.243092][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.255708][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.266456][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.275005][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.291541][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.298124][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.317407][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.333409][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.344395][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.355457][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.366819][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.378255][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.390355][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.399769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.410854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.421022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.432650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.446042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.594845][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.618484][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.629221][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.765097][ T23] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 71.784892][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.864583][ T23] usb 3-1: config 1 interface 0 has no altsetting 0 [ 71.905628][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.987972][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.045248][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.186539][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.208853][ T23] usb 3-1: string descriptor 0 read error: -22 [ 72.215189][ T23] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 72.233709][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.246322][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.264538][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.289134][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.302946][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.313348][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.398956][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 72.405828][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 72.412133][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 72.418250][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 72.421911][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.424883][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 72.452567][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.156002][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.192100][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.226498][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.245227][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.255827][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.264518][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.288407][ T4288] batman_adv: batadv0: Adding interface: dummy0 [ 73.295797][ T4288] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.323737][ T4288] batman_adv: batadv0: Interface activated: dummy0 [ 73.332505][ T4292] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.354376][ T4282] device vlan2 entered promiscuous mode [ 73.360646][ T4282] device bridge0 entered promiscuous mode [ 73.421833][ T23] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 73.436364][ T4291] batadv0: mtu less than device minimum [ 73.464547][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0926:3333.0001/input/input5 [ 73.485172][ T4291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.498125][ T4291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.510713][ T4291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.523762][ T4291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.536009][ T4291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.548594][ T4291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.561267][ T4291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.573849][ T4291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.587058][ T4291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.646834][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 73.858648][ T23] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 73.889189][ T23] usb 3-1: USB disconnect, device number 2 [ 74.637231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.647212][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.657248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.667213][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.677204][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.687206][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.697203][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.707201][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.717203][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.727209][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 74.762601][ T4303] block device autoloading is deprecated and will be removed. [ 75.690068][ T4309] fido_id[4309]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 76.684443][ T4327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 77.728150][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 78.927832][ T4368] capability: warning: `syz.0.24' uses deprecated v2 capabilities in a way that may be insecure [ 81.319506][ T4401] Zero length message leads to an empty skb [ 82.220229][ T4236] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.270803][ T4410] netlink: 'syz.3.37': attribute type 29 has an invalid length. [ 82.280417][ T4410] netlink: 'syz.3.37': attribute type 29 has an invalid length. [ 82.291981][ T4410] netlink: 'syz.3.37': attribute type 29 has an invalid length. [ 83.417384][ T4236] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.927475][ T4236] usb 1-1: config 0 has no interface number 0 [ 83.933650][ T4236] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.945785][ T4236] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.955825][ T4236] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 83.965675][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.981980][ T4236] usb 1-1: config 0 descriptor?? [ 84.324194][ T4432] loop9: detected capacity change from 0 to 4096 [ 84.352050][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 84.375088][ C0] blk_update_request: I/O error, dev loop9, sector 1072 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 84.387846][ C0] blk_update_request: I/O error, dev loop9, sector 2104 op 0x0:(READ) flags 0x80700 phys_seg 56 prio class 0 [ 85.155883][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.167075][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 85.387383][ T4236] usbhid 1-1:0.1: can't add hid device: -71 [ 85.484028][ T4236] usbhid: probe of 1-1:0.1 failed with error -71 [ 85.677858][ T4236] usb 1-1: USB disconnect, device number 2 [ 86.057456][ T4256] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.485662][ T4448] sched: RT throttling activated [ 87.503520][ T7] cfg80211: failed to load regulatory.db [ 87.527913][ T4256] usb 2-1: Using ep0 maxpacket: 32 [ 87.857517][ T4256] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.569804][ T4256] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 89.887792][ T4256] usb 2-1: string descriptor 0 read error: -71 [ 89.939076][ T4256] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 89.979400][ T4256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.030862][ T4256] usb 2-1: config 0 descriptor?? [ 90.073486][ T4464] sctp: [Deprecated]: syz.3.52 (pid 4464) Use of int in max_burst socket option deprecated. [ 90.073486][ T4464] Use struct sctp_assoc_value instead [ 90.121910][ T4256] usb 2-1: can't set config #0, error -71 [ 90.178993][ T4256] usb 2-1: USB disconnect, device number 2 [ 90.769471][ T4475] ODEBUG: Out of memory. ODEBUG disabled [ 91.731156][ T4486] program syz.1.56 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.741341][ T4486] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 91.849376][ T4487] netlink: 'syz.1.56': attribute type 39 has an invalid length. [ 92.908962][ T4498] process 'syz.4.58' launched './file0' with NULL argv: empty string added [ 92.993066][ T4492] device syzkaller0 entered promiscuous mode [ 94.440397][ T4510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.60'. [ 94.462201][ T26] audit: type=1326 audit(1781447223.053:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.4.60" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6350aefe59 code=0x0 [ 95.845594][ T4518] input: syz1 as /devices/virtual/input/input6 [ 96.990152][ T4236] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.147331][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.411097][ T4236] usb 5-1: config 0 has an invalid interface number: 164 but max is 0 [ 97.428876][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 98.177423][ T4236] usb 5-1: config 0 has no interface number 0 [ 98.244951][ T4236] usb 5-1: config 0 interface 164 altsetting 174 has 0 endpoint descriptors, different from the interface descriptor's value: 27 [ 98.258779][ T4236] usb 5-1: config 0 interface 164 has no altsetting 0 [ 98.338133][ T7] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 98.347583][ T4236] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 98.367324][ T7] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 98.387494][ T4236] usb 5-1: New USB device strings: Mfr=0, Product=229, SerialNumber=0 [ 98.732577][ T4236] usb 5-1: Product: syz [ 98.747085][ T7] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 98.771014][ T4236] usb 5-1: config 0 descriptor?? [ 98.808056][ T7] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 100.273446][ T7] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 100.588499][ T4236] ftdi_sio 5-1:0.164: FTDI USB Serial Device converter detected [ 100.598661][ T4236] usb 5-1: Detected FT-X [ 101.119237][ T4533] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 101.171233][ T4533] Bluetooth: hci4: Injecting HCI hardware error event [ 101.294530][ T4204] Bluetooth: hci4: hardware error 0x00 [ 101.451891][ T4236] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 101.513423][ T7] usb 2-1: config 168 interface 0 has no altsetting 0 [ 101.537344][ T4236] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 101.567329][ T4236] ftdi_sio 5-1:0.164: GPIO initialisation failed: -71 [ 101.577037][ T4236] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 101.586453][ T7] usb 2-1: unable to read config index 1 descriptor/start: -71 [ 101.598268][ T7] usb 2-1: can't read configurations, error -71 [ 101.616171][ T4236] usb 5-1: USB disconnect, device number 2 [ 101.647564][ T4236] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 101.677793][ T4236] ftdi_sio 5-1:0.164: device disconnected [ 101.750117][ T4568] netlink: 16 bytes leftover after parsing attributes in process `syz.3.79'. [ 101.812578][ T4569] program syz.1.81 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.180004][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.630314][ T4576] usb usb8: usbfs: process 4576 (syz.4.82) did not claim interface 0 before use [ 102.927348][ T13] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 102.977219][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.619852][ T13] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 103.628002][ T13] usb 4-1: Product: syz [ 103.632204][ T13] usb 4-1: SerialNumber: syz [ 103.639172][ T13] usb 4-1: config 0 descriptor?? [ 103.899225][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 103.963775][ T13] hso 4-1:0.0: Failed to find INT IN ep [ 104.090062][ T7] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 104.090231][ T7] usb 2-1: config 0 has no interface number 0 [ 104.091228][ T7] usb 2-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 104.091307][ T7] usb 2-1: config 0 interface 246 has no altsetting 0 [ 104.413451][ T4256] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.511486][ T13] usb 4-1: USB disconnect, device number 2 [ 104.597707][ T7] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 104.638748][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.674322][ T7] usb 2-1: Product: syz [ 104.697195][ T7] usb 2-1: Manufacturer: syz [ 104.707481][ T4256] usb 1-1: Using ep0 maxpacket: 8 [ 104.717266][ T7] usb 2-1: SerialNumber: syz [ 104.755942][ T7] usb 2-1: config 0 descriptor?? [ 105.027243][ T4256] usb 1-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 105.046290][ T4256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.072831][ T4256] usb 1-1: Product: syz [ 105.140668][ T7] usb 2-1: USB disconnect, device number 5 [ 105.148056][ T4256] usb 1-1: Manufacturer: syz [ 105.154873][ T4256] usb 1-1: SerialNumber: syz [ 105.557530][ T4256] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 105.597629][ T4256] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 105.749019][ T4256] usb 1-1: USB disconnect, device number 3 [ 106.825486][ T4621] ======================================================= [ 106.825486][ T4621] WARNING: The mand mount option has been deprecated and [ 106.825486][ T4621] and is ignored by this kernel. Remove the mand [ 106.825486][ T4621] option from the mount to silence this warning. [ 106.825486][ T4621] ======================================================= [ 106.928984][ T4317] udevd[4317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.922050][ T4649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 110.069470][ T4233] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.136686][ T4655] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 110.184035][ T4655] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 110.343548][ T4233] usb 4-1: Using ep0 maxpacket: 16 [ 110.523528][ T4233] usb 4-1: config 1 has an invalid interface number: 33 but max is 0 [ 110.551391][ T4233] usb 4-1: config 1 has no interface number 0 [ 110.581059][ T4233] usb 4-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=78.85 [ 110.607343][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.679791][ T4233] usb 4-1: Found UVC 0.00 device (1bcf:0b40) [ 110.687080][ T4233] usb 4-1: Forcing UVC version to 1.0a [ 110.739338][ T4233] usb 4-1: No valid video chain found. [ 110.929012][ T4233] usb 4-1: USB disconnect, device number 3 [ 111.127272][ T4256] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 111.517323][ T4194] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.547492][ T4256] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.619289][ T4697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.118'. [ 111.757636][ T4256] usb 2-1: config 1 has an invalid interface number: 36 but max is 1 [ 111.778911][ T4256] usb 2-1: config 1 has no interface number 1 [ 111.816917][ T4256] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 111.881690][ T4256] usb 2-1: too many endpoints for config 1 interface 36 altsetting 103: 102, using maximum allowed: 30 [ 111.944186][ T4256] usb 2-1: config 1 interface 36 altsetting 103 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 112.016072][ T4256] usb 2-1: config 1 interface 0 has no altsetting 0 [ 112.051745][ T4256] usb 2-1: config 1 interface 36 has no altsetting 0 [ 112.257516][ T4256] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 112.312783][ T4256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.538052][ T4256] usb 2-1: Product: syz [ 112.542293][ T4256] usb 2-1: Manufacturer: syz [ 112.547411][ T4256] usb 2-1: SerialNumber: syz [ 112.565836][ T4233] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 112.687236][ T4194] usb 1-1: Using ep0 maxpacket: 8 [ 112.821912][ T4194] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.832882][ T4256] smsusb:smsusb_probe: board id=8, interface number 0 [ 112.847793][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 112.859138][ T4256] smsusb:smsusb_probe: board id=8, interface number 36 [ 112.869507][ T4701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.120'. [ 112.880743][ T4256] usb 2-1: USB disconnect, device number 6 [ 112.888566][ T4194] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.907363][ T4194] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 112.965136][ T4194] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.003543][ T4194] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.026234][ T4194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.108593][ T4194] usbtmc 1-1:16.0: bulk endpoints not found [ 113.237366][ T4233] usb 5-1: unable to get BOS descriptor or descriptor too short [ 113.307333][ T4233] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 113.330418][ T4233] usb 5-1: can't read configurations, error -71 [ 113.362928][ T4697] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.373142][ T4697] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.907345][ T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 114.301442][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.327408][ T21] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 114.336623][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.362621][ T21] usb 2-1: config 0 descriptor?? [ 114.707404][ T21] usbhid 2-1:0.0: can't add hid device: -71 [ 114.713710][ T21] usbhid: probe of 2-1:0.0 failed with error -71 [ 114.777832][ T4233] usb 1-1: USB disconnect, device number 4 [ 114.799514][ T21] usb 2-1: USB disconnect, device number 7 [ 115.060506][ T4697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.111427][ T4697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.197307][ T21] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 115.567425][ T4233] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 115.588194][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.606459][ T21] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 115.619240][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.641193][ T21] usb 2-1: config 0 descriptor?? [ 115.647574][ T4697] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.656493][ T4697] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.665611][ T4697] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.674679][ T4697] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.977027][ T4233] usb 5-1: Using ep0 maxpacket: 8 [ 116.695017][ T4730] syz.0.129 uses obsolete (PF_INET,SOCK_PACKET) [ 116.710918][ T4730] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.741300][ T4731] udc-core: couldn't find an available UDC or it's busy [ 116.751847][ T4731] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 116.787698][ T4233] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 116.796804][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.811398][ T4233] usb 5-1: Product: syz [ 116.815904][ T4233] usb 5-1: Manufacturer: syz [ 116.834882][ T4233] usb 5-1: SerialNumber: syz [ 116.848383][ T4233] usb 5-1: config 0 descriptor?? [ 116.899610][ T4233] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 116.913976][ T4233] pctv452e: pctv452e_power_ctrl: 1 [ 116.913976][ T4233] [ 116.922252][ T4233] usb 5-1: selecting invalid altsetting 3 [ 116.928677][ T4233] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 116.928677][ T4233] [ 116.940110][ T4233] dvb-usb: bulk message failed: -22 (5/0) [ 116.965746][ T4233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 116.977360][ T21] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 116.989338][ T21] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 117.018200][ T4233] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 117.047289][ T4233] usb 5-1: media controller created [ 117.053434][ T4233] dvb-usb: bulk message failed: -22 (8/0) [ 117.079451][ T4233] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 117.109162][ T4233] dvb-usb: MAC address reading failed. [ 117.173870][ T4233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.777953][ T4751] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 117.784838][ T4751] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 117.794652][ T4751] vhci_hcd vhci_hcd.0: Device attached [ 117.999451][ T4752] vhci_hcd: connection closed [ 118.806738][ T4559] vhci_hcd: stop threads [ 118.806826][ T4559] vhci_hcd: release socket [ 118.808330][ T4559] vhci_hcd: disconnect device [ 118.838552][ T21] usb 2-1: USB disconnect, device number 8 [ 119.655497][ T4233] DVB: Unable to find symbol stb0899_attach() [ 119.670188][ T4233] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 122.237322][ T4233] rc_core: IR keymap rc-tt-1500 not found [ 122.243770][ T4233] Registered IR keymap rc-empty [ 122.278736][ T4233] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 122.349352][ T4233] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input8 [ 122.634763][ T4233] dvb-usb: schedule remote query interval to 100 msecs. [ 122.648146][ T4233] pctv452e: pctv452e_power_ctrl: 0 [ 122.648146][ T4233] [ 122.665908][ T4233] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 122.714986][ T4233] usb 5-1: USB disconnect, device number 5 [ 124.836089][ T4233] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 125.287672][ T4233] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 125.537480][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 125.667438][ T4233] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 125.857589][ T4233] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 125.907491][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 125.937401][ T4233] usb 5-1: Product: syz [ 125.962206][ T4233] usb 5-1: Manufacturer: syz [ 125.996640][ T4233] usb 5-1: SerialNumber: syz [ 126.038500][ T4233] usb 5-1: config 0 descriptor?? [ 126.057630][ T4816] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.078600][ T4233] hub 5-1:0.0: bad descriptor, ignoring hub [ 126.078629][ T4233] hub: probe of 5-1:0.0 failed with error -5 [ 126.177261][ T4533] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 126.218244][ T4835] ------------[ cut here ]------------ [ 126.218468][ T4835] WARNING: CPU: 0 PID: 4835 at include/linux/fs.h:532 hugetlb_split+0x237/0x2a0 [ 126.218520][ T4835] Modules linked in: [ 126.218545][ T4835] CPU: 0 PID: 4835 Comm: syz.3.161 Not tainted syzkaller #0 [ 126.218569][ T4835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.218590][ T4835] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 126.218615][ T4835] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 65 ad bf ff 0f 0b e9 62 fe ff ff e8 59 ad bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 84 3a 8a 8d 80 e1 07 80 c1 03 38 c1 [ 126.218634][ T4835] RSP: 0018:ffffc900031ffb40 EFLAGS: 00010287 [ 126.218655][ T4835] RAX: ffffffff81b99b97 RBX: 0000200000400000 RCX: 0000000000080000 [ 126.218673][ T4835] RDX: ffffc9000f6cf000 RSI: 00000000000010bd RDI: 00000000000010be [ 126.218690][ T4835] RBP: 0000000000000000 R08: ffff888077610ebf R09: 1ffff1100eec21d7 [ 126.218707][ T4835] R10: dffffc0000000000 R11: ffffed100eec21d8 R12: ffff88801ff772b0 [ 126.218726][ T4835] R13: dffffc0000000000 R14: ffff88801ff77210 R15: ffff8880773601c0 [ 126.218745][ T4835] FS: 00007fb67050f6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 126.218766][ T4835] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.218784][ T4835] CR2: 00007fb67050eff8 CR3: 000000007d692000 CR4: 00000000003506f0 [ 126.218805][ T4835] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.218821][ T4835] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 126.218836][ T4835] Call Trace: [ 126.218844][ T4835] [ 126.218861][ T4835] __vma_adjust+0x2b6/0x1c10 [ 126.218888][ T4835] ? rcu_lock_acquire+0x30/0x30 [ 126.218936][ T4835] ? memset+0x1e/0x40 [ 126.218961][ T4835] __split_vma+0x34b/0x410 [ 126.218991][ T4835] mprotect_fixup+0x5bb/0x800 [ 126.219030][ T4835] ? change_protection+0x1910/0x1910 [ 126.219058][ T4835] ? common_file_perm+0x171/0x1c0 [ 126.219087][ T4835] ? bpf_lsm_file_mprotect+0x5/0x10 [ 126.219112][ T4835] ? security_file_mprotect+0x7e/0xb0 [ 126.219142][ T4835] do_mprotect_pkey+0x657/0x910 [ 126.219179][ T4835] __x64_sys_mprotect+0x7c/0x90 [ 126.219214][ T4835] do_syscall_64+0x4c/0xa0 [ 126.219239][ T4835] ? clear_bhb_loop+0x30/0x80 [ 126.219262][ T4835] ? clear_bhb_loop+0x30/0x80 [ 126.219288][ T4835] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.219321][ T4835] RIP: 0033:0x7fb6722f7e59 [ 126.219343][ T4835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.219363][ T4835] RSP: 002b:00007fb67050f028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 126.219388][ T4835] RAX: ffffffffffffffda RBX: 00007fb672571180 RCX: 00007fb6722f7e59 [ 126.219405][ T4835] RDX: 0000000000000001 RSI: 0000000000800000 RDI: 0000200000000000 [ 126.219421][ T4835] RBP: 00007fb67238dd6f R08: 0000000000000000 R09: 0000000000000000 [ 126.219436][ T4835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.219451][ T4835] R13: 00007fb672571218 R14: 00007fb672571180 R15: 00007ffdc92c89f8 [ 126.219484][ T4835] [ 126.219506][ T4835] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.219518][ T4835] CPU: 0 PID: 4835 Comm: syz.3.161 Not tainted syzkaller #0 [ 126.219539][ T4835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.219552][ T4835] Call Trace: [ 126.219559][ T4835] [ 126.219567][ T4835] dump_stack_lvl+0x188/0x250 [ 126.219595][ T4835] ? show_regs_print_info+0x20/0x20 [ 126.219618][ T4835] ? load_image+0x400/0x400 [ 126.219652][ T4835] panic+0x2e5/0x810 [ 126.219854][ T4835] ? bpf_jit_dump+0xd0/0xd0 [ 126.219897][ T4835] ? hugetlb_split+0x237/0x2a0 [ 126.219921][ T4835] __warn+0x248/0x2b0 [ 126.219941][ T4835] ? hugetlb_split+0x237/0x2a0 [ 126.219964][ T4835] report_bug+0x1b7/0x2e0 [ 126.219989][ T4835] handle_bug+0x3a/0x70 [ 126.220010][ T4835] exc_invalid_op+0x16/0x40 [ 126.220032][ T4835] asm_exc_invalid_op+0x16/0x20 [ 126.220054][ T4835] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 126.220076][ T4835] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 65 ad bf ff 0f 0b e9 62 fe ff ff e8 59 ad bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 84 3a 8a 8d 80 e1 07 80 c1 03 38 c1 [ 126.220095][ T4835] RSP: 0018:ffffc900031ffb40 EFLAGS: 00010287 [ 126.220115][ T4835] RAX: ffffffff81b99b97 RBX: 0000200000400000 RCX: 0000000000080000 [ 126.220132][ T4835] RDX: ffffc9000f6cf000 RSI: 00000000000010bd RDI: 00000000000010be [ 126.220147][ T4835] RBP: 0000000000000000 R08: ffff888077610ebf R09: 1ffff1100eec21d7 [ 126.220163][ T4835] R10: dffffc0000000000 R11: ffffed100eec21d8 R12: ffff88801ff772b0 [ 126.220180][ T4835] R13: dffffc0000000000 R14: ffff88801ff77210 R15: ffff8880773601c0 [ 126.220204][ T4835] ? hugetlb_split+0x237/0x2a0 [ 126.220262][ T4835] __vma_adjust+0x2b6/0x1c10 [ 126.220289][ T4835] ? rcu_lock_acquire+0x30/0x30 [ 126.220336][ T4835] ? memset+0x1e/0x40 [ 126.220359][ T4835] __split_vma+0x34b/0x410 [ 126.220387][ T4835] mprotect_fixup+0x5bb/0x800 [ 126.220426][ T4835] ? change_protection+0x1910/0x1910 [ 126.220454][ T4835] ? common_file_perm+0x171/0x1c0 [ 126.220481][ T4835] ? bpf_lsm_file_mprotect+0x5/0x10 [ 126.220503][ T4835] ? security_file_mprotect+0x7e/0xb0 [ 126.220533][ T4835] do_mprotect_pkey+0x657/0x910 [ 126.220569][ T4835] __x64_sys_mprotect+0x7c/0x90 [ 126.220598][ T4835] do_syscall_64+0x4c/0xa0 [ 126.220620][ T4835] ? clear_bhb_loop+0x30/0x80 [ 126.220641][ T4835] ? clear_bhb_loop+0x30/0x80 [ 126.220666][ T4835] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.220690][ T4835] RIP: 0033:0x7fb6722f7e59 [ 126.220709][ T4835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.220727][ T4835] RSP: 002b:00007fb67050f028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 126.220752][ T4835] RAX: ffffffffffffffda RBX: 00007fb672571180 RCX: 00007fb6722f7e59 [ 126.220770][ T4835] RDX: 0000000000000001 RSI: 0000000000800000 RDI: 0000200000000000 [ 126.220785][ T4835] RBP: 00007fb67238dd6f R08: 0000000000000000 R09: 0000000000000000 [ 126.220799][ T4835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.220813][ T4835] R13: 00007fb672571218 R14: 00007fb672571180 R15: 00007ffdc92c89f8 [ 126.220845][ T4835] [ 126.221239][ T4835] Kernel Offset: disabled [ 126.914366][ T4835] Rebooting in 86400 seconds..