last executing test programs: 12.759601896s ago: executing program 2 (id=280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="440000000906050000000000000000000a00000005000100070000000900020073797a30000000001c000780180001801400af4000000000"], 0x44}}, 0x0) 12.627098569s ago: executing program 2 (id=283): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000208f0e1200000000000001090224000100000007090400050203000300092100800901221800090581031000008823"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x39, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000100)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000180)=ANY=[]) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f00000002c0)={0xc, {"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", 0x100f}}, 0x1006) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f00000014c0)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, 0x0) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f0000001580)={0x81, 0x0, 0x1}) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000001600)) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x11, 0x3, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r7, &(0x7f0000001540)=[{&(0x7f0000001680)="ebfa0e81ce8ff8c84ace9d15af003afa41ae5fbebe5b175c12cf29c48c2d4b61ce76443645c1dc73113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3f3b63", 0x49}], 0x1) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=ANY=[@ANYBLOB="05000000010900"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000d7c158a0d40246fa39028cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f8726814afc7e9f0413567e592c7c15"], 0x80}}, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000001800), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r8, 0x80045530, &(0x7f0000001840)=""/90) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000018c0)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000001900)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000001940)=0xe9, 0x4) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000001980)=0x93bd, 0x4) sendmsg$netlink(r6, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001a40)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x44040) sendmsg$inet(r6, &(0x7f0000001a80)={&(0x7f0000001ac0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001b00), 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="110000000000000000000000010000000800000000000000440000000000000000000500000000000000c403e52e3d245b4414d8600000cf4600000000000000000000000901441482c1e0000002000000037f00000100000000000000000000140000000000000000000000020000000300000000000000141ecf9109bea4cabcaea2b91b229a76b629cb94207945b6e5bf0dbc8e7c27192aab8bffd3f4be85575a02be8b66561b91777c8ca3705886643ec0e3b14f44ae8c04e6ee8a820897357d1438082b2f977032b7014e24d52259efccaa53a20e20a935e55caf2c9f"], 0x78}, 0x4000) socket$kcm(0x21, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 10.809223454s ago: executing program 3 (id=291): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYRESHEX], &(0x7f0000000080)='syzkaller\x00', 0x3}, 0x94) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4044) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000240), 0x4) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f00000002c0)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000380)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b805509dbba9b374d59c9e2ad7a786fd8766d6935a31e", 0x34}, {&(0x7f00000003c0)="0276dd894f", 0x5}], 0x2}, 0x24004010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl(r3, 0x8914, &(0x7f0000000c80)="7770616e3000000000000000000000000100"/40) sendmsg$nl_xfrm(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="60010000100001000000000000000000ac141444000000000000000000000800ff01000037ba1b63a5af8a6daf724cf13500000000000000c9a7d878c8fc28530197b9cf5b56b7f29c0001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000c73b0000000000000700000000000000070000800000000000000000000000000200000054000000ffffffff2abd7000030080000200020057000000000000001c001700000000002abd70000000000000000000000000000000000005002100020000004c001400686d6163287368613235362900"/280], 0x160}}, 0x4004004) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a0000000290001"], 0xa0}}, 0x0) socket(0x5, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xa6, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) 9.75903034s ago: executing program 4 (id=298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, 0x0, 0x0}, 0x94) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="649b119fc3000000", @ANYRES16, @ANYBLOB="000128bd7000fddbdf2502000000040005000400050014000700000000000000000000000000000000000500030000000000050003001100000006000a004e21000014000900ff01000000000000000000000000000105"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x8400) syz_emit_ethernet(0x22, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff"], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x6, 0x8, 0xc5, 0x0, 0x6, 0x0, 0x0, 0x6, 0x1, 0xf8, 0x3, 0x1, 0x0, 0x7, 0x6, 0x8, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.75878062s ago: executing program 2 (id=299): mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x2000400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000005700), 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x0) syz_open_dev$MSR(&(0x7f0000000140), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r4 = socket$inet(0x2, 0x2, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYBLOB="800001001800000018003480140035006970", @ANYBLOB='4'], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100}, 0x2800804c) pipe(&(0x7f0000000700)) 9.75811007s ago: executing program 3 (id=300): socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$uac2(0x3, 0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff010220000904"], 0x0) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r0 = socket(0x10, 0x2, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mmap(&(0x7f00004bf000/0x4000)=nil, 0x4000, 0x8, 0x4000010, r0, 0x1521a000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000180)={0x1, 0x0, 0x102, 0x4, {0x5, 0x4, 0xf, 0xc6}}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='|\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRESHEX=r1, @ANYRES8], 0x7c}}, 0x4004080) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) sendmsg$nl_route_sched(r1, 0x0, 0x20044840) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0x0, 0x0, 0x1, 0x2}) creat(&(0x7f0000000100)='./file0\x00', 0x7a) 8.853247442s ago: executing program 2 (id=302): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000003c0)='>') 8.829334703s ago: executing program 4 (id=303): r0 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003000000408205740040000102030109027d000301053009080b00010107208c0904000000010120000924010040041d000708240a0001ff23000c240302"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket(0x29, 0x2, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000580)=[@text16={0x10, &(0x7f0000000500)="baf80c66b82cbcbb8366efbafc0cb80766ef66b9480800000f32b859000f00d8660f3804838d8f6766660f65516def0f01c9f0819fd6e0890066b9800000c00f326635000400000f300fc76000", 0x4d}], 0x1, 0x1a, &(0x7f00000005c0), 0x0) getsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$sock_SIOCOUTQ(r2, 0x8905, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x16, 0x10, &(0x7f00000008c0)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0xf03, &(0x7f0000000200)={0x0, 0x4a9, 0x1000, 0x0, 0x51}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/cluster/mycluster/node/node0/num\x00', 0x1, 0x0) write(r4, &(0x7f0000000880)='0\n\x00', 0x2) 7.282819581s ago: executing program 3 (id=308): r0 = open(0x0, 0x4827e, 0xdc) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracefs\x00', 0x1ef) mount(0x0, &(0x7f0000000200)='./tracefs\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracefs/instances/foo\x00', 0x200) fallocate(r0, 0x0, 0x0, 0x8800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000af6000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000204000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x61dd, &(0x7f0000000040)={0x0, 0xb70, 0x1f480, 0x0, 0x152}) 7.013459647s ago: executing program 1 (id=312): mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x2000400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000005700), 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x0) syz_open_dev$MSR(&(0x7f0000000140), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r4 = socket$inet(0x2, 0x2, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYBLOB="800001001800000018003480140035006970", @ANYBLOB='4'], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100}, 0x2800804c) pipe(&(0x7f0000000700)) 6.683522816s ago: executing program 4 (id=313): r0 = open(0x0, 0x4827e, 0xdc) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracefs\x00', 0x1ef) mount(0x0, &(0x7f0000000200)='./tracefs\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracefs/instances/foo\x00', 0x200) fallocate(r0, 0x0, 0x0, 0x8800000) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ext3\x00', 0x20, &(0x7f0000000180)='\'\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000af6000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000204000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x61dd, &(0x7f0000000040)={0x0, 0xb70, 0x1f480, 0x0, 0x152}) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 6.236469247s ago: executing program 2 (id=314): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x2, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x100}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 6.10134668s ago: executing program 1 (id=315): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x1}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 6.09998758s ago: executing program 0 (id=325): mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x2000400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000005700), 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x0) syz_open_dev$MSR(&(0x7f0000000140), 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000240)="95", 0x1}], 0x1) r4 = socket$inet(0x2, 0x2, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYBLOB="800001001800000018003480140035006970", @ANYBLOB='4'], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100}, 0x2800804c) pipe(&(0x7f0000000700)) 5.183896662s ago: executing program 0 (id=316): syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r0 = accept(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x0, @random}, &(0x7f0000000440)=0x80) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x80000000000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a00010028bd7000fcdbdf250a808000a6"], 0x1c}}, 0x20000050) syz_usb_connect(0x0, 0x62, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48891, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3f, 0x2, @thr={&(0x7f0000000100)="e8d2efd7bb3f8f14ef9e284f807f40e4feb695ccb8d2e164026135bcc9bf07cb8175307ed4560e7fb3ce6a509f29b5e749d00c263725b7358cf74e1361762fc195d693", &(0x7f0000000180)="2a6fbdce0573abfb9d989a8ff3143f9df67a01bce5afec37313579d60b59e28e814da31a0a874b46f53c06dcb56e776562cfedd5ae406656ebaa1fc155618cd2475e10a1b3c43548bb12e21de2dca8b615b3a7920656eafa8ecb35ff80b8c82eb00a6836c0668e57ce83d9f0ed38ae12137e884ec7f91aeff146116827741a0631937478a3f2f8d624ac14634c7ebc2718d181674c571d3a391bc98cde71479f1fa1e9e5d7419a264d60a91bc3"}}, &(0x7f0000000280)) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1, 0xb, &(0x7f0000000540)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @jmp={0x5, 0x0, 0x8, 0x5, 0x9, 0x6, 0x1}, @exit], &(0x7f00000005c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x32}, 0x94) r4 = accept4(r3, 0x0, 0x0, 0x80000) recvmsg$unix(r4, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000fc0)=""/4096, 0x1000}], 0x20}, 0x40000000) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) 1.822896905s ago: executing program 4 (id=317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.821776385s ago: executing program 0 (id=328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) 1.817380325s ago: executing program 2 (id=318): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$kcm(0x10, 0x2, 0x0) read$char_usb(r1, &(0x7f0000001080)=""/186, 0x110) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) 1.816493965s ago: executing program 1 (id=329): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r0, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/32, 0x20}], 0x1) 1.766832707s ago: executing program 3 (id=319): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) bind$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000740)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000780)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000007c0), 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)='M', 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000880)={0x2, 0x4e20, @multicast2}, 0x10) 1.766693307s ago: executing program 1 (id=320): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, 0x0, 0x0}, 0x94) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="649b119fc3000000", @ANYRES16, @ANYBLOB="000128bd7000fddbdf2502000000040005000400050014000700000000000000000000000000000000000500030000000000050003001100000006000a004e21000014000900ff01000000000000000000000000000105"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x8400) syz_emit_ethernet(0x22, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff"], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x6, 0x8, 0xc5, 0x0, 0x6, 0x0, 0x0, 0x6, 0x1, 0xf8, 0x3, 0x1, 0x0, 0x7, 0x6, 0x8, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 876.908508ms ago: executing program 4 (id=321): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000040)="000001", 0x3, 0x1be) 875.748599ms ago: executing program 0 (id=334): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) unshare(0x22020600) ioctl$SNDCTL_TMR_TEMPO(r0, 0x40085112, &(0x7f00000002c0)=0x8) 874.854929ms ago: executing program 1 (id=322): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYRESHEX], &(0x7f0000000080)='syzkaller\x00', 0x3}, 0x94) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4044) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000240), 0x4) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f00000002c0)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000380)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b805509dbba9b374d59c9e2ad7a786fd8766d6935a31e", 0x34}, {&(0x7f00000003c0)="0276dd894f", 0x5}], 0x2}, 0x24004010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl(r3, 0x8914, &(0x7f0000000c80)="7770616e3000000000000000000000000100"/40) sendmsg$nl_xfrm(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="60010000100001000000000000000000ac141444000000000000000000000800ff01000037ba1b63a5af8a6daf724cf13500000000000000c9a7d878c8fc28530197b9cf5b56b7f29c0001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000c73b0000000000000700000000000000070000800000000000000000000000000200000054000000ffffffff2abd7000030080000200020057000000000000001c001700000000002abd70000000000000000000000000000000000005002100020000004c001400686d6163287368613235362900"/280], 0x160}}, 0x4004004) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a0000000290001"], 0xa0}}, 0x0) socket(0x5, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x101401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xa6, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) 874.698549ms ago: executing program 3 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) rseq(0x0, 0xfde1, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) 229.914154ms ago: executing program 0 (id=324): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/resume', 0x149a82, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @empty, @local, [@srh={0x86, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) write$cgroup_int(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000200)={0xfffffffb}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120069b17a4ceecc537e000007000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468315f766972745f7769666900080004"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_TDX_INIT_VM(r0, 0xc008aeba, &(0x7f0000000380)={0x1, 0x0, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000040)="633770d13d28abcc6274d06714142dba5369dd1b523279c0c04e1afbe3f0a3acf2d81a08758ff4ce70f6bf43f808447ca81fe206ee03d1daf9c3bef1601576f0719b3fbfb7fddeaf29e7a0ef2f46eda080b07b7d212634d55cf6d3612e26a2a1b7385c04b4d343b15c9e37eb4d61b478d559a71fef71f78e561a9e6433d00fc85f4aa1895640c9d66f63f68bb2ef539fd6a6f21f997cef3e2e86e6de33ae079f3532b730d0e8cafd81ba51a68ee432a61f57ec77420556201e535f809c14ccfeb546500b11da60f9a118737c21cd972eb2b0acee94f740be1bbcc6eda314a3009efc3c181d7ac1f45545d2106cfe96f8ec4e7538064360321b6142b37ab6", &(0x7f0000000140)=""/156, &(0x7f0000000200), &(0x7f00000002c0)="bb811e7e660adc3f05e4ac3fde1210d5064ea574b1", 0x4, r0}, 0x38) 10.95958ms ago: executing program 0 (id=326): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000003c0)='>') 8.71765ms ago: executing program 4 (id=327): mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x2000400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000005700), 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x0) syz_open_dev$MSR(&(0x7f0000000140), 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000240)="95", 0x1}], 0x1) r4 = socket$inet(0x2, 0x2, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYBLOB="800001001800000018003480140035006970", @ANYBLOB='4'], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100}, 0x2800804c) pipe(&(0x7f0000000700)) 847.94µs ago: executing program 1 (id=330): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/54) add_key(0x0, 0x0, &(0x7f00000000c0)="3082010c3081baa003020102020101300a06082a85030701010302300c310a30080603550403130141301e170d3230303130313030303030305a170d3330303130313030303030305a300c310a300806035504031301413068302106082a85030701010101301506", 0x68, 0xfffffffffffffffd) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 0s ago: executing program 3 (id=331): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000025c0)=@newsa={0x13c, 0x10, 0x1, 0x70bd2c, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x45}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3b}, {@in6=@local, 0x4d4, 0x2b}, @in=@rand_addr=0x64010101, {0x0, 0xf, 0xa, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x0, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_auth_trunc={0x4c, 0x14, {{'sha384-avx2\x00'}, 0x0, 0xc0}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8801}, 0x4000004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts. [ 49.644159][ T4169] cgroup: Unknown subsys name 'net' [ 49.755350][ T4169] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.974007][ T4169] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.132889][ T4185] rdma_rxe: rxe_register_device failed with error -23 [ 52.141567][ T4185] rdma_rxe: failed to add rxe_eth0 [ 52.149125][ T4192] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.150554][ T4197] rdma_rxe: rxe_register_device failed with error -23 [ 52.163403][ T4186] rdma_rxe: rxe_register_device failed with error -23 [ 52.171668][ T4192] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.181520][ T4195] rdma_rxe: rxe_register_device failed with error -23 [ 52.188632][ T4195] rdma_rxe: failed to add rxe_eth0 [ 52.190580][ T4186] rdma_rxe: failed to add rxe_eth0 [ 52.200723][ T4197] rdma_rxe: failed to add rxe_eth0 [ 52.217676][ T4192] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.407369][ T4174] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.404628][ T4192] infiniband rxe0: set active [ 52.418739][ T4192] infiniband rxe0: added rxe_eth0 [ 52.479408][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 52.495062][ T4192] RDS/IB: rxe0: added [ 52.499763][ T4192] smc: adding ib device rxe0 with port count 1 [ 52.506215][ T4192] smc: ib device rxe0 port 1 has pnetid [ 52.544328][ T4174] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.562781][ T4192] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.594102][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 52.649687][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 52.712573][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.719689][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.728195][ T4185] device bridge_slave_0 entered promiscuous mode [ 52.740879][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 52.762145][ T4192] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.779941][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.787306][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.799330][ T4185] device bridge_slave_1 entered promiscuous mode [ 52.897762][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.908985][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.918423][ T4192] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.922918][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.933459][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.945192][ T4195] device bridge_slave_0 entered promiscuous mode [ 52.954834][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.961934][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.969779][ T4186] device bridge_slave_0 entered promiscuous mode [ 52.994871][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.002530][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.010769][ T4186] device bridge_slave_1 entered promiscuous mode [ 53.018173][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.025453][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.034275][ T4195] device bridge_slave_1 entered promiscuous mode [ 53.054725][ T4185] team0: Port device team_slave_0 added [ 53.066635][ T4192] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.074841][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.091616][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.098683][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.107216][ T4197] device bridge_slave_0 entered promiscuous mode [ 53.116105][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.123473][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.131546][ T4197] device bridge_slave_1 entered promiscuous mode [ 53.140543][ T4185] team0: Port device team_slave_1 added [ 53.147811][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.192802][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.210464][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.217435][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.243459][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.260899][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.267847][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.294367][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.315599][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.326636][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.337709][ T4186] team0: Port device team_slave_0 added [ 53.346657][ T4186] team0: Port device team_slave_1 added [ 53.353432][ T4192] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.377986][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.411701][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.418656][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.450046][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.464893][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.472175][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.502666][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.532581][ T4185] device hsr_slave_0 entered promiscuous mode [ 53.539858][ T4185] device hsr_slave_1 entered promiscuous mode [ 53.570255][ T4195] team0: Port device team_slave_0 added [ 53.610347][ T4197] team0: Port device team_slave_0 added [ 53.617166][ T4195] team0: Port device team_slave_1 added [ 53.646636][ T4186] device hsr_slave_0 entered promiscuous mode [ 53.654927][ T4186] device hsr_slave_1 entered promiscuous mode [ 53.661970][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.669766][ T4186] Cannot create hsr debugfs directory [ 53.692411][ T4197] team0: Port device team_slave_1 added [ 53.775382][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.782679][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.809009][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.826221][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.833443][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.859404][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.892336][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.899298][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.925728][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.940071][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.947095][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.973048][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.048565][ T4195] device hsr_slave_0 entered promiscuous mode [ 54.055593][ T4195] device hsr_slave_1 entered promiscuous mode [ 54.062114][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.069669][ T4195] Cannot create hsr debugfs directory [ 54.075900][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 54.082834][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 54.085435][ T4197] device hsr_slave_0 entered promiscuous mode [ 54.100691][ T4197] device hsr_slave_1 entered promiscuous mode [ 54.107336][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.115537][ T4197] Cannot create hsr debugfs directory [ 54.150296][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 54.156737][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 54.174425][ T3850] infiniband rxe0: set active [ 54.181793][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.218023][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 54.230368][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 54.271965][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.309394][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.318544][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.353372][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.396472][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.403865][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.412715][ T4192] device bridge_slave_0 entered promiscuous mode [ 54.423174][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.430692][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.438614][ T4192] device bridge_slave_1 entered promiscuous mode [ 54.476623][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.487915][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.515949][ T4192] team0: Port device team_slave_0 added [ 54.526472][ T4192] team0: Port device team_slave_1 added [ 54.573516][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.580905][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.607150][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.618271][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.643517][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.650576][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.676794][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.691621][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.704704][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.741030][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.763981][ T4192] device hsr_slave_0 entered promiscuous mode [ 54.770975][ T4192] device hsr_slave_1 entered promiscuous mode [ 54.777637][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.785665][ T4192] Cannot create hsr debugfs directory [ 54.799414][ T4197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.808680][ T4197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.819603][ T4197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.829223][ T4197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.843156][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.891465][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.902144][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.934658][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.977322][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.001946][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.012299][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.022161][ T1471] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.029315][ T1471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.038791][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.047087][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.058355][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.069177][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.098465][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.107736][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.117244][ T1471] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.124333][ T1471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.142455][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.151803][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.193543][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.203603][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.212297][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.222498][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.238533][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.247403][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.258024][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.268045][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.288795][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.297747][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.306597][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.319560][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.328084][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.343321][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.352208][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.361821][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.370030][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.380235][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.402639][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.436508][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.446870][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.456695][ T464] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.463822][ T464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.472839][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.481617][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.489956][ T464] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.497071][ T464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.505807][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.534222][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.541280][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.557498][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.565674][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.603324][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.612080][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.624363][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.633406][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.662172][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.672129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.680899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.689222][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.696298][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.705030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.714261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.722929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.732633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.741289][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.748363][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.763296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.772121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.780400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.787840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.795382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.807227][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.818143][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.827522][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.858390][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.884560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.895711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.908913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.919543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.928976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.942836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.952482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.967639][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.977906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.986853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.007878][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.027126][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.046059][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.056815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.067614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.076288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.085712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.094765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.103424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.121551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.131360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.139657][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.146732][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.150864][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 56.155342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.160020][ T4262] Bluetooth: hci2: command 0x041b tx timeout [ 56.168919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.182436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.191357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.199690][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.206783][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.216307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.224313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.230367][ T4262] Bluetooth: hci1: command 0x041b tx timeout [ 56.232415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.243062][ T4262] Bluetooth: hci3: command 0x041b tx timeout [ 56.273432][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.285283][ T4185] device veth0_vlan entered promiscuous mode [ 56.303469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.312205][ T4262] Bluetooth: hci4: command 0x041b tx timeout [ 56.319342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.329935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.340738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.348372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.356521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.374090][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.396311][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.408863][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.424131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.435721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.448002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.459343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.468898][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.475998][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.485076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.494150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.502620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.511530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.519815][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.526886][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.534747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.543511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.552999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.561712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.569927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.578131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.586395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.594664][ T4185] device veth1_vlan entered promiscuous mode [ 56.608790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.617402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.626054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.668753][ T4185] device veth0_macvtap entered promiscuous mode [ 56.705426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.715263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.726405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.735253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.745160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.753407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.761930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.770758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.779314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.788117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.802736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.811583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.819398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.831118][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.839550][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.852585][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.865105][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.877860][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.893045][ T4186] device veth0_vlan entered promiscuous mode [ 56.909107][ T4185] device veth1_macvtap entered promiscuous mode [ 56.916954][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.926515][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.934974][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.943387][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.952244][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.960810][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.969057][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.977508][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.994048][ T4186] device veth1_vlan entered promiscuous mode [ 57.011538][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.029652][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.062497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.074664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.086792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.099388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.110012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.123973][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.146722][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.166165][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.178998][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.206810][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.216283][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.239351][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.248617][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.257662][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.267510][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.285987][ T4186] device veth0_macvtap entered promiscuous mode [ 57.302410][ T4197] device veth0_vlan entered promiscuous mode [ 57.321101][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.329639][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.340547][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.348030][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.357706][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.366423][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.375047][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.383659][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.391804][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.408611][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.445898][ T4186] device veth1_macvtap entered promiscuous mode [ 57.455705][ T4197] device veth1_vlan entered promiscuous mode [ 57.464082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.473021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.481992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.490787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.516165][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.528278][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.539501][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.566894][ T4195] device veth0_vlan entered promiscuous mode [ 57.574544][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.584575][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.594538][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.604217][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.613705][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.622611][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.632656][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.641674][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.649316][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.661510][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.673559][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.685748][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.701505][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.711474][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.720563][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.729268][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.755509][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.764713][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.779410][ T4192] device veth0_vlan entered promiscuous mode [ 57.805487][ T4197] device veth0_macvtap entered promiscuous mode [ 57.815755][ T4197] device veth1_macvtap entered promiscuous mode [ 57.824851][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.834595][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.843347][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.851863][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.860644][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.868496][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.876427][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.886244][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.897756][ T4195] device veth1_vlan entered promiscuous mode [ 57.921082][ T4192] device veth1_vlan entered promiscuous mode [ 57.933605][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.951916][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.962040][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.963361][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.984072][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.994781][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.006249][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.033567][ T4195] device veth0_macvtap entered promiscuous mode [ 58.046594][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.056951][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.065184][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.075009][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.084426][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.093227][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.103629][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.115461][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.125396][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.135835][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.147530][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.162527][ T4195] device veth1_macvtap entered promiscuous mode [ 58.174733][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.183696][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.192604][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.200733][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.209233][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.233137][ T4197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.242515][ T4263] Bluetooth: hci2: command 0x040f tx timeout [ 58.245757][ T4197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.248706][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 58.257620][ T4197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.273345][ T4197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.305914][ T1471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.309600][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.326871][ T1471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.331316][ T4253] Bluetooth: hci3: command 0x040f tx timeout [ 58.336581][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.345142][ T4253] Bluetooth: hci1: command 0x040f tx timeout [ 58.350476][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.366809][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.376891][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.387647][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.397883][ T4253] Bluetooth: hci4: command 0x040f tx timeout [ 58.401961][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.417479][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.426139][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.435059][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.453402][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.466787][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.467003][ T464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.475931][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.491406][ T464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.498743][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.512382][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.523061][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.533141][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.543822][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.555583][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.569772][ T4192] device veth0_macvtap entered promiscuous mode [ 58.603696][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.613893][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.622744][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.631826][ T464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.642753][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.651593][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.661209][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.669900][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.710589][ T4192] device veth1_macvtap entered promiscuous mode [ 58.739010][ T1471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.754011][ T1471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.782153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.811293][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.826436][ T4294] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 58.826585][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.843090][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.853612][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.863730][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.874444][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.892118][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.902816][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.914496][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.935047][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.939397][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.951619][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.960069][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.969340][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.063354][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.074440][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.084867][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.095429][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.105693][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.116380][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.126528][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.137376][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.149598][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.158050][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.167437][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.211344][ T464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.213990][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.219184][ T464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.244980][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.257951][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.263988][ T4303] ip_tables: iptables: counters copy to user failed while replacing table [ 59.269349][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.289389][ T4303] Zero length message leads to an empty skb [ 59.298302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.306218][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.322090][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.331212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.351256][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.359547][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.389249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.504647][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.523251][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.537863][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.603870][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.619390][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.688977][ T4328] netlink: 112 bytes leftover after parsing attributes in process `syz.0.13'. [ 59.705964][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 59.714994][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.765327][ T4324] netlink: 'syz.0.13': attribute type 2 has an invalid length. [ 59.815131][ T4333] netlink: 'syz.4.16': attribute type 1 has an invalid length. [ 59.839999][ T4333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 59.853454][ T4333] 8021q: VLANs not supported on sit0 [ 59.935958][ T4338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 59.949024][ T4338] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 59.964152][ T4338] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 60.076124][ T4347] netlink: 'syz.4.21': attribute type 3 has an invalid length. [ 60.084991][ T4347] netlink: 3 bytes leftover after parsing attributes in process `syz.4.21'. [ 60.099462][ T4349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 60.138083][ T4346] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.157244][ T4349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 60.310966][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 60.323726][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 60.391364][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 60.403433][ T4262] Bluetooth: hci3: command 0x0419 tx timeout [ 60.471372][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 60.870638][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.113650][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 61.250396][ T7] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 61.258847][ T7] usb 3-1: config 0 has no interface number 0 [ 61.265022][ T7] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 61.275202][ T7] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 61.471009][ T7] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 61.480306][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.488298][ T7] usb 3-1: Product: syz [ 61.492577][ T7] usb 3-1: Manufacturer: syz [ 61.497170][ T7] usb 3-1: SerialNumber: syz [ 61.505512][ T7] usb 3-1: config 0 descriptor?? [ 61.541636][ T4365] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.548916][ T4365] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.766438][ T4365] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 61.773878][ T4365] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 62.494276][ T4313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 62.649465][ T4373] bridge_slave_1: renamed from syzkaller0 [ 62.801441][ T4382] netlink: 'syz.3.33': attribute type 1 has an invalid length. [ 62.817905][ T4382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 63.101058][ T7] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 63.146045][ T4377] loop4: detected capacity change from 0 to 32768 [ 63.163355][ T7] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 63.183871][ T7] asix: probe of 3-1:0.34 failed with error -71 [ 63.196090][ T7] usb 3-1: USB disconnect, device number 2 [ 63.231545][ T4377] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.31 (4377) [ 63.312839][ T4381] loop1: detected capacity change from 0 to 32768 [ 63.355370][ T4381] ======================================================= [ 63.355370][ T4381] WARNING: The mand mount option has been deprecated and [ 63.355370][ T4381] and is ignored by this kernel. Remove the mand [ 63.355370][ T4381] option from the mount to silence this warning. [ 63.355370][ T4381] ======================================================= [ 63.361118][ T4377] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 63.532843][ T4381] XFS (loop1): Mounting V5 Filesystem [ 63.540415][ T4377] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 63.564394][ T4411] bridge_slave_1: renamed from syzkaller0 [ 63.577540][ T4377] BTRFS info (device loop4): use zstd compression, level 3 [ 63.610250][ T4377] BTRFS info (device loop4): using free space tree [ 63.619564][ T4377] BTRFS info (device loop4): has skinny extents [ 63.670834][ T464] wlan1: Trigger new scan to find an IBSS to join [ 63.727111][ T4381] XFS (loop1): Ending clean mount [ 63.773930][ T4381] XFS (loop1): Quotacheck needed: Please wait. [ 63.914266][ T4381] XFS (loop1): Quotacheck: Done. [ 63.977354][ T4377] BTRFS info (device loop4): enabling ssd optimizations [ 64.068343][ T4448] netlink: 'syz.2.47': attribute type 1 has an invalid length. [ 64.150599][ T4448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 64.357639][ T4448] 8021q: VLANs not supported on vcan0 [ 64.779109][ T4197] XFS (loop1): Unmounting Filesystem [ 64.800763][ T4455] netlink: 112 bytes leftover after parsing attributes in process `syz.0.49'. [ 64.883350][ T4377] loop4: detected capacity change from 32768 to 0 [ 66.143800][ T4495] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.723353][ T144] wlan1: Trigger new scan to find an IBSS to join [ 67.671619][ T144] wlan1: Trigger new scan to find an IBSS to join [ 67.751529][ T154] wlan1: Creating new IBSS network, BSSID 2e:0a:e0:49:cc:ae [ 67.953021][ T4463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 68.118173][ T4526] bridge_slave_1: renamed from syzkaller0 [ 68.250027][ T4537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 68.259472][ T4537] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 68.269147][ T4537] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 68.278817][ T4535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 68.288988][ T4539] netlink: 'syz.2.61': attribute type 3 has an invalid length. [ 68.298412][ T4539] netlink: 3 bytes leftover after parsing attributes in process `syz.2.61'. [ 68.308489][ T4540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 68.963677][ T144] wlan1: Trigger new scan to find an IBSS to join [ 69.181168][ T4559] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.248824][ T4567] loop3: detected capacity change from 0 to 512 [ 69.459527][ T4567] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.530325][ T4557] loop2: detected capacity change from 0 to 32768 [ 69.583610][ T4557] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.64 (4557) [ 69.604350][ T4577] device syzkaller0 entered promiscuous mode [ 69.624606][ T4557] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 69.656323][ T4557] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 69.705187][ T4557] BTRFS info (device loop2): use zstd compression, level 3 [ 69.707547][ T4579] netlink: 'syz.3.77': attribute type 3 has an invalid length. [ 69.721250][ T4579] netlink: 3 bytes leftover after parsing attributes in process `syz.3.77'. [ 69.738551][ T4557] BTRFS info (device loop2): using free space tree [ 69.752819][ T4557] BTRFS info (device loop2): has skinny extents [ 69.899446][ T4585] syz.1.78 (4585) used greatest stack depth: 20144 bytes left [ 70.005959][ T4605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 70.016440][ T4605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 70.048130][ T4557] BTRFS info (device loop2): enabling ssd optimizations [ 70.107488][ T4613] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.211275][ T4557] loop2: detected capacity change from 32768 to 0 [ 70.591588][ T4630] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.473821][ T4630] netlink: 'syz.3.88': attribute type 16 has an invalid length. [ 71.481573][ T4630] netlink: 'syz.3.88': attribute type 17 has an invalid length. [ 71.521677][ T4630] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 71.643344][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.680443][ T4452] wlan1: Trigger new scan to find an IBSS to join [ 71.688506][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.040108][ C0] sched: RT throttling activated [ 72.215094][ T4631] wlan1: Creating new IBSS network, BSSID 4a:66:04:41:ed:77 [ 72.499445][ T4636] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.537369][ T4638] netlink: 'syz.1.94': attribute type 62 has an invalid length. [ 72.960765][ T4666] netlink: 112 bytes leftover after parsing attributes in process `syz.1.102'. [ 72.998738][ T4671] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 73.270180][ T4263] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.575203][ T4686] netlink: 'syz.4.106': attribute type 16 has an invalid length. [ 73.583140][ T4686] netlink: 'syz.4.106': attribute type 17 has an invalid length. [ 73.641633][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.649772][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.658208][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.716683][ T4686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.543704][ T4685] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.691698][ T4684] batman_adv: batadv0: Adding interface: syzkaller0 [ 74.720379][ T4684] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.746648][ T4263] usb 4-1: unable to get BOS descriptor or descriptor too short [ 74.835942][ T4684] batman_adv: batadv0: Interface activated: syzkaller0 [ 74.843510][ T4263] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.866008][ T4263] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.910461][ T4683] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 74.954555][ T4683] batman_adv: batadv0: Removing interface: syzkaller0 [ 74.992430][ T4696] netlink: 64 bytes leftover after parsing attributes in process `syz.2.114'. [ 75.016117][ T4697] device syzkaller1 entered promiscuous mode [ 75.041074][ T4263] usb 4-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 75.043788][ T4700] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.080300][ T4263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.115603][ T4263] usb 4-1: Product: syz [ 75.121839][ T4263] usb 4-1: Manufacturer: syz [ 75.126495][ T4263] usb 4-1: SerialNumber: syz [ 75.550128][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 75.560139][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 75.570125][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 75.580144][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 75.656679][ T4713] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.690132][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 75.700128][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 75.710127][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 75.720125][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 75.742506][ T4714] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.885856][ T4714] netlink: 'syz.0.126': attribute type 16 has an invalid length. [ 75.893638][ T4714] netlink: 'syz.0.126': attribute type 17 has an invalid length. [ 75.906372][ T4714] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 76.730150][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 76.740154][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.361670][ T4263] usb 4-1: USB disconnect, device number 2 [ 77.520564][ T4717] netlink: 112 bytes leftover after parsing attributes in process `syz.0.119'. [ 77.702855][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.708956][ T4731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 77.990437][ T4741] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.123477][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802436f400: rx timeout, send abort [ 78.201014][ T4745] loop2: detected capacity change from 0 to 256 [ 78.766742][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802436cc00: rx timeout, send abort [ 78.775097][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802436f400: abort rx timeout. Force session deactivation [ 78.876272][ T4741] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.051688][ T4741] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.218540][ T4737] loop3: detected capacity change from 0 to 40427 [ 79.244093][ T4741] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.264325][ T4737] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 79.275082][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802436cc00: abort rx timeout. Force session deactivation [ 79.301350][ T4737] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 79.343068][ T4737] F2FS-fs (loop3): invalid crc value [ 79.399260][ T4737] F2FS-fs (loop3): Found nat_bits in checkpoint [ 79.412183][ T4741] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.450419][ T4495] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.464307][ T4741] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.499606][ T4741] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.520511][ T4737] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 79.527802][ T4737] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 79.541498][ T4741] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.910330][ T4495] usb 5-1: unable to get BOS descriptor or descriptor too short [ 79.929918][ T4762] netlink: 'syz.0.136': attribute type 16 has an invalid length. [ 80.118256][ T4762] netlink: 'syz.0.136': attribute type 17 has an invalid length. [ 80.766036][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.773792][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.782008][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.804974][ T4762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.850474][ T4495] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.870145][ T4495] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.050330][ T4495] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 81.061393][ T4495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.069402][ T4495] usb 5-1: Product: syz [ 81.073907][ T4495] usb 5-1: Manufacturer: syz [ 81.082869][ T4495] usb 5-1: SerialNumber: syz [ 81.432684][ T1323] cfg80211: failed to load regulatory.db [ 81.518050][ T4495] usb 5-1: USB disconnect, device number 2 [ 81.764362][ T4785] loop2: detected capacity change from 0 to 32768 [ 81.813667][ T4785] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.142 (4785) [ 81.893827][ T4785] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 81.923258][ T4785] BTRFS info (device loop2): setting nodatasum [ 81.929452][ T4785] BTRFS info (device loop2): force zlib compression, level 3 [ 81.969471][ T4785] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 81.994802][ T4785] BTRFS info (device loop2): use lzo compression, level 0 [ 82.021437][ T4785] BTRFS info (device loop2): turning on flush-on-commit [ 82.042782][ T4785] BTRFS info (device loop2): enabling auto defrag [ 82.099283][ T4785] BTRFS info (device loop2): max_inline at 4096 [ 82.115871][ T4785] BTRFS info (device loop2): using free space tree [ 82.145221][ T4785] BTRFS info (device loop2): has skinny extents [ 82.307017][ T4785] BTRFS info (device loop2): enabling ssd optimizations [ 82.357389][ T4785] fs-verity: sha512 using implementation "sha512-avx2" [ 82.375980][ T4785] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4) [ 83.907615][ T4827] loop3: detected capacity change from 0 to 256 [ 83.979418][ T4774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.575499][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.356595][ T4839] IPVS: set_ctl: invalid protocol: 115 10.1.1.0:20001 [ 85.382871][ T4831] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.602901][ T4831] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.664914][ T4849] syz.3.154 (4849): /proc/4844/oom_adj is deprecated, please use /proc/4844/oom_score_adj instead. [ 85.678578][ T4817] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.090692][ T4817] usb 3-1: unable to get BOS descriptor or descriptor too short [ 86.180998][ T4817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.200062][ T4817] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.393981][ T4831] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.450442][ T4817] usb 3-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 86.484053][ T4817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.500209][ T4817] usb 3-1: Product: syz [ 86.504575][ T4817] usb 3-1: Manufacturer: syz [ 86.509173][ T4817] usb 3-1: SerialNumber: syz [ 86.563918][ T4831] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.699687][ T4831] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.739394][ T4831] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.783099][ T4831] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.806347][ T4831] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.863500][ T4853] loop1: detected capacity change from 0 to 40427 [ 86.909178][ T4853] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 86.909849][ T4817] usb 3-1: USB disconnect, device number 3 [ 86.926794][ T4853] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 86.966903][ T4853] F2FS-fs (loop1): invalid crc value [ 87.020706][ T4853] F2FS-fs (loop1): Found nat_bits in checkpoint [ 87.163571][ T4853] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 87.176100][ T4853] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 87.557970][ T4253] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.127616][ T4875] loop3: detected capacity change from 0 to 32768 [ 89.168783][ T4875] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.167 (4875) [ 89.272824][ T4253] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 89.408555][ T4253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.547103][ T4253] usb 5-1: Product: syz [ 89.620231][ T4253] usb 5-1: Manufacturer: syz [ 89.697997][ T4253] usb 5-1: SerialNumber: syz [ 89.813160][ T4878] loop0: detected capacity change from 0 to 32768 [ 89.862859][ T4875] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 89.884146][ T4875] BTRFS info (device loop3): using free space tree [ 89.897461][ T4253] usb 5-1: config 0 descriptor?? [ 89.914983][ T4878] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.165 (4878) [ 89.938483][ T4875] BTRFS info (device loop3): has skinny extents [ 89.954151][ T4878] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 89.966014][ T4253] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 89.983586][ T4253] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 89.993277][ T4878] BTRFS info (device loop0): setting nodatasum [ 89.999460][ T4878] BTRFS info (device loop0): force zlib compression, level 3 [ 90.063726][ T4253] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 90.169094][ T4253] usb 5-1: media controller created [ 90.270341][ T4878] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 90.576716][ T4878] BTRFS info (device loop0): use lzo compression, level 0 [ 90.657275][ T4878] BTRFS info (device loop0): turning on flush-on-commit [ 90.664330][ T4878] BTRFS info (device loop0): enabling auto defrag [ 90.671765][ T4878] BTRFS info (device loop0): max_inline at 4096 [ 90.678043][ T4878] BTRFS info (device loop0): using free space tree [ 90.700241][ T4878] BTRFS info (device loop0): has skinny extents [ 90.701828][ T4875] BTRFS error (device loop3): open_ctree failed: -12 [ 90.715764][ T4253] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.921448][ T4878] BTRFS error (device loop0): open_ctree failed: -12 [ 90.964910][ T4253] DVB: Unable to find symbol mt352_attach() [ 90.994174][ T4253] DVB: Unable to find symbol nxt6000_attach() [ 91.000584][ T4253] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 91.062351][ T4926] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.085280][ T4253] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 91.148873][ T4253] dvb-usb: schedule remote query interval to 1000 msecs. [ 91.171816][ T4253] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 91.194318][ T4253] dvb-usb: bulk message failed: -22 (7/0) [ 91.207456][ T4253] dvb-usb: bulk message failed: -22 (7/0) [ 91.225232][ T4253] usb 5-1: USB disconnect, device number 3 [ 91.347462][ T4948] netlink: 'syz.3.178': attribute type 12 has an invalid length. [ 91.428172][ T4926] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.469163][ T4253] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 91.684041][ T4955] loop3: detected capacity change from 0 to 4096 [ 92.278687][ T4955] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 92.353150][ T4926] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.374223][ T4955] ntfs3: loop3: Failed to load $Extend. [ 92.660298][ T4253] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.160722][ T4253] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.280877][ T4186] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 93.321661][ T4926] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.336686][ T4926] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.345346][ T4253] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.360502][ T4253] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.379774][ T4926] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.403429][ T4926] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.562643][ T4253] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 93.582872][ T4253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.625917][ T4253] usb 5-1: Product: syz [ 93.635823][ T4253] usb 5-1: Manufacturer: syz [ 93.653210][ T4253] usb 5-1: SerialNumber: syz [ 94.721778][ T4253] usb 5-1: USB disconnect, device number 4 [ 94.798038][ T4981] loop2: detected capacity change from 0 to 32768 [ 94.832108][ T4981] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.189 (4981) [ 94.997231][ T4981] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 95.023462][ T4981] BTRFS info (device loop2): using free space tree [ 95.124644][ T4981] BTRFS info (device loop2): has skinny extents [ 95.826137][ T4949] udevd[4949]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.926480][ T4981] BTRFS info (device loop2): enabling ssd optimizations [ 96.859499][ T5080] ip_tables: iptables: counters copy to user failed while replacing table [ 97.100963][ T4820] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.350555][ T4820] usb 1-1: Using ep0 maxpacket: 16 [ 97.470600][ T4820] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 97.507994][ T4820] usb 1-1: config 0 has no interface number 0 [ 97.781207][ T4820] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 97.822825][ T4820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.910801][ T4817] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 97.931606][ T4820] usb 1-1: Product: syz [ 97.977919][ T4820] usb 1-1: Manufacturer: syz [ 98.011588][ T4820] usb 1-1: SerialNumber: syz [ 98.039597][ T4820] usb 1-1: config 0 descriptor?? [ 98.105486][ T4820] hub 1-1:0.132: bad descriptor, ignoring hub [ 98.116144][ T4820] hub: probe of 1-1:0.132 failed with error -5 [ 98.154309][ T4820] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input6 [ 98.247572][ T5119] ip_tables: iptables: counters copy to user failed while replacing table [ 98.400284][ T4817] usb 3-1: unable to get BOS descriptor or descriptor too short [ 98.520243][ T4817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.533364][ T4817] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.710963][ T4820] usb 1-1: USB disconnect, device number 2 [ 98.725658][ T4817] usb 3-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 98.734980][ T4817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.746206][ T4817] usb 3-1: Product: syz [ 98.750473][ T4817] usb 3-1: Manufacturer: syz [ 98.755077][ T4817] usb 3-1: SerialNumber: syz [ 99.128149][ T4817] usb 3-1: USB disconnect, device number 4 [ 99.340854][ T4949] udevd[4949]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.496540][ T5146] ip_tables: iptables: counters copy to user failed while replacing table [ 101.153179][ T5114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.319506][ T5165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.240'. [ 101.510808][ T5084] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.950881][ T5084] usb 2-1: unable to get BOS descriptor or descriptor too short [ 102.050952][ T5084] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.108552][ T5084] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.203636][ T5181] ip_tables: iptables: counters copy to user failed while replacing table [ 102.277376][ T5188] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 38871 - 0 [ 102.286559][ T5188] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 38871 - 0 [ 102.294899][ T5188] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 38871 - 0 [ 102.307594][ T5188] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 38871 - 0 [ 102.317937][ T5188] device geneve2 entered promiscuous mode [ 102.370432][ T5084] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 102.387959][ T5084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.397126][ T5084] usb 2-1: Product: syz [ 102.408965][ T5084] usb 2-1: Manufacturer: syz [ 102.414479][ T5084] usb 2-1: SerialNumber: syz [ 102.837219][ T5084] usb 2-1: USB disconnect, device number 2 [ 103.244176][ T5203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'. [ 105.192235][ T5178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.242986][ T4949] udevd[4949]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.602562][ T5218] ip_tables: iptables: counters copy to user failed while replacing table [ 106.502553][ T5237] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 13 [ 106.520220][ T5086] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 106.604833][ T5244] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.649085][ T5248] ip_tables: iptables: counters copy to user failed while replacing table [ 106.751487][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 107.030303][ T5086] usb 5-1: unable to get BOS descriptor or descriptor too short [ 107.650402][ T5086] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.660718][ T5086] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.672483][ T5269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.278'. [ 107.860439][ T5086] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 107.878601][ T5086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.888690][ T5086] usb 5-1: Product: syz [ 107.893522][ T5279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.284'. [ 107.896809][ T5086] usb 5-1: Manufacturer: syz [ 107.910344][ T5281] ip_tables: iptables: counters copy to user failed while replacing table [ 107.914891][ T5086] usb 5-1: SerialNumber: syz [ 107.951489][ T5279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 108.090555][ T4255] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.420268][ T4255] usb 3-1: Using ep0 maxpacket: 32 [ 108.540842][ T4255] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.635089][ T5086] usb 5-1: USB disconnect, device number 5 [ 108.689123][ T4255] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.970744][ T4255] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.977391][ T4255] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 108.999520][ T4255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.177460][ T4255] usb 3-1: config 0 descriptor?? [ 109.203969][ T4949] udevd[4949]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.695818][ T5301] netlink: 112 bytes leftover after parsing attributes in process `syz.3.291'. [ 109.751682][ T5276] udc-core: couldn't find an available UDC or it's busy [ 109.758682][ T5276] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 109.816870][ T5307] jffs2: notice: (5307) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 110.375283][ T5319] ip_tables: iptables: counters copy to user failed while replacing table [ 110.775133][ T4255] usbhid 3-1:0.0: can't add hid device: -71 [ 110.786839][ T4255] usbhid: probe of 3-1:0.0 failed with error -71 [ 110.799505][ T4255] usb 3-1: USB disconnect, device number 5 [ 111.070325][ T4820] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.360208][ T4820] usb 2-1: Using ep0 maxpacket: 32 [ 111.470425][ T4817] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.480885][ T4820] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 111.700362][ T4820] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 111.709525][ T4820] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 111.718733][ T4820] usb 2-1: Product: syz [ 111.723265][ T4820] usb 2-1: Manufacturer: syz [ 111.727845][ T4820] usb 2-1: SerialNumber: syz [ 111.738498][ T4820] usb 2-1: config 0 descriptor?? [ 111.743914][ T4817] usb 4-1: Using ep0 maxpacket: 32 [ 111.770552][ T5328] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.790901][ T4820] hub 2-1:0.0: bad descriptor, ignoring hub [ 111.796831][ T4820] hub: probe of 2-1:0.0 failed with error -5 [ 111.860943][ T4817] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.900166][ T4639] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.923533][ T4817] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 111.937103][ T4817] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 111.954672][ T4817] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 111.974663][ T4817] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 111.984538][ T1108] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 111.997998][ T4817] usb 4-1: config 1 interface 1 has no altsetting 0 [ 112.160467][ T4817] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 112.173225][ T4639] usb 3-1: Using ep0 maxpacket: 32 [ 112.186396][ T4817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.196299][ T4817] usb 4-1: Product: syz [ 112.208187][ T4817] usb 4-1: Manufacturer: syz [ 112.214484][ T4817] usb 4-1: SerialNumber: syz [ 112.290523][ T4639] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 112.301842][ T4639] usb 3-1: config 0 interface 0 has no altsetting 0 [ 112.308542][ T4639] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 112.321778][ T4639] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.342080][ T4639] usb 3-1: config 0 descriptor?? [ 112.349466][ T4820] usb 2-1: USB disconnect, device number 3 [ 112.390923][ T1108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 112.479955][ T1108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.494219][ T1108] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.594898][ T4817] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 112.660446][ T1108] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 112.675069][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.684097][ T4817] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 112.697982][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.715586][ T1108] usb 5-1: Product: syz [ 112.719781][ T1108] usb 5-1: Manufacturer: syz [ 112.725336][ T4817] usb 4-1: USB disconnect, device number 3 [ 112.734295][ T1108] usb 5-1: SerialNumber: syz [ 112.825906][ T4639] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 113.063264][ T5350] ip_tables: iptables: counters copy to user failed while replacing table [ 113.066393][ T5348] jffs2: notice: (5348) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 113.145199][ T1108] usb 5-1: USB disconnect, device number 6 [ 113.182656][ T5353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 113.234766][ T4639] corsair-cpro: probe of 0003:1B1C:0C10.0001 failed with error -71 [ 113.260337][ T4639] usb 3-1: USB disconnect, device number 6 [ 113.297026][ T5361] netlink: 112 bytes leftover after parsing attributes in process `syz.1.311'. [ 113.403137][ T5359] fido_id[5359]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 116.012999][ T5086] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.290184][ T5086] usb 1-1: Using ep0 maxpacket: 8 [ 116.440252][ T5086] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 116.448356][ T5086] usb 1-1: config 0 has no interface number 0 [ 116.581392][ T5358] ODEBUG: Out of memory. ODEBUG disabled [ 116.632529][ T5086] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 116.644617][ T5086] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.658598][ T5086] usb 1-1: Product: syz [ 116.663449][ T5086] usb 1-1: Manufacturer: syz [ 116.668047][ T5086] usb 1-1: SerialNumber: syz [ 116.675635][ T5086] usb 1-1: config 0 descriptor?? [ 117.288275][ T5383] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.296813][ T5383] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.709171][ T5383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.747300][ T5383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.121994][ T5383] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.137002][ T5383] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.146241][ T5383] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.155547][ T5383] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.354407][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.372031][ T5387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.391525][ T5387] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.436399][ T5387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.485443][ T5387] syz.0.316 (5387) used greatest stack depth: 19504 bytes left [ 118.506276][ T5086] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 118.513187][ T5086] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 118.529590][ T5086] usb 1-1: Failed to create links for entity 5 [ 118.536091][ T5086] usb 1-1: Failed to register entities (-22). [ 118.569769][ T5086] usb 1-1: USB disconnect, device number 3 [ 118.725337][ T5408] ip_tables: iptables: counters copy to user failed while replacing table [ 118.920312][ T4488] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.200890][ T4488] usb 3-1: Using ep0 maxpacket: 32 [ 119.330338][ T4488] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 119.520266][ T4488] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 119.529324][ T4488] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 119.542874][ T4488] usb 3-1: Product: syz [ 119.547074][ T4488] usb 3-1: Manufacturer: syz [ 119.551699][ T4488] usb 3-1: SerialNumber: syz [ 119.559452][ T4488] usb 3-1: config 0 descriptor?? [ 119.590484][ T5400] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 119.604723][ T5413] netlink: 112 bytes leftover after parsing attributes in process `syz.1.322'. [ 119.607936][ T5416] jffs2: notice: (5416) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.614447][ T4488] hub 3-1:0.0: bad descriptor, ignoring hub [ 119.645510][ T4488] hub: probe of 3-1:0.0 failed with error -5 [ 119.706918][ T5420] Cannot find set identified by id 0 to match [ 120.396447][ T4488] usb 3-1: USB disconnect, device number 7 [ 120.502950][ T4191] Bluetooth: hci3: Unknown advertising packet type: 0xa0ba [ 120.503171][ T4191] ================================================================== [ 120.518719][ T4191] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12ea/0x3ca0 [ 120.526556][ T4191] Read of size 1 at addr ffff888024043c03 by task kworker/u5:3/4191 [ 120.536051][ T4191] [ 120.536092][ T4191] CPU: 1 PID: 4191 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 120.546043][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.556094][ T4191] Workqueue: hci3 hci_rx_work [ 120.560796][ T4191] Call Trace: [ 120.564062][ T4191] [ 120.566985][ T4191] dump_stack_lvl+0x188/0x250 [ 120.571652][ T4191] ? show_regs_print_info+0x20/0x20 [ 120.576838][ T4191] ? load_image+0x410/0x410 [ 120.581322][ T4191] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 120.586775][ T4191] print_address_description+0x60/0x2d0 [ 120.592312][ T4191] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 120.597407][ T4191] kasan_report+0xdf/0x130 [ 120.601815][ T4191] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 120.606911][ T4191] hci_le_meta_evt+0x12ea/0x3ca0 [ 120.611835][ T4191] ? hci_event_packet+0x363/0x1310 [ 120.616935][ T4191] ? __lock_acquire+0x7d40/0x7d40 [ 120.621960][ T4191] ? hci_remote_host_features_evt+0x240/0x240 [ 120.628015][ T4191] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 120.633632][ T4191] ? mark_lock+0x94/0x320 [ 120.637950][ T4191] ? mutex_unlock+0x10/0x10 [ 120.642456][ T4191] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 120.648436][ T4191] ? lock_chain_count+0x20/0x20 [ 120.653271][ T4191] ? __rwlock_init+0x140/0x140 [ 120.658035][ T4191] hci_event_packet+0xe0b/0x1310 [ 120.662961][ T4191] ? _raw_spin_unlock+0x40/0x40 [ 120.667807][ T4191] ? rcu_lock_release+0x20/0x20 [ 120.672646][ T4191] ? hci_send_to_monitor+0x9c/0x4a0 [ 120.677833][ T4191] hci_rx_work+0x255/0xa10 [ 120.682246][ T4191] process_one_work+0x867/0xff0 [ 120.687099][ T4191] ? worker_detach_from_pool+0x240/0x240 [ 120.692713][ T4191] ? lockdep_hardirqs_off+0x70/0x100 [ 120.698002][ T4191] ? _raw_spin_lock_irq+0xb7/0xf0 [ 120.703025][ T4191] ? _raw_spin_lock_irqsave+0x100/0x100 [ 120.708575][ T4191] ? wq_worker_running+0x97/0x170 [ 120.713609][ T4191] worker_thread+0xad7/0x12a0 [ 120.718303][ T4191] kthread+0x42e/0x520 [ 120.722358][ T4191] ? rcu_lock_release+0x20/0x20 [ 120.727203][ T4191] ? kthread_blkcg+0xd0/0xd0 [ 120.731795][ T4191] ret_from_fork+0x1f/0x30 [ 120.736224][ T4191] [ 120.739257][ T4191] [ 120.741578][ T4191] Allocated by task 5429: [ 120.745913][ T4191] __kasan_kmalloc+0xaf/0xe0 [ 120.750496][ T4191] __alloc_skb+0x22c/0x750 [ 120.754903][ T4191] vhci_write+0xbd/0x440 [ 120.759133][ T4191] vfs_write+0x748/0xd70 [ 120.763377][ T4191] ksys_write+0x153/0x260 [ 120.767690][ T4191] do_syscall_64+0x4c/0xa0 [ 120.772093][ T4191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.777969][ T4191] [ 120.780275][ T4191] The buggy address belongs to the object at ffff888024043800 [ 120.780275][ T4191] which belongs to the cache kmalloc-1k of size 1024 [ 120.794401][ T4191] The buggy address is located 3 bytes to the right of [ 120.794401][ T4191] 1024-byte region [ffff888024043800, ffff888024043c00) [ 120.808102][ T4191] The buggy address belongs to the page: [ 120.813724][ T4191] page:ffffea0000901000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24040 [ 120.823859][ T4191] head:ffffea0000901000 order:3 compound_mapcount:0 compound_pincount:0 [ 120.832165][ T4191] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 120.840142][ T4191] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017841dc0 [ 120.848712][ T4191] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 120.857279][ T4191] page dumped because: kasan: bad access detected [ 120.863682][ T4191] page_owner tracks the page as allocated [ 120.869372][ T4191] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4185, ts 55389489436, free_ts 54640810610 [ 120.888450][ T4191] get_page_from_freelist+0x24f6/0x2670 [ 120.893988][ T4191] __alloc_pages+0x1ee/0x480 [ 120.898559][ T4191] new_slab+0xc0/0x4b0 [ 120.902608][ T4191] ___slab_alloc+0x807/0xdd0 [ 120.907182][ T4191] __kmalloc_node_track_caller+0x13d/0x3a0 [ 120.912966][ T4191] __alloc_skb+0x22c/0x750 [ 120.917371][ T4191] rtmsg_fib+0xd7/0x440 [ 120.921510][ T4191] fib_table_insert+0xd24/0x1b80 [ 120.926429][ T4191] fib_magic+0x2ca/0x3b0 [ 120.930655][ T4191] fib_add_ifaddr+0x372/0x5c0 [ 120.935310][ T4191] fib_netdev_event+0x35c/0x480 [ 120.940139][ T4191] raw_notifier_call_chain+0xcb/0x160 [ 120.945495][ T4191] __dev_notify_flags+0x194/0x300 [ 120.950501][ T4191] dev_change_flags+0xda/0x1a0 [ 120.955246][ T4191] do_setlink+0xca4/0x29d0 [ 120.959657][ T4191] rtnl_newlink+0x15bb/0x1920 [ 120.964314][ T4191] page last free stack trace: [ 120.968964][ T4191] free_unref_page_prepare+0x637/0x6c0 [ 120.974407][ T4191] free_unref_page+0x8f/0x2a0 [ 120.979066][ T4191] qlist_free_all+0x35/0x90 [ 120.983561][ T4191] kasan_quarantine_reduce+0x150/0x160 [ 120.989033][ T4191] __kasan_slab_alloc+0x2f/0xc0 [ 120.993880][ T4191] slab_post_alloc_hook+0x4c/0x380 [ 120.998979][ T4191] __kmalloc_node_track_caller+0x1a9/0x3a0 [ 121.004778][ T4191] __alloc_skb+0x22c/0x750 [ 121.009184][ T4191] alloc_uevent_skb+0x7d/0x230 [ 121.013941][ T4191] kobject_uevent_net_broadcast+0x17e/0x530 [ 121.019823][ T4191] kobject_uevent_env+0x550/0x890 [ 121.024835][ T4191] device_add+0xac2/0x1050 [ 121.029233][ T4191] netdev_register_kobject+0x184/0x320 [ 121.034677][ T4191] register_netdevice+0x10e8/0x1720 [ 121.039860][ T4191] nsim_create+0x32d/0x3e0 [ 121.044261][ T4191] __nsim_dev_port_add+0x66e/0xa80 [ 121.049361][ T4191] [ 121.051678][ T4191] Memory state around the buggy address: [ 121.057286][ T4191] ffff888024043b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 121.065329][ T4191] ffff888024043b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 121.073371][ T4191] >ffff888024043c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 121.081414][ T4191] ^ [ 121.085459][ T4191] ffff888024043c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 121.093497][ T4191] ffff888024043d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 121.101536][ T4191] ================================================================== [ 121.109572][ T4191] Disabling lock debugging due to kernel taint [ 121.119751][ T4191] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 121.126954][ T4191] CPU: 1 PID: 4191 Comm: kworker/u5:3 Tainted: G B syzkaller #0 [ 121.135885][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.145948][ T4191] Workqueue: hci3 hci_rx_work [ 121.150636][ T4191] Call Trace: [ 121.153913][ T4191] [ 121.156838][ T4191] dump_stack_lvl+0x188/0x250 [ 121.161517][ T4191] ? show_regs_print_info+0x20/0x20 [ 121.166717][ T4191] ? load_image+0x410/0x410 [ 121.171232][ T4191] panic+0x2f8/0x850 [ 121.175122][ T4191] ? bpf_jit_dump+0xd0/0xd0 [ 121.179623][ T4191] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 121.185597][ T4191] ? _raw_spin_unlock+0x40/0x40 [ 121.190443][ T4191] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 121.195548][ T4191] check_panic_on_warn+0x80/0xa0 [ 121.200486][ T4191] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 121.205593][ T4191] end_report+0x6d/0xf0 [ 121.209743][ T4191] kasan_report+0x102/0x130 [ 121.214244][ T4191] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 121.219349][ T4191] hci_le_meta_evt+0x12ea/0x3ca0 [ 121.224280][ T4191] ? hci_event_packet+0x363/0x1310 [ 121.229392][ T4191] ? __lock_acquire+0x7d40/0x7d40 [ 121.234417][ T4191] ? hci_remote_host_features_evt+0x240/0x240 [ 121.240480][ T4191] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 121.246109][ T4191] ? mark_lock+0x94/0x320 [ 121.250429][ T4191] ? mutex_unlock+0x10/0x10 [ 121.254925][ T4191] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 121.260900][ T4191] ? lock_chain_count+0x20/0x20 [ 121.265748][ T4191] ? __rwlock_init+0x140/0x140 [ 121.270504][ T4191] hci_event_packet+0xe0b/0x1310 [ 121.275437][ T4191] ? _raw_spin_unlock+0x40/0x40 [ 121.280279][ T4191] ? rcu_lock_release+0x20/0x20 [ 121.285128][ T4191] ? hci_send_to_monitor+0x9c/0x4a0 [ 121.290330][ T4191] hci_rx_work+0x255/0xa10 [ 121.294757][ T4191] process_one_work+0x867/0xff0 [ 121.299612][ T4191] ? worker_detach_from_pool+0x240/0x240 [ 121.305235][ T4191] ? lockdep_hardirqs_off+0x70/0x100 [ 121.310515][ T4191] ? _raw_spin_lock_irq+0xb7/0xf0 [ 121.315536][ T4191] ? _raw_spin_lock_irqsave+0x100/0x100 [ 121.321076][ T4191] ? wq_worker_running+0x97/0x170 [ 121.326095][ T4191] worker_thread+0xad7/0x12a0 [ 121.330775][ T4191] kthread+0x42e/0x520 [ 121.334837][ T4191] ? rcu_lock_release+0x20/0x20 [ 121.339685][ T4191] ? kthread_blkcg+0xd0/0xd0 [ 121.344265][ T4191] ret_from_fork+0x1f/0x30 [ 121.348682][ T4191] [ 121.351913][ T4191] Kernel Offset: disabled [ 121.356253][ T4191] Rebooting in 86400 seconds..