last executing test programs: 11.9539576s ago: executing program 0 (id=1): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r3}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$char_usb(r2, 0x0, 0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r5, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/117, 0x75}, {&(0x7f0000000180)=""/180, 0xb4}, {&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000380)=""/193, 0xc1}, {&(0x7f0000000480)=""/183, 0xb7}, {&(0x7f0000000540)=""/186, 0xba}, {&(0x7f0000000600)=""/131, 0x83}], 0x7, 0x7, 0x9) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 9.832932581s ago: executing program 0 (id=12): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x40080, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$tipc(0x1e, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x3, 0x10100, 0xeffffffe}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) add_key$user(&(0x7f0000002100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r6}}) io_uring_enter(r3, 0x2def, 0x8d9a, 0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000001c0), 0x0, 0x7, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r8, 0x1, 0x70bd25, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x4000001, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0xd, 0x0, 0x24000004}, 0x0) 5.468309285s ago: executing program 0 (id=26): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810) r3 = socket$inet6(0x10, 0x80002, 0x6) sendto$inet6(r3, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000600)=@framed={{}, [@ldst={0x7, 0x3, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x2}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) lseek(0xffffffffffffffff, 0x5, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) 5.468142385s ago: executing program 3 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 5.323919727s ago: executing program 3 (id=29): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x8, 0x2, 0x5}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)) 5.20056101s ago: executing program 3 (id=30): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) open_tree(r2, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x24000840) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc3036bb66682c", 0x7, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x4000000}) 4.979533374s ago: executing program 1 (id=33): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002b80)={{0x14}, [@NFT_MSG_NEWSETELEM={0x14, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x600, 0x500, 0x47425247, 0x8, 0xd, [{}, {}, {0x8000000, 0x3}, {}, {}, {0x0, 0x20008}, {}, {0x0, 0x2}], 0x0, 0x0, 0x0, 0x0, 0x3}}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, 0x0, 0x20004801) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 4.518775353s ago: executing program 0 (id=38): r0 = gettid() r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000841}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0xffffffffffffffbf) fcntl$setsig(r5, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r6}], 0x1, 0x0, 0x0, 0x0) dup2(r5, r6) fcntl$setown(r6, 0x8, r0) tkill(r0, 0x13) 4.307220137s ago: executing program 1 (id=40): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) open_tree(0xffffffffffffffff, &(0x7f0000006180)='./mnt\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x24000840) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc3036bb66682c", 0x7, 0xfffffffffffffffe) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x4000000}) 4.094591251s ago: executing program 4 (id=41): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0xa, 0x262) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x0, 0x0}) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe}) r4 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 4.044886092s ago: executing program 0 (id=42): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2940, 0x2, 0x9}, 0x18) sendmmsg$unix(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) 3.771318267s ago: executing program 0 (id=43): unshare(0x60040200) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000406c256d000000000000010902"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x206) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 3.036383111s ago: executing program 3 (id=44): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) openat$random(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r0, 0x4068aea3, &(0x7f0000000000)) r1 = socket(0x840000000002, 0x3, 0xfa) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x3) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x96fe82a0aa817180}) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0x800, 0x4) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) 2.07990369s ago: executing program 4 (id=45): r0 = getpid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffc}) 1.903269493s ago: executing program 3 (id=46): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x60}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) 1.881388964s ago: executing program 3 (id=47): r0 = io_uring_setup(0x5be0, &(0x7f0000000000)={0x0, 0x400067c1, 0x2, 0x4000000, 0x20c}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r3, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.812458495s ago: executing program 4 (id=48): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 1.339400654s ago: executing program 4 (id=49): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sched_setattr(0x0, &(0x7f00000010c0)={0x38, 0x0, 0x2, 0x7f, 0xb, 0x2, 0x0, 0x3, 0x3, 0x12cb}, 0x0) 1.245644216s ago: executing program 1 (id=51): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 1.138984938s ago: executing program 4 (id=52): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002240)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe60, 0x2, [@TCA_FW_ACT={0xe5c, 0x4, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x3, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7fffffff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x6, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x5}, {0x0, 0x2, 0x7, 0xff, 0x64, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x7ffd, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0x3, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x6, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0x0, 0x7, 0x5}, {0x100009, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0xffffffff, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0xfffffc01, 0x2, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x80, 0x10fff}, {0x8000, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x204, 0x342, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x0, 0x8, 0x800, 0x3}, {0x4, 0x6, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x81, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x3, 0x8, 0xe, 0x7}, {0x10000, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0xc779, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x3, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x4003ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0x7, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x3}, {0x0, 0x573, 0x4, 0x8, 0x5, 0x4}, {0x3, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x40006ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x6, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x37, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x2, 0x3, 0x8, 0xcf2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x6, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0x0, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0x4}, {0x400, 0x5, 0x9, 0x2e, 0xd, 0x3}, {0x7, 0x2b, 0x5, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x2, 0x80, 0x9, 0xd454}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x2, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x0, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0xfffffffffffffffd}, {0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1.091536349s ago: executing program 2 (id=53): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f0000000200)="bd4c4cc2f24a55e8752448b4c37c520bb5a15833275b9601d6c5c4ab51b93badd121b6dc6ce7b0305b53da8056f62e21b6e61bb466e79eed64b229fb76ae72e773c2ba100f3350ef6f17073a4f3464a6a68d2b21fe0548eaea0a20b59f23080cae50972a2ba17140b98891c318be0ffce9b828f7a216b781d42f96df04466080b721bdf680ac562dc9783aa1e4ebd8d3e6e5a9f3f2535b9042dfc897d4ddce794cff6cb210bddb7670b1da53433f7b", 0xfffffffffffffe5f) r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000140)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1003, 0x0, 0x80000000, 0xffffffed, 0xd, 0x0, 0x40000, 0x2, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000040)) socket(0x1e, 0x4, 0x86) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000440)) 947.198121ms ago: executing program 2 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000183c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000900)='erofs_lookup\x00', 0xffffffffffffffff, 0x0, 0x400000000000000}, 0x7b) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f00000006c0)=""/8, &(0x7f0000000700)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0xffffffffffffffff, 0xffffffffffffffbc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4, 0x0, 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {0x7}}, './file1\x00'}) r6 = memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) fsopen(0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x1000003}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1eb640) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x0, 0x1}, 0x50) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7fffffff, 0x2, 0x1a00, 0x0, 0xffffffffffffffff, 0x2fc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x3dc, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) pipe2$watch_queue(0x0, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x0, &(0x7f0000000380), &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, &(0x7f00000002c0), 0x40f00, 0x10, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0xbd4a, 0x2, 0x7eab, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r3, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x2, 0xa, 0x5, 0x10}}}}]}, 0x48}}, 0x8850) r6 = socket$inet_udp(0x2, 0x2, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x281, 0x3) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) r7 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r7, &(0x7f0000000040)=@profile={'stack ', ':\x00'}, 0x8) 307.442004ms ago: executing program 2 (id=57): r0 = openat$vim2m(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000380)={0x5, 0x1, 0x1, {0x2, @vbi={0xfff, 0x0, 0x4, 0x4932315a, [0x10, 0x400000], [0x81, 0xce1], 0x1}}, 0x4}) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) 223.202385ms ago: executing program 1 (id=58): socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 156.903646ms ago: executing program 2 (id=59): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @private0}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0xa0}}, 0x0) 43.285849ms ago: executing program 2 (id=60): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a300000060005000100070000000800094000000001140008801000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 43.085149ms ago: executing program 1 (id=61): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x4003}, {0x0, 0x3ff}, 0x0, 0x3}) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) 0s ago: executing program 1 (id=62): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote, 0x0, 0x0, 0xfffc}}}, 0x50}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000300)={0x0, 0x1, 0x1, {0xa, @pix_mp={0x2, 0x40000, 0x32314d56, 0x8, 0x3, [{0x0, 0x8}, {0x3}, {0x2, 0xfffffffd}, {0x8000000, 0x2}, {0x5}, {0x0, 0x100}, {0x3, 0x7f3}, {0x4}], 0x0, 0xf, 0x1}}}) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.227' (ED25519) to the list of known hosts. [ 58.124874][ T4172] cgroup: Unknown subsys name 'net' [ 58.259107][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.702804][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.207171][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 61.297122][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 61.306013][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 61.315245][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 61.350612][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.357994][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.366480][ T4184] device bridge_slave_0 entered promiscuous mode [ 61.378099][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.385632][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.394024][ T4184] device bridge_slave_1 entered promiscuous mode [ 61.472332][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.491139][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.553519][ T4184] team0: Port device team_slave_0 added [ 61.583794][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 61.595362][ T4184] team0: Port device team_slave_1 added [ 61.615036][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.622190][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.630262][ T4183] device bridge_slave_0 entered promiscuous mode [ 61.637613][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.644973][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.652671][ T4182] device bridge_slave_0 entered promiscuous mode [ 61.669541][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.676832][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.684998][ T4185] device bridge_slave_0 entered promiscuous mode [ 61.692605][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.700265][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.708185][ T4183] device bridge_slave_1 entered promiscuous mode [ 61.715474][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.722539][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.731121][ T4182] device bridge_slave_1 entered promiscuous mode [ 61.746682][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.753909][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.761796][ T4185] device bridge_slave_1 entered promiscuous mode [ 61.797832][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.805088][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.831128][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.867561][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.875295][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.901754][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.915877][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.930690][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.944480][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.956925][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.968381][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.987881][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.044706][ T4185] team0: Port device team_slave_0 added [ 62.058895][ T4182] team0: Port device team_slave_0 added [ 62.067132][ T4182] team0: Port device team_slave_1 added [ 62.085876][ T4185] team0: Port device team_slave_1 added [ 62.095432][ T4184] device hsr_slave_0 entered promiscuous mode [ 62.102298][ T4184] device hsr_slave_1 entered promiscuous mode [ 62.111463][ T4183] team0: Port device team_slave_0 added [ 62.125382][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.132615][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.140672][ T4191] device bridge_slave_0 entered promiscuous mode [ 62.164734][ T4183] team0: Port device team_slave_1 added [ 62.170867][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.177861][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.203782][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.216291][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.223420][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.249790][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.266768][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.274536][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.282363][ T4191] device bridge_slave_1 entered promiscuous mode [ 62.316441][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.323637][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.350953][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.392953][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.400302][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.426914][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.443059][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.460508][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.467643][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.493780][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.510637][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.517832][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.544354][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.569439][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.613707][ T4185] device hsr_slave_0 entered promiscuous mode [ 62.620580][ T4185] device hsr_slave_1 entered promiscuous mode [ 62.627692][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.635930][ T4185] Cannot create hsr debugfs directory [ 62.656040][ T4182] device hsr_slave_0 entered promiscuous mode [ 62.663528][ T4182] device hsr_slave_1 entered promiscuous mode [ 62.670003][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.678030][ T4182] Cannot create hsr debugfs directory [ 62.737295][ T4191] team0: Port device team_slave_0 added [ 62.747906][ T4191] team0: Port device team_slave_1 added [ 62.773300][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.780470][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.806681][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.821662][ T4183] device hsr_slave_0 entered promiscuous mode [ 62.828657][ T4183] device hsr_slave_1 entered promiscuous mode [ 62.837656][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.845889][ T4183] Cannot create hsr debugfs directory [ 62.869841][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.877090][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.903790][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.914335][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 62.914840][ T1336] Bluetooth: hci3: command 0x0409 tx timeout [ 62.921048][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 62.936311][ T1336] Bluetooth: hci1: command 0x0409 tx timeout [ 62.942383][ T1336] Bluetooth: hci4: command 0x0409 tx timeout [ 63.074039][ T4191] device hsr_slave_0 entered promiscuous mode [ 63.081112][ T4191] device hsr_slave_1 entered promiscuous mode [ 63.088194][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.095948][ T4191] Cannot create hsr debugfs directory [ 63.245169][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.257963][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.272137][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.285433][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.336094][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.349436][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.363396][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.386220][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.410980][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.428234][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.439848][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.452466][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.555137][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.567275][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.576795][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.602180][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.641817][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.678537][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.689238][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.713013][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.726399][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.737785][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.747708][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.760440][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.787611][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.799351][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.810824][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.822359][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.831456][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.841199][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.850628][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.861069][ T594] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.868474][ T594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.895720][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.904876][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.914738][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.926393][ T594] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.933608][ T594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.941504][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.950983][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.960214][ T594] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.967347][ T594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.976874][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.988508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.997700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.006581][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.013878][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.051946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.061173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.071175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.082744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.092035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.101693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.112890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.135558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.146071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.155452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.164531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.175735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.184230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.192796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.205389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.215526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.225650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.239529][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.256927][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.270389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.279902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.289258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.298198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.308232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.323992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.339197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.349471][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.368004][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.387757][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.402869][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.419930][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.429478][ T594] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.436641][ T594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.460621][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.472048][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.502749][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.515969][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.524805][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.534222][ T594] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.541292][ T594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.581985][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.601889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.619106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.629713][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.636928][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.648891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.658204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.667711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.677166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.687577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.696596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.705578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.713355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.720888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.730643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.739118][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.746211][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.773849][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.785326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.797516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.806395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.815734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.824316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.832641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.841293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.852534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.865155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.874765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.883943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.898528][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.921308][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.952806][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.964675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.972209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.994072][ T4227] Bluetooth: hci3: command 0x041b tx timeout [ 65.003511][ T4242] Bluetooth: hci4: command 0x041b tx timeout [ 65.013454][ T4242] Bluetooth: hci1: command 0x041b tx timeout [ 65.019888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.030709][ T4242] Bluetooth: hci0: command 0x041b tx timeout [ 65.035861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.037578][ T4242] Bluetooth: hci2: command 0x041b tx timeout [ 65.054051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.062938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.072589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.082034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.092174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.100318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.108511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.117094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.129081][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.157179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.168652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.197446][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.204823][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.223507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.232806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.243382][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.250474][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.258694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.267663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.281130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.290430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.307971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.334295][ T4184] device veth0_vlan entered promiscuous mode [ 65.370574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.380756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.396936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.409423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.431294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.451645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.462470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.478630][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.504930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.521109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.539561][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.554031][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.576993][ T4184] device veth1_vlan entered promiscuous mode [ 65.592159][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.599914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.609108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.618711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.627155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.638435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.646311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.654907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.664182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.673191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.733046][ T4185] device veth0_vlan entered promiscuous mode [ 65.756035][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.772260][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.781837][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.790687][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.799337][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.808322][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.838988][ T4184] device veth0_macvtap entered promiscuous mode [ 65.847906][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.860388][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.873823][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.891223][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.900189][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.919695][ T4185] device veth1_vlan entered promiscuous mode [ 65.932905][ T4184] device veth1_macvtap entered promiscuous mode [ 65.945926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.957786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.966600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.975436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.991664][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.011879][ T4183] device veth0_vlan entered promiscuous mode [ 66.024735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.033021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.041173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.049665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.057924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.065744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.076087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.087077][ T4182] device veth0_vlan entered promiscuous mode [ 66.106990][ T4183] device veth1_vlan entered promiscuous mode [ 66.116703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.125740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.134703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.149577][ T4182] device veth1_vlan entered promiscuous mode [ 66.163010][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.174286][ T4185] device veth0_macvtap entered promiscuous mode [ 66.181346][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.191343][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.200680][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.209779][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.218483][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.227947][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.237453][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.255107][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.273589][ T4185] device veth1_macvtap entered promiscuous mode [ 66.298188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.309377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.317960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.330171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.339560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.349501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.361460][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.370721][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.379785][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.389099][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.408940][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.421562][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.435508][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.455403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.464323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.472887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.482285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.500841][ T4183] device veth0_macvtap entered promiscuous mode [ 66.510651][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.523334][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.537056][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.553422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.561167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.569742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.578957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.588503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.598185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.607366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.616455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.625391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.638615][ T4183] device veth1_macvtap entered promiscuous mode [ 66.648836][ T4191] device veth0_vlan entered promiscuous mode [ 66.657002][ T4182] device veth0_macvtap entered promiscuous mode [ 66.727732][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.739964][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.749508][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.759728][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.772667][ T4182] device veth1_macvtap entered promiscuous mode [ 66.801015][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.812960][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.823255][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.837810][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.849163][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.864420][ T4191] device veth1_vlan entered promiscuous mode [ 66.891714][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.904449][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.914828][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.925685][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.936489][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.951619][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.964011][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.972125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.980879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.990040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.000277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.009440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.019041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.028860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.038008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.049396][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.060986][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.071845][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.084300][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.084324][ T4296] Bluetooth: hci2: command 0x040f tx timeout [ 67.098918][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.103413][ T4296] Bluetooth: hci0: command 0x040f tx timeout [ 67.114639][ T4296] Bluetooth: hci1: command 0x040f tx timeout [ 67.120729][ T4296] Bluetooth: hci4: command 0x040f tx timeout [ 67.129124][ T4296] Bluetooth: hci3: command 0x040f tx timeout [ 67.148350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.158611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.167686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.180065][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.189968][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.199008][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.208180][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.225490][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.235011][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.244259][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.256237][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.266491][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.277449][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.287764][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.298872][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.310069][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.324673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.338173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.347003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.362590][ T4191] device veth0_macvtap entered promiscuous mode [ 67.400467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.410209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.422722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.438207][ T4191] device veth1_macvtap entered promiscuous mode [ 67.449902][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.459291][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.469082][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.481662][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.549794][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.554998][ T594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.571314][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.578888][ T594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.586069][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.600836][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.611142][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.622180][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.632553][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.644341][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.656797][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.669541][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.680609][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.695652][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.706262][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.718486][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.729270][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.739417][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.751419][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.764929][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.780886][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.789761][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.800293][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.810178][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.819235][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.831094][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.852869][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.869090][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.883005][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.885278][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.899915][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.909100][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.941931][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.964733][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.972750][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.028345][ T594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.038612][ T594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.095059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.106909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.132392][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.142613][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.181001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.205781][ T594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.250223][ T594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.261167][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.280500][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.303188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.405757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.413504][ T4308] netlink: 'syz.2.6': attribute type 9 has an invalid length. [ 68.430861][ T4308] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6'. [ 68.477811][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.490687][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.531675][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.570353][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.580741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.590790][ T4314] netlink: 'syz.2.6': attribute type 9 has an invalid length. [ 68.663510][ T4314] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6'. [ 68.694862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.729678][ T4299] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.021745][ T4322] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2'. [ 69.113698][ T4299] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 69.133288][ T4299] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 69.148327][ T4299] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 69.159161][ T4299] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 69.163865][ T4262] Bluetooth: hci3: command 0x0419 tx timeout [ 69.175042][ T4299] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 69.189143][ T4320] mmap: syz.3.4 (4320) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 69.230114][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 69.244677][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 69.251212][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 69.263731][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 69.303399][ T4299] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 69.339381][ T4299] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 69.366702][ T4299] usb 1-1: Product: syz [ 69.368103][ T4328] process 'syz.2.9' launched './file2' with NULL argv: empty string added [ 69.384555][ T4299] usb 1-1: Manufacturer: syz [ 69.475297][ T4299] cdc_wdm 1-1:1.0: skipping garbage [ 69.546881][ T4299] cdc_wdm 1-1:1.0: skipping garbage [ 69.598429][ T4299] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 69.609327][ T4299] cdc_wdm 1-1:1.0: Unknown control protocol [ 69.647931][ T4326] device wg2 entered promiscuous mode [ 69.874392][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 69.881457][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 69.893140][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 69.899902][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 69.910201][ T1336] usb 1-1: USB disconnect, device number 2 [ 69.916142][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 69.916186][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 69.916202][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 69.924371][ T4309] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 70.358323][ T4318] loop4: detected capacity change from 0 to 40427 [ 70.385191][ T4318] F2FS-fs (loop4): quotafile must be on filesystem root [ 70.664222][ T4331] loop2: detected capacity change from 0 to 32768 [ 70.700904][ T4341] Zero length message leads to an empty skb [ 70.730039][ T4331] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.10 (4331) [ 70.872466][ T4331] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 70.918029][ T4331] BTRFS info (device loop2): using free space tree [ 70.952498][ T4331] BTRFS info (device loop2): has skinny extents [ 70.970018][ T4332] loop1: detected capacity change from 0 to 32768 [ 71.001352][ T4313] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.054666][ T4332] ======================================================= [ 71.054666][ T4332] WARNING: The mand mount option has been deprecated and [ 71.054666][ T4332] and is ignored by this kernel. Remove the mand [ 71.054666][ T4332] option from the mount to silence this warning. [ 71.054666][ T4332] ======================================================= [ 71.137921][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.146199][ T4315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.304287][ T4332] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 71.397849][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.405157][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.674803][ T4300] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.695793][ T4182] ocfs2: Unmounting device (7,1) on (node local) [ 71.711638][ T4331] BTRFS info (device loop2): enabling ssd optimizations [ 71.933182][ T4300] usb 4-1: Using ep0 maxpacket: 16 [ 73.343410][ T4300] usb 4-1: unable to get BOS descriptor or descriptor too short [ 73.424291][ T4300] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 73.442310][ T4300] usb 4-1: can't read configurations, error -71 [ 76.262211][ T4466] syz.4.41 uses obsolete (PF_INET,SOCK_PACKET) [ 76.823210][ T4262] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 77.283515][ T4262] usb 1-1: config 0 has no interfaces? [ 77.289068][ T4262] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 77.350093][ T4262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.417787][ T4262] usb 1-1: config 0 descriptor?? [ 77.476936][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.486479][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.495898][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 77.506295][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.516388][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.526274][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.536367][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.546416][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.556300][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 77.585816][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 78.623047][ T4493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.48'. [ 78.693362][ T4263] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 78.766636][ T4493] device hsr_slave_0 left promiscuous mode [ 78.943199][ T4263] usb 4-1: Using ep0 maxpacket: 32 [ 79.066952][ T4263] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 79.093411][ T4263] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 79.114520][ T4499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.51'. [ 79.145985][ T4263] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 79.196386][ T4263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 79.206647][ T4499] device macvlan2 entered promiscuous mode [ 79.210645][ T4263] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 79.227079][ T4263] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 79.290875][ T4263] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 79.309913][ T4263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.334266][ T4263] usb 4-1: config 0 descriptor?? [ 79.835834][ T4263] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 79.898400][ T4263] usb 4-1: USB disconnect, device number 4 [ 79.941747][ T4263] usblp0: removed [ 80.093695][ T4517] netlink: 'syz.1.58': attribute type 1 has an invalid length. [ 80.316981][ T4527] netlink: 60 bytes leftover after parsing attributes in process `syz.1.62'. [ 80.329645][ T4527] unsupported nlmsg_type 40 [ 80.350741][ T4527] [ 80.362020][ T4527] ============================= [ 80.373342][ T4527] WARNING: suspicious RCU usage [ 80.379617][ T4527] syzkaller #0 Not tainted [ 80.388253][ T4527] ----------------------------- [ 80.394263][ T4527] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 80.413214][ T4263] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 80.414632][ T4527] [ 80.414632][ T4527] other info that might help us debug this: [ 80.414632][ T4527] [ 80.436878][ T4527] [ 80.436878][ T4527] rcu_scheduler_active = 2, debug_locks = 1 [ 80.473011][ T4527] 1 lock held by syz.1.62/4527: [ 80.479084][ T4527] #0: ffffffff8d237c88 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 80.496951][ T4527] [ 80.496951][ T4527] stack backtrace: [ 80.512432][ T4527] CPU: 1 PID: 4527 Comm: syz.1.62 Not tainted syzkaller #0 [ 80.519802][ T4527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.530298][ T4527] Call Trace: [ 80.533687][ T4527] [ 80.536633][ T4527] dump_stack_lvl+0x168/0x230 [ 80.541328][ T4527] ? load_image+0x3b0/0x3b0 [ 80.545890][ T4527] ? show_regs_print_info+0x20/0x20 [ 80.551120][ T4527] ? lockdep_rcu_suspicious+0x110/0x180 [ 80.556678][ T4527] ? local_bh_enable+0x20/0x20 [ 80.561532][ T4527] rhltable_lookup+0x77b/0x790 [ 80.566298][ T4527] ? lock_chain_count+0x20/0x20 [ 80.571252][ T4527] ? mr_mfc_find_parent+0x190/0x190 [ 80.576762][ T4527] ? local_bh_enable+0x20/0x20 [ 80.581564][ T4527] ? preempt_schedule+0xa7/0xb0 [ 80.586672][ T4527] ? ipmr_mfc_add+0x21ad/0x2eb0 [ 80.591545][ T4527] ? preempt_schedule+0xa7/0xb0 [ 80.596437][ T4527] ? schedule_preempt_disabled+0x20/0x20 [ 80.602096][ T4527] ? lock_chain_count+0x20/0x20 [ 80.606950][ T4527] mr_mfc_find_any_parent+0xb6/0x1e0 [ 80.612360][ T4527] ? local_bh_enable+0x20/0x20 [ 80.617303][ T4527] ip_mr_forward+0x24c/0xf90 [ 80.621903][ T4527] ipmr_mfc_add+0x2466/0x2eb0 [ 80.626624][ T4527] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 80.631729][ T4527] ? __lock_acquire+0x7c60/0x7c60 [ 80.636869][ T4527] ip_mroute_setsockopt+0xe33/0x11a0 [ 80.642391][ T4527] ? ipmr_rule_default+0x70/0x70 [ 80.647592][ T4527] ? __might_sleep+0xf0/0xf0 [ 80.652536][ T4527] ip_setsockopt+0x4ad/0x3070 [ 80.657232][ T4527] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 80.662696][ T4527] ? aa_sk_perm+0x7b4/0x8f0 [ 80.667345][ T4527] ? aa_af_perm+0x2b0/0x2b0 [ 80.671944][ T4527] ? __fget_files+0x40f/0x480 [ 80.673333][ T4263] usb 4-1: Using ep0 maxpacket: 32 [ 80.677072][ T4527] ? aa_sock_opt_perm+0x74/0x100 [ 80.677103][ T4527] ? sock_common_setsockopt+0x32/0xb0 [ 80.677123][ T4527] ? raw_setsockopt+0xc5/0x180 [ 80.677143][ T4527] ? sock_common_recvmsg+0x1b0/0x1b0 [ 80.677165][ T4527] __sys_setsockopt+0x2bf/0x3d0 [ 80.677191][ T4527] __x64_sys_setsockopt+0xb1/0xc0 [ 80.677216][ T4527] do_syscall_64+0x4c/0xa0 [ 80.677235][ T4527] ? clear_bhb_loop+0x30/0x80 [ 80.677253][ T4527] ? clear_bhb_loop+0x30/0x80 [ 80.677275][ T4527] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.677296][ T4527] RIP: 0033:0x7f5840d45be9 [ 80.677317][ T4527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.677334][ T4527] RSP: 002b:00007f583efad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 80.677360][ T4527] RAX: ffffffffffffffda RBX: 00007f5840f7cfa0 RCX: 00007f5840d45be9 [ 80.677375][ T4527] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000008 [ 80.677389][ T4527] RBP: 00007f5840dc8e19 R08: 000000000000003c R09: 0000000000000000 [ 80.677402][ T4527] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 80.677425][ T4527] R13: 00007f5840f7d038 R14: 00007f5840f7cfa0 R15: 00007ffeb41a9e88 [ 80.677459][ T4527] [ 80.813281][ T4527] [ 80.815724][ T4527] ============================= [ 80.825972][ T4527] WARNING: suspicious RCU usage [ 80.831160][ T4527] syzkaller #0 Not tainted [ 80.836100][ T4527] ----------------------------- [ 80.841780][ T4527] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 80.851184][ T4527] [ 80.851184][ T4527] other info that might help us debug this: [ 80.851184][ T4527] [ 80.869677][ T4527] [ 80.869677][ T4527] rcu_scheduler_active = 2, debug_locks = 1 [ 80.892870][ T4527] 1 lock held by syz.1.62/4527: [ 80.909515][ T4527] #0: ffffffff8d237c88 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 80.923207][ T4527] [ 80.923207][ T4527] stack backtrace: [ 80.929221][ T4527] CPU: 0 PID: 4527 Comm: syz.1.62 Not tainted syzkaller #0 [ 80.936450][ T4527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.946708][ T4527] Call Trace: [ 80.950023][ T4527] [ 80.953057][ T4527] dump_stack_lvl+0x168/0x230 [ 80.958018][ T4527] ? load_image+0x3b0/0x3b0 [ 80.962678][ T4527] ? show_regs_print_info+0x20/0x20 [ 80.967939][ T4527] ? lockdep_rcu_suspicious+0x110/0x180 [ 80.973518][ T4527] ? local_bh_enable+0x20/0x20 [ 80.978321][ T4527] rhltable_lookup+0x504/0x790 [ 80.983210][ T4527] ? local_bh_enable+0x20/0x20 [ 80.988100][ T4527] ? mr_mfc_find_parent+0x190/0x190 [ 80.993345][ T4527] ? local_bh_enable+0x20/0x20 [ 80.998135][ T4527] ? preempt_schedule+0xa7/0xb0 [ 81.003240][ T4527] ? ipmr_mfc_add+0x21ad/0x2eb0 [ 81.008137][ T4527] ? preempt_schedule+0xa7/0xb0 [ 81.013118][ T4527] ? schedule_preempt_disabled+0x20/0x20 [ 81.019175][ T4527] ? lock_chain_count+0x20/0x20 [ 81.024077][ T4527] mr_mfc_find_any_parent+0xb6/0x1e0 [ 81.029399][ T4527] ? local_bh_enable+0x20/0x20 [ 81.034210][ T4527] ip_mr_forward+0x24c/0xf90 [ 81.038930][ T4527] ipmr_mfc_add+0x2466/0x2eb0 [ 81.043753][ T4527] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 81.049075][ T4527] ? __lock_acquire+0x7c60/0x7c60 [ 81.054246][ T4527] ip_mroute_setsockopt+0xe33/0x11a0 [ 81.059834][ T4527] ? ipmr_rule_default+0x70/0x70 [ 81.065047][ T4527] ? __might_sleep+0xf0/0xf0 [ 81.069674][ T4527] ip_setsockopt+0x4ad/0x3070 [ 81.074494][ T4527] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 81.079925][ T4527] ? aa_sk_perm+0x7b4/0x8f0 [ 81.084466][ T4527] ? aa_af_perm+0x2b0/0x2b0 [ 81.089210][ T4527] ? __fget_files+0x40f/0x480 [ 81.093932][ T4527] ? aa_sock_opt_perm+0x74/0x100 [ 81.099086][ T4527] ? sock_common_setsockopt+0x32/0xb0 [ 81.104498][ T4527] ? raw_setsockopt+0xc5/0x180 [ 81.109274][ T4527] ? sock_common_recvmsg+0x1b0/0x1b0 [ 81.114944][ T4527] __sys_setsockopt+0x2bf/0x3d0 [ 81.119886][ T4527] __x64_sys_setsockopt+0xb1/0xc0 [ 81.125212][ T4527] do_syscall_64+0x4c/0xa0 [ 81.129682][ T4527] ? clear_bhb_loop+0x30/0x80 [ 81.134692][ T4527] ? clear_bhb_loop+0x30/0x80 [ 81.139814][ T4527] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.146205][ T4527] RIP: 0033:0x7f5840d45be9 [ 81.150640][ T4527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.170980][ T4527] RSP: 002b:00007f583efad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 81.180790][ T4527] RAX: ffffffffffffffda RBX: 00007f5840f7cfa0 RCX: 00007f5840d45be9 [ 81.189429][ T4527] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000008 [ 81.200442][ T4527] RBP: 00007f5840dc8e19 R08: 000000000000003c R09: 0000000000000000 [ 81.210625][ T4527] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 81.219426][ T4527] R13: 00007f5840f7d038 R14: 00007f5840f7cfa0 R15: 00007ffeb41a9e88 [ 81.227956][ T4527] [ 81.257677][ T4527] [ 81.260173][ T4527] ============================= [ 81.266828][ T4527] WARNING: suspicious RCU usage [ 81.272262][ T4527] syzkaller #0 Not tainted [ 81.277169][ T4527] ----------------------------- [ 81.284764][ T4527] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 81.296596][ T4527] [ 81.296596][ T4527] other info that might help us debug this: [ 81.296596][ T4527] [ 81.308491][ T4527] [ 81.308491][ T4527] rcu_scheduler_active = 2, debug_locks = 1 [ 81.317735][ T4527] 1 lock held by syz.1.62/4527: [ 81.323929][ T4527] #0: ffffffff8d237c88 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 81.357573][ T4527] [ 81.357573][ T4527] stack backtrace: [ 81.364671][ T4263] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 81.376747][ T4527] CPU: 0 PID: 4527 Comm: syz.1.62 Not tainted syzkaller #0 [ 81.384056][ T4527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 81.394379][ T4527] Call Trace: [ 81.397853][ T4527] [ 81.400809][ T4527] dump_stack_lvl+0x168/0x230 [ 81.405679][ T4527] ? load_image+0x3b0/0x3b0 [ 81.410198][ T4527] ? show_regs_print_info+0x20/0x20 [ 81.415511][ T4527] ? lockdep_rcu_suspicious+0x110/0x180 [ 81.421253][ T4527] ? local_bh_enable+0x20/0x20 [ 81.426583][ T4527] rhltable_lookup+0x5f8/0x790 [ 81.432028][ T4527] ? local_bh_enable+0x20/0x20 [ 81.436924][ T4527] ? mr_mfc_find_parent+0x190/0x190 [ 81.442720][ T4527] ? local_bh_enable+0x20/0x20 [ 81.448039][ T4527] ? preempt_schedule+0xa7/0xb0 [ 81.453770][ T4527] ? ipmr_mfc_add+0x21ad/0x2eb0 [ 81.459722][ T4527] ? preempt_schedule+0xa7/0xb0 [ 81.466076][ T4527] ? schedule_preempt_disabled+0x20/0x20 [ 81.472412][ T4527] ? lock_chain_count+0x20/0x20 [ 81.477553][ T4527] mr_mfc_find_any_parent+0xb6/0x1e0 [ 81.483033][ T4527] ? local_bh_enable+0x20/0x20 [ 81.490354][ T4527] ip_mr_forward+0x24c/0xf90 [ 81.497126][ T4527] ipmr_mfc_add+0x2466/0x2eb0 [ 81.502177][ T4527] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 81.507983][ T4527] ? __lock_acquire+0x7c60/0x7c60 [ 81.513377][ T4527] ip_mroute_setsockopt+0xe33/0x11a0 [ 81.518677][ T4527] ? ipmr_rule_default+0x70/0x70 [ 81.523958][ T4527] ? __might_sleep+0xf0/0xf0 [ 81.528577][ T4527] ip_setsockopt+0x4ad/0x3070 [ 81.533359][ T4527] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 81.539419][ T4527] ? aa_sk_perm+0x7b4/0x8f0 [ 81.544255][ T4527] ? aa_af_perm+0x2b0/0x2b0 [ 81.548773][ T4527] ? __fget_files+0x40f/0x480 [ 81.553461][ T4527] ? aa_sock_opt_perm+0x74/0x100 [ 81.558538][ T4527] ? sock_common_setsockopt+0x32/0xb0 [ 81.564062][ T4527] ? raw_setsockopt+0xc5/0x180 [ 81.568883][ T4527] ? sock_common_recvmsg+0x1b0/0x1b0 [ 81.574636][ T4527] __sys_setsockopt+0x2bf/0x3d0 [ 81.579541][ T4527] __x64_sys_setsockopt+0xb1/0xc0 [ 81.584585][ T4527] do_syscall_64+0x4c/0xa0 [ 81.589305][ T4527] ? clear_bhb_loop+0x30/0x80 [ 81.594080][ T4527] ? clear_bhb_loop+0x30/0x80 [ 81.598847][ T4527] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.604840][ T4527] RIP: 0033:0x7f5840d45be9 [ 81.609342][ T4527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.629560][ T4527] RSP: 002b:00007f583efad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 81.638469][ T4527] RAX: ffffffffffffffda RBX: 00007f5840f7cfa0 RCX: 00007f5840d45be9 [ 81.647110][ T4527] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000008 [ 81.655728][ T4527] RBP: 00007f5840dc8e19 R08: 000000000000003c R09: 0000000000000000 [ 81.664198][ T4527] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 81.672738][ T4527] R13: 00007f5840f7d038 R14: 00007f5840f7cfa0 R15: 00007ffeb41a9e88 [ 81.681586][ T4527] [ 81.693721][ T13] cfg80211: failed to load regulatory.db [ 81.709970][ T4263] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 81.737234][ T4263] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 81.758700][ T4263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 81.778077][ T4263] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 81.796874][ T4263] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 81.817020][ T4263] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 81.837614][ T4263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.859858][ T4263] usb 4-1: config 0 descriptor?? [ 81.889305][ T4263] usb 4-1: can't set config #0, error -71 [ 81.945247][ T4263] usb 4-1: USB disconnect, device number 5 [ 82.139290][ T4262] usb 1-1: USB disconnect, device number 3