last executing test programs: 7.605287809s ago: executing program 1 (id=2): syz_usb_connect(0x0, 0x58, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2}) 7.318421688s ago: executing program 3 (id=4): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') preadv(r0, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x200000, 0x9) 6.873749432s ago: executing program 1 (id=6): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac010000000100000001090224"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) 5.129094467s ago: executing program 3 (id=16): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x85, 0x6, @broadcast}, 0x14) 4.903682664s ago: executing program 3 (id=18): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xb}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) sendto$packet(r3, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) 4.753873189s ago: executing program 1 (id=20): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xb, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) sendto$packet(r3, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.348654872s ago: executing program 3 (id=24): r0 = fsopen(&(0x7f00000003c0)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x2) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) 4.201365767s ago: executing program 3 (id=25): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac2(0x4, 0xb7, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x48, 0x499, 0x1039, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x85, 0xe6d65e2c16ddbb6c, 0x7, {0x8, 0xb, 0x2, 0x2, 0x1, 0x5, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x4, 0x35, 0x3}, [@feature_unit={0x7, 0x24, 0x6, 0x6, 0x4, [0x1]}, @effect_unit={0x11, 0x24, 0x7, 0x2, 0x4, 0x4, [0x1, 0x2, 0x2, 0x0, 0x2]}, @processing_unit={0xd, 0x24, 0x8, 0x3, 0x1, [0x3, 0x1, 0x2, 0x3]}, @multiply_unit={0x7, 0x24, 0xc, 0x1, 0x7, 0x8, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x1, 0x0, {0x8, 0x25, 0x1, 0x2, 0x3c, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x7, 0x9, 0x3, 0x3, 0x3, 0x7ff, 0x8e}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x0, 0x28, {0x8, 0x25, 0x1, 0x83, 0x3f, 0x10, 0x8000}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x8, 0xf, 0xfe, 0x40, 0xf4}, 0x2e, &(0x7f00000002c0)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0x1, 0x8000}, @generic={0x18, 0x10, 0x1, "61188a11255d74577b182422a68714abec3f048862"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x4, 0x5471}]}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 4.200746417s ago: executing program 1 (id=27): sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x6, 0xb2, 0x40000a8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.001022424s ago: executing program 1 (id=30): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8949, &(0x7f00000002c0)={'bond0\x00', @random="c8b301009e04"}) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x2b, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000018c0)={@cgroup=r1, r1, 0x2f, 0x20, 0x4}, 0x20) r2 = socket(0x15, 0x4, 0x1e) sendmsg$NFNL_MSG_ACCT_DEL(r2, 0x0, 0x4010) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0xeb], 0x0, 0x0, 0x1, 0x1, r5}}, 0x40) sendmsg$AUDIT_SET(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x2, 0x3, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x20, 0x1402, 0x1, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) 2.979930486s ago: executing program 1 (id=36): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200005d00000109022400010000600009040180020300000009210604000122050009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x478, 0xffffffff, 0x1b8, 0x1b8, 0xf8, 0xffffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x1e8, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x28}, [0xff000000, 0x0, 0x0, 0xffffffff], 0x4d6, 0x0, 0x73, 0x1, 0x0, 0x7}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xff, 0xff000000], @ipv4=@empty, [0xff, 0xff000000, 0xffffff00], 0x4d3, 0x3506, 0x6, 0x0, 0x10, 0x3}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x3507, 0x0, 0x1, 0x16, 0x1}, {@ipv4=@local, [0xff, 0xffffff00, 0xffffff00, 0xff], @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xff, 0xff000000, 0xffffffff, 0xffffff00], 0x4d5, 0x0, 0x33, 0x1, 0x4, 0x4}], 0x2, 0x1}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) 1.932464579s ago: executing program 4 (id=43): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 1.778531254s ago: executing program 4 (id=44): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfffffcf1, @private1, 0x8001}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x5e23, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)="78b8", 0x2}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="9001"], 0x190}}], 0x2, 0x42) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1af305001300", 0x6) 1.699679246s ago: executing program 4 (id=45): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,po']) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r7) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f89) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000100)={'\x00', 0x891, 0x8000, 0x7b, 0x0, 0x4}) memfd_create(&(0x7f00000002c0)='vxPP\xe3\xe9G\xf7\bv\xa5\xe5\xfc\xca\a\xe7\x0e\x19+cM\x13\x83\x1an~2\t\xfaw\xa4u\xe8\xdb\x1bQ\x17\xcb\xe4\xb8\x93\xd51\xc0\xa4\xc4/\xe9\x03\x00\x00\x00\x00\x00\x00\x00(\xd7PV/\xff\xff\xff\xff\xff\xff\xf5\x00\x00\x00\x00\x00\xb96\xa9\x15\xfc\'j\x0e\xd7\xc8\xf0\xf8Qiz\xf2l\xbf\x8f\x05\xb5\x1ck\xe4\xfc\xf7\xd5\x86\n\xfd\x1e\xe5)\x1b\xe9\x84\xb0D\xaa#\x1c\b\x10\x9451\x06\xeep\xe3b\nPN\x9e\xdc\xa0\xb3\xe7H\xeey\xf5}+\x95w\xdc\xaf\xe1l\x89He\xf2\b\xd3]\x813I*D\x10*\x1e\xebzj\x1a\xc3\xb3\xa3@\x8c\xfd1\x8a{', 0x4) 1.633717529s ago: executing program 0 (id=47): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x1, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x8010) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000214000e00002f74214b34586d47423cddcb0000008000008276000000000000006e81a357601e3876", 0x2e}], 0x1}, 0x5) 1.480143464s ago: executing program 0 (id=49): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r3 = socket(0x9, 0x6, 0x101) listen(r3, 0x100) sendmsg$inet_sctp(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200000eaffffffffb5000000020000000100048005000000380b0000", @ANYRES32=0x0], 0x20, 0x4002804}, 0x0) socket(0x22, 0x5, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000250019033752a5f76a80000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000002e00090027bd70000000000e04000000ae003b598066f5f70cc565a8b3f99f1be904b65e7f20f27016d08e83ee895421cedfa33408e676d080dfea7ad87ec9a18cc75be7a72b0000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @private=0xa010103}, 0x10) sendmsg$rds(r7, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x200, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x20008090) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f0000000280)=0x100000001, 0x3) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000080)={0x3c, 0x9, 0x5, 0x18, 0x10000}, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x20010, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES16=r8, @ANYRES8=r1, @ANYRES16=r4, @ANYRES32=r0], &(0x7f0000000300)='syzkaller\x00', 0x5, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdfb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) unshare(0xc020680) 1.194960912s ago: executing program 2 (id=50): socket$can_raw(0x1d, 0x3, 0x1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000400)={0x34}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x228, 0x18c, 0x203, 0x0, 0x19030000, 0x368, 0x2e0, 0x2e0, 0x368, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x511e], 0x5df9b3d1, 0x2, 0x5, [@ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x3e}, @empty, @empty, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @empty, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}], 0x13}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x200c010) 1.123325335s ago: executing program 0 (id=51): sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x6, 0xb2, 0x40000a8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.061927157s ago: executing program 2 (id=52): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000000001800000099b67c76544f", @ANYRES32, @ANYBLOB="00000000000000002c000000000000001800000000000000000000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x528, 0x0, 0x1a0, 0x2b8, 0x388, 0xd0, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7e, 0x80}}}, {{@ipv6={@mcast1, @local, [0xffff00, 0x0, 0xffffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x1, 0x40}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x9, 0x0, [0xa80, 0x6108, 0x2, 0x9, 0x8001, 0x9, 0x6, 0x7, 0xfffe, 0x8000, 0x5, 0xfffb, 0x6d1, 0x1, 0x5, 0x8000], 0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x3, 0x0, 0xd, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0xff, [0x1, 0x3, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5c8, 0x8000, 0x0, 0x0, 0xe, 0x0, 0x800], [0xffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffe, 0x400, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040c1}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000400), 0xe) listen(r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000200000006500000ff00000042000000", @ANYBLOB="0000839100"/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00", @ANYRES32=r7], 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r11], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) 802.249895ms ago: executing program 0 (id=53): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x60, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b872, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_FAST_LEAVE={0x5, 0x7, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4840) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xb, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 783.869985ms ago: executing program 2 (id=54): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd2f, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x8, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10002, 0x40, 0x5, 0x7, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 565.964633ms ago: executing program 0 (id=55): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 338.36457ms ago: executing program 2 (id=56): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfffffcf1, @private1, 0x8001}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x5e23, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)="78b8", 0x2}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="9001"], 0x190}}], 0x2, 0x42) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1af305001300", 0x6) 301.875041ms ago: executing program 4 (id=57): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xb}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x400c000) sendto$packet(r3, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) 275.315562ms ago: executing program 0 (id=58): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x300, 0x70bd28, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008800) recvmmsg(r0, &(0x7f0000007380)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000300)=""/131, 0x83}, {&(0x7f00000003c0)=""/9, 0x9}, {&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f0000001840)=""/4095, 0xfff}, {&(0x7f00000001c0)=""/206, 0xce}, {&(0x7f0000002940)=""/246, 0xf6}], 0x7}, 0x5fb5}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xf3cd}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x4000000}, {{0x0, 0x0, 0x0}, 0x7f}], 0x8, 0x100, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) r3 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}}, 0x3, 0xf3ff}, &(0x7f00000005c0)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000600)=@assoc_value={r8, 0x10000}, 0x8) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 185.771154ms ago: executing program 2 (id=59): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x1, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x8010) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000214000e00002f74214b34586d47423cddcb0000008000008276000000000000006e81a357601e3876", 0x2e}], 0x1}, 0x5) 52.817569ms ago: executing program 4 (id=60): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket(0x15, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) 14.29486ms ago: executing program 2 (id=61): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xfffd, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xd3bb, 0xcba, 0x10, 0x800001, 0xb, 0xfff, 0xb146, 0x2, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="ba", 0x1, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 4 (id=62): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r3 = socket(0x9, 0x6, 0x101) listen(r3, 0x100) sendmsg$inet_sctp(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200000eaffffffffb5000000020000000100048005000000380b0000", @ANYRES32=0x0], 0x20, 0x4002804}, 0x0) socket(0x22, 0x5, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000250019033752a5f76a80000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044004) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @private=0xa010103}, 0x10) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x200, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x20008090) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f0000000280)=0x100000001, 0x3) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000080)={0x3c, 0x9, 0x5, 0x18, 0x10000}, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x20010, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES16=r7, @ANYRES8=r1, @ANYRES16=r4, @ANYRES32=r0], &(0x7f0000000300)='syzkaller\x00', 0x5, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdfb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) unshare(0xc020680) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. [ 62.072922][ T4172] cgroup: Unknown subsys name 'net' [ 62.181882][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.694068][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.256976][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 65.272331][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 65.375034][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.429878][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.437880][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.446351][ T4190] device bridge_slave_0 entered promiscuous mode [ 65.458913][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.466475][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.475136][ T4190] device bridge_slave_1 entered promiscuous mode [ 65.489091][ T4202] chnl_net:caif_netlink_parms(): no params data found [ 65.509313][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 65.526371][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.533657][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.542095][ T4189] device bridge_slave_0 entered promiscuous mode [ 65.554406][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.561708][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.569884][ T4189] device bridge_slave_1 entered promiscuous mode [ 65.601759][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.653602][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.677163][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.706962][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.718063][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.726485][ T4188] device bridge_slave_0 entered promiscuous mode [ 65.736553][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.766585][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.773820][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.782300][ T4188] device bridge_slave_1 entered promiscuous mode [ 65.813781][ T4190] team0: Port device team_slave_0 added [ 65.828104][ T4190] team0: Port device team_slave_1 added [ 65.850979][ T4189] team0: Port device team_slave_0 added [ 65.864166][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.872451][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.880337][ T4202] device bridge_slave_0 entered promiscuous mode [ 65.897666][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.907449][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.915782][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.924216][ T4191] device bridge_slave_0 entered promiscuous mode [ 65.938428][ T4189] team0: Port device team_slave_1 added [ 65.944688][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.952192][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.960212][ T4202] device bridge_slave_1 entered promiscuous mode [ 65.969086][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.986316][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.993474][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.002114][ T4191] device bridge_slave_1 entered promiscuous mode [ 66.010040][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.017255][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.044100][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.098663][ T4188] team0: Port device team_slave_0 added [ 66.106396][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.114613][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.141381][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.161067][ T4202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.177943][ T4202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.189490][ T4188] team0: Port device team_slave_1 added [ 66.208043][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.215266][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.241555][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.255382][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.287879][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.299495][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.325988][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.339032][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.347316][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.374039][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.387661][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.406378][ T4202] team0: Port device team_slave_0 added [ 66.413224][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.420299][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.447220][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.484927][ T4202] team0: Port device team_slave_1 added [ 66.536964][ T4190] device hsr_slave_0 entered promiscuous mode [ 66.544571][ T4190] device hsr_slave_1 entered promiscuous mode [ 66.554897][ T4191] team0: Port device team_slave_0 added [ 66.565071][ T4189] device hsr_slave_0 entered promiscuous mode [ 66.572527][ T4189] device hsr_slave_1 entered promiscuous mode [ 66.579371][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.588382][ T4189] Cannot create hsr debugfs directory [ 66.594663][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.601859][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.629054][ T4202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.647948][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.655107][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.681613][ T4202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.694969][ T4191] team0: Port device team_slave_1 added [ 66.753291][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.760418][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.787845][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.803045][ T4188] device hsr_slave_0 entered promiscuous mode [ 66.810300][ T4188] device hsr_slave_1 entered promiscuous mode [ 66.817216][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.824945][ T4188] Cannot create hsr debugfs directory [ 66.859266][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.866357][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.892660][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.904245][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 66.910770][ T4193] Bluetooth: hci2: command 0x0409 tx timeout [ 66.917063][ T4193] Bluetooth: hci0: command 0x0409 tx timeout [ 66.928923][ T4193] Bluetooth: hci1: command 0x0409 tx timeout [ 66.935440][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 66.945328][ T4202] device hsr_slave_0 entered promiscuous mode [ 66.952821][ T4202] device hsr_slave_1 entered promiscuous mode [ 66.960301][ T4202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.968289][ T4202] Cannot create hsr debugfs directory [ 67.111669][ T4191] device hsr_slave_0 entered promiscuous mode [ 67.118566][ T4191] device hsr_slave_1 entered promiscuous mode [ 67.125715][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.133502][ T4191] Cannot create hsr debugfs directory [ 67.358619][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.387745][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.401506][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.412191][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.422759][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.432261][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.446777][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.470333][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.543153][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.558630][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.592650][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.602973][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.679037][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.705092][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.732319][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.739386][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.749367][ T4202] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.769352][ T4202] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.782652][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.792144][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.803279][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.819125][ T4202] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.828946][ T4202] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.842948][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.859697][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.885658][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.894599][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.909990][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.935814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.947294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.957653][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.965259][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.997620][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.005697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.014580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.025693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.035092][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.042320][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.053671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.072679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.082538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.092431][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.099681][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.142495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.154450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.163813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.173925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.184460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.193487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.203366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.212425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.221034][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.228129][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.236408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.246697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.273483][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.293238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.302330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.310563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.324840][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.334411][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.369909][ T4202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.383869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.394077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.403666][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.411135][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.419265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.429118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.440041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.449502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.458427][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.465697][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.475029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.486167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.497706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.509561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.518955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.528682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.545851][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.559572][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.589022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.600062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.609507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.618926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.627918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.636771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.648078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.658256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.668378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.678699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.687911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.697078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.723749][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.742278][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.758785][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.776840][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.789280][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.803444][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.829158][ T4202] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.856374][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.870001][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.878971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.890040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.904972][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.932236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.942418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.961490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.981071][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 68.990399][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 68.998290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.006836][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 69.013416][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 69.020030][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.027330][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.039390][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 69.081459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.089677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.110595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.125429][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.132600][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.148581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.158440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.174626][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.181925][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.197931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.206004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.214209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.223598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.233051][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.240415][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.253813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.262496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.272100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.288279][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.350324][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.383932][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.397609][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.407392][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.425745][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.438488][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.448091][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.457513][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.467104][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.474983][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.484407][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.493192][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.501833][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.510336][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.520255][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.530345][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.539349][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.560437][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.575757][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.587976][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.633554][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.642574][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.650144][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.672317][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.691059][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.702604][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.714637][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.726897][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.741779][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.764970][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.775510][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.785304][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.801526][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.809517][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.844659][ T4190] device veth0_vlan entered promiscuous mode [ 69.881038][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.889932][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.935966][ T4190] device veth1_vlan entered promiscuous mode [ 69.976005][ T4189] device veth0_vlan entered promiscuous mode [ 69.990044][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.006917][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.017729][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.050291][ T4189] device veth1_vlan entered promiscuous mode [ 70.072951][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.087682][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.098436][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.112143][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.120475][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.134361][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.151861][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.160086][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.170037][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.198156][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.210034][ T4190] device veth0_macvtap entered promiscuous mode [ 70.218961][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.228992][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.238207][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.260475][ T4188] device veth0_vlan entered promiscuous mode [ 70.275379][ T4190] device veth1_macvtap entered promiscuous mode [ 70.287175][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.296949][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.306576][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.318108][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.326662][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.344667][ T4188] device veth1_vlan entered promiscuous mode [ 70.358879][ T4189] device veth0_macvtap entered promiscuous mode [ 70.373662][ T4189] device veth1_macvtap entered promiscuous mode [ 70.392077][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.400229][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.409464][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.419082][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.430451][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.439655][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.448746][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.471605][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.484483][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.497988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.507815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.517109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.526626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.574414][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.590398][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.603432][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.619162][ T4188] device veth0_macvtap entered promiscuous mode [ 70.628744][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.638534][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.648207][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.658122][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.668213][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.677458][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.688341][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.698006][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.709535][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.722168][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.732236][ T4202] device veth0_vlan entered promiscuous mode [ 70.758088][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.769179][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.778386][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.790478][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.808934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.818229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.827773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.838448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.850156][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.861233][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.874712][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.887024][ T4202] device veth1_vlan entered promiscuous mode [ 70.897331][ T4188] device veth1_macvtap entered promiscuous mode [ 70.914422][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.922976][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.931723][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.941355][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.952270][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.961759][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.970507][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.979477][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.016069][ T4191] device veth0_vlan entered promiscuous mode [ 71.037631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.046645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.060440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.063631][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 71.082223][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 71.093789][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 71.099926][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 71.109835][ T4191] device veth1_vlan entered promiscuous mode [ 71.125127][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.136166][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.142567][ T1107] Bluetooth: hci4: command 0x040f tx timeout [ 71.148647][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.164554][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.176907][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.187637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.196141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.204858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.214153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.225973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.249983][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.267024][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.281880][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.296096][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.306900][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.317936][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.329862][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.347162][ T4202] device veth0_macvtap entered promiscuous mode [ 71.362232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.371673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.379812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.391246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.402924][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.412584][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.421783][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.430531][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.467567][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.474498][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.497921][ T4202] device veth1_macvtap entered promiscuous mode [ 71.561935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.570592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.586084][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.598016][ T4191] device veth0_macvtap entered promiscuous mode [ 71.610087][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.640331][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.658047][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.672945][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.684284][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.696340][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.707565][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.717956][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.728747][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.740379][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.749897][ T4191] device veth1_macvtap entered promiscuous mode [ 71.773778][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.784019][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.794151][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.807599][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.819727][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.833581][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.845010][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.855681][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.867409][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.878951][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.899019][ T4202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.910582][ T4202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.919551][ T4202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.929705][ T4202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.948698][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.958690][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.973850][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.985795][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.023761][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.042057][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.053343][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.064384][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.074549][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.085317][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.095710][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.106950][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.118871][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.144539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.153515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.162964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.189532][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.204622][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.215895][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.227101][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.237382][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.247977][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.258659][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.271731][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.283293][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.304837][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.311672][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.327798][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.340480][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.351987][ T3038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.353149][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.360110][ T3038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.362067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.378320][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.399379][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.408525][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.417742][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.427670][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.459636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.471633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.521336][ T3038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.529304][ T3038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.563873][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.583558][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.641693][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.656949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.667359][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.693497][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.737365][ T4259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.795995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.810734][ T4259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.836144][ T4273] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.853803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.875027][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.895161][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.941096][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.141144][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 73.147964][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 73.195942][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 73.218720][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 73.342314][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 74.071050][ T4269] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.341273][ T4269] usb 2-1: Using ep0 maxpacket: 16 [ 74.486754][ T4269] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.527677][ T4269] usb 2-1: config 0 has no interfaces? [ 74.547939][ T4269] usb 2-1: New USB device found, idVendor=01ac, idProduct=0000, bcdDevice= 1.00 [ 74.579562][ T4269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.588523][ T4305] loop0: detected capacity change from 0 to 128 [ 74.650369][ T4269] usb 2-1: config 0 descriptor?? [ 74.788546][ T4307] attempt to access beyond end of device [ 74.788546][ T4307] loop0: rw=2049, want=449, limit=128 [ 75.004777][ T7] usb 2-1: USB disconnect, device number 2 [ 75.048374][ T4239] attempt to access beyond end of device [ 75.048374][ T4239] loop0: rw=1, want=1041, limit=128 [ 75.342639][ T4329] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 75.366783][ T4327] device syzkaller0 entered promiscuous mode [ 75.394393][ T4330] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 75.516154][ T4335] device syzkaller0 entered promiscuous mode [ 75.610103][ T4337] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 75.651913][ T4338] tipc: Started in network mode [ 75.666785][ T4338] tipc: Node identity 5ebbc1409e85, cluster identity 4711 [ 75.676023][ T4338] tipc: Enabled bearer , priority 0 [ 75.688701][ T4337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 75.709721][ T4341] device syzkaller0 entered promiscuous mode [ 75.727635][ T4334] tipc: Resetting bearer [ 75.778081][ T4334] tipc: Disabling bearer [ 75.848747][ T4342] device syzkaller0 entered promiscuous mode [ 75.859530][ T4343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 75.887141][ T4343] device hsr_slave_0 left promiscuous mode [ 75.895536][ T4343] device hsr_slave_1 left promiscuous mode [ 76.388880][ T4371] capability: warning: `syz.2.32' uses deprecated v2 capabilities in a way that may be insecure [ 76.450751][ T2856] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.483386][ T4376] 9pnet: p9_fd_create_tcp (4376): problem connecting socket to 127.0.0.1 [ 76.728064][ T4374] Zero length message leads to an empty skb [ 77.153213][ T2856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.319308][ T2856] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 77.340755][ T2856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.351855][ T2856] usb 4-1: config 0 descriptor?? [ 77.403433][ T4373] device syzkaller0 entered promiscuous mode [ 77.702763][ T4236] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 77.720964][ T2856] usbhid 4-1:0.0: can't add hid device: -71 [ 77.727612][ T2856] usbhid: probe of 4-1:0.0 failed with error -71 [ 77.768188][ T2856] usb 4-1: USB disconnect, device number 2 [ 77.781867][ T4407] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 77.872517][ T4413] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 78.044376][ T4417] device syzkaller0 entered promiscuous mode [ 78.059865][ T4419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 78.107672][ T4419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 78.117805][ T4236] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.127024][ T4419] device hsr_slave_0 left promiscuous mode [ 78.134381][ T4236] usb 2-1: config 0 has no interface number 0 [ 78.142582][ T4236] usb 2-1: config 0 interface 1 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 78.155925][ T4419] device hsr_slave_1 left promiscuous mode [ 78.156996][ T4236] usb 2-1: config 0 interface 1 has no altsetting 0 [ 78.211418][ T2856] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 78.266071][ T4422] device syzkaller0 entered promiscuous mode [ 78.273667][ T4236] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 78.283996][ T4236] usb 2-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 78.298956][ T4236] usb 2-1: Manufacturer: syz [ 78.306393][ T4236] usb 2-1: config 0 descriptor?? [ 78.364146][ T4236] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 78.397186][ T4424] device syzkaller0 entered promiscuous mode [ 78.459079][ T4424] tipc: Started in network mode [ 78.465393][ T4424] tipc: Node identity f266913a34aa, cluster identity 4711 [ 78.473575][ T4424] tipc: Enabled bearer , priority 0 [ 78.509268][ T4423] tipc: Resetting bearer [ 78.537716][ T4423] tipc: Disabling bearer [ 78.651138][ T2856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.680565][ T2856] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 78.705261][ T2856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.730012][ T2856] usb 4-1: config 0 descriptor?? [ 78.738540][ T4435] device syzkaller0 entered promiscuous mode [ 78.818991][ T4437] 9pnet: p9_fd_create_tcp (4437): problem connecting socket to 127.0.0.1 [ 78.887074][ T4437] blktrace: Concurrent blktraces are not allowed on loop9 [ 78.920369][ T4444] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 79.054202][ T4452] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 79.319425][ T4461] device syzkaller0 entered promiscuous mode [ 79.378136][ T4463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 79.397629][ T4463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'. [ 79.406880][ T4463] device hsr_slave_0 left promiscuous mode [ 79.415463][ T4463] device hsr_slave_1 left promiscuous mode [ 79.575769][ T4466] device syzkaller0 entered promiscuous mode [ 79.687131][ T4471] xt_policy: output policy not valid in PREROUTING and INPUT [ 79.700880][ T2856] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 79.715522][ T2856] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 80.096810][ T4484] device syzkaller0 entered promiscuous mode [ 80.146676][ T4484] tipc: Started in network mode [ 80.152524][ T4484] tipc: Node identity d66cd331d3d5, cluster identity 4711 [ 80.160162][ T4484] tipc: Enabled bearer , priority 0 [ 80.187225][ T4483] tipc: Resetting bearer [ 80.216114][ T4483] tipc: Disabling bearer [ 80.227587][ T4488] device syzkaller0 entered promiscuous mode [ 80.340822][ C1] ================================================================================ [ 80.350529][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 80.359258][ C1] index 259 is out of range for type 'const int[34]' [ 80.366077][ C1] CPU: 1 PID: 4188 Comm: syz-executor Not tainted syzkaller #0 [ 80.373670][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 80.383796][ C1] Call Trace: [ 80.387117][ C1] [ 80.390002][ C1] dump_stack_lvl+0x188/0x250 [ 80.394748][ C1] ? show_regs_print_info+0x20/0x20 [ 80.400001][ C1] ? load_image+0x400/0x400 [ 80.404560][ C1] ubsan_epilogue+0xa/0x30 [ 80.409029][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 80.414818][ C1] aiptek_irq+0x1eaa/0x28f0 [ 80.419391][ C1] __usb_hcd_giveback_urb+0x35f/0x520 [ 80.424824][ C1] dummy_timer+0x880/0x30b0 [ 80.429439][ C1] ? dummy_free_streams+0x530/0x530 [ 80.434710][ C1] ? dummy_free_streams+0x530/0x530 [ 80.439960][ C1] call_timer_fn+0x17b/0x540 [ 80.444628][ C1] ? dummy_free_streams+0x530/0x530 [ 80.449883][ C1] ? __run_timers+0x800/0x800 [ 80.454626][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 80.459892][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 80.465225][ C1] ? dummy_free_streams+0x530/0x530 [ 80.470470][ C1] __run_timers+0x53e/0x800 [ 80.475034][ C1] ? detach_timer+0x2b0/0x2b0 [ 80.479849][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 80.485887][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 80.490781][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 80.496368][ C1] run_timer_softirq+0x63/0xf0 [ 80.501204][ C1] handle_softirqs+0x339/0x830 [ 80.506210][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 80.511317][ C1] ? do_softirq+0x210/0x210 [ 80.515907][ C1] __irq_exit_rcu+0x13b/0x230 [ 80.520638][ C1] ? irq_exit_rcu+0x20/0x20 [ 80.525207][ C1] irq_exit_rcu+0x5/0x20 [ 80.529485][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 80.535170][ C1] [ 80.538135][ C1] [ 80.541123][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 80.547160][ C1] RIP: 0010:common_perm_cond+0x143/0x350 [ 80.552847][ C1] Code: be f0 07 00 00 4d 03 37 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 10 37 14 fe 4d 8b 3e <48> 83 c3 04 48 89 d8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 [ 80.572502][ C1] RSP: 0018:ffffc90002dbfc40 EFLAGS: 00000246 [ 80.578662][ C1] RAX: 1ffff1100c01ccfe RBX: ffff8880609a32e8 RCX: dffffc0000000000 [ 80.586963][ C1] RDX: 0000000000000000 RSI: ffff8880771a5190 RDI: ffffffff8a7467c0 [ 80.595074][ C1] RBP: ffffc90002dbfd18 R08: ffffffff8d8a06ef R09: 1ffffffff1b140dd [ 80.603255][ C1] R10: dffffc0000000000 R11: fffffbfff1b140de R12: 1ffff1100ee34a33 [ 80.611329][ C1] R13: ffff8880771a5198 R14: ffff8880600e67f0 R15: ffffffff8c1cd080 [ 80.619636][ C1] ? common_perm+0x1b0/0x1b0 [ 80.624303][ C1] security_inode_getattr+0xcf/0x120 [ 80.629760][ C1] vfs_getattr+0x26/0x3a0 [ 80.634179][ C1] __x64_sys_newfstat+0x137/0x210 [ 80.639266][ C1] ? __ia32_sys_newfstatat+0x200/0x200 [ 80.644907][ C1] ? lock_chain_count+0x20/0x20 [ 80.649941][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 80.654954][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 80.660438][ C1] do_syscall_64+0x4c/0xa0 [ 80.664917][ C1] ? clear_bhb_loop+0x30/0x80 [ 80.669654][ C1] ? clear_bhb_loop+0x30/0x80 [ 80.674387][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.680429][ C1] RIP: 0033:0x7fd0f3d95467 [ 80.684897][ C1] Code: 48 45 31 c9 45 31 c0 e8 a7 cb fb ff 5a 59 eb c6 e8 0e 3f 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 80.704869][ C1] RSP: 002b:00007fff3f5e5958 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 80.713553][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd0f3d95467 [ 80.722099][ C1] RDX: 0000000000000000 RSI: 00007fff3f5e5960 RDI: 0000000000000003 [ 80.730166][ C1] RBP: 00007fff3f5e6b4c R08: 0000000000000000 R09: 0000000000000000 [ 80.738211][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3f5e6b60 [ 80.746239][ C1] R13: 00007fd0f3e2c1ca R14: 0000000000013994 R15: 00007fff3f5e6ba0 [ 80.754314][ C1] [ 80.757377][ C1] ================================================================================ [ 80.767652][ C1] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 80.774911][ C1] CPU: 1 PID: 4188 Comm: syz-executor Not tainted syzkaller #0 [ 80.782601][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 80.793571][ C1] Call Trace: [ 80.797002][ C1] [ 80.799984][ C1] dump_stack_lvl+0x188/0x250 [ 80.804809][ C1] ? show_regs_print_info+0x20/0x20 [ 80.810206][ C1] ? load_image+0x400/0x400 [ 80.815083][ C1] panic+0x2e5/0x810 [ 80.819351][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 80.823939][ C1] check_panic_on_warn+0x80/0xa0 [ 80.828950][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 80.834885][ C1] aiptek_irq+0x1eaa/0x28f0 [ 80.839636][ C1] __usb_hcd_giveback_urb+0x35f/0x520 [ 80.845254][ C1] dummy_timer+0x880/0x30b0 [ 80.849985][ C1] ? dummy_free_streams+0x530/0x530 [ 80.855816][ C1] ? dummy_free_streams+0x530/0x530 [ 80.861257][ C1] call_timer_fn+0x17b/0x540 [ 80.866074][ C1] ? dummy_free_streams+0x530/0x530 [ 80.871346][ C1] ? __run_timers+0x800/0x800 [ 80.876091][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 80.881351][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 80.886609][ C1] ? dummy_free_streams+0x530/0x530 [ 80.891874][ C1] __run_timers+0x53e/0x800 [ 80.896446][ C1] ? detach_timer+0x2b0/0x2b0 [ 80.901169][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 80.907246][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 80.912149][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 80.917585][ C1] run_timer_softirq+0x63/0xf0 [ 80.922420][ C1] handle_softirqs+0x339/0x830 [ 80.927242][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 80.932157][ C1] ? do_softirq+0x210/0x210 [ 80.936757][ C1] __irq_exit_rcu+0x13b/0x230 [ 80.941476][ C1] ? irq_exit_rcu+0x20/0x20 [ 80.946653][ C1] irq_exit_rcu+0x5/0x20 [ 80.950947][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 80.957350][ C1] [ 80.960441][ C1] [ 80.963501][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 80.969565][ C1] RIP: 0010:common_perm_cond+0x143/0x350 [ 80.975296][ C1] Code: be f0 07 00 00 4d 03 37 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 10 37 14 fe 4d 8b 3e <48> 83 c3 04 48 89 d8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 [ 80.995310][ C1] RSP: 0018:ffffc90002dbfc40 EFLAGS: 00000246 [ 81.001431][ C1] RAX: 1ffff1100c01ccfe RBX: ffff8880609a32e8 RCX: dffffc0000000000 [ 81.010438][ C1] RDX: 0000000000000000 RSI: ffff8880771a5190 RDI: ffffffff8a7467c0 [ 81.018486][ C1] RBP: ffffc90002dbfd18 R08: ffffffff8d8a06ef R09: 1ffffffff1b140dd [ 81.026948][ C1] R10: dffffc0000000000 R11: fffffbfff1b140de R12: 1ffff1100ee34a33 [ 81.035308][ C1] R13: ffff8880771a5198 R14: ffff8880600e67f0 R15: ffffffff8c1cd080 [ 81.043360][ C1] ? common_perm+0x1b0/0x1b0 [ 81.048024][ C1] security_inode_getattr+0xcf/0x120 [ 81.053366][ C1] vfs_getattr+0x26/0x3a0 [ 81.057974][ C1] __x64_sys_newfstat+0x137/0x210 [ 81.063063][ C1] ? __ia32_sys_newfstatat+0x200/0x200 [ 81.068593][ C1] ? lock_chain_count+0x20/0x20 [ 81.073508][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 81.078504][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 81.083762][ C1] do_syscall_64+0x4c/0xa0 [ 81.088233][ C1] ? clear_bhb_loop+0x30/0x80 [ 81.093004][ C1] ? clear_bhb_loop+0x30/0x80 [ 81.097868][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.104035][ C1] RIP: 0033:0x7fd0f3d95467 [ 81.108506][ C1] Code: 48 45 31 c9 45 31 c0 e8 a7 cb fb ff 5a 59 eb c6 e8 0e 3f 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 81.128443][ C1] RSP: 002b:00007fff3f5e5958 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 81.137095][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd0f3d95467 [ 81.145211][ C1] RDX: 0000000000000000 RSI: 00007fff3f5e5960 RDI: 0000000000000003 [ 81.153235][ C1] RBP: 00007fff3f5e6b4c R08: 0000000000000000 R09: 0000000000000000 [ 81.161261][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3f5e6b60 [ 81.169323][ C1] R13: 00007fd0f3e2c1ca R14: 0000000000013994 R15: 00007fff3f5e6ba0 [ 81.177455][ C1] [ 81.180783][ C1] Kernel Offset: disabled [ 81.185376][ C1] Rebooting in 86400 seconds..