last executing test programs: 21.911104032s ago: executing program 2 (id=47): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) inotify_init() r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0x6f) r5 = add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)=ANY=[@ANYBLOB="02d0d7000000000000616161616161616161616161616161616161616161616161616161616161613131313131313131313131313131313131313131313131313131313131313131"], 0x48, 0x0) keyctl$KEYCTL_MOVE(0x1e, r5, 0x0, 0xfffffffffffffffb, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$audio(0xffffff9c, &(0x7f0000000040), 0x20000, 0x0) 16.952200244s ago: executing program 1 (id=59): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) writev(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\a\x00'], 0xfe33) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) fanotify_mark(0xffffffffffffffff, 0x0, 0x21, 0xffffffffffffffff, 0x0) 15.710904917s ago: executing program 3 (id=63): socket$inet6_sctp(0xa, 0x1, 0x84) syz_pidfd_open(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) timerfd_create(0x9, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = timerfd_create(0x0, 0x800) timerfd_settime(r2, 0x3, 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r4, 0x1000006) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x1000000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000580)=0x1) 13.330486656s ago: executing program 1 (id=66): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r2, &(0x7f0000000300)='1\x00', 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000000240)=@attr_other={0x0, 0x0, 0x3, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) pwrite64(r5, 0x0, 0x0, 0x10000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)}, 0x22120) 13.167388856s ago: executing program 2 (id=70): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x8100, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0xb02c, 0x20000401, 0x9, 0x3, 0x88d7, 0x80000001, 0x1007, 0xeffffffe, 0x1002, 0xffffffff, 0x7, 0x7, 0x10000006, 0x5, 0x5, 0x7, 0x8, 0x6, 0x9, 0x8e, 0x10d, 0x4005, 0x2, 0x80000001, 0x5, 0x0, 0x49, 0x12, 0xff, 0xfffffff1, 0x4000004]}) socket$inet6_sctp(0xa, 0x1, 0x84) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write$tun(r0, &(0x7f0000000440)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv6=@gre_packet={0x4, 0x6, "34a2c0", 0x2aa, 0x2f, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@fragment={0xff, 0x0, 0x6, 0x0, 0x0, 0x5, 0x65}, @srh={0x67, 0xc, 0x4, 0x6, 0xb, 0x0, 0x8, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0]}, @hopopts={0x99, 0x0, '\x00', [@generic={0x3}]}, @fragment={0x84, 0x0, 0x2, 0x0, 0x0, 0x4, 0x67}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8e, 0x3, [0xd6db, 0x4], "f906ff955bed611bd403d57185b53e8b6736ab6cfda2e68335700cb6e93e7c86fa36f08bb6cb7d602d2c9ee711b621064ed13cfc5549071d3aac79cd63272ef9882f80c0d41bf3c290a03ed79fbd41c64b4b3ecfdaeff5688e07cb84c3a2948653843d7a781a4c6ddf6bb942c5d5168cb4f688d74768b48a635ed6142b7d61167a26948f915445dcde793e9c3359"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x2, 0x7, 0x5], "b27f52c4de2d2ad5114a6fa3c5b974d5ed37bdd6e88703f8dc9afacbc07b385488db241241a1d0932655bdd4706f34cdd8c35ea7847a93a3"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "65d80527ca3cf35cba3701548c2b20c62bfeb13d371f2ee1ba5e052cc4b29ee53dc5dbec6a6c83e8f4c43d73bcb23a0b59ac47da5189aee2b464fd75690b2ade1898576e4e4f57dd36ad755a965b6b8f88f897cf8b44f7dcfe0266a20d5b53d5eef1e9ff35674fb58138514efd80f419ccdd46cd1c055047b9dfded0ef44eee8514adb809ffe89a368c5fe81589e83053428992f223d491a137ac97b9e8e94b3b57b65b0b43b5a773f1c57c078849139e50c4f4bcb8e233e78c1a8d9a5b434eb6fc32bf642a388f7a2a798f309"}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0xa2, 0x0, 0x1, 0x3, 0x5, 0x7b}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x2, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x2, {0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x6558, 0x4, "1bb3336f9187e7215a0659c5fb292b08922009b5744958a91ef50e24acaf35b2ddb031da7e7d41c835c09fd76d5addef04fba6291b2e13c8d846b269876a824d46"}}}}}}, 0x2e0) 11.199902421s ago: executing program 2 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 9.223738888s ago: executing program 3 (id=76): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) writev(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\a\x00'], 0xfe33) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) fanotify_mark(0xffffffffffffffff, 0x0, 0x21, 0xffffffffffffffff, 0x0) 8.783695474s ago: executing program 2 (id=77): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) 8.430193814s ago: executing program 2 (id=78): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) epoll_create(0x7fffffff) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) setreuid(0x0, 0x0) 8.139328632s ago: executing program 1 (id=79): sched_setaffinity(0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c74c24022063800000002c24f30f556797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4d}], 0x1, 0x3c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_TDX_INIT_MEM_REGION(r2, 0xc008aeba, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket(0xa, 0x3, 0x7) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000003d00090027bd70be9aa8312db3000000000004449f66fc2a68fc00859cf5950e0cda88a07fc6a8664429cd71f30c3e31d2c951"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x6c, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mq_notify(0xffffffffffffffff, 0x0) socket(0x1e, 0x3, 0x0) 8.138968592s ago: executing program 3 (id=80): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) setresgid(0x0, 0xee01, 0xee00) r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000380)={0x0, 0x1, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000540), 0x8) mount$cgroup(0x0, 0x0, 0x0, 0x2014042, 0x0) keyctl$session_to_parent(0x12) 7.239272884s ago: executing program 1 (id=82): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x8100, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0xb02c, 0x20000401, 0x9, 0x3, 0x88d7, 0x80000001, 0x1007, 0xeffffffe, 0x1002, 0xffffffff, 0x7, 0x7, 0x10000006, 0x5, 0x5, 0x7, 0x8, 0x6, 0x9, 0x8e, 0x10d, 0x4005, 0x2, 0x80000001, 0x5, 0x0, 0x49, 0x12, 0xff, 0xfffffff1, 0x4000004]}) socket$inet6_sctp(0xa, 0x1, 0x84) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write$tun(r0, &(0x7f0000000440)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv6=@gre_packet={0x4, 0x6, "34a2c0", 0x2aa, 0x2f, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@fragment={0xff, 0x0, 0x6, 0x0, 0x0, 0x5, 0x65}, @srh={0x67, 0xc, 0x4, 0x6, 0xb, 0x0, 0x8, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0]}, @hopopts={0x99, 0x0, '\x00', [@generic={0x3}]}, @fragment={0x84, 0x0, 0x2, 0x0, 0x0, 0x4, 0x67}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8e, 0x3, [0xd6db, 0x4], "f906ff955bed611bd403d57185b53e8b6736ab6cfda2e68335700cb6e93e7c86fa36f08bb6cb7d602d2c9ee711b621064ed13cfc5549071d3aac79cd63272ef9882f80c0d41bf3c290a03ed79fbd41c64b4b3ecfdaeff5688e07cb84c3a2948653843d7a781a4c6ddf6bb942c5d5168cb4f688d74768b48a635ed6142b7d61167a26948f915445dcde793e9c3359"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x2, 0x7, 0x5], "b27f52c4de2d2ad5114a6fa3c5b974d5ed37bdd6e88703f8dc9afacbc07b385488db241241a1d0932655bdd4706f34cdd8c35ea7847a93a3"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "65d80527ca3cf35cba3701548c2b20c62bfeb13d371f2ee1ba5e052cc4b29ee53dc5dbec6a6c83e8f4c43d73bcb23a0b59ac47da5189aee2b464fd75690b2ade1898576e4e4f57dd36ad755a965b6b8f88f897cf8b44f7dcfe0266a20d5b53d5eef1e9ff35674fb58138514efd80f419ccdd46cd1c055047b9dfded0ef44eee8514adb809ffe89a368c5fe81589e83053428992f223d491a137ac97b9e8e94b3b57b65b0b43b5a773f1c57c078849139e50c4f4bcb8e233e78c1a8d9a5b434eb6fc32bf642a388f7a2a798f309"}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0xa2, 0x0, 0x1, 0x3, 0x5, 0x7b}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x2, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x2, {0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x6558, 0x4, "1bb3336f9187e7215a0659c5fb292b08922009b5744958a91ef50e24acaf35b2ddb031da7e7d41c835c09fd76d5addef04fba6291b2e13c8d846b269876a824d46"}}}}}}, 0x2e0) 5.290851659s ago: executing program 0 (id=83): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) 5.212481864s ago: executing program 1 (id=84): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() getrlimit(0x8, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.11198122s ago: executing program 0 (id=85): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x38}, @val={0x8}, @val={0xc, 0x99, {0xf, 0x55}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r0}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8400) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}}, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58) 4.522622634s ago: executing program 4 (id=91): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="0c1874268c0000bd3f4c2ee4c3e4fdfea05e8e04a1a42a60557fb65e7388442bcb546079b365311561bb95fb1aff7128184ea4ca0f437142f62b8f3200e2eb47d44e67968ef5a2b24506d380fd62fac61aa99133d75de2774168ed1224dee2e650791e490c7c3f514a1b39c61d40894d45c2205a1d988b31cd6dc9ba0908fb6e4cd35d064b5085cd470e8282240c64159ba4b6b084446629f37ec8700db7d6dea32c10c93f7f19f2de78816ca02e67b7ab59f59fdf2bea3156f5938df17892e404e8ae", 0x6e}], 0x1, 0x0, 0x0, 0x2000000}}], 0x800000000000369, 0x44000) 4.42219747s ago: executing program 0 (id=92): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$radio(0x0, 0x0, 0x2) gettid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() prctl$PR_SET_THP_DISABLE(0x44, 0x200000000003) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1b}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 4.318970396s ago: executing program 4 (id=93): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 4.003422425s ago: executing program 4 (id=94): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$nullb(0xffffff9c, &(0x7f0000000000), 0x121501, 0x0) syz_open_dev$video(0x0, 0x203, 0x80200) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32], 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=""/22}, 0x20) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x100030, 0x0) 3.74136931s ago: executing program 4 (id=95): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x8100, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0xb02c, 0x20000401, 0x9, 0x3, 0x88d7, 0x80000001, 0x1007, 0xeffffffe, 0x1002, 0xffffffff, 0x7, 0x7, 0x10000006, 0x5, 0x5, 0x7, 0x8, 0x6, 0x9, 0x8e, 0x10d, 0x4005, 0x2, 0x80000001, 0x5, 0x0, 0x49, 0x12, 0xff, 0xfffffff1, 0x4000004]}) socket$inet6_sctp(0xa, 0x1, 0x84) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write$tun(r0, &(0x7f0000000440)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv6=@gre_packet={0x4, 0x6, "34a2c0", 0x2aa, 0x2f, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@fragment={0xff, 0x0, 0x6, 0x0, 0x0, 0x5, 0x65}, @srh={0x67, 0xc, 0x4, 0x6, 0xb, 0x0, 0x8, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0]}, @hopopts={0x99, 0x0, '\x00', [@generic={0x3}]}, @fragment={0x84, 0x0, 0x2, 0x0, 0x0, 0x4, 0x67}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x8e, 0x3, [0xd6db, 0x4], "f906ff955bed611bd403d57185b53e8b6736ab6cfda2e68335700cb6e93e7c86fa36f08bb6cb7d602d2c9ee711b621064ed13cfc5549071d3aac79cd63272ef9882f80c0d41bf3c290a03ed79fbd41c64b4b3ecfdaeff5688e07cb84c3a2948653843d7a781a4c6ddf6bb942c5d5168cb4f688d74768b48a635ed6142b7d61167a26948f915445dcde793e9c3359"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x2, 0x7, 0x5], "b27f52c4de2d2ad5114a6fa3c5b974d5ed37bdd6e88703f8dc9afacbc07b385488db241241a1d0932655bdd4706f34cdd8c35ea7847a93a3"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "65d80527ca3cf35cba3701548c2b20c62bfeb13d371f2ee1ba5e052cc4b29ee53dc5dbec6a6c83e8f4c43d73bcb23a0b59ac47da5189aee2b464fd75690b2ade1898576e4e4f57dd36ad755a965b6b8f88f897cf8b44f7dcfe0266a20d5b53d5eef1e9ff35674fb58138514efd80f419ccdd46cd1c055047b9dfded0ef44eee8514adb809ffe89a368c5fe81589e83053428992f223d491a137ac97b9e8e94b3b57b65b0b43b5a773f1c57c078849139e50c4f4bcb8e233e78c1a8d9a5b434eb6fc32bf642a388f7a2a798f309"}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0xa2, 0x0, 0x1, 0x3, 0x5, 0x7b}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x2, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x2, {0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x6558, 0x4, "1bb3336f9187e7215a0659c5fb292b08922009b5744958a91ef50e24acaf35b2ddb031da7e7d41c835c09fd76d5addef04fba6291b2e13c8d846b269876a824d46"}}}}}}, 0x2e0) 2.164696983s ago: executing program 4 (id=96): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.615897545s ago: executing program 2 (id=97): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) read$hidraw(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='\x00') 1.303314923s ago: executing program 0 (id=98): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x12001, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) read(r0, &(0x7f0000000240)=""/88, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$unix(r2, &(0x7f00000002c0)=@abs, &(0x7f0000000000)=0x6e, 0x800) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x26000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x26, 0x9, 0x10}, {0x8080000, 0x0, 0x935bf724b7effdda, 0x8, 0x9, 0x4, 0x0, 0x0, 0xa, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0x8, 0x0, 0xa, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x81, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c, 0xfe, 0xfc}, {0x30000, 0xb000, 0xd, 0x8, 0x0, 0x0, 0x2, 0x8e, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x7000}, {0x50000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xc, 0xf801, 0x0, [0x0, 0x1000000000000, 0x1]}) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f0000000100)={0x0, 0x116000, 0x8}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f00000000c0)={0x40000}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000020000007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000002000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.02872235s ago: executing program 3 (id=99): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x100000d6}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="f78d6c3bb8d23594655015697b5eb8", 0xf}], 0x1, 0x0, 0x0, 0x20000804}], 0x1, 0x2ede8ec33678cf20) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r6, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r2, 0x623, 0x4c1, 0x4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}, 0x0) 96.525985ms ago: executing program 1 (id=100): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, 0x0) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) r4 = dup(r0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='ip6gretap0\x00', 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r5, 0x0, r0, 0x0, 0xffff, 0x2) write$P9_RREAD(r4, &(0x7f0000000140)=ANY=[], 0xb) 0s ago: executing program 0 (id=101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x7, 0x1, 0x1, 0xe92}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts. [ 64.249100][ T4174] cgroup: Unknown subsys name 'net' [ 64.352832][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.877868][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.403243][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 67.435287][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 67.477701][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 67.548603][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 67.582599][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 67.597283][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.605379][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.614073][ T4188] device bridge_slave_0 entered promiscuous mode [ 67.648223][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.655888][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.664681][ T4188] device bridge_slave_1 entered promiscuous mode [ 67.702596][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.710039][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.718773][ T4186] device bridge_slave_0 entered promiscuous mode [ 67.753522][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.760638][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.769150][ T4186] device bridge_slave_1 entered promiscuous mode [ 67.794107][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.811344][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.843420][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.850686][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.858892][ T4187] device bridge_slave_0 entered promiscuous mode [ 67.897840][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.905120][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.913923][ T4187] device bridge_slave_1 entered promiscuous mode [ 67.923407][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.936640][ T4188] team0: Port device team_slave_0 added [ 67.949636][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.960037][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.968658][ T4193] device bridge_slave_0 entered promiscuous mode [ 67.985992][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.996592][ T4188] team0: Port device team_slave_1 added [ 68.002853][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.009939][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.018719][ T4194] device bridge_slave_0 entered promiscuous mode [ 68.026916][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.034531][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.042888][ T4193] device bridge_slave_1 entered promiscuous mode [ 68.075852][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.083109][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.091030][ T4194] device bridge_slave_1 entered promiscuous mode [ 68.107382][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.125586][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.132826][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.162138][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.177379][ T4186] team0: Port device team_slave_0 added [ 68.192554][ T4186] team0: Port device team_slave_1 added [ 68.205855][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.215632][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.222928][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.249426][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.282324][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.299850][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.313105][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.351127][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.369042][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.376551][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.402599][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.420680][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.428694][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.455158][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.469210][ T4187] team0: Port device team_slave_0 added [ 68.491117][ T4193] team0: Port device team_slave_0 added [ 68.503547][ T4187] team0: Port device team_slave_1 added [ 68.520433][ T4188] device hsr_slave_0 entered promiscuous mode [ 68.528589][ T4188] device hsr_slave_1 entered promiscuous mode [ 68.539458][ T4193] team0: Port device team_slave_1 added [ 68.569738][ T4194] team0: Port device team_slave_0 added [ 68.578361][ T4194] team0: Port device team_slave_1 added [ 68.585565][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.592919][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.619099][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.632573][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.639562][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.665888][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.709859][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.717108][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.743242][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.765365][ T4186] device hsr_slave_0 entered promiscuous mode [ 68.772680][ T4186] device hsr_slave_1 entered promiscuous mode [ 68.780075][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.788529][ T4186] Cannot create hsr debugfs directory [ 68.810184][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.817817][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.844572][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.867325][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.874874][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.901496][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.920410][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.928565][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.955011][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.988063][ T4193] device hsr_slave_0 entered promiscuous mode [ 68.996009][ T4193] device hsr_slave_1 entered promiscuous mode [ 69.003889][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.011493][ T4193] Cannot create hsr debugfs directory [ 69.092948][ T3578] Bluetooth: hci1: command 0x0409 tx timeout [ 69.099855][ T3578] Bluetooth: hci0: command 0x0409 tx timeout [ 69.102160][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 69.106767][ T3578] Bluetooth: hci3: command 0x0409 tx timeout [ 69.122086][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 69.124630][ T4194] device hsr_slave_0 entered promiscuous mode [ 69.135420][ T4194] device hsr_slave_1 entered promiscuous mode [ 69.142628][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.150390][ T4194] Cannot create hsr debugfs directory [ 69.215486][ T4187] device hsr_slave_0 entered promiscuous mode [ 69.222990][ T4187] device hsr_slave_1 entered promiscuous mode [ 69.229696][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.237810][ T4187] Cannot create hsr debugfs directory [ 69.487918][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.503343][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.523559][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.534165][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.574620][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.588458][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.612662][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.622450][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.716167][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.734592][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.746483][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.773876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.783717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.793925][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.800840][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.811414][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.829309][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.839324][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.849781][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.857191][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.867363][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.898284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.907728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.916378][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.923701][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.955332][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.969806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.995658][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.006618][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.018391][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.040426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.071619][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.096075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.106025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.114924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.124421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.133998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.143828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.152672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.161251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.178994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.195767][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.206742][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.224819][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.233525][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.248051][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.261865][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.287530][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.319527][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.342599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.352852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.361487][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.368693][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.378152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.387346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.396374][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.403574][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.413249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.421545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.433375][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.453002][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.466280][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.487204][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.506277][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.550154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.560188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.569527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.579411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.588525][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.595688][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.604903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.615265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.624803][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.631977][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.640846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.650449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.668380][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.686061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.696255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.706585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.718431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.741243][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.753879][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.769054][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.777651][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.785658][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.795108][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.805255][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.814270][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.823036][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.831007][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.850118][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.864346][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.888173][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.905123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.915897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.925249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.942238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.960929][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.968088][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.983985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.998545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.007701][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.014864][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.033255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.041387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.065910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.075529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.084988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.095842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.137319][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.154902][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.172453][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 71.179407][ T4249] Bluetooth: hci2: command 0x041b tx timeout [ 71.187179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.192293][ T4249] Bluetooth: hci3: command 0x041b tx timeout [ 71.204061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.212251][ T4249] Bluetooth: hci0: command 0x041b tx timeout [ 71.219587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.229286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.239770][ T4249] Bluetooth: hci1: command 0x041b tx timeout [ 71.270315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.287222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.298605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.344332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.364237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.380090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.389677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.398669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.416467][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.423425][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.433279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.445817][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.474551][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.496042][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.510595][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.530848][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.592185][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.601551][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.616939][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.629023][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.641837][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.655701][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.680825][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.728593][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.737503][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.745982][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.756531][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.765580][ T1270] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.772734][ T1270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.781404][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.790478][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.799060][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.807557][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.815988][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.830741][ T4193] device veth0_vlan entered promiscuous mode [ 71.850217][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.864545][ T4188] device veth0_vlan entered promiscuous mode [ 71.882675][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.891677][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.907461][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.918611][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.927989][ T1484] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.935175][ T1484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.945934][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.954232][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.977564][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.988483][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.002853][ T4188] device veth1_vlan entered promiscuous mode [ 72.016710][ T4193] device veth1_vlan entered promiscuous mode [ 72.044260][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.051847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.065037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.074158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.083399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.093545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.102904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.112706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.121327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.128997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.137292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.164210][ T4188] device veth0_macvtap entered promiscuous mode [ 72.179013][ T4188] device veth1_macvtap entered promiscuous mode [ 72.188694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.197549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.209178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.223526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.231613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.241040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.249912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.258870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.269047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.294049][ T4193] device veth0_macvtap entered promiscuous mode [ 72.321386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.331737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.345149][ T4193] device veth1_macvtap entered promiscuous mode [ 72.364935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.375788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.384598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.394020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.403718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.412369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.421686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.431714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.451475][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.465160][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.476448][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.488765][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.499259][ T4186] device veth0_vlan entered promiscuous mode [ 72.519861][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.529459][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.541482][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.563910][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.579620][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.589179][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.609174][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.638786][ T4186] device veth1_vlan entered promiscuous mode [ 72.652997][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.666742][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.679069][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.700173][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.719549][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.729357][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.738946][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.751833][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.761756][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.776035][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.785231][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.820220][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.829201][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.838908][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.851136][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.873949][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.882828][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.929530][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.940310][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.949953][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.958078][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.968886][ T4194] device veth0_vlan entered promiscuous mode [ 72.985968][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.999519][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.014479][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.037412][ T4194] device veth1_vlan entered promiscuous mode [ 73.060857][ T4186] device veth0_macvtap entered promiscuous mode [ 73.090018][ T4186] device veth1_macvtap entered promiscuous mode [ 73.143617][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.152305][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.160464][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.170455][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.180126][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.189243][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.222609][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.230812][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.252573][ T1326] Bluetooth: hci0: command 0x040f tx timeout [ 73.258844][ T1326] Bluetooth: hci3: command 0x040f tx timeout [ 73.266867][ T1326] Bluetooth: hci2: command 0x040f tx timeout [ 73.273456][ T1326] Bluetooth: hci4: command 0x040f tx timeout [ 73.289650][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.308998][ T4194] device veth0_macvtap entered promiscuous mode [ 73.314347][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.325632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.333481][ T1326] Bluetooth: hci1: command 0x040f tx timeout [ 73.340194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.349892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.359076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.368337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.377426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.390836][ T4187] device veth0_vlan entered promiscuous mode [ 73.399941][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.409758][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.434953][ T4194] device veth1_macvtap entered promiscuous mode [ 73.443027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.451095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.459586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.469338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.483294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.499621][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.510431][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.521148][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.532496][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.544574][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.569182][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.582529][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.595834][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.607849][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.618061][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.628591][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.640864][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.650716][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.663831][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.678839][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.689519][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.712514][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.720404][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.724663][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.741318][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.751239][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.763358][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.776032][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.788625][ T4187] device veth1_vlan entered promiscuous mode [ 73.799824][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.810641][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.822429][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.833629][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.843760][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.855289][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.866987][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.881138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.889775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.901143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.910506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.919947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.933393][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.943379][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.954189][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.963533][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.997006][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.031689][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.042265][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.051038][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.559485][ T4187] device veth0_macvtap entered promiscuous mode [ 75.172275][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 75.181998][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 75.191957][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 75.201956][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 75.211955][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 75.221964][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 75.230865][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.239866][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.248988][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.257998][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.861700][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.872220][ T1110] Bluetooth: hci4: command 0x0419 tx timeout [ 75.878405][ T1110] Bluetooth: hci2: command 0x0419 tx timeout [ 75.884613][ T1110] Bluetooth: hci3: command 0x0419 tx timeout [ 75.897862][ T1110] Bluetooth: hci0: command 0x0419 tx timeout [ 75.916783][ T1110] Bluetooth: hci1: command 0x0419 tx timeout [ 75.972790][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.101447][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.121816][ T4187] device veth1_macvtap entered promiscuous mode [ 76.248875][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.257760][ T1270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.281902][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.292956][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.302577][ T1270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.312729][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.335255][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.347686][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.358768][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.370113][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.384615][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.400151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.414557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.424266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.441285][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.457706][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.471066][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.482404][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.492848][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.512112][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.551741][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.574179][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.587893][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.608469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.627460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.638980][ T1484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.649416][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.667309][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.672416][ T1484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.684635][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.698727][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.807554][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.276708][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.285546][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.298837][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.365443][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.383948][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.430189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.569493][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.586878][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.548863][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.015573][ T4320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.092786][ T4320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.105161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.115308][ T4329] xt_policy: output policy not valid in PREROUTING and INPUT [ 79.617442][ T4331] ODEBUG: Out of memory. ODEBUG disabled [ 80.529593][ T4345] ======================================================= [ 80.529593][ T4345] WARNING: The mand mount option has been deprecated and [ 80.529593][ T4345] and is ignored by this kernel. Remove the mand [ 80.529593][ T4345] option from the mount to silence this warning. [ 80.529593][ T4345] ======================================================= [ 80.684011][ T4345] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 80.784389][ T4345] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 81.192090][ T4345] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 81.200307][ T4345] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 81.208995][ T4345] overlayfs: d_ino too big (1, ino=9223372036854775826, xinobits=3) [ 81.217544][ T4345] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 81.226370][ T4345] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 81.235328][ T4345] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 81.243617][ T4345] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 81.252313][ T4345] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 81.260700][ T4345] overlayfs: d_ino too big (dev, ino=4611686018427387909, xinobits=3) [ 81.269581][ T4345] overlayfs: d_ino too big (kernel, ino=4611686018427389040, xinobits=3) [ 82.807271][ T4360] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.860811][ T4373] Zero length message leads to an empty skb [ 85.548189][ T4375] syz.2.18 uses obsolete (PF_INET,SOCK_PACKET) [ 86.290559][ T4382] process 'syz.4.20' launched './file0' with NULL argv: empty string added [ 87.544755][ T1108] cfg80211: failed to load regulatory.db [ 87.622047][ T3578] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.322094][ T3578] usb 4-1: Using ep0 maxpacket: 16 [ 88.460465][ T3578] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.667018][ T3578] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.674164][ T3578] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 88.683499][ T3578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.742726][ T3578] usb 4-1: config 0 descriptor?? [ 89.557664][ T3578] usb 4-1: can't set config #0, error -71 [ 89.574098][ T3578] usb 4-1: USB disconnect, device number 2 [ 92.703147][ T1108] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.952058][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 93.132747][ T1108] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 93.246843][ T1108] usb 3-1: config 179 has no interface number 0 [ 93.301259][ T1108] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 93.391310][ T1108] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 93.408389][ T1108] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 93.441949][ T1108] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 93.474956][ T1108] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 93.488918][ T1108] usb 3-1: config 179 interface 65 has no altsetting 0 [ 93.497259][ T1108] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 93.507501][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.614034][ T1108] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5 [ 95.543044][ T7] usb 3-1: USB disconnect, device number 2 [ 95.552965][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 95.563537][ T7] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 95.644474][ T4450] tipc: Started in network mode [ 95.649994][ T4450] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 95.660032][ T4450] tipc: Enabled bearer , priority 10 [ 95.886766][ T4458] Cannot find add_set index 65532 as target [ 97.744437][ T1108] tipc: Node number set to 1 [ 100.312089][ T4300] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.692086][ T4300] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.802052][ T4300] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.002170][ T4503] Cannot find add_set index 65532 as target [ 101.102223][ T4300] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.115433][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.263688][ T4300] usb 5-1: SerialNumber: syz [ 103.487439][ T4300] usb 5-1: 0:2 : does not exist [ 103.497136][ T4300] usb 5-1: unit 5: unexpected type 0x09 [ 103.597848][ T4300] usb 5-1: USB disconnect, device number 2 [ 107.062872][ T4557] Cannot find add_set index 65532 as target [ 110.012092][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.623053][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 110.849166][ T7] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.085886][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.103598][ T7] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 111.114470][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.530481][ T7] usb 5-1: config 0 descriptor?? [ 111.760600][ T4592] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.412603][ T7] hid-generic 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 112.623891][ T4300] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.083419][ T4606] Cannot find add_set index 65532 as target [ 114.692059][ T4300] usb 4-1: Using ep0 maxpacket: 16 [ 114.793922][ T4302] usb 5-1: USB disconnect, device number 3 [ 114.812121][ T4300] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 114.830135][ T4300] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.874231][ T4612] CIFS: VFS: Malformed UNC in devname [ 114.899794][ T4300] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.982205][ T4300] usb 4-1: string descriptor 0 read error: -71 [ 114.988524][ T4300] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.042089][ T4300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.432190][ T4300] usb 4-1: can't set config #1, error -71 [ 115.448173][ T4627] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.470816][ T4300] usb 4-1: USB disconnect, device number 3 [ 115.823374][ T4630] Cannot find add_set index 65532 as target [ 118.682115][ T4302] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.882171][ T4302] usb 3-1: Using ep0 maxpacket: 16 [ 119.907230][ T4654] netlink: 'syz.1.100': attribute type 10 has an invalid length. [ 119.925830][ T4656] ------------[ cut here ]------------ [ 119.931349][ T4656] trace type BPF program uses run-time allocation [ 119.951638][ T4656] WARNING: CPU: 1 PID: 4656 at kernel/bpf/verifier.c:11750 check_map_prog_compatibility+0x6cf/0x870 [ 119.963536][ T4654] netlink: 55 bytes leftover after parsing attributes in process `syz.1.100'. [ 120.000684][ T4656] Modules linked in: [ 120.014751][ T4656] CPU: 1 PID: 4656 Comm: syz.0.101 Not tainted syzkaller #0 [ 120.023367][ T4656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 120.033886][ T4656] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 120.041121][ T4656] Code: ff e8 d5 b6 ef ff 48 c7 c6 20 42 31 8a e9 0d fd ff ff e8 c4 b6 ef ff c6 05 92 c7 ec 0b 01 48 c7 c7 80 3e 31 8a e8 d1 bd 27 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 120.067802][ T4302] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.082738][ T4302] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.102813][ T4302] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 120.161383][ T4656] RSP: 0018:ffffc90002f8f450 EFLAGS: 00010246 [ 120.167928][ T4302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.193533][ T4656] RAX: 59cd7b406729f700 RBX: 0000000000000001 RCX: 0000000000080000 [ 120.216825][ T4302] usb 3-1: config 0 descriptor?? [ 120.229968][ T4656] RDX: ffffc90003922000 RSI: 0000000000002a37 RDI: 0000000000002a38 [ 120.269207][ T4656] RBP: ffff8880246f0000 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 120.302364][ T4656] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffffc9000130a038 [ 120.338267][ T4656] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000261407 [ 120.356776][ T4656] FS: 00007efd89b0b6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 120.382100][ T4656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.407697][ T4656] CR2: 00007f87e281de9c CR3: 000000001eb5d000 CR4: 00000000003506e0 [ 120.427319][ T4656] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 120.443207][ T4656] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 120.458116][ T4656] Call Trace: [ 120.469928][ T4656] [ 120.477906][ T4656] resolve_pseudo_ldimm64+0x681/0x1040 [ 120.485363][ T4656] ? check_attach_btf_id+0xe70/0xe70 [ 120.496962][ T4656] ? __mark_reg_known+0x1a0/0x1a0 [ 120.516933][ T4656] bpf_check+0x4e00/0xf270 [ 120.550620][ T4656] ? mark_lock+0x94/0x320 [ 120.564032][ T4656] ? __lock_acquire+0x13bc/0x7d10 [ 120.585311][ T4656] ? bpf_get_btf_vmlinux+0x10/0x10 [ 120.626183][ T4656] ? mark_lock+0x94/0x320 [ 120.650032][ T4656] ? verify_lock_unused+0x140/0x140 [ 120.668158][ T4656] ? __mutex_trylock_common+0x155/0x260 [ 120.684555][ T4656] ? verify_lock_unused+0x140/0x140 [ 120.703832][ T4656] ? rcu_lock_release+0x5/0x20 [ 120.716797][ T4656] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 120.720019][ T4302] hid-generic 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 120.744871][ T4656] ? lock_chain_count+0x20/0x20 [ 120.769326][ T4656] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 120.809722][ T4656] ? lockdep_hardirqs_on+0x94/0x140 [ 120.829033][ T4656] ? ktime_get_with_offset+0xff/0x320 [ 120.835866][ T4656] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 120.858570][ T4656] ? ktime_get_real_ts64+0x440/0x440 [ 120.870129][ T4656] ? pcpu_alloc+0x1121/0x1770 [ 120.877956][ T4656] ? __might_fault+0xb3/0x110 [ 120.887023][ T4656] ? memset+0x1e/0x40 [ 120.903102][ T4656] ? bpf_obj_name_cpy+0x190/0x1d0 [ 120.908403][ T4656] bpf_prog_load+0xfec/0x1510 [ 120.916211][ T4656] ? map_freeze+0x350/0x350 [ 120.920936][ T4656] ? __might_fault+0xb7/0x110 [ 120.938599][ T4656] ? __might_fault+0xb3/0x110 [ 120.950047][ T4656] ? bpf_lsm_bpf+0x5/0x10 [ 120.967782][ T4656] ? security_bpf+0x7a/0xa0 [ 120.974255][ T4656] __sys_bpf+0x532/0x6f0 [ 120.978867][ T4656] ? bpf_link_show_fdinfo+0x380/0x380 [ 120.987444][ T4656] ? vtime_user_exit+0x2c8/0x3e0 [ 120.993137][ T4656] __x64_sys_bpf+0x78/0x90 [ 120.998407][ T4656] do_syscall_64+0x4c/0xa0 [ 121.004787][ T4656] ? clear_bhb_loop+0x30/0x80 [ 121.009628][ T4656] ? clear_bhb_loop+0x30/0x80 [ 121.015166][ T4656] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.021200][ T4656] RIP: 0033:0x7efd8b8b0f79 [ 121.026322][ T4656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.046003][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.098592][ T4656] RSP: 002b:00007efd89b0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.182003][ T4656] RAX: ffffffffffffffda RBX: 00007efd8bb2afa0 RCX: 00007efd8b8b0f79 [ 121.194700][ T4656] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 121.204739][ T4300] usb 3-1: USB disconnect, device number 3 [ 121.221661][ T4656] RBP: 00007efd8b9477e0 R08: 0000000000000000 R09: 0000000000000000 [ 121.240455][ T4656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.261485][ T4656] R13: 00007efd8bb2b038 R14: 00007efd8bb2afa0 R15: 00007fff964d7188 [ 121.283324][ T4656] [ 121.291035][ T4656] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 121.298384][ T4656] CPU: 1 PID: 4656 Comm: syz.0.101 Not tainted syzkaller #0 [ 121.305812][ T4656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 121.315387][ T4677] fido_id[4677]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 121.315916][ T4656] Call Trace: [ 121.333821][ T4656] [ 121.336791][ T4656] dump_stack_lvl+0x188/0x250 [ 121.341598][ T4656] ? show_regs_print_info+0x20/0x20 [ 121.346832][ T4656] ? load_image+0x400/0x400 [ 121.351393][ T4656] panic+0x2e5/0x810 [ 121.355423][ T4656] ? bpf_jit_dump+0xd0/0xd0 [ 121.359980][ T4656] ? check_map_prog_compatibility+0x6cf/0x870 [ 121.366078][ T4656] __warn+0x248/0x2b0 [ 121.370105][ T4656] ? check_map_prog_compatibility+0x6cf/0x870 [ 121.376210][ T4656] report_bug+0x1b7/0x2e0 [ 121.380585][ T4656] handle_bug+0x3a/0x70 [ 121.384768][ T4656] exc_invalid_op+0x16/0x40 [ 121.389311][ T4656] asm_exc_invalid_op+0x16/0x20 [ 121.394195][ T4656] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 121.400912][ T4656] Code: ff e8 d5 b6 ef ff 48 c7 c6 20 42 31 8a e9 0d fd ff ff e8 c4 b6 ef ff c6 05 92 c7 ec 0b 01 48 c7 c7 80 3e 31 8a e8 d1 bd 27 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 121.420562][ T4656] RSP: 0018:ffffc90002f8f450 EFLAGS: 00010246 [ 121.426667][ T4656] RAX: 59cd7b406729f700 RBX: 0000000000000001 RCX: 0000000000080000 [ 121.434710][ T4656] RDX: ffffc90003922000 RSI: 0000000000002a37 RDI: 0000000000002a38 [ 121.442712][ T4656] RBP: ffff8880246f0000 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 121.450728][ T4656] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffffc9000130a038 [ 121.458707][ T4656] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff92000261407 [ 121.466873][ T4656] resolve_pseudo_ldimm64+0x681/0x1040 [ 121.472371][ T4656] ? check_attach_btf_id+0xe70/0xe70 [ 121.477698][ T4656] ? __mark_reg_known+0x1a0/0x1a0 [ 121.482744][ T4656] bpf_check+0x4e00/0xf270 [ 121.487351][ T4656] ? mark_lock+0x94/0x320 [ 121.491683][ T4656] ? __lock_acquire+0x13bc/0x7d10 [ 121.496743][ T4656] ? bpf_get_btf_vmlinux+0x10/0x10 [ 121.501991][ T4656] ? mark_lock+0x94/0x320 [ 121.506361][ T4656] ? verify_lock_unused+0x140/0x140 [ 121.511562][ T4656] ? __mutex_trylock_common+0x155/0x260 [ 121.517118][ T4656] ? verify_lock_unused+0x140/0x140 [ 121.522342][ T4656] ? rcu_lock_release+0x5/0x20 [ 121.527150][ T4656] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 121.533141][ T4656] ? lock_chain_count+0x20/0x20 [ 121.538003][ T4656] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 121.544267][ T4656] ? lockdep_hardirqs_on+0x94/0x140 [ 121.549475][ T4656] ? ktime_get_with_offset+0xff/0x320 [ 121.554850][ T4656] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 121.561197][ T4656] ? ktime_get_real_ts64+0x440/0x440 [ 121.566493][ T4656] ? pcpu_alloc+0x1121/0x1770 [ 121.571182][ T4656] ? __might_fault+0xb3/0x110 [ 121.575868][ T4656] ? memset+0x1e/0x40 [ 121.580011][ T4656] ? bpf_obj_name_cpy+0x190/0x1d0 [ 121.585267][ T4656] bpf_prog_load+0xfec/0x1510 [ 121.590065][ T4656] ? map_freeze+0x350/0x350 [ 121.594682][ T4656] ? __might_fault+0xb7/0x110 [ 121.599379][ T4656] ? __might_fault+0xb3/0x110 [ 121.604082][ T4656] ? bpf_lsm_bpf+0x5/0x10 [ 121.608435][ T4656] ? security_bpf+0x7a/0xa0 [ 121.612950][ T4656] __sys_bpf+0x532/0x6f0 [ 121.617211][ T4656] ? bpf_link_show_fdinfo+0x380/0x380 [ 121.622629][ T4656] ? vtime_user_exit+0x2c8/0x3e0 [ 121.627638][ T4656] __x64_sys_bpf+0x78/0x90 [ 121.632086][ T4656] do_syscall_64+0x4c/0xa0 [ 121.636526][ T4656] ? clear_bhb_loop+0x30/0x80 [ 121.641221][ T4656] ? clear_bhb_loop+0x30/0x80 [ 121.645926][ T4656] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.651964][ T4656] RIP: 0033:0x7efd8b8b0f79 [ 121.656425][ T4656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.676082][ T4656] RSP: 002b:00007efd89b0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.684532][ T4656] RAX: ffffffffffffffda RBX: 00007efd8bb2afa0 RCX: 00007efd8b8b0f79 [ 121.692540][ T4656] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 121.700522][ T4656] RBP: 00007efd8b9477e0 R08: 0000000000000000 R09: 0000000000000000 [ 121.708527][ T4656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.716766][ T4656] R13: 00007efd8bb2b038 R14: 00007efd8bb2afa0 R15: 00007fff964d7188 [ 121.725077][ T4656] [ 121.728360][ T4656] Kernel Offset: disabled [ 121.732829][ T4656] Rebooting in 86400 seconds..