last executing test programs: 10.02237487s ago: executing program 4 (id=166): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="b305000065c01bdff2cd81cfe45d4cb8e10000000000ac39c2"], 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x1, 0x0, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000140)) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000c00000/0x1000)=nil, 0x1000, 0x16) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 8.771351631s ago: executing program 3 (id=170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 8.429617823s ago: executing program 3 (id=172): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, r0, 0x0) mlockall(0x3) 8.070321846s ago: executing program 4 (id=176): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38011, r0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 7.23874063s ago: executing program 4 (id=181): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) membarrier(0x4, 0x0) 6.875505774s ago: executing program 3 (id=182): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x801}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000040)={r8, 0x2}, 0x8) read$FUSE(r4, 0x0, 0x0) r9 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\x86\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x4}, 0x14) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) 4.636403129s ago: executing program 1 (id=190): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x3000000}, 0x8) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 4.601330652s ago: executing program 2 (id=191): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0x80403) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) 4.523157736s ago: executing program 0 (id=192): openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={r1, r2, 0x0, 0x0, 0x4}) 4.387763235s ago: executing program 2 (id=193): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c00038028000080080003"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) 4.387567805s ago: executing program 0 (id=194): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x5, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {0x0, 0xff, 0x2}, 0x6621350e9d60fd79}, 0x18) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x1, 0xf0}, 0x1}, 0x18) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') pread64(r9, &(0x7f0000000300)=""/4092, 0xffc, 0x4) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3.754953686s ago: executing program 4 (id=195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x200, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x2, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0xfffb, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 3.427829197s ago: executing program 1 (id=196): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'erspan0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0x36f4, 0x10100, 0x4000000, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000000c0)=0x1) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000100)=""/54, 0x36}], 0x1) 3.367873272s ago: executing program 2 (id=197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x5, &(0x7f0000000100)=""/102400, &(0x7f00000000c0)=0x19000) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) sendmmsg$inet(r9, &(0x7f0000000840)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r10, &(0x7f0000002340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}], 0x3e8, 0x0) 2.821471037s ago: executing program 0 (id=198): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20001, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0xa0, 0x258, 0x80, 0x384, 0xda, 0x10000, 0x20, 0x0, {0x4, 0x7}, {0x5, 0x1}, {0xffffffff, 0x2, 0x1}, {0x800, 0x5, 0x20001}, 0x5, 0x80, 0x3ff, 0xffc, 0x1, 0x7, 0x63, 0x10002, 0x5, 0x7fff, 0x8, 0x7, 0x25, 0x7af7ea2b84c5e1ec, 0x0, 0x2}) socket$kcm(0x10, 0x2, 0x4) gettid() r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0xfffffffd, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) 1.707555339s ago: executing program 1 (id=199): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0x6, 0x7ff, 0x1, 0x0, 0x0, 0xccc, 0x8, 0xb, 0xa, 0xfc, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000007, 0x100, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x7, 0x4, 0x10000, 0x6]}) pselect6(0x40, &(0x7f0000000340)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x1, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xfffffffffffffffd, 0x9, 0x0, 0x1, 0x80000005}, 0x0, 0x0) 1.603963655s ago: executing program 4 (id=200): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x0) 1.519368931s ago: executing program 2 (id=201): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) landlock_create_ruleset(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0xd) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000002300)) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_PDEATHSIG(0x1, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2fc, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "e4ff0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9eb85f401b0000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x358) 1.396030229s ago: executing program 0 (id=202): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\r\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x4}, 0x14) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) 311.38814ms ago: executing program 2 (id=203): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3fb, 0x7, 0xffffffffffffffff, 0x9, 0x7f, 0xf, 0x80000006}, 0x0, 0x0) 295.59136ms ago: executing program 4 (id=204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x2}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x8001}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x80000000}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x40}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x5}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x71}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30}, 0x4) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000092}, 0x4001) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x4, 0x0, {0x5, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x300, 0x3, 0x1}}, @void, @void, @val={0x76, 0x6, {0x4, 0x80, 0x7, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 293.577851ms ago: executing program 1 (id=205): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xc, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r1) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) 228.033775ms ago: executing program 3 (id=206): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') close(0x3) read$char_usb(r0, &(0x7f0000000080)=""/139, 0x8b) 160.99693ms ago: executing program 3 (id=207): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) mknod$loop(0x0, 0x2000, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5, 0x1, 0x2, 0xd, 0x50, 0xef1f}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x2, 0x400000000000003, 0x0, 0x9, 0x2}, 0x10}}, 0x8080) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041319000200c90000000000000000"], 0x1c) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 0s ago: executing program 3 (id=208): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. [ 57.649887][ T4173] cgroup: Unknown subsys name 'net' [ 57.848393][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.357993][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.231072][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.309337][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 61.337558][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 61.406268][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.414123][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.422376][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.430881][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 61.457474][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.464807][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.472707][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.522956][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 61.549233][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.563247][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.570322][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.578795][ T4183] device bridge_slave_0 entered promiscuous mode [ 61.607061][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.624814][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.632233][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.640026][ T4183] device bridge_slave_1 entered promiscuous mode [ 61.647563][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.654894][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.663201][ T4185] device bridge_slave_0 entered promiscuous mode [ 61.697538][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.704714][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.712837][ T4185] device bridge_slave_1 entered promiscuous mode [ 61.772981][ T4187] team0: Port device team_slave_0 added [ 61.781450][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.799250][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.806541][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.815227][ T4184] device bridge_slave_0 entered promiscuous mode [ 61.830096][ T4187] team0: Port device team_slave_1 added [ 61.837629][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.856791][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.869199][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.879360][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.886637][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.894812][ T4184] device bridge_slave_1 entered promiscuous mode [ 61.901946][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.909104][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.917079][ T4186] device bridge_slave_0 entered promiscuous mode [ 61.955421][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.962711][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.970553][ T4186] device bridge_slave_1 entered promiscuous mode [ 61.987932][ T4183] team0: Port device team_slave_0 added [ 62.018192][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.025324][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.051450][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.064637][ T4183] team0: Port device team_slave_1 added [ 62.070830][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.077891][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.103816][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.117627][ T4185] team0: Port device team_slave_0 added [ 62.125566][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.162353][ T4185] team0: Port device team_slave_1 added [ 62.169542][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.189115][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.236901][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.246488][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.254064][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.280077][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.294959][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.302788][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.318365][ T4184] team0: Port device team_slave_0 added [ 62.333427][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.340531][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.366673][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.382982][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.389955][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.416485][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.428828][ T4184] team0: Port device team_slave_1 added [ 62.455211][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.462272][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.488329][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.507789][ T4186] team0: Port device team_slave_0 added [ 62.534774][ T4186] team0: Port device team_slave_1 added [ 62.562289][ T4183] device hsr_slave_0 entered promiscuous mode [ 62.569079][ T4183] device hsr_slave_1 entered promiscuous mode [ 62.575735][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.583699][ T4183] Cannot create hsr debugfs directory [ 62.604981][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.612167][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.638259][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.668490][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.675514][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.701488][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.713166][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.720134][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.746562][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.774125][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.781111][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.807870][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.842943][ T4185] device hsr_slave_0 entered promiscuous mode [ 62.849738][ T4185] device hsr_slave_1 entered promiscuous mode [ 62.856472][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.864145][ T4185] Cannot create hsr debugfs directory [ 62.878006][ T1326] Bluetooth: hci1: command 0x0409 tx timeout [ 62.886990][ T1326] Bluetooth: hci4: command 0x0409 tx timeout [ 62.924757][ T4184] device hsr_slave_0 entered promiscuous mode [ 62.932203][ T4184] device hsr_slave_1 entered promiscuous mode [ 62.938860][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.946552][ T4184] Cannot create hsr debugfs directory [ 62.952044][ T1326] Bluetooth: hci2: command 0x0409 tx timeout [ 62.958154][ T1326] Bluetooth: hci0: command 0x0409 tx timeout [ 62.967646][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 63.012085][ T4186] device hsr_slave_0 entered promiscuous mode [ 63.019259][ T4186] device hsr_slave_1 entered promiscuous mode [ 63.026552][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.034771][ T4186] Cannot create hsr debugfs directory [ 63.259233][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.278174][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.302767][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.312325][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.324230][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.338850][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.352931][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.379109][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.449652][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.472047][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.480455][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.500230][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.509282][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.541891][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.550522][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.577814][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.587809][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.600107][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.622307][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.632139][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.640791][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.650791][ T1217] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.658126][ T1217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.670040][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.682612][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.715968][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.725489][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.734233][ T1217] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.741447][ T1217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.760720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.777978][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.802695][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.823518][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.834391][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.845083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.853715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.861403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.870346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.880186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.893290][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.906635][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.921295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.929561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.938408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.948164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.957107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.966179][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.973274][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.981353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.005570][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.014357][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.023493][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.033871][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.042812][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.049866][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.063918][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.073392][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.082187][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.115629][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.126016][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.172882][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.195474][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.206809][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.228904][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.243588][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.254580][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.263746][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.272818][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.281204][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.290201][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.298872][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.308717][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.317111][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.361608][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.390828][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.405896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.417362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.438783][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.447111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.460912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.469687][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.476819][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.522036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.530890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.548375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.557404][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.564538][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.574063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.583245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.598205][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.620028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.628115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.637583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.646228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.655030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.665315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.674588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.683929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.692787][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.700090][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.707876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.716039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.725287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.733707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.745575][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.770811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.778834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.786826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.798550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.808170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.817091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.826208][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.833315][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.842538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.850983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.861596][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.878524][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.892118][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.902603][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.917891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.927496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.936953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.946353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.952590][ T4242] Bluetooth: hci4: command 0x041b tx timeout [ 64.956895][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.960709][ T4242] Bluetooth: hci1: command 0x041b tx timeout [ 64.967460][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.968434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.990031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.032142][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.041039][ T4242] Bluetooth: hci0: command 0x041b tx timeout [ 65.041140][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 65.047981][ T4242] Bluetooth: hci2: command 0x041b tx timeout [ 65.060544][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.078996][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.088536][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.103734][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.113618][ T1217] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.120711][ T1217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.128526][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.138473][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.147351][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.186067][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.195637][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.211022][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.228819][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.237668][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.250549][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.259807][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.268412][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.277423][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.286929][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.295806][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.305164][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.314037][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.321968][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.333311][ T4183] device veth0_vlan entered promiscuous mode [ 65.353178][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.363366][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.389711][ T4187] device veth0_vlan entered promiscuous mode [ 65.404306][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.413450][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.429981][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.439139][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.447817][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.478219][ T4183] device veth1_vlan entered promiscuous mode [ 65.488559][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.496435][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.504954][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.515123][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.533174][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.548896][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.560481][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.569488][ T4187] device veth1_vlan entered promiscuous mode [ 65.590038][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.598706][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.607852][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.630425][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.674323][ T4187] device veth0_macvtap entered promiscuous mode [ 65.697213][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.707673][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.723063][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.736118][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.743863][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.751321][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.761296][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.778671][ T4183] device veth0_macvtap entered promiscuous mode [ 65.795679][ T4187] device veth1_macvtap entered promiscuous mode [ 65.806285][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.815672][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.829804][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.840522][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.857556][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.890321][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.901662][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.909572][ T4183] device veth1_macvtap entered promiscuous mode [ 65.917126][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.926538][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.936111][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.945722][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.953506][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.960929][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.969637][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.978649][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.987469][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.997362][ T4185] device veth0_vlan entered promiscuous mode [ 66.014922][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.026273][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.036411][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.045412][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.054611][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.068943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.078301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.096570][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.136845][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.150446][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.164581][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.175225][ T4185] device veth1_vlan entered promiscuous mode [ 66.183124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.192732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.201809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.210466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.219287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.240985][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.255296][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.266349][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.300057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.310816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.323077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.344752][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.360619][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.369819][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.379080][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.399843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.412846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.426716][ T4185] device veth0_macvtap entered promiscuous mode [ 66.445559][ T4184] device veth0_vlan entered promiscuous mode [ 66.462257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.471213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.491367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.502859][ T4185] device veth1_macvtap entered promiscuous mode [ 66.525004][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.535844][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.546240][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.558517][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.570780][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.581497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.590139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.598148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.606066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.618593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.655640][ T4184] device veth1_vlan entered promiscuous mode [ 66.665366][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.679087][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.689161][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.699755][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.711165][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.740127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.748652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.757238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.766359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.779281][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.789144][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.798623][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.807463][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.852275][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.861159][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.880916][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.901737][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.919041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.927471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.936524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.945759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.955994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.966181][ T4184] device veth0_macvtap entered promiscuous mode [ 66.980336][ T4186] device veth0_vlan entered promiscuous mode [ 66.999357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.017958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.025934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.032406][ T4242] Bluetooth: hci1: command 0x040f tx timeout [ 67.042276][ T4242] Bluetooth: hci4: command 0x040f tx timeout [ 67.044099][ T4184] device veth1_macvtap entered promiscuous mode [ 67.074099][ T4186] device veth1_vlan entered promiscuous mode [ 67.111736][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.120145][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.128373][ T4249] Bluetooth: hci3: command 0x040f tx timeout [ 67.141195][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.152119][ T4249] Bluetooth: hci2: command 0x040f tx timeout [ 67.154462][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.158353][ T4249] Bluetooth: hci0: command 0x040f tx timeout [ 67.176306][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.187074][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.197636][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.208165][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.220387][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.241897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.250026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.258151][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.266379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.269571][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.276896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.289614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.299518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.308965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.323033][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.334840][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.340291][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.345047][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.355470][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.374729][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.384782][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.395528][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.407022][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.424298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.438033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.447190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.456106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.469736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.483591][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.493994][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.503684][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.512939][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.573638][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.584250][ T4186] device veth0_macvtap entered promiscuous mode [ 67.604380][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.625651][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.632887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.642673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.650344][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.674843][ T4186] device veth1_macvtap entered promiscuous mode [ 67.704928][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.758246][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.778857][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.789245][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.799825][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.809735][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.820421][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.830893][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.843380][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.856016][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.893977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.926917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.988938][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.989496][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.001154][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.029283][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.040120][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.042855][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.051948][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.070923][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.087865][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.100022][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.112445][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.145493][ T4295] device syzkaller0 entered promiscuous mode [ 68.157096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.165451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.176212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.204345][ T4302] device syzkaller0 entered promiscuous mode [ 68.213966][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.225341][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.251792][ T4273] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.291888][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.300669][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.310871][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.323655][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.365736][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.515052][ T4273] usb 2-1: Using ep0 maxpacket: 32 [ 68.553714][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.597891][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.614859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.661909][ T4273] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 68.689187][ T4273] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 68.705543][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.751473][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.754655][ T4273] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 68.788714][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.800183][ T4273] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 68.827341][ T4273] usb 2-1: config 0 interface 0 has no altsetting 0 [ 69.011835][ T4273] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 69.030038][ T4273] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 69.045519][ T4273] usb 2-1: Product: syz [ 69.055822][ T4273] usb 2-1: Manufacturer: syz [ 69.075152][ T4273] usb 2-1: SerialNumber: syz [ 69.113379][ T4242] Bluetooth: hci4: command 0x0419 tx timeout [ 69.717492][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 69.950654][ T1326] Bluetooth: hci1: command 0x0419 tx timeout [ 69.960796][ T1326] Bluetooth: hci0: command 0x0419 tx timeout [ 69.964474][ T4273] usb 2-1: config 0 descriptor?? [ 69.969048][ T1326] Bluetooth: hci2: command 0x0419 tx timeout [ 69.981788][ T4319] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 69.988989][ T1326] Bluetooth: hci3: command 0x0419 tx timeout [ 70.122922][ T4273] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 70.198832][ T4273] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 70.377832][ T4273] usb 2-1: USB disconnect, device number 2 [ 70.384116][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 70.391084][ T4300] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 70.474912][ T4342] overlayfs: failed to resolve './file0': -2 [ 70.511827][ T1326] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.555476][ T4344] device syzkaller0 entered promiscuous mode [ 70.563966][ T4273] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 70.761720][ T1326] usb 3-1: Using ep0 maxpacket: 32 [ 70.901731][ T1326] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 70.962231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 71.020118][ T1326] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 71.029902][ T1326] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 71.045401][ T1326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.112871][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 71.121919][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 71.295165][ T1326] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 71.357318][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.365338][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.377971][ T1326] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 71.404260][ T1326] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 71.425090][ T1326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.461006][ T1326] usb 3-1: config 0 descriptor?? [ 71.508630][ T4351] device syzkaller0 entered promiscuous mode [ 71.729345][ T1326] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 71.965355][ T1326] usb 3-1: USB disconnect, device number 2 [ 71.982300][ T1326] usblp0: removed [ 72.074347][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 72.084647][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 72.093686][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 72.584523][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 73.019192][ T4377] device syzkaller0 entered promiscuous mode [ 73.090751][ T4380] sp0: Synchronizing with TNC [ 73.173876][ T4379] [U] è [ 73.550764][ T4396] device syzkaller0 entered promiscuous mode [ 73.591915][ T1326] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.752040][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 73.771628][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 73.952018][ T1326] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 74.031852][ T1326] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.106495][ T1326] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.189982][ T1326] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.322633][ T1326] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.350482][ T1326] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.366865][ T1326] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.581907][ T1326] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.607599][ T1326] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.698752][ T1326] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.831752][ T1326] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.859533][ T1326] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.890175][ T1326] usb 5-1: config 0 interface 0 has no altsetting 0 [ 74.996150][ T1326] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.027732][ T1326] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.059528][ T1326] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.181745][ T1326] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.225867][ T1326] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.281660][ T1326] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.371905][ T1326] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.401978][ T1326] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.469957][ T1326] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.511629][ T4420] device syzkaller0 entered promiscuous mode [ 75.571706][ T1326] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.590647][ T1326] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.639127][ T1326] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.871769][ T1326] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 76.578674][ T1326] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 76.587157][ T1326] usb 5-1: Product: syz [ 76.591338][ T1326] usb 5-1: Manufacturer: syz [ 76.595992][ T1326] usb 5-1: SerialNumber: syz [ 76.608803][ T1326] usb 5-1: config 0 descriptor?? [ 76.671862][ T1326] usb 5-1: can't set config #0, error -71 [ 76.687158][ T1326] usb 5-1: USB disconnect, device number 2 [ 77.378308][ T4441] device syzkaller0 entered promiscuous mode [ 77.625566][ T4447] netlink: 'syz.0.51': attribute type 10 has an invalid length. [ 77.639562][ T4447] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 77.698517][ T4457] device syzkaller0 entered promiscuous mode [ 80.305379][ T4505] netlink: 'syz.1.68': attribute type 10 has an invalid length. [ 80.331527][ T4505] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 80.363536][ T4509] device syzkaller0 entered promiscuous mode [ 80.494858][ T4512] Zero length message leads to an empty skb [ 80.508755][ T4512] device syzkaller0 entered promiscuous mode [ 81.876928][ T4543] netlink: 48 bytes leftover after parsing attributes in process `syz.4.79'. [ 82.367153][ T4199] Bluetooth: hci0: ACL packet too small [ 82.612660][ T4553] fuse: Bad value for 'group_id' [ 84.132410][ T4573] device syzkaller0 entered promiscuous mode [ 85.810012][ T4588] netlink: 'syz.3.95': attribute type 10 has an invalid length. [ 85.814497][ T4594] fuse: Bad value for 'group_id' [ 85.828729][ T4588] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 87.002556][ T1109] cfg80211: failed to load regulatory.db [ 87.342273][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.437344][ T4614] device batadv_slave_0 entered promiscuous mode [ 87.569214][ T4618] device syzkaller0 entered promiscuous mode [ 87.843131][ T4640] netlink: 56 bytes leftover after parsing attributes in process `syz.1.110'. [ 89.013911][ T4657] device syzkaller0 entered promiscuous mode [ 89.312354][ T4675] 9pnet_virtio: no channels available for device syz [ 89.878916][ T4698] netlink: 28 bytes leftover after parsing attributes in process `syz.4.128'. [ 90.944762][ T4687] netlink: 'syz.0.125': attribute type 10 has an invalid length. [ 91.539903][ T4732] 9pnet_virtio: no channels available for device syz [ 92.451623][ T26] audit: type=1326 audit(1761637147.106:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4723 comm="syz.0.135" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3d7cc7fc9 code=0x0 [ 92.514373][ T4273] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.031839][ T4273] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 93.218639][ T4273] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.229336][ T4273] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 93.239724][ T4273] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.371908][ T4273] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 93.389327][ T4273] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.398024][ T4273] usb 2-1: Product: syz [ 93.407793][ T4273] usb 2-1: Manufacturer: syz [ 93.452821][ T4273] cdc_wdm 2-1:1.0: skipping garbage [ 93.458183][ T4273] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 93.641664][ T4778] device syzkaller0 entered promiscuous mode [ 93.675114][ T4735] udc-core: couldn't find an available UDC or it's busy [ 93.687563][ T4735] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 94.884206][ T7] usb 2-1: USB disconnect, device number 3 [ 96.133175][ T4806] usb usb1: usbfs: process 4806 (syz.0.154) did not claim interface 0 before use [ 97.254039][ T4818] device syzkaller0 entered promiscuous mode [ 99.771993][ T4257] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.021676][ T4257] usb 3-1: Using ep0 maxpacket: 32 [ 100.201879][ T4257] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 100.258081][ T4870] device syzkaller0 entered promiscuous mode [ 100.381907][ T4257] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 100.417001][ T4257] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 100.461793][ T4257] usb 3-1: Product: syz [ 100.473694][ T4257] usb 3-1: Manufacturer: syz [ 100.488593][ T4257] usb 3-1: SerialNumber: syz [ 100.505656][ T4257] usb 3-1: config 0 descriptor?? [ 100.542094][ T4854] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.659253][ T4250] usb 3-1: USB disconnect, device number 3 [ 102.780033][ T4905] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 103.953918][ T4927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.193'. [ 103.963317][ T4927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.193'. [ 104.945680][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888060b11800: rx timeout, send abort [ 104.955903][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888060b11800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 106.469796][ T4951] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 107.912383][ C1] ------------[ cut here ]------------ [ 107.917975][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 107.928752][ C1] WARNING: CPU: 1 PID: 150 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880 [ 107.938803][ C1] Modules linked in: [ 107.942757][ C1] CPU: 1 PID: 150 Comm: kworker/1:1H Not tainted syzkaller #0 [ 107.950294][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.960457][ C1] Workqueue: events_highpri snd_vmidi_output_work [ 107.966984][ C1] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 107.973305][ C1] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 20 ed 18 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 b0 54 68 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 107.993108][ C1] RSP: 0018:ffffc90000dd0768 EFLAGS: 00010246 [ 107.999243][ C1] RAX: d4a9a1a3a6bf5000 RBX: 000000000000000c RCX: ffff88801cda8000 [ 108.007315][ C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 108.015376][ C1] RBP: 0000000000000084 R08: dffffc0000000000 R09: fffff520001ba051 [ 108.023432][ C1] R10: fffff520001ba051 R11: 1ffff920001ba050 R12: ffff888026c11028 [ 108.031482][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 108.039548][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 108.048569][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.055246][ C1] CR2: 000020000000b000 CR3: 000000005851a000 CR4: 00000000003506e0 [ 108.063306][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.071351][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.079417][ C1] Call Trace: [ 108.082920][ C1] [ 108.085804][ C1] rate_control_send_low+0x194/0x790 [ 108.091164][ C1] rate_control_get_rate+0x207/0x5c0 [ 108.096530][ C1] __ieee80211_beacon_get+0x1512/0x1f80 [ 108.102165][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 108.108255][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 108.113803][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 108.119331][ C1] __iterate_interfaces+0x243/0x500 [ 108.124592][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 108.130910][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 108.137226][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 108.144339][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 108.149612][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 108.154904][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 108.161062][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 108.167146][ C1] ? hw_scan_work+0xeb0/0xeb0 [ 108.171902][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 108.177079][ C1] hrtimer_run_softirq+0x176/0x240 [ 108.182284][ C1] handle_softirqs+0x328/0x820 [ 108.187108][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 108.192112][ C1] ? do_softirq+0x200/0x200 [ 108.196663][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 108.201934][ C1] __irq_exit_rcu+0x12f/0x220 [ 108.206657][ C1] ? irq_exit_rcu+0x20/0x20 [ 108.211221][ C1] irq_exit_rcu+0x5/0x20 [ 108.215527][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 108.221244][ C1] [ 108.224242][ C1] [ 108.227207][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 108.233262][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 108.239830][ C1] Code: 74 05 e8 5e 2c cb f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f6 b5 9e f7 65 8b 05 87 b3 4f 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 108.259645][ C1] RSP: 0018:ffffc9000182fa60 EFLAGS: 00000206 [ 108.265845][ C1] RAX: d4a9a1a3a6bf5000 RBX: 0000000000000a02 RCX: d4a9a1a3a6bf5000 [ 108.275235][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b18a0 RDI: 0000000000000001 [ 108.283430][ C1] RBP: ffffc9000182fae8 R08: dffffc0000000000 R09: fffffbfff1ff7a3d [ 108.291687][ C1] R10: fffffbfff1ff7a3d R11: 1ffffffff1ff7a3c R12: dffffc0000000000 [ 108.299755][ C1] R13: 0000000000000000 R14: ffff88801e0192a0 R15: 1ffff92000305f4c [ 108.307849][ C1] ? _raw_spin_unlock+0x40/0x40 [ 108.312792][ C1] snd_midi_event_encode_byte+0x7da/0xca0 [ 108.318589][ C1] snd_vmidi_output_work+0x1e8/0x400 [ 108.323957][ C1] ? snd_virmidi_output_trigger+0xf0/0xf0 [ 108.329734][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 108.335005][ C1] process_one_work+0x863/0x1000 [ 108.340002][ C1] ? worker_detach_from_pool+0x240/0x240 [ 108.345690][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 108.351035][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 108.356118][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 108.361572][ C1] ? wq_worker_running+0x97/0x170 [ 108.366666][ C1] worker_thread+0xaa8/0x12a0 [ 108.371430][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 108.377414][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 108.382691][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 108.387957][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 108.393934][ C1] kthread+0x436/0x520 [ 108.398236][ C1] ? rcu_lock_release+0x20/0x20 [ 108.403148][ C1] ? kthread_blkcg+0xd0/0xd0 [ 108.407779][ C1] ret_from_fork+0x1f/0x30 [ 108.412268][ C1] [ 108.415331][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 108.422602][ C1] CPU: 1 PID: 150 Comm: kworker/1:1H Not tainted syzkaller #0 [ 108.430140][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.440278][ C1] Workqueue: events_highpri snd_vmidi_output_work [ 108.446697][ C1] Call Trace: [ 108.449975][ C1] [ 108.452824][ C1] dump_stack_lvl+0x168/0x230 [ 108.457507][ C1] ? show_regs_print_info+0x20/0x20 [ 108.462703][ C1] ? load_image+0x3b0/0x3b0 [ 108.467214][ C1] panic+0x2c9/0x7f0 [ 108.471107][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 108.475616][ C1] ? ret_from_fork+0x1f/0x30 [ 108.480206][ C1] ? __rate_control_send_low+0x630/0x880 [ 108.485861][ C1] __warn+0x248/0x2b0 [ 108.489842][ C1] ? __rate_control_send_low+0x630/0x880 [ 108.495474][ C1] report_bug+0x1b7/0x2e0 [ 108.499839][ C1] handle_bug+0x3a/0x70 [ 108.503990][ C1] exc_invalid_op+0x16/0x40 [ 108.508486][ C1] asm_exc_invalid_op+0x16/0x20 [ 108.513330][ C1] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 108.519568][ C1] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 20 ed 18 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 b0 54 68 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 108.539179][ C1] RSP: 0018:ffffc90000dd0768 EFLAGS: 00010246 [ 108.545248][ C1] RAX: d4a9a1a3a6bf5000 RBX: 000000000000000c RCX: ffff88801cda8000 [ 108.553312][ C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 108.561298][ C1] RBP: 0000000000000084 R08: dffffc0000000000 R09: fffff520001ba051 [ 108.569280][ C1] R10: fffff520001ba051 R11: 1ffff920001ba050 R12: ffff888026c11028 [ 108.577257][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 108.585263][ C1] ? __rate_control_send_low+0x630/0x880 [ 108.590917][ C1] rate_control_send_low+0x194/0x790 [ 108.596205][ C1] rate_control_get_rate+0x207/0x5c0 [ 108.601494][ C1] __ieee80211_beacon_get+0x1512/0x1f80 [ 108.607054][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 108.613173][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 108.618648][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 108.624123][ C1] __iterate_interfaces+0x243/0x500 [ 108.630922][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 108.637528][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 108.643869][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 108.650919][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 108.656119][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 108.661318][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 108.667295][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 108.673301][ C1] ? hw_scan_work+0xeb0/0xeb0 [ 108.677980][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 108.683108][ C1] hrtimer_run_softirq+0x176/0x240 [ 108.688220][ C1] handle_softirqs+0x328/0x820 [ 108.692979][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 108.697830][ C1] ? do_softirq+0x200/0x200 [ 108.702332][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 108.707531][ C1] __irq_exit_rcu+0x12f/0x220 [ 108.712207][ C1] ? irq_exit_rcu+0x20/0x20 [ 108.716715][ C1] irq_exit_rcu+0x5/0x20 [ 108.720968][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 108.726604][ C1] [ 108.729529][ C1] [ 108.732453][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 108.738540][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 108.745039][ C1] Code: 74 05 e8 5e 2c cb f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f6 b5 9e f7 65 8b 05 87 b3 4f 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 108.764736][ C1] RSP: 0018:ffffc9000182fa60 EFLAGS: 00000206 [ 108.770805][ C1] RAX: d4a9a1a3a6bf5000 RBX: 0000000000000a02 RCX: d4a9a1a3a6bf5000 [ 108.778769][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b18a0 RDI: 0000000000000001 [ 108.786745][ C1] RBP: ffffc9000182fae8 R08: dffffc0000000000 R09: fffffbfff1ff7a3d [ 108.794713][ C1] R10: fffffbfff1ff7a3d R11: 1ffffffff1ff7a3c R12: dffffc0000000000 [ 108.802685][ C1] R13: 0000000000000000 R14: ffff88801e0192a0 R15: 1ffff92000305f4c [ 108.810676][ C1] ? _raw_spin_unlock+0x40/0x40 [ 108.815531][ C1] snd_midi_event_encode_byte+0x7da/0xca0 [ 108.821262][ C1] snd_vmidi_output_work+0x1e8/0x400 [ 108.826560][ C1] ? snd_virmidi_output_trigger+0xf0/0xf0 [ 108.832290][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 108.837516][ C1] process_one_work+0x863/0x1000 [ 108.842493][ C1] ? worker_detach_from_pool+0x240/0x240 [ 108.848247][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 108.853536][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 108.858556][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 108.863923][ C1] ? wq_worker_running+0x97/0x170 [ 108.868943][ C1] worker_thread+0xaa8/0x12a0 [ 108.873615][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 108.879505][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 108.884725][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 108.890180][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 108.896080][ C1] kthread+0x436/0x520 [ 108.900146][ C1] ? rcu_lock_release+0x20/0x20 [ 108.905083][ C1] ? kthread_blkcg+0xd0/0xd0 [ 108.909702][ C1] ret_from_fork+0x1f/0x30 [ 108.914129][ C1] [ 108.917416][ C1] Kernel Offset: disabled [ 108.921887][ C1] Rebooting in 86400 seconds..