last executing test programs: 32.611488119s ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x8d2, 0x0, 0x35314241, 0x0, 0x4, [{0x0, 0xfffffffd}, {0x0, 0x7}, {0x0, 0x80000}, {0xffff7fff}, {0x8}, {}, {0x0, 0x1}]}}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 17.291647568s ago: executing program 32 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x8d2, 0x0, 0x35314241, 0x0, 0x4, [{0x0, 0xfffffffd}, {0x0, 0x7}, {0x0, 0x80000}, {0xffff7fff}, {0x8}, {}, {0x0, 0x1}]}}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 10.025800392s ago: executing program 3 (id=83): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a3000000000a0000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000001e5c0012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c000140000000000000008b2c0001800a0001006c696d69740000001c0002800c00014000000000000000080c000240000000000000000408000340000001"], 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 9.835147851s ago: executing program 3 (id=84): r0 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xe9) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_dev$sg(0x0, 0x0, 0x2) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{}, {0x6, 0x9}]}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000027c00000400f6000c0001800600060089"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 6.343523695s ago: executing program 2 (id=102): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) write$UHID_INPUT(r2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000002e000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$inet(r7, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x18, 0x1411, 0x1, 0x70bd29, 0x25dfdbfa, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000040) 4.26175004s ago: executing program 4 (id=107): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xdd86, r2, 0x3e}, 0x80, 0x0}, 0x0) 4.207029946s ago: executing program 3 (id=108): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r3, 0x0) shutdown(r3, 0x2) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x20, 0x0, &(0x7f0000001040)) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_batadv\x00', 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) preadv2(r7, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) 4.027160824s ago: executing program 1 (id=109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x32, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xa47c}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x5f}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x30004061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.674125988s ago: executing program 2 (id=110): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4}) 3.395107266s ago: executing program 2 (id=111): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/200, 0x11}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000740)=""/125, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xfffffffffffffedc}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 3.385385167s ago: executing program 4 (id=112): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r3, 0x7323, 0x0, 0x5, 0x0, 0x0) syz_io_uring_complete(r4) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r8, 0xc008aec1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x232) 3.35130604s ago: executing program 5 (id=57): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 3.291186336s ago: executing program 1 (id=113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000e3c30110000000"], &(0x7f0000000040)='GPL\x00'}, 0x94) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @empty, 0xfff}, 0x1c) shutdown(r0, 0x0) 3.099207195s ago: executing program 2 (id=114): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xe7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) 2.826815212s ago: executing program 1 (id=115): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xf7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xdd86, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144", 0x1c}], 0x1}, 0x0) 2.654349729s ago: executing program 1 (id=116): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0xdcc2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x0, 0x100b, 0x0, @discrete={0x10}}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8000, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0xb8}}, 0x20008401) 2.599341654s ago: executing program 5 (id=117): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001c80)=""/4107, 0x100b}], 0x1}, 0x406) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local={0xac, 0x14, 0x14, 0x64}}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa682c726}, 0x0) 2.479026896s ago: executing program 2 (id=118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x90, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5b, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x34}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xb8, 0x4}}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x0) 2.294833074s ago: executing program 5 (id=119): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) fcntl$setlease(r2, 0x400, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x8000}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 2.265677887s ago: executing program 2 (id=120): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) 947.231027ms ago: executing program 4 (id=121): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xdd86, r2, 0x3e}, 0x80, &(0x7f0000000080)}, 0x0) 850.847747ms ago: executing program 3 (id=122): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x335) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = gettid() kcmp(r5, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800f3fddbdf2502000004fd00c807000000000c001680080006000600150003000000000000"], 0x30}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'batadv0\x00', &(0x7f00000001c0)=@ethtool_gfeatures}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x40010, r2, 0x1000) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) writev(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000080)='-', 0x49}], 0x2) gettid() r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r10, &(0x7f0000000140)={0x1d, r11}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 579.513063ms ago: executing program 4 (id=123): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x180, 0x348, 0x348, 0x0, 0xe8, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'dvmrp0\x00', 'syz_tun\x00', {}, {0xff}, 0x84, 0x1, 0x58}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @empty, 0x0, 0xffffffff, 'ip6erspan0\x00', 'vlan0\x00', {}, {0xff}, 0x6, 0x2, 0x1}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x90, 0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x5}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffffff, 'bond0\x00', 'bond_slave_1\x00', {}, {}, 0x0, 0x1, 0x60}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'pimreg0\x00', {}, {}, 0x5f, 0x0, 0x13}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x6d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 399.161591ms ago: executing program 1 (id=124): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r3 = socket(0x10, 0x3, 0x0) close(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xb, 0x6361, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 383.422702ms ago: executing program 4 (id=125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x90, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5b, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x34}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xb8, 0x4}}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x2}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x0) 138.218877ms ago: executing program 1 (id=126): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x2000004) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) accept$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 0s ago: executing program 4 (id=127): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xf7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xdd86, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777", 0x2a}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. [ 66.494754][ T4171] cgroup: Unknown subsys name 'net' [ 66.681876][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.135925][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.173783][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 70.252322][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 70.262143][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 70.304701][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 70.344038][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 70.415465][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.422582][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.431162][ T4182] device bridge_slave_0 entered promiscuous mode [ 70.470604][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.477911][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.486393][ T4182] device bridge_slave_1 entered promiscuous mode [ 70.498824][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.506320][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.514172][ T4191] device bridge_slave_0 entered promiscuous mode [ 70.547799][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.555089][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.563058][ T4191] device bridge_slave_1 entered promiscuous mode [ 70.570300][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.577590][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.586010][ T4183] device bridge_slave_0 entered promiscuous mode [ 70.623629][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.631115][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.639317][ T4183] device bridge_slave_1 entered promiscuous mode [ 70.656358][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.689239][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.696460][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.704250][ T4184] device bridge_slave_0 entered promiscuous mode [ 70.713332][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.731894][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.739218][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.747293][ T4193] device bridge_slave_0 entered promiscuous mode [ 70.756386][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.768039][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.783833][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.791395][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.799834][ T4184] device bridge_slave_1 entered promiscuous mode [ 70.816932][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.824074][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.832252][ T4193] device bridge_slave_1 entered promiscuous mode [ 70.855756][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.867660][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.885855][ T4182] team0: Port device team_slave_0 added [ 70.900956][ T4191] team0: Port device team_slave_0 added [ 70.923576][ T4182] team0: Port device team_slave_1 added [ 70.939765][ T4191] team0: Port device team_slave_1 added [ 70.956639][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.975901][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.996142][ T4183] team0: Port device team_slave_0 added [ 71.003695][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.022865][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.048776][ T4183] team0: Port device team_slave_1 added [ 71.055586][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.062558][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.091145][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.114444][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.121477][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.151167][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.186688][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.193834][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.220520][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.240609][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.247660][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.273923][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.287968][ T4193] team0: Port device team_slave_0 added [ 71.310790][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.320868][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.353188][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.367345][ T4184] team0: Port device team_slave_0 added [ 71.374767][ T4193] team0: Port device team_slave_1 added [ 71.399884][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.406963][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.436534][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.437037][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.450003][ T4184] team0: Port device team_slave_1 added [ 71.453799][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.487434][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.494473][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.520956][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.533383][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.540712][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.567101][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.589377][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.596652][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.623094][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.662850][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.670125][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.696979][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.733018][ T4182] device hsr_slave_0 entered promiscuous mode [ 71.740056][ T4182] device hsr_slave_1 entered promiscuous mode [ 71.762658][ T4191] device hsr_slave_0 entered promiscuous mode [ 71.769821][ T4191] device hsr_slave_1 entered promiscuous mode [ 71.776705][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.784524][ T4191] Cannot create hsr debugfs directory [ 71.800714][ T4193] device hsr_slave_0 entered promiscuous mode [ 71.807617][ T4193] device hsr_slave_1 entered promiscuous mode [ 71.814355][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.823214][ T1110] Bluetooth: hci4: command 0x0409 tx timeout [ 71.828906][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 71.830579][ T1110] Bluetooth: hci2: command 0x0409 tx timeout [ 71.842103][ T4193] Cannot create hsr debugfs directory [ 71.842545][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 71.881176][ T4184] device hsr_slave_0 entered promiscuous mode [ 71.888420][ T4184] device hsr_slave_1 entered promiscuous mode [ 71.895776][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 71.901974][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.910247][ T4184] Cannot create hsr debugfs directory [ 71.919024][ T4183] device hsr_slave_0 entered promiscuous mode [ 71.926322][ T4183] device hsr_slave_1 entered promiscuous mode [ 71.933107][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.941678][ T4183] Cannot create hsr debugfs directory [ 72.289691][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.302384][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.319806][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.336484][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.364466][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.373962][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.399161][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.418364][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.459514][ T4182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.479002][ T4182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.492890][ T4182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.512923][ T4182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.613288][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.626261][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.651171][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.672961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.683275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.707713][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.721274][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.733557][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.763762][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.773295][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.782924][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.790227][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.800667][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.811937][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.825538][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.844342][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.856295][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.864699][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.871817][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.880798][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.895518][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.911163][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.920540][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.932191][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.940478][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.968650][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.984757][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.996818][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.031168][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.046240][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.057875][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.067388][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.077317][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.086588][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.094487][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.102952][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.111717][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.120227][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.130944][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.139830][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.159141][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.172123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.182271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.193346][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.200583][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.208600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.217774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.226877][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.234030][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.243556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.253443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.262186][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.269403][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.278539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.287337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.298453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.307550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.316409][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.323512][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.354291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.363805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.374137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.384259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.393467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.404357][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.442539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.453377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.470450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.482610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.499472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.523976][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.535251][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.555216][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.564099][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.594286][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.620366][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.629737][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.644770][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.654068][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.663830][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.672693][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.682039][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.692769][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.701066][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.711369][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.741034][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.769555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.800981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.823913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.838347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.852309][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.868735][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.893085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.902666][ T4252] Bluetooth: hci0: command 0x041b tx timeout [ 73.910570][ T4252] Bluetooth: hci2: command 0x041b tx timeout [ 73.916360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.925326][ T4252] Bluetooth: hci1: command 0x041b tx timeout [ 73.933734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.941895][ T4252] Bluetooth: hci4: command 0x041b tx timeout [ 73.952118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.963888][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.975599][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 73.995195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.004131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.014121][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.021444][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.031368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.040497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.050067][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.057429][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.068938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.078035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.087882][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.109205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.118407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.127937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.138410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.147644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.181534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.192011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.203013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.212243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.222378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.231494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.240083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.249397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.262791][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.274231][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.283414][ T4193] device veth0_vlan entered promiscuous mode [ 74.312804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.321552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.330692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.340340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.348712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.358669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.366621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.381124][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.390350][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.412208][ T4182] device veth0_vlan entered promiscuous mode [ 74.429980][ T4193] device veth1_vlan entered promiscuous mode [ 74.440110][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.449418][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.459587][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.471972][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.498553][ T4182] device veth1_vlan entered promiscuous mode [ 74.519046][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.532924][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.542266][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.551882][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.559017][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.567621][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.602017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.612921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.628193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.641673][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.648950][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.659642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.668728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.696738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.707867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.717552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.726686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.738206][ T4193] device veth0_macvtap entered promiscuous mode [ 74.749268][ T4193] device veth1_macvtap entered promiscuous mode [ 74.763445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.772320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.781591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.791790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.806014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.831333][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.843284][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.870751][ T4182] device veth0_macvtap entered promiscuous mode [ 74.878526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.887799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.897201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.907267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.916548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.925724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.934585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.943721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.952825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.962584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.971394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.980087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.988233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.007267][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.023683][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.036780][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.052535][ T4182] device veth1_macvtap entered promiscuous mode [ 75.067273][ T4183] device veth0_vlan entered promiscuous mode [ 75.075060][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.083163][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.093669][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.103135][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.112728][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.121694][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.131323][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.140104][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.150679][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.160861][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.169829][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.179469][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.213034][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.230466][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.242764][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.260870][ T4183] device veth1_vlan entered promiscuous mode [ 75.293032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.302939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.327493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.340179][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.351553][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.363985][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.388707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.405921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.446761][ T4182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.475414][ T4182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.484544][ T4182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.512858][ T4182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.604559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.617931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.641338][ T4183] device veth0_macvtap entered promiscuous mode [ 75.669204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.680790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.690823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.705413][ T4183] device veth1_macvtap entered promiscuous mode [ 75.736332][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.746664][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.758009][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.767049][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.811594][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.823921][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.836158][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.847339][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.859589][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.880829][ T4184] device veth0_vlan entered promiscuous mode [ 75.886617][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.898060][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.906339][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.915758][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.923909][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.927288][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.943269][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.952586][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.961824][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.970676][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.979066][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 75.985431][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 75.992477][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.999950][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 76.001398][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.007615][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 76.021350][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.029749][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.041985][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.055646][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 76.061400][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.073683][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.084922][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.097733][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.108224][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.117605][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.126902][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.136022][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.155234][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.163931][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.185094][ T4184] device veth1_vlan entered promiscuous mode [ 76.230630][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.232451][ T4291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.242723][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.259326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.269826][ T4291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.276013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.287656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.297453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.307418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.316806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.326395][ T4191] device veth0_vlan entered promiscuous mode [ 76.340749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.353057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.381422][ T4191] device veth1_vlan entered promiscuous mode [ 76.420439][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.460927][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.471605][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.483185][ T4184] device veth0_macvtap entered promiscuous mode [ 76.515088][ T4291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.523091][ T4291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.556554][ T4184] device veth1_macvtap entered promiscuous mode [ 76.571837][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.589212][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.610931][ T4300] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.619082][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.668949][ T4191] device veth0_macvtap entered promiscuous mode [ 76.685207][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.696989][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.714908][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.723780][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.736933][ T4191] device veth1_macvtap entered promiscuous mode [ 76.755687][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.776319][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.796522][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.833117][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.878546][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.895841][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.912285][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.928886][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.947427][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.977716][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.013091][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.054383][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.073990][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.075253][ T4245] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.095836][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 77.095845][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.095860][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.105278][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 77.106341][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 77.125629][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.125887][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 77.144879][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.154019][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 77.173400][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.198425][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.210716][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.224212][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.283038][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.297451][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.399465][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.414056][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.434925][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.434929][ T4245] usb 3-1: Using ep0 maxpacket: 32 [ 77.457002][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.473702][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.490758][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.535231][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.546747][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.555288][ T4245] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 77.560484][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.582558][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.594330][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.604738][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.616268][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.629479][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.645401][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.661011][ T4245] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 77.661634][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.685688][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.704066][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.713618][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.726774][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.746066][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.754965][ T4245] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 77.755017][ T4245] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 77.755042][ T4245] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 77.755067][ T4245] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 77.755122][ T4245] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 77.816001][ T4245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.823758][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.833616][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.849168][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.849410][ T4245] usb 3-1: config 0 descriptor?? [ 77.863197][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.878029][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.888578][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.906554][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.056045][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 78.064906][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 78.105507][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 78.113548][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.127311][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.142500][ T4245] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 78.192027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.208974][ T4245] Bluetooth: hci4: command 0x0419 tx timeout [ 78.222791][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.237513][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 78.245355][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.286565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.331569][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.354654][ T4245] usb 3-1: USB disconnect, device number 2 [ 78.362844][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.364942][ C1] usblp0: nonzero read bulk status received: -71 [ 78.476585][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.533154][ T4209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.563520][ T4209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.612679][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.644406][ T4315] netlink: 'syz.3.8': attribute type 10 has an invalid length. [ 78.688610][ T4315] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 79.394438][ T4339] capability: warning: `syz.3.12' uses deprecated v2 capabilities in a way that may be insecure [ 81.511958][ T4298] usblp0: removed [ 81.539218][ T4369] tipc: Enabling of bearer rejected, failed to enable media [ 81.593192][ T4379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 81.973369][ T4389] tipc: Started in network mode [ 81.998140][ T4389] tipc: Node identity 2a33efc18a34, cluster identity 4711 [ 82.015380][ T4389] tipc: Enabled bearer , priority 0 [ 82.042031][ T4390] device syzkaller0 entered promiscuous mode [ 82.160762][ T4392] netlink: 'syz.1.20': attribute type 10 has an invalid length. [ 82.439895][ T4392] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 82.595829][ T4397] tipc: Resetting bearer [ 82.768997][ T4388] tipc: Resetting bearer [ 82.903711][ T4388] tipc: Disabling bearer [ 83.004991][ T4185] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 83.535690][ T4185] usb 2-1: config 7 has an invalid interface number: 112 but max is 1 [ 83.554435][ T4185] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 83.609859][ T4185] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 83.651841][ T4185] usb 2-1: config 7 has no interface number 0 [ 83.681447][ T4185] usb 2-1: config 7 interface 112 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.738366][ T4185] usb 2-1: config 7 interface 112 has no altsetting 0 [ 84.005160][ T4185] usb 2-1: string descriptor 0 read error: -22 [ 84.011469][ T4185] usb 2-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=ff.2b [ 84.067443][ T4185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.147937][ T4185] usb 2-1: Found UVC 0.00 device (046d:089b) [ 84.165052][ T4185] usb 2-1: No valid video chain found. [ 84.225110][ T4296] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.360475][ T4185] usb 2-1: USB disconnect, device number 2 [ 84.485007][ T4296] usb 5-1: Using ep0 maxpacket: 8 [ 84.605555][ T4296] usb 5-1: config 0 has no interfaces? [ 84.765003][ T4296] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 84.788728][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.840017][ T4296] usb 5-1: Product: syz [ 84.888647][ T4296] usb 5-1: Manufacturer: syz [ 84.893364][ T4296] usb 5-1: SerialNumber: syz [ 84.989210][ T4296] usb 5-1: config 0 descriptor?? [ 85.025272][ T4424] netlink: 'syz.2.26': attribute type 10 has an invalid length. [ 85.245862][ T4424] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 85.593741][ T4433] tipc: Enabling of bearer rejected, failed to enable media [ 85.635588][ T4433] device syzkaller0 entered promiscuous mode [ 85.680370][ T4433] netlink: 2 bytes leftover after parsing attributes in process `syz.2.29'. [ 86.595424][ T4296] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.784429][ T1107] cfg80211: failed to load regulatory.db [ 86.844904][ T4296] usb 2-1: Using ep0 maxpacket: 16 [ 86.965113][ T4296] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 86.994338][ T4296] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.994675][ T21] usb 5-1: USB disconnect, device number 2 [ 87.052407][ T4296] usb 2-1: config 0 has no interface number 0 [ 87.255018][ T4296] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 87.260182][ T4463] netlink: 'syz.3.40': attribute type 10 has an invalid length. [ 87.283098][ T4296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.344017][ T4296] usb 2-1: Product: syz [ 87.363481][ T4465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'. [ 87.381659][ T4296] usb 2-1: Manufacturer: syz [ 87.485203][ T4296] usb 2-1: SerialNumber: syz [ 87.545058][ T21] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 87.578642][ T4296] usb 2-1: config 0 descriptor?? [ 87.703888][ T4472] tipc: Enabling of bearer rejected, failed to enable media [ 87.717536][ T4296] usb 2-1: Found UVC 0.00 device syz (046c:14e8) [ 87.738979][ T4472] device syzkaller0 entered promiscuous mode [ 87.774254][ T4472] netlink: 2 bytes leftover after parsing attributes in process `syz.3.42'. [ 87.783491][ T4296] usb 2-1: No valid video chain found. [ 87.938948][ T4185] usb 2-1: USB disconnect, device number 3 [ 88.075114][ T21] usb 5-1: config 7 has an invalid interface number: 112 but max is 1 [ 88.094728][ T21] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 88.121850][ T21] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 88.151164][ T21] usb 5-1: config 7 has no interface number 0 [ 88.189118][ T21] usb 5-1: config 7 interface 112 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.256013][ T21] usb 5-1: config 7 interface 112 has no altsetting 0 [ 88.625030][ T21] usb 5-1: string descriptor 0 read error: -22 [ 88.635103][ T21] usb 5-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=ff.2b [ 88.667208][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.760836][ T21] usb 5-1: Found UVC 0.00 device (046d:089b) [ 88.783185][ T21] usb 5-1: No valid video chain found. [ 88.794720][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 88.975695][ T4296] usb 5-1: USB disconnect, device number 3 [ 89.684941][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.935050][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 90.054977][ T21] usb 4-1: config 0 has too many interfaces: 243, using maximum allowed: 32 [ 90.085122][ T4296] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 90.110149][ T21] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 243 [ 90.229080][ T21] usb 4-1: config 0 has no interface number 0 [ 90.334927][ T4296] usb 5-1: Using ep0 maxpacket: 8 [ 90.445207][ T21] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 90.469529][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.475048][ T4296] usb 5-1: config 0 has no interfaces? [ 90.510679][ T21] usb 4-1: Product: syz [ 90.527320][ T21] usb 4-1: Manufacturer: syz [ 90.542721][ T4520] netlink: 'syz.1.52': attribute type 10 has an invalid length. [ 90.553510][ T21] usb 4-1: SerialNumber: syz [ 90.582087][ T21] usb 4-1: config 0 descriptor?? [ 90.647737][ T21] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 90.675337][ T4296] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 90.699854][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.733938][ T4296] usb 5-1: Product: syz [ 90.751837][ T4296] usb 5-1: Manufacturer: syz [ 90.776882][ T4296] usb 5-1: SerialNumber: syz [ 90.822214][ T4296] usb 5-1: config 0 descriptor?? [ 91.030845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 92.071380][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 92.145031][ T21] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 92.195079][ T21] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 92.265663][ T21] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 92.330294][ T21] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 92.405236][ T21] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 92.465333][ T21] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 92.515050][ T21] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 92.585942][ T21] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 92.665229][ T4296] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.669087][ T21] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 92.745046][ T21] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 92.785019][ T21] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 92.825109][ T21] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 92.875004][ T21] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 92.897914][ T21] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 92.914964][ T4296] usb 2-1: Using ep0 maxpacket: 32 [ 92.935111][ T21] usb 4-1: USB disconnect, device number 2 [ 93.035128][ T4296] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 93.068962][ T4193] syz-executor (4193) used greatest stack depth: 20288 bytes left [ 93.105002][ T4296] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 93.189151][ T4296] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 93.239402][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.407648][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.425234][ T4296] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 93.487061][ T4537] chnl_net:caif_netlink_parms(): no params data found [ 93.495032][ T4296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.520128][ T4296] usb 2-1: Product: syz [ 93.550582][ T4296] usb 2-1: Manufacturer: syz [ 93.561444][ T4296] usb 2-1: SerialNumber: syz [ 93.579889][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.617336][ T4296] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 93.636190][ T4296] imon 2-1:155.0: unable to initialize intf0, err -19 [ 93.724279][ T4296] imon:imon_probe: failed to initialize context! [ 93.744671][ T4296] imon 2-1:155.0: unable to register, err -19 [ 93.920498][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.960683][ T21] usb 5-1: USB disconnect, device number 4 [ 94.031745][ T4569] netlink: 'syz.4.64': attribute type 10 has an invalid length. [ 94.090635][ T4569] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 94.124214][ T4537] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.136737][ T4537] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.164829][ T4537] device bridge_slave_0 entered promiscuous mode [ 94.278331][ T4537] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.297542][ T4537] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.347878][ T4537] device bridge_slave_1 entered promiscuous mode [ 94.354295][ T4580] could not allocate digest TFM handle hmac(streebog512) [ 94.375046][ T4296] Bluetooth: hci5: command 0x0409 tx timeout [ 94.515802][ T4537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.580866][ T4537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.759464][ T4537] team0: Port device team_slave_0 added [ 94.957726][ T7] usb 2-1: USB disconnect, device number 4 [ 95.308351][ T4537] team0: Port device team_slave_1 added [ 95.354966][ T4598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'. [ 95.429098][ T4537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.467076][ T4537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.554900][ T4296] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.606131][ T4537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.703436][ T4537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.784361][ T4537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.852092][ T4537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.899558][ T4627] tipc: Enabling of bearer rejected, failed to enable media [ 95.935091][ T4296] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 95.954955][ T4296] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 95.981658][ T4628] Zero length message leads to an empty skb [ 95.993965][ T4296] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 96.005054][ T4627] device syzkaller0 entered promiscuous mode [ 96.017441][ T4296] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 96.055016][ T4296] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 96.107108][ T4628] netlink: 2 bytes leftover after parsing attributes in process `syz.3.74'. [ 96.148449][ T4537] device hsr_slave_0 entered promiscuous mode [ 96.164214][ T4537] device hsr_slave_1 entered promiscuous mode [ 96.185530][ T4537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.200589][ T4537] Cannot create hsr debugfs directory [ 96.215561][ T4296] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 96.235964][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 96.249155][ T4296] usb 5-1: Product: syz [ 96.253379][ T4296] usb 5-1: Manufacturer: syz [ 96.326220][ T4296] cdc_wdm 5-1:1.0: skipping garbage [ 96.339797][ T4296] cdc_wdm 5-1:1.0: skipping garbage [ 96.405198][ T4296] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 96.448662][ T4296] cdc_wdm 5-1:1.0: Unknown control protocol [ 96.502433][ T4296] Bluetooth: hci5: command 0x041b tx timeout [ 96.605138][ T4245] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 96.875052][ T4245] usb 2-1: Using ep0 maxpacket: 8 [ 96.995370][ T4537] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.028594][ T4245] usb 2-1: config 0 has no interfaces? [ 97.047242][ T4537] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.122973][ T4537] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.211867][ T21] usb 5-1: USB disconnect, device number 5 [ 97.244971][ T4245] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 97.278110][ T4245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.293785][ T4245] usb 2-1: Product: syz [ 97.304858][ T4245] usb 2-1: Manufacturer: syz [ 97.309616][ T4245] usb 2-1: SerialNumber: syz [ 97.334631][ T4245] usb 2-1: config 0 descriptor?? [ 97.371601][ T144] device hsr_slave_0 left promiscuous mode [ 97.411653][ T144] device hsr_slave_1 left promiscuous mode [ 97.443005][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.467259][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.502988][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.523979][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.546123][ T144] device bridge_slave_1 left promiscuous mode [ 97.560880][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.622678][ T144] device bridge_slave_0 left promiscuous mode [ 97.643198][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.732614][ T144] device veth1_macvtap left promiscuous mode [ 97.749444][ T144] device veth0_macvtap left promiscuous mode [ 97.766056][ T144] device veth1_vlan left promiscuous mode [ 97.782520][ T144] device veth0_vlan left promiscuous mode [ 98.072247][ T4666] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.193151][ T4667] netlink: 68 bytes leftover after parsing attributes in process `syz.4.81'. [ 98.614197][ T144] team0 (unregistering): Port device team_slave_1 removed [ 98.622312][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 98.684527][ T144] team0 (unregistering): Port device team_slave_0 removed [ 98.730624][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.768435][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.944297][ T144] bond0 (unregistering): Released all slaves [ 99.052202][ T4537] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.063074][ T4655] device syzkaller0 left promiscuous mode [ 99.239467][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 99.347519][ T7] usb 2-1: USB disconnect, device number 5 [ 99.525561][ T4537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.559616][ T4690] tipc: Enabling of bearer rejected, failed to enable media [ 99.592178][ T4690] device syzkaller0 entered promiscuous mode [ 99.625317][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.652367][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.748322][ T4537] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.765514][ T4694] netlink: 2 bytes leftover after parsing attributes in process `syz.1.85'. [ 99.803528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.828575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.882444][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.889751][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.985549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.041589][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.056894][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.179444][ T4359] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.186645][ T4359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.241183][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.288511][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.323737][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.350193][ T4712] process 'syz.1.87' launched './file0' with NULL argv: empty string added [ 100.359737][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.394393][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.436249][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.463949][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.523978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.554420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.620719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.665729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.695143][ T4296] Bluetooth: hci5: command 0x0419 tx timeout [ 100.731930][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.278228][ T4734] netlink: 'syz.2.92': attribute type 10 has an invalid length. [ 101.454919][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.760813][ T4742] device syzkaller0 entered promiscuous mode [ 101.874951][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.882336][ T21] usb 4-1: config 0 has no interfaces? [ 101.898427][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.978093][ T4537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.065742][ T21] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 102.100039][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.109157][ T4746] device syzkaller0 left promiscuous mode [ 102.146835][ T21] usb 4-1: Product: syz [ 102.168025][ T21] usb 4-1: Manufacturer: syz [ 102.194926][ T21] usb 4-1: SerialNumber: syz [ 102.212634][ T21] usb 4-1: config 0 descriptor?? [ 102.510977][ T4758] futex_wake_op: syz.2.98 tries to shift op by 32; fix this program [ 102.904987][ T4283] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 102.985039][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.001879][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.105027][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.124684][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.150791][ T4537] device veth0_vlan entered promiscuous mode [ 103.168043][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.188911][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.219162][ T4537] device veth1_vlan entered promiscuous mode [ 103.329240][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.350068][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.378086][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.401565][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.430261][ T4537] device veth0_macvtap entered promiscuous mode [ 103.435153][ T4283] usb 5-1: config 7 has an invalid interface number: 112 but max is 1 [ 103.452485][ T4283] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 103.476711][ T4283] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 103.477962][ T4537] device veth1_macvtap entered promiscuous mode [ 103.504902][ T4283] usb 5-1: config 7 has no interface number 0 [ 103.520129][ T4283] usb 5-1: config 7 interface 112 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.549117][ T4283] usb 5-1: config 7 interface 112 has no altsetting 0 [ 103.577146][ T4537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.634252][ T4537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.648920][ T4537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.664082][ T4537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.688538][ T4537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.718194][ T4537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.788368][ T4537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.797508][ T4283] usb 5-1: string descriptor 0 read error: -22 [ 103.818633][ T4283] usb 5-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=ff.2b [ 103.829578][ T4537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.844270][ T4283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.861826][ T4537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.882701][ T4783] device syzkaller0 left promiscuous mode [ 103.904296][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 103.923752][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.946679][ T4283] usb 5-1: Found UVC 0.00 device (046d:089b) [ 103.962695][ T4283] usb 5-1: No valid video chain found. [ 103.964522][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.012781][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.067322][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.105680][ T4537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.152269][ T4537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.153187][ T1107] usb 5-1: USB disconnect, device number 6 [ 104.231142][ T4537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.272203][ T4537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.295517][ T4537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.337716][ T4537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.379876][ T4537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.424447][ T4537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.462461][ T4537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.499574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.519142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.565797][ T4537] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.624957][ T4537] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.660381][ T4537] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.724937][ T4537] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.882172][ T4232] usb 4-1: USB disconnect, device number 3 [ 104.974994][ T4792] netlink: 'syz.1.106': attribute type 10 has an invalid length. [ 105.098736][ T4291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.147757][ T4291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.222253][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.242611][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.274468][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.300866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.343228][ T4802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'. [ 105.724545][ T4814] tipc: Enabling of bearer rejected, failed to enable media [ 105.925540][ T4832] netlink: 'syz.5.57': attribute type 10 has an invalid length. [ 106.084749][ T4832] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 106.745974][ T4871] netlink: 'syz.2.118': attribute type 10 has an invalid length. [ 107.244925][ T4252] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.504990][ T4252] usb 3-1: Using ep0 maxpacket: 32 [ 107.625302][ T4252] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 107.654978][ T4252] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 107.706225][ T4252] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 107.945342][ T4252] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 107.973899][ T4252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.012931][ T4252] usb 3-1: Product: syz [ 108.049789][ T4252] usb 3-1: Manufacturer: syz [ 108.095016][ T4252] usb 3-1: SerialNumber: syz [ 108.186957][ T4252] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 108.235144][ T4252] imon 3-1:155.0: unable to initialize intf0, err -19 [ 108.265321][ T4252] imon:imon_probe: failed to initialize context! [ 108.271966][ T4252] imon 3-1:155.0: unable to register, err -19 [ 108.839802][ T4910] device syzkaller0 entered promiscuous mode [ 108.874777][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 109.173015][ T4925] ================================================================== [ 109.181438][ T4925] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 109.190897][ T4925] Read of size 1 at addr ffff88801f4bf608 by task syz.1.126/4925 [ 109.198651][ T4925] [ 109.201023][ T4925] CPU: 0 PID: 4925 Comm: syz.1.126 Not tainted syzkaller #0 [ 109.208429][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.218753][ T4925] Call Trace: [ 109.222075][ T4925] [ 109.225305][ T4925] dump_stack_lvl+0x168/0x230 [ 109.230035][ T4925] ? show_regs_print_info+0x20/0x20 [ 109.235284][ T4925] ? load_image+0x3b0/0x3b0 [ 109.239830][ T4925] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 109.245333][ T4925] ? xfrm_pol_bin_obj+0x140/0x140 [ 109.250630][ T4925] print_address_description+0x60/0x2d0 [ 109.256230][ T4925] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 109.262771][ T4925] kasan_report+0xdf/0x130 [ 109.267231][ T4925] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 109.273774][ T4925] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 109.280160][ T4925] ? xfrm_policy_addr_delta+0x212/0x340 [ 109.285751][ T4925] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 109.291947][ T4925] ? xfrm_policy_alloc+0x75/0x2b0 [ 109.297031][ T4925] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 109.303235][ T4925] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 109.309187][ T4925] xfrm_policy_inexact_insert+0xe0/0x1460 [ 109.314960][ T4925] ? __get_hash_thresh+0x105/0x410 [ 109.320357][ T4925] ? policy_hash_bysel+0x10a/0x570 [ 109.325525][ T4925] xfrm_policy_insert+0x112/0x930 [ 109.330611][ T4925] xfrm_add_policy+0x4d6/0x860 [ 109.335431][ T4925] ? xfrm_dump_sa_done+0xc0/0xc0 [ 109.340418][ T4925] ? apparmor_capable+0x12c/0x190 [ 109.345489][ T4925] ? __nla_parse+0x3c/0x50 [ 109.349959][ T4925] xfrm_user_rcv_msg+0x58d/0x860 [ 109.354949][ T4925] ? xfrm_netlink_rcv+0x90/0x90 [ 109.359876][ T4925] ? xfrm_netlink_rcv+0x66/0x90 [ 109.364769][ T4925] ? xfrm_netlink_rcv+0x66/0x90 [ 109.369748][ T4925] ? xfrm_netlink_rcv+0x66/0x90 [ 109.374638][ T4925] ? __mutex_lock_common+0x431/0x2390 [ 109.380054][ T4925] ? __copy_skb_header+0x417/0x5a0 [ 109.385216][ T4925] ? __skb_clone+0x480/0x790 [ 109.389944][ T4925] netlink_rcv_skb+0x1e0/0x430 [ 109.394755][ T4925] ? xfrm_netlink_rcv+0x90/0x90 [ 109.399668][ T4925] ? netlink_ack+0xb60/0xb60 [ 109.404486][ T4925] ? __lock_acquire+0x7c60/0x7c60 [ 109.409591][ T4925] xfrm_netlink_rcv+0x75/0x90 [ 109.414401][ T4925] netlink_unicast+0x774/0x920 [ 109.419247][ T4925] netlink_sendmsg+0x8ab/0xbc0 [ 109.424061][ T4925] ? netlink_getsockopt+0x560/0x560 [ 109.429301][ T4925] ? aa_sock_msg_perm+0x94/0x150 [ 109.434287][ T4925] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 109.439786][ T4925] ? security_socket_sendmsg+0x7c/0xa0 [ 109.445288][ T4925] ? netlink_getsockopt+0x560/0x560 [ 109.450626][ T4925] ____sys_sendmsg+0x5a2/0x8c0 [ 109.455530][ T4925] ? memset+0x1e/0x40 [ 109.459560][ T4925] ? __sys_sendmsg_sock+0x30/0x30 [ 109.464660][ T4925] ? import_iovec+0x6f/0xa0 [ 109.469830][ T4925] ___sys_sendmsg+0x1f0/0x260 [ 109.474773][ T4925] ? __sys_sendmsg+0x250/0x250 [ 109.479596][ T4925] ? percpu_counter_add_batch+0x13b/0x160 [ 109.485501][ T4925] ? __fdget+0x18b/0x210 [ 109.490065][ T4925] __se_sys_sendmsg+0x190/0x250 [ 109.494969][ T4925] ? __x64_sys_sendmsg+0x80/0x80 [ 109.499971][ T4925] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 109.506013][ T4925] ? lockdep_hardirqs_on+0x94/0x140 [ 109.511260][ T4925] do_syscall_64+0x4c/0xa0 [ 109.515809][ T4925] ? clear_bhb_loop+0x30/0x80 [ 109.520625][ T4925] ? clear_bhb_loop+0x30/0x80 [ 109.525461][ T4925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.531404][ T4925] RIP: 0033:0x7f99a5c04fc9 [ 109.535857][ T4925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.555534][ T4925] RSP: 002b:00007f99a3e6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.564083][ T4925] RAX: ffffffffffffffda RBX: 00007f99a5e5bfa0 RCX: 00007f99a5c04fc9 [ 109.572097][ T4925] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 109.580282][ T4925] RBP: 00007f99a5c87f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.588291][ T4925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.596479][ T4925] R13: 00007f99a5e5c038 R14: 00007f99a5e5bfa0 R15: 00007ffcfb2b7a68 [ 109.604542][ T4925] [ 109.607595][ T4925] [ 109.609935][ T4925] Allocated by task 4925: [ 109.614281][ T4925] __kasan_kmalloc+0xb5/0xf0 [ 109.617953][ T21] usb 3-1: USB disconnect, device number 3 [ 109.618935][ T4925] sk_prot_alloc+0xe7/0x210 [ 109.629378][ T4925] sk_alloc+0x2f/0x310 [ 109.633479][ T4925] pfkey_create+0xd8/0x560 [ 109.637942][ T4925] __sock_create+0x47b/0x900 [ 109.642586][ T4925] __sys_socket+0xe2/0x170 [ 109.647255][ T4925] __x64_sys_socket+0x76/0x80 [ 109.651969][ T4925] do_syscall_64+0x4c/0xa0 [ 109.656412][ T4925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.662351][ T4925] [ 109.664708][ T4925] Last potentially related work creation: [ 109.670442][ T4925] kasan_save_stack+0x35/0x60 [ 109.675245][ T4925] kasan_record_aux_stack+0xb8/0x100 [ 109.680581][ T4925] call_rcu+0x182/0x930 [ 109.684773][ T4925] netlink_release+0x134f/0x1790 [ 109.689746][ T4925] sock_close+0xd5/0x240 [ 109.694027][ T4925] __fput+0x234/0x930 [ 109.698129][ T4925] task_work_run+0x125/0x1a0 [ 109.702797][ T4925] exit_to_user_mode_loop+0x10f/0x130 [ 109.708208][ T4925] exit_to_user_mode_prepare+0xee/0x180 [ 109.713793][ T4925] syscall_exit_to_user_mode+0x16/0x40 [ 109.719288][ T4925] do_syscall_64+0x58/0xa0 [ 109.723732][ T4925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.729658][ T4925] [ 109.732175][ T4925] The buggy address belongs to the object at ffff88801f4bf000 [ 109.732175][ T4925] which belongs to the cache kmalloc-2k of size 2048 [ 109.746253][ T4925] The buggy address is located 1544 bytes inside of [ 109.746253][ T4925] 2048-byte region [ffff88801f4bf000, ffff88801f4bf800) [ 109.759739][ T4925] The buggy address belongs to the page: [ 109.765398][ T4925] page:ffffea00007d2e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f4b8 [ 109.775848][ T4925] head:ffffea00007d2e00 order:3 compound_mapcount:0 compound_pincount:0 [ 109.784199][ T4925] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 109.792442][ T4925] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016842000 [ 109.801063][ T4925] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 109.809765][ T4925] page dumped because: kasan: bad access detected [ 109.816306][ T4925] page_owner tracks the page as allocated [ 109.822059][ T4925] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4182, ts 72450614586, free_ts 72449977654 [ 109.841294][ T4925] get_page_from_freelist+0x1b77/0x1c60 [ 109.846889][ T4925] __alloc_pages+0x1e1/0x470 [ 109.851801][ T4925] new_slab+0xc0/0x4b0 [ 109.855909][ T4925] ___slab_alloc+0x81e/0xdf0 [ 109.860617][ T4925] __kmalloc_track_caller+0x1cb/0x330 [ 109.866036][ T4925] kmemdup+0x22/0x50 [ 109.870146][ T4925] neigh_sysctl_register+0x9b/0xa80 [ 109.875498][ T4925] devinet_sysctl_register+0xa8/0x1f0 [ 109.880899][ T4925] inetdev_init+0x28c/0x4d0 [ 109.885436][ T4925] inetdev_event+0x280/0x1360 [ 109.890148][ T4925] raw_notifier_call_chain+0xcb/0x160 [ 109.895548][ T4925] register_netdevice+0x1275/0x16b0 [ 109.900783][ T4925] nsim_create+0x32d/0x3e0 [ 109.905331][ T4925] __nsim_dev_port_add+0x5c7/0x980 [ 109.910482][ T4925] nsim_dev_port_add_all+0x37/0x100 [ 109.915713][ T4925] nsim_dev_probe+0x754/0x9c0 [ 109.920518][ T4925] page last free stack trace: [ 109.923999][ T4935] [ 109.925203][ T4925] free_unref_page_prepare+0x637/0x6c0 [ 109.927557][ T4935] ====================================================== [ 109.927566][ T4935] WARNING: possible circular locking dependency detected [ 109.933014][ T4925] free_unref_page+0x94/0x280 [ 109.940266][ T4935] syzkaller #0 Not tainted [ 109.947277][ T4925] __unfreeze_partials+0x1a5/0x200 [ 109.952051][ T4935] ------------------------------------------------------ [ 109.952059][ T4935] syz.2.128/4935 is trying to acquire lock: [ 109.956466][ T4925] put_cpu_partial+0x12d/0x190 [ 109.961603][ T4935] ffff888075008120 (sk_lock-AF_INET6){+.+.}-{0:0} [ 109.968870][ T4925] qlist_free_all+0x35/0x90 [ 109.974893][ T4935] , at: inet_sk_diag_fill+0xef6/0x1b50 [ 109.979752][ T4925] kasan_quarantine_reduce+0x150/0x160 [ 109.986427][ T4935] [ 109.986427][ T4935] but task is already holding lock: [ 109.986435][ T4935] ffffc9000187d780 [ 109.990929][ T4925] __kasan_slab_alloc+0x2f/0xd0 [ 109.996611][ T4935] (&h->lhash2[i].lock [ 110.002071][ T4925] slab_post_alloc_hook+0x4c/0x380 [ 110.009432][ T4935] ){+.+.}-{2:2} [ 110.013149][ T4925] __kmalloc_track_caller+0x125/0x330 [ 110.018080][ T4935] , at: mptcp_diag_dump+0x911/0x1290 [ 110.022400][ T4925] kvasprintf+0xd4/0x180 [ 110.027506][ T4935] [ 110.027506][ T4935] which lock already depends on the new lock. [ 110.027506][ T4935] [ 110.027514][ T4935] [ 110.027514][ T4935] the existing dependency chain (in reverse order) is: [ 110.030965][ T4925] kobject_set_name_vargs+0x5d/0x110 [ 110.036363][ T4935] [ 110.036363][ T4935] -> #1 ( [ 110.041651][ T4925] kobject_init_and_add+0xda/0x190 [ 110.045976][ T4935] &h->lhash2[i].lock){+.+.}-{2:2} [ 110.056467][ T4925] netdev_queue_update_kobjects+0x19c/0x3e0 [ 110.065482][ T4935] : [ 110.065489][ T4935] _raw_spin_lock+0x2a/0x40 [ 110.070764][ T4925] netdev_register_kobject+0x265/0x310 [ 110.075966][ T4935] __inet_hash+0xe3/0x960 [ 110.081181][ T4925] register_netdevice+0x1019/0x16b0 [ 110.086209][ T4935] inet_csk_listen_start+0x22f/0x320 [ 110.092136][ T4925] nsim_create+0x32d/0x3e0 [ 110.094572][ T4935] inet_listen+0x2e1/0x590 [ 110.099600][ T4925] [ 110.099606][ T4925] Memory state around the buggy address: [ 110.105136][ T4935] __sys_listen+0x19d/0x220 [ 110.110078][ T4925] ffff88801f4bf500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 110.115575][ T4935] __x64_sys_listen+0x56/0x60 [ 110.121406][ T4925] ffff88801f4bf580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 110.125816][ T4935] do_syscall_64+0x4c/0xa0 [ 110.130762][ T4925] >ffff88801f4bf600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.133083][ T4935] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.138709][ T4925] ^ [ 110.138721][ T4925] ffff88801f4bf680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.143757][ T4935] [ 110.143757][ T4935] -> #0 ( [ 110.151901][ T4925] ffff88801f4bf700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.157088][ T4935] sk_lock-AF_INET6){+.+.}-{0:0} [ 110.165247][ T4925] ================================================================== [ 110.165340][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.170191][ T4935] : [ 110.170198][ T4935] __lock_acquire+0x2c33/0x7c60 [ 110.178428][ T4925] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 110.184774][ T4935] lock_acquire+0x197/0x3f0 [ 110.189135][ T4925] CPU: 0 PID: 4925 Comm: syz.1.126 Tainted: G B syzkaller #0 [ 110.197199][ T4935] mptcp_diag_get_info+0x1db/0x990 [ 110.202333][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.210616][ T4935] inet_sk_diag_fill+0xef6/0x1b50 [ 110.215481][ T4925] Call Trace: [ 110.215493][ T4925] [ 110.223753][ T4935] mptcp_diag_dump+0xcca/0x1290 [ 110.229733][ T4925] dump_stack_lvl+0x168/0x230 [ 110.232209][ T4935] __inet_diag_dump+0x1f6/0x380 [ 110.237585][ T4925] ? show_regs_print_info+0x20/0x20 [ 110.244768][ T4935] netlink_dump+0x676/0xcd0 [ 110.249942][ T4925] ? load_image+0x3b0/0x3b0 [ 110.258610][ T4935] __netlink_dump_start+0x523/0x700 [ 110.264247][ T4925] panic+0x2c9/0x7f0 [ 110.274458][ T4935] inet_diag_handler_cmd+0x1be/0x290 [ 110.280105][ T4925] ? bpf_jit_dump+0xd0/0xd0 [ 110.283487][ T4935] sock_diag_rcv_msg+0x164/0x3e0 [ 110.286602][ T4925] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 110.292136][ T4935] netlink_rcv_skb+0x1e0/0x430 [ 110.296807][ T4925] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 110.302294][ T4935] sock_diag_rcv+0x26/0x40 [ 110.307489][ T4925] ? _raw_spin_unlock+0x40/0x40 [ 110.312703][ T4935] netlink_unicast+0x774/0x920 [ 110.317293][ T4925] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 110.323106][ T4935] netlink_sendmsg+0x8ab/0xbc0 [ 110.327176][ T4925] check_panic_on_warn+0x80/0xa0 [ 110.333003][ T4935] sock_write_iter+0x29c/0x380 [ 110.337530][ T4925] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 110.342982][ T4935] do_iter_readv_writev+0x497/0x600 [ 110.348869][ T4925] end_report+0x6d/0xf0 [ 110.354502][ T4935] do_iter_write+0x205/0x7b0 [ 110.360390][ T4925] kasan_report+0x102/0x130 [ 110.365416][ T4935] do_writev+0x254/0x410 [ 110.370280][ T4925] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 110.375567][ T4935] do_syscall_64+0x4c/0xa0 [ 110.382066][ T4925] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 110.387369][ T4935] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.392315][ T4925] ? xfrm_policy_addr_delta+0x212/0x340 [ 110.397602][ T4935] [ 110.397602][ T4935] other info that might help us debug this: [ 110.397602][ T4935] [ 110.397612][ T4935] Possible unsafe locking scenario: [ 110.397612][ T4935] [ 110.404216][ T4925] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 110.409933][ T4935] CPU0 CPU1 [ 110.409940][ T4935] ---- ---- [ 110.414086][ T4925] ? xfrm_policy_alloc+0x75/0x2b0 [ 110.419204][ T4935] lock(&h->lhash2[i].lock [ 110.423729][ T4925] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 110.428496][ T4935] ); [ 110.428503][ T4935] lock( [ 110.435018][ T4925] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 110.439959][ T4935] sk_lock-AF_INET6 [ 110.446286][ T4925] xfrm_policy_inexact_insert+0xe0/0x1460 [ 110.452823][ T4935] ); [ 110.452830][ T4935] lock( [ 110.458372][ T4925] ? __get_hash_thresh+0x105/0x410 [ 110.468613][ T4935] &h->lhash2[i].lock); [ 110.476196][ T4925] ? policy_hash_bysel+0x10a/0x570 [ 110.482353][ T4935] lock(sk_lock-AF_INET6 [ 110.487736][ T4925] xfrm_policy_insert+0x112/0x930 [ 110.493113][ T4935] ); [ 110.493120][ T4935] [ 110.493120][ T4935] *** DEADLOCK *** [ 110.493120][ T4935] [ 110.498136][ T4925] xfrm_add_policy+0x4d6/0x860 [ 110.502712][ T4935] 6 locks held by syz.2.128/4935: [ 110.508858][ T4925] ? xfrm_dump_sa_done+0xc0/0xc0 [ 110.511358][ T4935] #0: ffffffff8d241de8 [ 110.516847][ T4925] ? apparmor_capable+0x12c/0x190 [ 110.522733][ T4935] (sock_diag_mutex [ 110.526452][ T4925] ? __nla_parse+0x3c/0x50 [ 110.532159][ T4935] ){+.+.}-{3:3} [ 110.534663][ T4925] xfrm_user_rcv_msg+0x58d/0x860 [ 110.540214][ T4935] , at: sock_diag_rcv+0x17/0x40 [ 110.545438][ T4925] ? xfrm_netlink_rcv+0x90/0x90 [ 110.549511][ T4935] #1: ffffffff8d241ca8 [ 110.554908][ T4925] ? xfrm_netlink_rcv+0x66/0x90 [ 110.559222][ T4935] (sock_diag_table_mutex [ 110.564245][ T4925] ? xfrm_netlink_rcv+0x66/0x90 [ 110.566745][ T4935] ){+.+.}-{3:3} [ 110.574976][ T4925] ? xfrm_netlink_rcv+0x66/0x90 [ 110.579757][ T4935] , at: sock_diag_rcv_msg+0x217/0x3e0 [ 110.584955][ T4925] ? __mutex_lock_common+0x431/0x2390 [ 110.590014][ T4935] #2: ffff88801ef6a698 [ 110.594175][ T4925] ? __copy_skb_header+0x417/0x5a0 [ 110.599307][ T4935] (nlk_cb_mutex-SOCK_DIAG [ 110.603124][ T4925] ? __skb_clone+0x480/0x790 [ 110.607731][ T4935] ){+.+.}-{3:3} [ 110.611262][ T4925] netlink_rcv_skb+0x1e0/0x430 [ 110.616329][ T4935] , at: __netlink_dump_start+0x11f/0x700 [ 110.621435][ T4925] ? xfrm_netlink_rcv+0x90/0x90 [ 110.626514][ T4935] #3: [ 110.630690][ T4925] ? netlink_ack+0xb60/0xb60 [ 110.635640][ T4935] ffffffff8d31c188 [ 110.640224][ T4925] ? __lock_acquire+0x7c60/0x7c60 [ 110.645192][ T4935] (inet_diag_table_mutex [ 110.648650][ T4925] xfrm_netlink_rcv+0x75/0x90 [ 110.653580][ T4935] ){+.+.}-{3:3} [ 110.658974][ T4925] netlink_unicast+0x774/0x920 [ 110.664338][ T4935] , at: __inet_diag_dump+0x181/0x380 [ 110.668609][ T4925] netlink_sendmsg+0x8ab/0xbc0 [ 110.673722][ T4935] #4: ffffffff8c11c660 [ 110.678146][ T4925] ? netlink_getsockopt+0x560/0x560 [ 110.682724][ T4935] (rcu_read_lock [ 110.686196][ T4925] ? aa_sock_msg_perm+0x94/0x150 [ 110.691060][ T4935] ){....}-{1:2} [ 110.696693][ T4925] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 110.701622][ T4935] , at: rcu_lock_acquire+0x5/0x30 [ 110.704382][ T4925] ? security_socket_sendmsg+0x7c/0xa0 [ 110.708971][ T4935] #5: [ 110.712693][ T4925] ? netlink_getsockopt+0x560/0x560 [ 110.717709][ T4935] ffffc9000187d780 [ 110.722040][ T4925] ____sys_sendmsg+0x5a2/0x8c0 [ 110.726805][ T4935] (&h->lhash2[i].lock [ 110.730327][ T4925] ? memset+0x1e/0x40 [ 110.735181][ T4935] ){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 110.740647][ T4925] ? __sys_sendmsg_sock+0x30/0x30 [ 110.745633][ T4935] [ 110.745633][ T4935] stack backtrace: [ 110.826093][ T4925] ? import_iovec+0x6f/0xa0 [ 110.830727][ T4925] ___sys_sendmsg+0x1f0/0x260 [ 110.835421][ T4925] ? __sys_sendmsg+0x250/0x250 [ 110.840298][ T4925] ? percpu_counter_add_batch+0x13b/0x160 [ 110.846054][ T4925] ? __fdget+0x18b/0x210 [ 110.850481][ T4925] __se_sys_sendmsg+0x190/0x250 [ 110.855421][ T4925] ? __x64_sys_sendmsg+0x80/0x80 [ 110.860378][ T4925] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 110.866476][ T4925] ? lockdep_hardirqs_on+0x94/0x140 [ 110.871696][ T4925] do_syscall_64+0x4c/0xa0 [ 110.876278][ T4925] ? clear_bhb_loop+0x30/0x80 [ 110.880965][ T4925] ? clear_bhb_loop+0x30/0x80 [ 110.885655][ T4925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.891665][ T4925] RIP: 0033:0x7f99a5c04fc9 [ 110.896088][ T4925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.915707][ T4925] RSP: 002b:00007f99a3e6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.924140][ T4925] RAX: ffffffffffffffda RBX: 00007f99a5e5bfa0 RCX: 00007f99a5c04fc9 [ 110.932144][ T4925] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 110.940156][ T4925] RBP: 00007f99a5c87f91 R08: 0000000000000000 R09: 0000000000000000 [ 110.948234][ T4925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.956219][ T4925] R13: 00007f99a5e5c038 R14: 00007f99a5e5bfa0 R15: 00007ffcfb2b7a68 [ 110.964297][ T4925] [ 110.967327][ T4935] CPU: 1 PID: 4935 Comm: syz.2.128 Tainted: G B syzkaller #0 [ 110.976038][ T4935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.986108][ T4935] Call Trace: [ 110.989402][ T4935] [ 110.992344][ T4935] dump_stack_lvl+0x168/0x230 [ 110.997050][ T4935] ? load_image+0x3b0/0x3b0 [ 111.001584][ T4935] ? show_regs_print_info+0x20/0x20 [ 111.006802][ T4935] ? print_circular_bug+0x12b/0x1a0 [ 111.012011][ T4935] check_noncircular+0x274/0x310 [ 111.016954][ T4935] ? add_chain_block+0x940/0x940 [ 111.021895][ T4935] ? lockdep_lock+0xdc/0x1e0 [ 111.026499][ T4935] ? mark_lock+0x94/0x320 [ 111.030853][ T4935] __lock_acquire+0x2c33/0x7c60 [ 111.035725][ T4935] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 111.041832][ T4935] ? verify_lock_unused+0x140/0x140 [ 111.047125][ T4935] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 111.053117][ T4935] ? verify_lock_unused+0x140/0x140 [ 111.058334][ T4935] ? __local_bh_enable_ip+0xcb/0x1b0 [ 111.063634][ T4935] ? __local_bh_enable_ip+0x12a/0x1b0 [ 111.069025][ T4935] ? lockdep_hardirqs_on+0x94/0x140 [ 111.074243][ T4935] ? __local_bh_enable_ip+0x12a/0x1b0 [ 111.079629][ T4935] ? _local_bh_enable+0xa0/0xa0 [ 111.084647][ T4935] ? skb_put+0x117/0x210 [ 111.088912][ T4935] lock_acquire+0x197/0x3f0 [ 111.093440][ T4935] ? inet_sk_diag_fill+0xef6/0x1b50 [ 111.098653][ T4935] ? read_lock_is_recursive+0x10/0x10 [ 111.104140][ T4935] ? rcu_lock_release+0x5/0x20 [ 111.108932][ T4935] ? __lock_acquire+0x7c60/0x7c60 [ 111.113985][ T4935] ? inet_sk_diag_fill+0xef6/0x1b50 [ 111.119246][ T4935] mptcp_diag_get_info+0x1db/0x990 [ 111.124458][ T4935] ? inet_sk_diag_fill+0xef6/0x1b50 [ 111.129704][ T4935] inet_sk_diag_fill+0xef6/0x1b50 [ 111.134857][ T4935] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 111.140592][ T4935] ? do_raw_spin_lock+0x11d/0x280 [ 111.145634][ T4935] ? inet_diag_bc_sk+0x187/0x10c0 [ 111.150671][ T4935] ? security_capable+0x85/0xb0 [ 111.155628][ T4935] mptcp_diag_dump+0xcca/0x1290 [ 111.160501][ T4935] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 111.167103][ T4935] __inet_diag_dump+0x1f6/0x380 [ 111.171967][ T4935] netlink_dump+0x676/0xcd0 [ 111.176511][ T4935] ? netlink_lookup+0x1d0/0x1d0 [ 111.181399][ T4935] ? __inet_diag_dump_start+0x805/0x970 [ 111.186963][ T4935] __netlink_dump_start+0x523/0x700 [ 111.192277][ T4935] inet_diag_handler_cmd+0x1be/0x290 [ 111.197669][ T4935] ? rcu_lock_release+0x20/0x20 [ 111.202620][ T4935] ? inet_diag_handler_get_info+0xb80/0xb80 [ 111.208526][ T4935] ? inet_diag_dump_start+0x20/0x20 [ 111.213862][ T4935] ? inet_diag_dump+0x50/0x50 [ 111.218557][ T4935] ? dev_queue_xmit+0x20/0x20 [ 111.223545][ T4935] ? memcpy+0x3c/0x60 [ 111.227537][ T4935] ? sock_diag_rcv+0x17/0x40 [ 111.232398][ T4935] ? sock_diag_rcv+0x17/0x40 [ 111.237007][ T4935] ? rcu_lock_release+0x20/0x20 [ 111.241879][ T4935] sock_diag_rcv_msg+0x164/0x3e0 [ 111.246920][ T4935] netlink_rcv_skb+0x1e0/0x430 [ 111.251701][ T4935] ? sock_diag_bind+0xa0/0xa0 [ 111.256393][ T4935] ? netlink_ack+0xb60/0xb60 [ 111.260996][ T4935] ? __lock_acquire+0x7c60/0x7c60 [ 111.266034][ T4935] sock_diag_rcv+0x26/0x40 [ 111.270639][ T4935] netlink_unicast+0x774/0x920 [ 111.275437][ T4935] netlink_sendmsg+0x8ab/0xbc0 [ 111.280479][ T4935] ? netlink_getsockopt+0x560/0x560 [ 111.285781][ T4935] ? aa_sock_msg_perm+0x94/0x150 [ 111.290738][ T4935] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 111.296058][ T4935] ? security_socket_sendmsg+0x7c/0xa0 [ 111.301648][ T4935] sock_write_iter+0x29c/0x380 [ 111.306434][ T4935] ? sock_read_iter+0x340/0x340 [ 111.311302][ T4935] do_iter_readv_writev+0x497/0x600 [ 111.316511][ T4935] ? generic_file_rw_checks+0x280/0x280 [ 111.322069][ T4935] ? common_file_perm+0x171/0x1c0 [ 111.327103][ T4935] ? fsnotify_perm+0x5d/0x560 [ 111.331788][ T4935] ? security_file_permission+0x75/0xa0 [ 111.337344][ T4935] do_iter_write+0x205/0x7b0 [ 111.341943][ T4935] ? import_iovec+0x6f/0xa0 [ 111.346470][ T4935] do_writev+0x254/0x410 [ 111.350724][ T4935] ? do_readv+0x3e0/0x3e0 [ 111.355070][ T4935] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 111.361069][ T4935] ? lock_chain_count+0x20/0x20 [ 111.365958][ T4935] ? vtime_user_exit+0x2dc/0x400 [ 111.370912][ T4935] ? lockdep_hardirqs_on+0x94/0x140 [ 111.376125][ T4935] do_syscall_64+0x4c/0xa0 [ 111.380572][ T4935] ? clear_bhb_loop+0x30/0x80 [ 111.385256][ T4935] ? clear_bhb_loop+0x30/0x80 [ 111.390031][ T4935] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.396018][ T4935] RIP: 0033:0x7f85b04f3fc9 [ 111.400627][ T4935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.420428][ T4935] RSP: 002b:00007f85ae73a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 111.428868][ T4935] RAX: ffffffffffffffda RBX: 00007f85b074b090 RCX: 00007f85b04f3fc9 [ 111.436944][ T4935] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 111.445019][ T4935] RBP: 00007f85b0576f91 R08: 0000000000000000 R09: 0000000000000000 [ 111.453115][ T4935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.461219][ T4935] R13: 00007f85b074b128 R14: 00007f85b074b090 R15: 00007ffd498cfa88 [ 111.469215][ T4935] [ 111.472334][ T4925] Kernel Offset: disabled [ 111.476684][ T4925] Rebooting in 86400 seconds..