last executing test programs: 8.508874323s ago: executing program 1 (id=196): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x5, 0xd, 0x3, 0x6, 0x7, 0x80, 0x4, 0x7, 0x7, 0x1, 0x8, 0x2, 0x6}, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, 0x0, 0x20004010) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) syz_open_dev$sndctrl(&(0x7f0000000080), 0x7dfb, 0x123c00) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x7, 0xd) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 8.356203928s ago: executing program 4 (id=197): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000022c0)=ANY=[@ANYRESDEC=r1, @ANYRES8, @ANYBLOB="aca12727463517cfe606c700e9ed7b306bc4174f6193379a07273e54e9317ffb58e90af9aa417db0bf260a971c54867e0f2790523d4b7d2258917865643d773ca20a1d0b0b56df103fb364e525d3ad9b4dcb08b4b80118cd085e3fa02553fd2b676899d0e5314367a7417b94e5922911a840f78f956d732600c1030aef00f5768580bf537081f20d05bb5dd57857d35974db2305f9099de10377667a465fe14b73"], 0x52) unshare(0x60600) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) gettid() r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002100)='cpuset.effective_mems\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000002100)=ANY=[], 0x118) mmap(&(0x7f0000ba6000/0x1000)=nil, 0x1000, 0x8, 0x2010, r2, 0xfffff000) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x1, 0x3, 0x9, 0x0, 0x3, 0xd, 0x6, 0x90, 0x7f}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x80000000, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0xb, 0x1041, 0x3, 0x1, 0x45, 0x400, 0xbdb], 0x4, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000002140), 0x200042, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf, 0x8010, 0xffffffffffffffff, 0xffffd000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x2d, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 7.942577512s ago: executing program 0 (id=202): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 7.903067223s ago: executing program 1 (id=203): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c0000008100"], 0xfeffffff) 7.902233033s ago: executing program 4 (id=204): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000100010ac05470200000000000109024300010000000009040000010300000009210000000122a00009058103"], 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x0, 0x24, 0x29, {0x29, 0x7, "ad6667e44bb2cd263ca19db35b64ef7517ef18a5c7f872b2a6ba743febfd81b6a5ceb58e9c8690"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r2, r1, 0x80000) pselect6(0x40, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x1, 0x4, 0xff, 0xfffffffffffffffc}, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7.7045164s ago: executing program 1 (id=206): syz_io_uring_setup(0xf00, &(0x7f00000001c0)={0x0, 0x4fbe, 0xc00, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) unshare(0x24060400) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.68031707s ago: executing program 0 (id=207): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_test', 0x16ba82, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x5a) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004805) fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) r5 = epoll_create1(0x80000) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180), 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x80000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xbe, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) 6.788988299s ago: executing program 1 (id=209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0xb99, 0x1100000000000000, 0xd, 0x1, 0xffffffffffffffff, 0x3ffffd, 0x6, 0x0, 0x0, 0x7fffffffffffffff, 0xa, 0x401, 0x2, 0x6, 0x20000001, 0xfffffffffffffffc], 0x58000, 0x211154}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x0, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xb}, @fd, @fda={0x66646185, 0x2, 0x5, 0xf}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 5.314566498s ago: executing program 2 (id=211): socket(0x10, 0x803, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x214, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x1e4, 0x2, [@TCA_BASIC_ACT={0x1e0, 0x3, [@m_vlan={0xe0, 0x1f, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7b9}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x84, 0x6, "5a0ca25b7438c93246018f7c82a55b68a84eb3c64c14f5bdb3e75689c3512fcad0130f85654dca4d3e84da923d3cb1a96373aded8a837044fe3fd52e5a2690c87d84ab8c90fef034383b9bb884867930aa980cac9377b78749f1f1fed0ea5b718a4858ed29e37e4f6aa3f09976e62961c07626f5f240935fd35064c82087568a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0xfc, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x710, 0x20000000, 0xb, 0x80000000}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x400, 0xffffffff, 0x1, 0xf, 0x6}, 0x1, r1}}]}, {0x8d, 0x6, "371a038d0cce3b434eb7849ef817695c8f3e9fd425d251d9c7203cd92463ac21147e14e5319a8b444160566dad756f99520525e6e701cf3436f996322b877ebe743d60cde1d2e8e48c3f329fc9dd3c14ef5e6135d99ee96ca12bc1d57def7ef0720a1af17c20f8d0d8dc89ae11a3124dce86f79a737ce298854a6ad8407ee7b85e14e3c04d111a0106"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 4.60219266s ago: executing program 0 (id=212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803c00040067636d280300000000000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989040005"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 4.543125393s ago: executing program 2 (id=213): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x5, 0xd, 0x3, 0x6, 0x7, 0x80, 0x4, 0x7, 0x7, 0x1, 0x8, 0x2, 0x6}, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, 0x0, 0x20004010) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) syz_open_dev$sndctrl(&(0x7f0000000080), 0x7dfb, 0x123c00) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x7, 0xd) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 4.542861513s ago: executing program 1 (id=214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r3) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360"], 0xffdd) 4.522247173s ago: executing program 4 (id=215): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0x10, 0x2, 0x10) accept$alg(r0, 0x0, 0x0) timerfd_create(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fedbdf252c00000018"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) socket$netlink(0x10, 0x3, 0xf) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4276}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.395466427s ago: executing program 4 (id=216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x7, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x696, 0x9, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0xa, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.223797703s ago: executing program 2 (id=217): ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x1, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}]}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) 4.113469566s ago: executing program 1 (id=219): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0xc4) r5 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0xc15db06e676022ae, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000002600)={0x0, 0x115ebe53397add1b, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) 4.113253786s ago: executing program 0 (id=220): openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x68}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4, 0x2, 0x3951}, 0x1c) r3 = epoll_create1(0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfce) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xc0000007}) 4.096873647s ago: executing program 3 (id=221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 4.00587117s ago: executing program 4 (id=222): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_test', 0x16ba82, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x5a) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004805) fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) r5 = epoll_create1(0x80000) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180), 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x80000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xbe, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) 2.307246245s ago: executing program 3 (id=223): socket(0x10, 0x803, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x214, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x1e4, 0x2, [@TCA_BASIC_ACT={0x1e0, 0x3, [@m_vlan={0xe0, 0x1f, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7b9}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x84, 0x6, "5a0ca25b7438c93246018f7c82a55b68a84eb3c64c14f5bdb3e75689c3512fcad0130f85654dca4d3e84da923d3cb1a96373aded8a837044fe3fd52e5a2690c87d84ab8c90fef034383b9bb884867930aa980cac9377b78749f1f1fed0ea5b718a4858ed29e37e4f6aa3f09976e62961c07626f5f240935fd35064c82087568a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0xfc, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x710, 0x20000000, 0xb, 0x80000000}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x400, 0xffffffff, 0x1, 0xf, 0x6}, 0x1, r1}}]}, {0x8d, 0x6, "371a038d0cce3b434eb7849ef817695c8f3e9fd425d251d9c7203cd92463ac21147e14e5319a8b444160566dad756f99520525e6e701cf3436f996322b877ebe743d60cde1d2e8e48c3f329fc9dd3c14ef5e6135d99ee96ca12bc1d57def7ef0720a1af17c20f8d0d8dc89ae11a3124dce86f79a737ce298854a6ad8407ee7b85e14e3c04d111a0106"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2.061090583s ago: executing program 2 (id=224): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) r3 = socket(0x1d, 0x2, 0x6) bind$inet(r3, &(0x7f00000000c0)={0x1d, 0x4e20, @remote}, 0x10) clock_gettime(0x1, 0x0) select(0x0, 0x0, &(0x7f00000001c0)={0xe74, 0x2b, 0x5, 0xcbd, 0x100000001000, 0x98bb, 0x80000000, 0x17}, &(0x7f0000000200)={0x3, 0x8, 0xfeea, 0x3, 0x10, 0x6, 0x7, 0x4}, &(0x7f00000000c0)) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x842d80, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) shutdown(r5, 0x1) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0403d11, 0x0) 253.805162ms ago: executing program 2 (id=230): unshare(0x20000400) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) 111.371607ms ago: executing program 3 (id=231): socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x9a7) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) 16.31965ms ago: executing program 3 (id=232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x7, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x696, 0x9, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0xa, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 0s ago: executing program 2 (id=233): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) getgroups(0x0, 0x0) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {}, 0xfd}, 0x18) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000400)) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts. [ 60.675818][ T4174] cgroup: Unknown subsys name 'net' [ 60.790270][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.258153][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.697411][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 63.762350][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 63.799246][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 63.832827][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 63.878087][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.885432][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.893677][ T4189] device bridge_slave_0 entered promiscuous mode [ 63.906731][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.913865][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.922021][ T4189] device bridge_slave_1 entered promiscuous mode [ 63.942502][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 64.005760][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.039218][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.048760][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.056360][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.064770][ T4198] device bridge_slave_0 entered promiscuous mode [ 64.100765][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.108390][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.116958][ T4188] device bridge_slave_0 entered promiscuous mode [ 64.124896][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.132349][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.140523][ T4198] device bridge_slave_1 entered promiscuous mode [ 64.179421][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.186770][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.195045][ T4188] device bridge_slave_1 entered promiscuous mode [ 64.202251][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.209603][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.217922][ T4196] device bridge_slave_0 entered promiscuous mode [ 64.232756][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.240268][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.248368][ T4196] device bridge_slave_1 entered promiscuous mode [ 64.259321][ T4189] team0: Port device team_slave_0 added [ 64.279625][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.286984][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.295483][ T4200] device bridge_slave_0 entered promiscuous mode [ 64.304835][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.322845][ T4189] team0: Port device team_slave_1 added [ 64.335268][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.343337][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.351193][ T4200] device bridge_slave_1 entered promiscuous mode [ 64.359819][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.390589][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.409412][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.427219][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.437531][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.445435][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.471707][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.490637][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.498246][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.524661][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.555910][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.574788][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.587478][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.613446][ T4198] team0: Port device team_slave_0 added [ 64.621370][ T4200] team0: Port device team_slave_0 added [ 64.637807][ T4188] team0: Port device team_slave_0 added [ 64.652363][ T4188] team0: Port device team_slave_1 added [ 64.659479][ T4200] team0: Port device team_slave_1 added [ 64.666911][ T4198] team0: Port device team_slave_1 added [ 64.711378][ T4196] team0: Port device team_slave_0 added [ 64.734326][ T4189] device hsr_slave_0 entered promiscuous mode [ 64.741293][ T4189] device hsr_slave_1 entered promiscuous mode [ 64.756726][ T4196] team0: Port device team_slave_1 added [ 64.762898][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.770048][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.796297][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.815633][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.822633][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.849934][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.866869][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.874100][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.900228][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.929675][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.936821][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.962923][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.975551][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.982542][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.009253][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.021347][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.028557][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.054618][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.103200][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.110270][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.136407][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.180392][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.187499][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.213905][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.239344][ T4200] device hsr_slave_0 entered promiscuous mode [ 65.246546][ T4200] device hsr_slave_1 entered promiscuous mode [ 65.253685][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.261555][ T4200] Cannot create hsr debugfs directory [ 65.272062][ T4188] device hsr_slave_0 entered promiscuous mode [ 65.279157][ T4188] device hsr_slave_1 entered promiscuous mode [ 65.286215][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.294006][ T4188] Cannot create hsr debugfs directory [ 65.307233][ T4198] device hsr_slave_0 entered promiscuous mode [ 65.314213][ T4198] device hsr_slave_1 entered promiscuous mode [ 65.321046][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.328827][ T4198] Cannot create hsr debugfs directory [ 65.374575][ T4201] Bluetooth: hci0: command 0x0409 tx timeout [ 65.383555][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 65.385415][ T4201] Bluetooth: hci1: command 0x0409 tx timeout [ 65.453385][ T4201] Bluetooth: hci4: command 0x0409 tx timeout [ 65.463664][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 65.505820][ T4196] device hsr_slave_0 entered promiscuous mode [ 65.514230][ T4196] device hsr_slave_1 entered promiscuous mode [ 65.520900][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.528753][ T4196] Cannot create hsr debugfs directory [ 65.745894][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.759237][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.770092][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.791055][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.840100][ T4198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.850303][ T4198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.875149][ T4198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.888676][ T4198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.968649][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.980590][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.002082][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.016300][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.045290][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.090282][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.100377][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.111033][ T4200] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.121219][ T4200] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.141898][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.151885][ T4200] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.162124][ T4200] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.191715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.201469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.211851][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.219204][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.231029][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.254153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.262413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.272289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.282003][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.289144][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.302010][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.336302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.348323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.358127][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.368935][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.380480][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.403198][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.419348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.429139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.439654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.448640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.457743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.466875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.477003][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.487241][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.496788][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.503935][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.514469][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.522541][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.557543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.567141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.576871][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.584035][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.592192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.605049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.614907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.624230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.647566][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.662172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.696837][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.721161][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.759916][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.779595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.792756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.830489][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.851338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.862618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.879208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.888807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.897138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.906711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.914903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.922671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.931942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.942647][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.965756][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.975406][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.984460][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.991549][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.001394][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.011093][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.019927][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.027065][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.035786][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.045428][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.054349][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.063160][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.072174][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.079343][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.089435][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.098021][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.112644][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.126524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.140630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.150570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.159397][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.166559][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.192724][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.208547][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.223444][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.233179][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.279937][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.289834][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.299143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.307309][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.316559][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.326183][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.335123][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.345042][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.354103][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.362756][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.372224][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.381769][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.390870][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.407824][ T4200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.426752][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.445254][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.452677][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.457404][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 67.467409][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 67.473656][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 67.482393][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.499674][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.517916][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.533751][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 67.534922][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.540136][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 67.568383][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.578307][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.597579][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.626308][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.651797][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.664005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.671904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.681163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.691179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.701960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.711867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.770975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.781691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.796817][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.804007][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.820063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.830687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.846082][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.853209][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.862539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.872451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.881558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.904643][ T4189] device veth0_vlan entered promiscuous mode [ 67.931115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.955864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.968191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.990058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.000117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.025510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.044490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.055200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.064766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.078542][ T4189] device veth1_vlan entered promiscuous mode [ 68.114300][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.123192][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.139948][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.152478][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.167065][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.178475][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.190540][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.201632][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.214430][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.229778][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.242999][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.314413][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.333013][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.346360][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.356839][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.367938][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.377002][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.391554][ T4189] device veth0_macvtap entered promiscuous mode [ 68.432195][ T4198] device veth0_vlan entered promiscuous mode [ 68.444900][ T4189] device veth1_macvtap entered promiscuous mode [ 68.453218][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.469867][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.480195][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.494874][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.509906][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.519087][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.528655][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.536969][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.562881][ T4198] device veth1_vlan entered promiscuous mode [ 68.595958][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.606144][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.617257][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.626033][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.634716][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.643643][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.652528][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.661416][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.669592][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.678102][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.697581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.709065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.717882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.732280][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.740695][ T4200] device veth0_vlan entered promiscuous mode [ 68.757125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.766204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.774426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.783175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.796141][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.807706][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.817503][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.826362][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.842478][ T4188] device veth0_vlan entered promiscuous mode [ 68.850304][ T4200] device veth1_vlan entered promiscuous mode [ 68.861231][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.889951][ T4198] device veth0_macvtap entered promiscuous mode [ 68.910687][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.921639][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.931406][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.941712][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.950839][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.961063][ T4188] device veth1_vlan entered promiscuous mode [ 68.974929][ T4198] device veth1_macvtap entered promiscuous mode [ 69.035166][ T4200] device veth0_macvtap entered promiscuous mode [ 69.047559][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.063013][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.073369][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.082318][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.091923][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.119673][ T4200] device veth1_macvtap entered promiscuous mode [ 69.158400][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.173015][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.173083][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.194152][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.194357][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.235228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.244320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.252443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.262471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.271935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.282902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.294076][ T4188] device veth0_macvtap entered promiscuous mode [ 69.302329][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.314125][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.326280][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.340991][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.352073][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.362269][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.373640][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.388917][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.398639][ T4188] device veth1_macvtap entered promiscuous mode [ 69.406539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.415265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.423753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.432606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.441900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.450698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.460653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.469652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.479120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.487347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.501476][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.510836][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.519808][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.520508][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.538031][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 69.540184][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.550935][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 69.554349][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.568534][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 69.586418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.596125][ T4196] device veth0_vlan entered promiscuous mode [ 69.618461][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 69.627246][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.638608][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 69.645148][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.656054][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.667742][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.679955][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.700136][ T4196] device veth1_vlan entered promiscuous mode [ 69.710476][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.723835][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.734117][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.744986][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.755361][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.772128][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.787783][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.800703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.809094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.818217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.828199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.837305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.880494][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.905415][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.920065][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.931219][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.942683][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.954300][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.966314][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.000776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.010325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.030451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.049319][ T4200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.066604][ T4200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.076646][ T4200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.086051][ T4200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.119245][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.128394][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.137973][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.147417][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.197281][ T1225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.208403][ T1225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.220517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.231222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.240808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.266056][ T4196] device veth0_macvtap entered promiscuous mode [ 70.367363][ T4196] device veth1_macvtap entered promiscuous mode [ 70.434790][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.442678][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.458028][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.467123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.475803][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.489126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.498154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.512480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.538041][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.549335][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.562617][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.573529][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.584828][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.595647][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.605839][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.616783][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.629427][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.642043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.662575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.696235][ T4274] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.715832][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.728481][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.739274][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.755101][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.765304][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.776403][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.789462][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.806974][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.820243][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.839455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.866205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.939181][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.951387][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.962786][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.971941][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.986985][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.017469][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.042708][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.051910][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.076907][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.167998][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.197167][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.225039][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.261642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.297462][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.312779][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.319431][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.359576][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.399657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.448580][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.470770][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.480009][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.540498][ T4290] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.553613][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.614049][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 71.620142][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 71.645400][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 71.659072][ T4298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 71.704491][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 71.719664][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 71.794414][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 71.913580][ T7] usb 2-1: config index 0 descriptor too short (expected 67, got 36) [ 71.922104][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.996054][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.025925][ T7] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 72.037709][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.055178][ T4312] syz.4.15 uses obsolete (PF_INET,SOCK_PACKET) [ 72.088028][ T7] usb 2-1: config 0 descriptor?? [ 72.866400][ T4334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 74.343773][ T7] usbhid 2-1:0.0: can't add hid device: -71 [ 74.350052][ T7] usbhid: probe of 2-1:0.0 failed with error -71 [ 74.404252][ T7] usb 2-1: USB disconnect, device number 2 [ 74.617427][ T4415] device syzkaller0 entered promiscuous mode [ 75.387254][ T4230] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.460887][ T4418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 75.643791][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 75.763756][ T4230] usb 1-1: config index 0 descriptor too short (expected 67, got 36) [ 75.775617][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.798442][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.830794][ T4230] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 75.855173][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.871227][ T4230] usb 1-1: config 0 descriptor?? [ 76.385422][ T4464] device syzkaller0 entered promiscuous mode [ 77.971526][ T4487] loop2: detected capacity change from 0 to 32768 [ 78.036543][ T4487] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.75 (4487) [ 78.172545][ T4487] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 78.222468][ T4487] BTRFS info (device loop2): setting nodatasum [ 78.229337][ T4230] usbhid 1-1:0.0: can't add hid device: -71 [ 78.245663][ T4230] usbhid: probe of 1-1:0.0 failed with error -71 [ 78.256360][ T4487] BTRFS info (device loop2): force zlib compression, level 3 [ 78.275071][ T4230] usb 1-1: USB disconnect, device number 2 [ 78.310079][ T4487] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 78.367837][ T4487] BTRFS info (device loop2): use lzo compression, level 0 [ 78.404827][ T4491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 78.414074][ T4487] BTRFS info (device loop2): turning on flush-on-commit [ 78.424287][ T4487] BTRFS info (device loop2): enabling auto defrag [ 78.430814][ T4487] BTRFS info (device loop2): max_inline at 4096 [ 78.472786][ T4487] BTRFS info (device loop2): using free space tree [ 78.494137][ T4487] BTRFS info (device loop2): has skinny extents [ 78.594449][ T4519] device syzkaller0 entered promiscuous mode [ 78.757121][ T4487] BTRFS info (device loop2): enabling ssd optimizations [ 79.374069][ T4281] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 79.468130][ T4236] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.736443][ T4236] usb 2-1: Using ep0 maxpacket: 16 [ 79.824471][ T4281] usb 4-1: unable to get BOS descriptor or descriptor too short [ 79.863923][ T4236] usb 2-1: config index 0 descriptor too short (expected 67, got 36) [ 79.872182][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.884046][ T4281] usb 4-1: not running at top speed; connect to a high speed hub [ 79.892304][ T4236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.904500][ T4236] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 79.915366][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.954367][ T4236] usb 2-1: config 0 descriptor?? [ 79.996891][ T4281] usb 4-1: config 2 has an invalid interface number: 224 but max is 1 [ 80.022109][ T4281] usb 4-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 80.049205][ T4281] usb 4-1: config 2 has an invalid interface number: 195 but max is 1 [ 80.060870][ T4281] usb 4-1: config 2 has no interface number 0 [ 80.078764][ T4281] usb 4-1: config 2 has no interface number 1 [ 80.091677][ T4281] usb 4-1: config 2 interface 224 altsetting 2 endpoint 0xD has invalid maxpacket 1015, setting to 64 [ 80.107691][ T4281] usb 4-1: config 2 interface 224 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 80.120509][ T4281] usb 4-1: config 2 interface 224 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 80.153355][ T4281] usb 4-1: config 2 interface 224 altsetting 2 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 80.165271][ T4281] usb 4-1: config 2 interface 224 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 80.178711][ T4281] usb 4-1: config 2 interface 224 has no altsetting 0 [ 80.186377][ T4281] usb 4-1: config 2 interface 195 has no altsetting 0 [ 80.243750][ T4281] usb 4-1: language id specifier not provided by device, defaulting to English [ 80.403881][ T4281] usb 4-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=65.7a [ 80.421941][ T4281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.445943][ T4281] usb 4-1: Product: syz [ 80.455818][ T4281] usb 4-1: Manufacturer: syz [ 80.466161][ T4281] usb 4-1: SerialNumber: syz [ 80.524988][ T4552] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 80.722447][ T4588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 81.371164][ T4607] device syzkaller0 entered promiscuous mode [ 81.497421][ T4281] msi2500 4-1:2.224: Registered as swradio24 [ 81.526754][ T4281] msi2500 4-1:2.224: SDR API is still slightly experimental and functionality changes may follow [ 81.802456][ T4281] msi2500 4-1:2.195: Registered as swradio25 [ 81.808818][ T4281] msi2500 4-1:2.195: SDR API is still slightly experimental and functionality changes may follow [ 81.865436][ T4281] usb 4-1: USB disconnect, device number 2 [ 82.243442][ T4236] usbhid 2-1:0.0: can't add hid device: -71 [ 82.258522][ T4236] usbhid: probe of 2-1:0.0 failed with error -71 [ 82.327701][ T4236] usb 2-1: USB disconnect, device number 3 [ 82.993407][ T4236] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 83.454479][ T4236] usb 5-1: unable to get BOS descriptor or descriptor too short [ 83.514080][ T4236] usb 5-1: not running at top speed; connect to a high speed hub [ 83.594508][ T4236] usb 5-1: config 2 has an invalid interface number: 224 but max is 1 [ 83.602783][ T4236] usb 5-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 83.623581][ T4236] usb 5-1: config 2 has an invalid interface number: 195 but max is 1 [ 83.632424][ T4236] usb 5-1: config 2 has no interface number 0 [ 83.640080][ T4236] usb 5-1: config 2 has no interface number 1 [ 83.647722][ T4236] usb 5-1: config 2 interface 224 altsetting 2 endpoint 0xD has invalid maxpacket 1015, setting to 64 [ 83.653925][ T4231] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.675725][ T4236] usb 5-1: config 2 interface 224 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 83.699931][ T4236] usb 5-1: config 2 interface 224 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 83.724763][ T4236] usb 5-1: config 2 interface 224 altsetting 2 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 83.753509][ T4236] usb 5-1: config 2 interface 224 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 83.773728][ T4236] usb 5-1: config 2 interface 224 has no altsetting 0 [ 83.780596][ T4236] usb 5-1: config 2 interface 195 has no altsetting 0 [ 83.833514][ T4236] usb 5-1: language id specifier not provided by device, defaulting to English [ 83.917363][ T4231] usb 4-1: Using ep0 maxpacket: 16 [ 83.953588][ T4236] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=65.7a [ 83.970712][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.989501][ T4236] usb 5-1: Product: syz [ 83.996483][ T4236] usb 5-1: Manufacturer: syz [ 84.001322][ T4236] usb 5-1: SerialNumber: syz [ 84.033499][ T4231] usb 4-1: config index 0 descriptor too short (expected 67, got 36) [ 84.043812][ T4648] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.057760][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.080699][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.118616][ T4231] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 84.132052][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.148649][ T4231] usb 4-1: config 0 descriptor?? [ 84.409916][ T4669] input: syz0 as /devices/virtual/input/input5 [ 85.019247][ T4236] msi2500 5-1:2.224: Registered as swradio24 [ 85.032698][ T4236] msi2500 5-1:2.224: SDR API is still slightly experimental and functionality changes may follow [ 85.187259][ T4236] msi2500 5-1:2.195: Registered as swradio25 [ 85.197455][ T4236] msi2500 5-1:2.195: SDR API is still slightly experimental and functionality changes may follow [ 85.265450][ T4236] usb 5-1: USB disconnect, device number 2 [ 85.794262][ T4702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'. [ 86.493639][ T4231] usbhid 4-1:0.0: can't add hid device: -71 [ 86.503677][ T4231] usbhid: probe of 4-1:0.0 failed with error -71 [ 86.540621][ T4231] usb 4-1: USB disconnect, device number 3 [ 86.656818][ T21] cfg80211: failed to load regulatory.db [ 86.733619][ T4230] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 87.139133][ T4230] usb 5-1: unable to get BOS descriptor or descriptor too short [ 87.185769][ T4230] usb 5-1: not running at top speed; connect to a high speed hub [ 87.276898][ T4230] usb 5-1: config 2 has an invalid interface number: 224 but max is 1 [ 87.289066][ T4230] usb 5-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 87.311685][ T4230] usb 5-1: config 2 has an invalid interface number: 195 but max is 1 [ 87.328927][ T4230] usb 5-1: config 2 has no interface number 0 [ 87.340857][ T4230] usb 5-1: config 2 has no interface number 1 [ 87.357240][ T4230] usb 5-1: config 2 interface 224 altsetting 2 endpoint 0xD has invalid maxpacket 1015, setting to 64 [ 87.382234][ T4230] usb 5-1: config 2 interface 224 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 87.406617][ T4230] usb 5-1: config 2 interface 224 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 87.432220][ T4230] usb 5-1: config 2 interface 224 altsetting 2 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 87.454906][ T4230] usb 5-1: config 2 interface 224 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 87.496737][ T4230] usb 5-1: config 2 interface 224 has no altsetting 0 [ 87.518394][ T4230] usb 5-1: config 2 interface 195 has no altsetting 0 [ 87.574701][ T4230] usb 5-1: language id specifier not provided by device, defaulting to English [ 87.703645][ T4230] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=65.7a [ 87.722843][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.733040][ T4230] usb 5-1: Product: syz [ 87.745931][ T4230] usb 5-1: Manufacturer: syz [ 87.750606][ T4230] usb 5-1: SerialNumber: syz [ 87.793959][ T4731] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 88.154437][ T4713] syz.1.133 (4713): drop_caches: 2 [ 88.493341][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.782177][ T4230] msi2500 5-1:2.224: Registered as swradio24 [ 88.783614][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 88.796008][ T4230] msi2500 5-1:2.224: SDR API is still slightly experimental and functionality changes may follow [ 88.953477][ T21] usb 4-1: config index 0 descriptor too short (expected 67, got 36) [ 88.971902][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.003039][ T4230] msi2500 5-1:2.195: Registered as swradio25 [ 89.015965][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.019241][ T4230] msi2500 5-1:2.195: SDR API is still slightly experimental and functionality changes may follow [ 89.043404][ T21] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 89.059872][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.110616][ T21] usb 4-1: config 0 descriptor?? [ 89.127076][ T4230] usb 5-1: USB disconnect, device number 3 [ 89.399079][ T4764] input: syz0 as /devices/virtual/input/input6 [ 89.653779][ T4232] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 90.039521][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 90.053099][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 90.223568][ T4232] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 90.243363][ T4230] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 90.253697][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.261840][ T4232] usb 3-1: Product: syz [ 90.267650][ T4232] usb 3-1: Manufacturer: syz [ 90.272299][ T4232] usb 3-1: SerialNumber: syz [ 90.294151][ T4232] usb 3-1: config 0 descriptor?? [ 90.339175][ T4232] hub 3-1:0.0: bad descriptor, ignoring hub [ 90.346749][ T4232] hub: probe of 3-1:0.0 failed with error -5 [ 90.367339][ T4232] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 90.643558][ T4230] usb 5-1: unable to get BOS descriptor or descriptor too short [ 90.703559][ T4230] usb 5-1: not running at top speed; connect to a high speed hub [ 90.783491][ T4230] usb 5-1: config 2 has an invalid interface number: 224 but max is 1 [ 90.802036][ T4230] usb 5-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 90.824261][ T4841] tipc: Started in network mode [ 90.829433][ T4841] tipc: Node identity 0a293073dedd, cluster identity 4711 [ 90.845376][ T4841] tipc: Enabled bearer , priority 0 [ 90.852128][ T4230] usb 5-1: config 2 has an invalid interface number: 195 but max is 1 [ 90.861834][ T4841] device syzkaller0 entered promiscuous mode [ 90.886494][ T4841] tipc: Resetting bearer [ 90.917273][ T4230] usb 5-1: config 2 has no interface number 0 [ 90.952247][ T4230] usb 5-1: config 2 has no interface number 1 [ 90.967985][ T4230] usb 5-1: config 2 interface 224 altsetting 2 endpoint 0xD has invalid maxpacket 1015, setting to 64 [ 90.996859][ T4230] usb 5-1: config 2 interface 224 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 91.011386][ T4230] usb 5-1: config 2 interface 224 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 91.029588][ T4230] usb 5-1: config 2 interface 224 altsetting 2 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 91.042588][ T4230] usb 5-1: config 2 interface 224 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 91.125832][ T4845] netlink: 224 bytes leftover after parsing attributes in process `syz.1.177'. [ 94.000658][ T4230] usb 5-1: config 2 interface 224 has no altsetting 0 [ 94.007830][ T4230] usb 5-1: config 2 interface 195 has no altsetting 0 [ 94.023623][ T7] usb 3-1: USB disconnect, device number 2 [ 94.043125][ T4840] tipc: Resetting bearer [ 94.084060][ T4230] usb 5-1: string descriptor 0 read error: -71 [ 94.090518][ T4230] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=65.7a [ 94.103737][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.133671][ T4230] usb 5-1: can't set config #2, error -71 [ 94.145447][ T4230] usb 5-1: USB disconnect, device number 4 [ 94.153639][ T21] usbhid 4-1:0.0: can't add hid device: -71 [ 94.159655][ T21] usbhid: probe of 4-1:0.0 failed with error -71 [ 94.168207][ T4840] tipc: Disabling bearer [ 94.250810][ T21] usb 4-1: USB disconnect, device number 4 [ 94.301435][ T4231] tipc: Node number set to 3572772979 [ 94.363471][ T4861] device syzkaller0 entered promiscuous mode [ 94.705790][ T4884] Zero length message leads to an empty skb [ 94.903583][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.933388][ T4576] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.113458][ T4233] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 95.193387][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 95.198772][ T4576] usb 3-1: Using ep0 maxpacket: 16 [ 95.354289][ T4576] usb 3-1: config index 0 descriptor too short (expected 67, got 36) [ 95.354412][ T21] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 95.372509][ T4576] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.389396][ T4576] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.399807][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.419827][ T4892] netlink: 224 bytes leftover after parsing attributes in process `syz.4.191'. [ 95.431306][ T4576] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 95.484425][ T21] usb 1-1: config 0 descriptor?? [ 95.490053][ T4576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.574974][ T4233] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.610575][ T21] gspca_main: sunplus-2.14.0 probing 041e:400b [ 95.664274][ T4233] usb 2-1: not running at top speed; connect to a high speed hub [ 95.690870][ T4576] usb 3-1: config 0 descriptor?? [ 95.820764][ T21] gspca_sunplus: reg_w_riv err -71 [ 95.844338][ T4233] usb 2-1: config 2 has an invalid interface number: 224 but max is 1 [ 95.885132][ T21] sunplus: probe of 1-1:0.0 failed with error -71 [ 95.936747][ T4233] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 96.050213][ T21] usb 1-1: USB disconnect, device number 3 [ 96.102231][ T4233] usb 2-1: config 2 has an invalid interface number: 195 but max is 1 [ 96.198447][ T4880] input: syz0 as /devices/virtual/input/input8 [ 96.225435][ T4233] usb 2-1: config 2 has no interface number 0 [ 96.342343][ T4233] usb 2-1: config 2 has no interface number 1 [ 96.466142][ T4233] usb 2-1: config 2 interface 224 altsetting 2 endpoint 0xD has invalid maxpacket 1015, setting to 64 [ 96.646173][ T4233] usb 2-1: config 2 interface 224 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 96.764759][ T4233] usb 2-1: config 2 interface 224 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 96.890190][ T4233] usb 2-1: config 2 interface 224 altsetting 2 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 97.021151][ T4233] usb 2-1: config 2 interface 224 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 97.120365][ T4233] usb 2-1: config 2 interface 224 has no altsetting 0 [ 97.178882][ T4233] usb 2-1: config 2 interface 195 has no altsetting 0 [ 97.284083][ T4233] usb 2-1: language id specifier not provided by device, defaulting to English [ 97.503938][ T4233] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=65.7a [ 97.560748][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.631483][ T4233] usb 2-1: Product: syz [ 97.675941][ T4233] usb 2-1: Manufacturer: syz [ 97.739498][ T4233] usb 2-1: SerialNumber: syz [ 97.934250][ T4576] usbhid 3-1:0.0: can't add hid device: -71 [ 97.946102][ T4576] usbhid: probe of 3-1:0.0 failed with error -71 [ 98.107790][ T4576] usb 3-1: USB disconnect, device number 3 [ 98.223459][ T4233] usb 2-1: can't set config #2, error -71 [ 98.296993][ T4233] usb 2-1: USB disconnect, device number 4 [ 98.559148][ T4905] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 98.819084][ T4926] device syzkaller0 entered promiscuous mode [ 98.917437][ T4933] netlink: 'syz.0.202': attribute type 1 has an invalid length. [ 98.961889][ T4933] bond1: (slave bridge1): making interface the new active one [ 98.971324][ T4933] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 99.172912][ T4942] netlink: 224 bytes leftover after parsing attributes in process `syz.0.207'. [ 99.182215][ T4233] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.458402][ T4233] usb 5-1: Using ep0 maxpacket: 16 [ 99.604117][ T4233] usb 5-1: config index 0 descriptor too short (expected 67, got 36) [ 99.629713][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.812228][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.959921][ T4233] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 100.115537][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.336279][ T4233] usb 5-1: config 0 descriptor?? [ 100.777798][ T4934] input: syz0 as /devices/virtual/input/input9 [ 102.236263][ T4965] device syzkaller0 entered promiscuous mode [ 102.329493][ T4233] usbhid 5-1:0.0: can't add hid device: -71 [ 102.341124][ T4233] usbhid: probe of 5-1:0.0 failed with error -71 [ 102.395832][ T4233] usb 5-1: USB disconnect, device number 5 [ 102.550655][ T4973] device syzkaller0 entered promiscuous mode [ 102.623157][ T4981] netdevsim netdevsim2: Direct firmware load for ÿÿÿÿ failed with error -2 [ 102.674204][ T4981] netdevsim netdevsim2: Falling back to sysfs fallback for: ÿÿÿÿ [ 102.858090][ T4991] netlink: 224 bytes leftover after parsing attributes in process `syz.4.222'. [ 106.832914][ T5026] device syzkaller0 entered promiscuous mode [ 106.882473][ T5026] ================================================================== [ 106.890809][ T5026] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x23a/0x240 [ 106.899415][ T5026] Read of size 2 at addr ffff88807a59bdfb by task syz.3.232/5026 [ 106.907166][ T5026] [ 106.909524][ T5026] CPU: 1 PID: 5026 Comm: syz.3.232 Not tainted syzkaller #0 [ 106.916882][ T5026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.926967][ T5026] Call Trace: [ 106.930266][ T5026] [ 106.933235][ T5026] dump_stack_lvl+0x188/0x250 [ 106.937954][ T5026] ? show_regs_print_info+0x20/0x20 [ 106.943194][ T5026] ? load_image+0x400/0x400 [ 106.947754][ T5026] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 106.953257][ T5026] ? ieee80211_tx+0x460/0x460 [ 106.957961][ T5026] print_address_description+0x60/0x2d0 [ 106.963514][ T5026] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 106.969890][ T5026] kasan_report+0xdf/0x130 [ 106.974319][ T5026] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 106.980576][ T5026] ieee80211_monitor_select_queue+0x23a/0x240 [ 106.986661][ T5026] ? ieee80211_recalc_smps_work+0x20/0x20 [ 106.992397][ T5026] netdev_core_pick_tx+0x118/0x2e0 [ 106.997527][ T5026] __dev_queue_xmit+0x756/0x2f80 [ 107.002495][ T5026] ? __might_fault+0xb7/0x110 [ 107.007200][ T5026] ? dev_queue_xmit+0x20/0x20 [ 107.011891][ T5026] ? virtio_net_hdr_to_skb+0xa6b/0x11f0 [ 107.017480][ T5026] ? packet_cached_dev_get+0x270/0x270 [ 107.022946][ T5026] ? skb_copy_datagram_from_iter+0x5e3/0x6a0 [ 107.028939][ T5026] packet_sendmsg+0x3dba/0x5060 [ 107.033828][ T5026] ? __might_sleep+0xf0/0xf0 [ 107.038435][ T5026] ? aa_sk_perm+0x7dc/0x910 [ 107.042942][ T5026] ? packet_getsockopt+0x9a0/0x9a0 [ 107.048086][ T5026] ? aa_sock_msg_perm+0x94/0x150 [ 107.053034][ T5026] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 107.058332][ T5026] ? security_socket_sendmsg+0x7c/0xa0 [ 107.063811][ T5026] ? packet_getsockopt+0x9a0/0x9a0 [ 107.068947][ T5026] ____sys_sendmsg+0x5b7/0x8f0 [ 107.073734][ T5026] ? __sys_sendmsg_sock+0x30/0x30 [ 107.078771][ T5026] ? import_iovec+0x6f/0xa0 [ 107.083292][ T5026] ___sys_sendmsg+0x236/0x2e0 [ 107.088011][ T5026] ? __sys_sendmsg+0x2a0/0x2a0 [ 107.092815][ T5026] __se_sys_sendmsg+0x1af/0x290 [ 107.097675][ T5026] ? __x64_sys_sendmsg+0x80/0x80 [ 107.102623][ T5026] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 107.108621][ T5026] ? lockdep_hardirqs_on+0x94/0x140 [ 107.113831][ T5026] do_syscall_64+0x4c/0xa0 [ 107.118270][ T5026] ? clear_bhb_loop+0x30/0x80 [ 107.123011][ T5026] ? clear_bhb_loop+0x30/0x80 [ 107.127722][ T5026] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.133650][ T5026] RIP: 0033:0x7f74b65b7e59 [ 107.138086][ T5026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.158105][ T5026] RSP: 002b:00007f74b4811028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.166535][ T5026] RAX: ffffffffffffffda RBX: 00007f74b6830fa0 RCX: 00007f74b65b7e59 [ 107.174514][ T5026] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 107.182491][ T5026] RBP: 00007f74b664dd6f R08: 0000000000000000 R09: 0000000000000000 [ 107.190469][ T5026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.198628][ T5026] R13: 00007f74b6831038 R14: 00007f74b6830fa0 R15: 00007fff7349ac98 [ 107.206629][ T5026] [ 107.209679][ T5026] [ 107.212019][ T5026] Allocated by task 3560: [ 107.216344][ T5026] __kasan_slab_alloc+0x9c/0xd0 [ 107.221207][ T5026] slab_post_alloc_hook+0x4c/0x380 [ 107.226318][ T5026] kmem_cache_alloc+0x100/0x290 [ 107.231183][ T5026] getname_flags+0xb5/0x500 [ 107.235686][ T5026] user_path_at_empty+0x2a/0x190 [ 107.240652][ T5026] do_readlinkat+0xd9/0x490 [ 107.245161][ T5026] __x64_sys_readlink+0x7b/0x90 [ 107.250011][ T5026] do_syscall_64+0x4c/0xa0 [ 107.254450][ T5026] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.260353][ T5026] [ 107.262677][ T5026] Freed by task 3560: [ 107.266648][ T5026] kasan_set_track+0x4b/0x70 [ 107.271236][ T5026] kasan_set_free_info+0x1f/0x40 [ 107.276176][ T5026] ____kasan_slab_free+0xd5/0x110 [ 107.281204][ T5026] slab_free_freelist_hook+0xea/0x170 [ 107.286575][ T5026] kmem_cache_free+0x8f/0x210 [ 107.291248][ T5026] user_path_at_empty+0x13e/0x190 [ 107.296272][ T5026] do_readlinkat+0xd9/0x490 [ 107.300776][ T5026] __x64_sys_readlink+0x7b/0x90 [ 107.305630][ T5026] do_syscall_64+0x4c/0xa0 [ 107.310045][ T5026] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.315949][ T5026] [ 107.318269][ T5026] The buggy address belongs to the object at ffff88807a59b300 [ 107.318269][ T5026] which belongs to the cache names_cache of size 4096 [ 107.332404][ T5026] The buggy address is located 2811 bytes inside of [ 107.332404][ T5026] 4096-byte region [ffff88807a59b300, ffff88807a59c300) [ 107.345856][ T5026] The buggy address belongs to the page: [ 107.351504][ T5026] page:ffffea0001e96600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a598 [ 107.361657][ T5026] head:ffffea0001e96600 order:3 compound_mapcount:0 compound_pincount:0 [ 107.370074][ T5026] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 107.378081][ T5026] raw: 00fff00000010200 ffffea0001d98400 0000000200000002 ffff888016de9500 [ 107.386666][ T5026] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 107.395246][ T5026] page dumped because: kasan: bad access detected [ 107.401752][ T5026] page_owner tracks the page as allocated [ 107.407463][ T5026] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4785, ts 89263684014, free_ts 88617882902 [ 107.427954][ T5026] get_page_from_freelist+0x1bbd/0x1ca0 [ 107.433511][ T5026] __alloc_pages+0x1ee/0x480 [ 107.438107][ T5026] new_slab+0xc0/0x4b0 [ 107.442187][ T5026] ___slab_alloc+0x80a/0xdd0 [ 107.446820][ T5026] kmem_cache_alloc+0x195/0x290 [ 107.451694][ T5026] getname_flags+0xb5/0x500 [ 107.456195][ T5026] do_sys_openat2+0xdd/0x4b0 [ 107.460786][ T5026] __x64_sys_openat+0x135/0x160 [ 107.465634][ T5026] do_syscall_64+0x4c/0xa0 [ 107.470056][ T5026] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.475961][ T5026] page last free stack trace: [ 107.480636][ T5026] free_unref_page_prepare+0x637/0x6c0 [ 107.486100][ T5026] free_unref_page+0x8f/0x2a0 [ 107.490779][ T5026] __unfreeze_partials+0x1a5/0x200 [ 107.495894][ T5026] put_cpu_partial+0x12d/0x190 [ 107.500659][ T5026] qlist_free_all+0x35/0x90 [ 107.505175][ T5026] kasan_quarantine_reduce+0x150/0x160 [ 107.510654][ T5026] __kasan_slab_alloc+0x2f/0xd0 [ 107.515516][ T5026] slab_post_alloc_hook+0x4c/0x380 [ 107.520644][ T5026] __kmalloc+0x127/0x330 [ 107.524897][ T5026] tomoyo_realpath_from_path+0x118/0x610 [ 107.530549][ T5026] tomoyo_path_perm+0x23f/0x5d0 [ 107.535404][ T5026] security_inode_getattr+0xcf/0x120 [ 107.540693][ T5026] vfs_getattr+0x26/0x3a0 [ 107.545034][ T5026] vfs_statx+0x14e/0x500 [ 107.549305][ T5026] __x64_sys_newfstatat+0x15f/0x200 [ 107.554505][ T5026] do_syscall_64+0x4c/0xa0 [ 107.558925][ T5026] [ 107.561242][ T5026] Memory state around the buggy address: [ 107.566865][ T5026] ffff88807a59bc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.574924][ T5026] ffff88807a59bd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.582985][ T5026] >ffff88807a59bd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.591041][ T5026] ^ [ 107.599014][ T5026] ffff88807a59be00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.607074][ T5026] ffff88807a59be80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.615131][ T5026] ================================================================== [ 107.623185][ T5026] Disabling lock debugging due to kernel taint [ 107.629387][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.635424][ T5026] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 107.642611][ T5026] CPU: 1 PID: 5026 Comm: syz.3.232 Tainted: G B syzkaller #0 [ 107.651280][ T5026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 107.661335][ T5026] Call Trace: [ 107.664615][ T5026] [ 107.667545][ T5026] dump_stack_lvl+0x188/0x250 [ 107.672225][ T5026] ? show_regs_print_info+0x20/0x20 [ 107.677425][ T5026] ? load_image+0x400/0x400 [ 107.681928][ T5026] panic+0x2e5/0x810 [ 107.685849][ T5026] ? bpf_jit_dump+0xd0/0xd0 [ 107.690352][ T5026] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 107.696246][ T5026] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 107.702138][ T5026] ? _raw_spin_unlock+0x40/0x40 [ 107.707051][ T5026] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 107.713318][ T5026] check_panic_on_warn+0x80/0xa0 [ 107.718290][ T5026] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 107.724537][ T5026] end_report+0x6d/0xf0 [ 107.728698][ T5026] kasan_report+0x102/0x130 [ 107.733202][ T5026] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 107.739485][ T5026] ieee80211_monitor_select_queue+0x23a/0x240 [ 107.745572][ T5026] ? ieee80211_recalc_smps_work+0x20/0x20 [ 107.751297][ T5026] netdev_core_pick_tx+0x118/0x2e0 [ 107.756413][ T5026] __dev_queue_xmit+0x756/0x2f80 [ 107.761356][ T5026] ? __might_fault+0xb7/0x110 [ 107.766037][ T5026] ? dev_queue_xmit+0x20/0x20 [ 107.770711][ T5026] ? virtio_net_hdr_to_skb+0xa6b/0x11f0 [ 107.776261][ T5026] ? packet_cached_dev_get+0x270/0x270 [ 107.781726][ T5026] ? skb_copy_datagram_from_iter+0x5e3/0x6a0 [ 107.787707][ T5026] packet_sendmsg+0x3dba/0x5060 [ 107.792565][ T5026] ? __might_sleep+0xf0/0xf0 [ 107.797177][ T5026] ? aa_sk_perm+0x7dc/0x910 [ 107.801680][ T5026] ? packet_getsockopt+0x9a0/0x9a0 [ 107.806792][ T5026] ? aa_sock_msg_perm+0x94/0x150 [ 107.811745][ T5026] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 107.817038][ T5026] ? security_socket_sendmsg+0x7c/0xa0 [ 107.822497][ T5026] ? packet_getsockopt+0x9a0/0x9a0 [ 107.827608][ T5026] ____sys_sendmsg+0x5b7/0x8f0 [ 107.832393][ T5026] ? __sys_sendmsg_sock+0x30/0x30 [ 107.837424][ T5026] ? import_iovec+0x6f/0xa0 [ 107.841928][ T5026] ___sys_sendmsg+0x236/0x2e0 [ 107.846621][ T5026] ? __sys_sendmsg+0x2a0/0x2a0 [ 107.851413][ T5026] __se_sys_sendmsg+0x1af/0x290 [ 107.856312][ T5026] ? __x64_sys_sendmsg+0x80/0x80 [ 107.861272][ T5026] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 107.867256][ T5026] ? lockdep_hardirqs_on+0x94/0x140 [ 107.872455][ T5026] do_syscall_64+0x4c/0xa0 [ 107.876869][ T5026] ? clear_bhb_loop+0x30/0x80 [ 107.881543][ T5026] ? clear_bhb_loop+0x30/0x80 [ 107.886248][ T5026] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.892151][ T5026] RIP: 0033:0x7f74b65b7e59 [ 107.896574][ T5026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.916182][ T5026] RSP: 002b:00007f74b4811028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.924598][ T5026] RAX: ffffffffffffffda RBX: 00007f74b6830fa0 RCX: 00007f74b65b7e59 [ 107.932570][ T5026] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 107.940542][ T5026] RBP: 00007f74b664dd6f R08: 0000000000000000 R09: 0000000000000000 [ 107.948513][ T5026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.956498][ T5026] R13: 00007f74b6831038 R14: 00007f74b6830fa0 R15: 00007fff7349ac98 [ 107.964481][ T5026] [ 107.967811][ T5026] Kernel Offset: disabled [ 107.972155][ T5026] Rebooting in 86400 seconds..