last executing test programs: 9.417367112s ago: executing program 4 (id=203): connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="8e004e8d72"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f00000000c0)={0x2, 0x9}) syz_open_dev$sndpcmc(&(0x7f0000000040), 0xfff, 0x20083) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.189202274s ago: executing program 4 (id=205): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cd", 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x80108907, 0x0) connect(r2, &(0x7f0000000140)=@in6={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x80) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0xffffffffffffffff, 0x40c}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000008"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000400)=r4, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c617665000000000c09058006001f0009000000000000000000004cd05a90b061a07004"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 7.17812184s ago: executing program 1 (id=213): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0xff, 0x0, 0x0, 0x9}, 0x20) 6.995044532s ago: executing program 1 (id=215): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x1, 0x41, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x20000000000, 0xfffffffffffffffa, 0x1, 0x0, 0x1000401000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x100000004, 0xfffffffffffffffc, 0xf, 0x80000006}, 0x0, 0x0) 6.730229894s ago: executing program 0 (id=217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x5}]}, 0x30}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) readv(r0, &(0x7f0000001840)=[{&(0x7f0000000200)=""/24, 0x18}], 0x1) 6.455422986s ago: executing program 3 (id=218): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x32, 0x0, 0xffffd000) 6.077334209s ago: executing program 0 (id=219): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0x4}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x0, 0x7) pread64(r6, &(0x7f0000000100)=""/177, 0xb1, 0x40) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) unshare(0x20000400) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) r10 = socket$unix(0x1, 0xe909ded9d3821895, 0x0) getsockname$unix(r10, &(0x7f0000000180), &(0x7f00000002c0)=0x6e) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x8, 0x0, 0xc, 0x8, 0x4, 0xb, 0x3, 0x13, 0x5, 0x70, 0x0, 0xd, 0xb, 0x0, 0x0, 0x0, 0xce, '\x00', 0x4, 0x4}) 6.00851926s ago: executing program 1 (id=220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) r3 = syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xec, 0xcb, 0xc0, 0x10, 0x506, 0x11f8, 0xb628, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x52, 0x0, 0x0, 0x9a, 0x66, 0xd4}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.95072866s ago: executing program 2 (id=221): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000ac0)=@ccm_128={{0x304}, "5c000002010400", "ccaa54dbfef3216ec09b63757e98ed63", "cde21de0", "bcad0b2f6d5df9b2"}, 0x28) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000100)=@ccm_128={{0x303}, '\x00 \x00', "38967a2445914c2e5ab898a7f56a364a", "80020007", "bff5b80e1f6fd131"}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x1ac, 0x24, 0xf0b, 0x70bd28, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x17c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x104, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x30}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffff484d}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5b}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xfd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xe3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x613}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffffff92}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbff3}]}]}]}}]}, 0x1ac}, 0x1, 0x7a00}, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000003c0)=0x6, 0x6, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000000)=""/64, &(0x7f0000000040)=0x40) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000400)=0x1, 0x7, 0x3) 5.205291636s ago: executing program 4 (id=222): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000200)={0xfe, 0x1, 0x8, 0x6, 0xca, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10, 0x9}, 0xe) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_create1(0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) shutdown(r1, 0x0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f00000002c0)=@ready={0x0, 0x0, 0x8, "6ddb21ec", {0x1, 0x12, 0x6, 0xc, 0xbd}}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f0000000d00)=@conn_svc_rsp={0x0, 0x0, 0xa, "c8f33be6", {0x3, 0x100, 0x0, 0x7, 0x9c, 0x24, 0x8}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, 0x0, 0x0) 5.197437767s ago: executing program 2 (id=223): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0x60008082, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 5.063946788s ago: executing program 0 (id=224): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(r3, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) 4.953400258s ago: executing program 2 (id=225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000001c0)={0x1c, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008e02"]) 4.78006844s ago: executing program 2 (id=226): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000440)={0x6, 0x118, 0xfa00, {{0xc, 0x6, "615f924ca026776b73364558cd6bbc5fb39db1d064150909c6cce2cd77b50343b6637e3d944cdd99eb577bea95f699247eba4afdab4130c62fc419850f6b41c24d7725a33712387c30f75a5fde3269505117ba4bb015cae4059a1edb66133ff230f055e1d52fbda048823f8d32e292a005b2dd956d11b0a9d386ecc84e52abc563416dca4a6a3655fc27df89dbe8aca297ba8651d054800a711b22b8bad8624d3af2c9f186cf4578ce9be9cbbf7b4f50b9a65cb218f3fa0e791f253c9b623ffc07ee1e48c5fe04f26d265bbb48fb04c81e4b4f398c278e23b3b23d1d1c31dbeae9d9ba46121a54b36b1806cd67187dd30faa9f29c4890d5912c08a4a1916c3ad", 0x6, 0x2, 0x6, 0x6, 0xd9, 0x7, 0xe}}}, 0x120) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) getsockopt(0xffffffffffffffff, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f0000000040), 0x1004) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0xc}, 0x8) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 3.272712443s ago: executing program 3 (id=227): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x3c, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x3c}}, 0x40000) 3.157378163s ago: executing program 1 (id=228): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x5], 0x80a0000, 0x104204}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.096875264s ago: executing program 3 (id=229): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000280607ee622", 0x2e}], 0x1}, 0x40) 2.628925748s ago: executing program 1 (id=230): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40, 0x0, 0xf, "012720dcfe14c639a500ba17162716"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000300)={0x40, 0x3, 0x1, "cf"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) gettid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4008071}, 0x20004000) 2.275427251s ago: executing program 3 (id=231): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, 0x0, 0x3c, 0x163, 0x0, 0x0) 1.929229513s ago: executing program 2 (id=232): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000400)="8e6e", 0x2}, {0x0}], 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) unshare(0x2a020480) ppoll(&(0x7f0000000740)=[{r1, 0x4199}], 0x1, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000000480), 0x1, 0x2) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) unshare(0xc00) fchown(r1, r2, r3) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000d10b000000000000a3a4000000000000e69925962c40c51c9d99e069521a7a2ba97ab1be8d98e8f38250116098110152fc0859785cbae045402ddec832162ec80235b9c0c8c982e199181a0a49b89833445d75b2bd7b1078648827a9f05ab73a8b482578060c8cfb14"]) pselect6(0x40, &(0x7f0000000000)={0x4, 0x8000000000000001, 0x6e11, 0xfffffffffffffffc, 0x22, 0x100000001, 0xa, 0x9}, &(0x7f0000000080)={0x4, 0x3, 0x0, 0x5, 0x7, 0xe5, 0x4, 0x3}, 0x0, 0x0, 0x0) 1.835234084s ago: executing program 2 (id=233): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000030801010000000000000000000000000600024000000000"], 0x50}}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x8080000, 0x0, r2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 1.581765207s ago: executing program 4 (id=234): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32, @ANYBLOB="0300"], 0x50) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.297399469s ago: executing program 3 (id=235): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000120001"], 0x28}, 0x1, 0x0, 0x0, 0x185}, 0x4080) 1.245613689s ago: executing program 4 (id=236): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, 0x0, 0x0) bind$can_raw(r0, &(0x7f00000005c0), 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f0000000500)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) 1.16740744s ago: executing program 3 (id=237): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r1 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_pts(r0, 0x20000) r3 = dup3(r2, r0, 0x0) io_setup(0x8, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x8000000) syz_io_uring_submit(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0xc, 0xff, 0x8, 0x6, 0x1, 0x0, 0x7, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3, 0x3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 949.231891ms ago: executing program 0 (id=238): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000e80501080000000000000000050000040500010006ee00002500b32ebe970000"], 0x24}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)={0x3, 'veth0_to_team\x00', {0x1}, 0x793}) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 380.928876ms ago: executing program 0 (id=239): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 256.508047ms ago: executing program 4 (id=240): r0 = epoll_create(0x6) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x1000, 0x0, 0xb4b, 0x9, 0x9, 0x1, 0x400002}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) fsopen(&(0x7f0000000100)='adfs\x00', 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r6, 0x0, 0x0, 0x40800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000300)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) 157.224198ms ago: executing program 0 (id=241): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x4d0, 0x320, 0x190, 0x320, 0xc8, 0x190, 0x41d, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'virt_wifi0\x00', 'veth0_to_bond\x00', {}, {}, 0x2c}, 0x0, 0xa4, 0xc8, 0x0, {0x7a00000000000000}}, @HL={0x24}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0xffffffff], [], 'pimreg\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x25, 0x7}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0xff, 0xff000000], 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x5, 0x22}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x9, 0x4, 0x13}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@private1, @loopback, [0xff, 0x0, 0x0, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xff], 'bond_slave_0\x00', 'erspan0\x00', {0xff}, {}, 0x2b, 0x3, 0x0, 0x20}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1, 0x80, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='X', 0x1, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0502103, &(0x7f0000000180)={0x0, 0xfff, 0x100fe}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='\x00\x00', 0x0) setns(r7, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 0s ago: executing program 1 (id=242): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026f"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYRES32=r8], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newchain={0x898, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0xfff3, 0x6}, {0x3, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0x830, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x8001}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9000, 0x3, 0x278f}, {0x9, 0x8, 0x800, 0x6}}}]}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x618}, @TCA_FLOW_POLICE={0x90, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x527, 0x2, 0x1, {0x9, 0x1, 0x39e, 0xe, 0x1, 0xfffffffe}, {0x80, 0x0, 0x400, 0x28b4, 0x83f6, 0x8}, 0x56, 0x7fffffff, 0x690}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x80000001, 0x7ff, 0x0, {0x2, 0x1, 0x3ff, 0xffff, 0x6, 0xe8}, {0x6, 0x0, 0xf, 0x0, 0x7f, 0x4001}, 0x1000, 0x101, 0x9}}]}, @TCA_FLOW_ACT={0x74c, 0x9, 0x0, 0x1, [@m_xt={0x1f0, 0x7, 0x0, 0x0, {{0x7}, {0x16c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0xb7, 0x6, {0xe60b, 'raw\x00', 0x7, 0x9, "168e51211cb0dac1567328a23adecd528e86128d70a7db97853a2c78627cdda91304290adbec04a3a96b3d9e303a29496aa41cfabf6c14c943dc391fa80b8d8b326812c0b47c0e1ad7e6170ebaaccfe1dc20069e4154d85deddbbce8c087b5548d7f25e21fabf5690e19c02b7bb5ec46704f9612da60faae427bc3ffdf74e48fcb47940a8ae09829bbf8a115a6"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TARG={0x8e, 0x6, {0xffff, 'raw\x00', 0xe, 0x1, "0129802a0b60f2b583aff63df8785b506e15fc39b254636b7feaa39c02cb49e0a41da7a8575d4f710ec2db08ab8b34cb582bf22aa732548853e6fe2e5128c273f0ee78e2f0bdec236e6394eef6dac5f305646df0c5c7e7b6bfc848b33baa6334138c8fc9"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_HOOK={0x8}]}, {0x5d, 0x6, "162dc327de9ba0a1b090792b06c591ff8cac7b0ee40ed3301c7e248574ea0afc8bbbe6cc43f08fb7ca05d415840da9b776e2ab66d9518c0e5aa58f7e3819afb17e9e74b2c49cf464da95cf2a4eca72f73f294b3fa7359cc509"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x478, 0x1c, 0x0, 0x0, {{0xb}, {0x42c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa955ab14}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6ff2080b, 0x9, 0x9, 0x3, 0x81, 0x1, 0x7, 0x1, 0x1000, 0xfacb, 0x8, 0xfffffff2, 0x7fff, 0x2, 0x4, 0xfffffc00, 0x7, 0x9, 0x784a, 0x7, 0xc, 0xe, 0x8, 0x2, 0x7186, 0x9, 0x8, 0x40000000, 0xb4, 0x60, 0x1, 0x9, 0x9, 0x9, 0x0, 0x7e3, 0x5, 0x0, 0x4, 0x4, 0xfffffe01, 0xa9, 0x8, 0x9, 0x0, 0xfffffffd, 0x1, 0x100, 0x2, 0x1, 0x1, 0x5, 0x9, 0x8, 0x3, 0x5, 0x8, 0x6, 0x10, 0x5, 0x0, 0x8, 0x1000, 0x69b9, 0x8, 0x5635b7f0, 0x9, 0x877, 0x5, 0x5, 0x9, 0x8000, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0xd, 0x5, 0xfff, 0x8, 0xd, 0xfff, 0xffff, 0xd, 0x3ff, 0x8, 0x8, 0x401, 0xb, 0x1, 0xefc9, 0x8001, 0xfffffffa, 0x0, 0x1, 0x7fffffff, 0x7, 0x900, 0x9, 0xa600, 0x9, 0x5, 0x0, 0x0, 0xc9fb, 0x9, 0x2, 0x80000000, 0x3, 0x67e, 0xe53, 0x8, 0x1, 0x80000001, 0xfffeffff, 0x8, 0x7f, 0x622, 0xa, 0x8000, 0x9d, 0x4, 0x101, 0xfffffffd, 0x5, 0x4d, 0x6461, 0xffffffad, 0xc, 0x6, 0x9, 0x3, 0xfffeffff, 0x2, 0x200000, 0x2, 0x7, 0x1, 0x6, 0x68, 0x8, 0x0, 0xcfdb, 0x400, 0x8, 0xd, 0xffffffff, 0x101, 0x1, 0x7, 0x1599, 0x1ff, 0xc, 0x447, 0xfffffffc, 0x1, 0x2, 0x0, 0xfffffff8, 0x8f, 0x3, 0x0, 0x7, 0x9, 0x2, 0xec2, 0x6, 0x3, 0x800, 0x7, 0x6, 0x9, 0x5, 0x4, 0x0, 0x3, 0x8, 0x8be, 0x7fff, 0x2, 0x40, 0x1ff, 0x9, 0xcbe7, 0x7f, 0x8, 0xc08, 0x7, 0x5, 0x4, 0xe, 0x2, 0x7, 0x4, 0x7, 0x1, 0x9, 0xc, 0x9d00, 0x5, 0x80000001, 0x80000001, 0xbec, 0x5c, 0x80000001, 0x7, 0x2, 0x7, 0x3, 0x8, 0x8, 0x1, 0x9, 0x3, 0x7, 0x45b9, 0x0, 0x5, 0xc, 0x9, 0x2, 0x6b06, 0x3, 0x7, 0x8, 0x331, 0x4, 0x2, 0xffffffe6, 0x870b, 0x8, 0xe2ed, 0x5f01, 0x4, 0x9, 0x6, 0xfffffffe, 0xfff, 0x80, 0x3f31, 0xbb, 0x1000, 0x9, 0x3, 0x7ff, 0x0, 0x0, 0x8, 0x7, 0x6, 0x4, 0xa]}]]}, {0x22, 0x6, "ccdc57dc8edace774ba7e54e7f639e34370b62a72052a5431aa06a123295"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0xe0, 0x1f, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xff, 0x5, 0x80, 0x5}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x43f4}, @TCA_MPLS_LABEL={0x8, 0x5, 0x37b99}, @TCA_MPLS_LABEL={0x8, 0x5, 0x30e9}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x80b, 0x8, 0x6, 0x0, 0x5}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x53, 0x6, "96986d955fa653444a3d601379169839058212418f8681f2327b9b105bd5e31418412b10ab51efbf536d6faa7284fcdcbb6732089908467917f254c5f0de058b4c6d1dda345d1da5e7e1ac23a4576a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x898}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.243' (ED25519) to the list of known hosts. [ 64.593227][ T4173] cgroup: Unknown subsys name 'net' [ 64.730788][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.298134][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.871562][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 68.007665][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 68.027198][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.043946][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.052806][ T4187] device bridge_slave_0 entered promiscuous mode [ 68.099110][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.106354][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.117768][ T4187] device bridge_slave_1 entered promiscuous mode [ 68.152560][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 68.163173][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 68.175370][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.189667][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.218048][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 68.269491][ T4187] team0: Port device team_slave_0 added [ 68.312468][ T4187] team0: Port device team_slave_1 added [ 68.321932][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.329228][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.338224][ T4191] device bridge_slave_0 entered promiscuous mode [ 68.365413][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.372533][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.381132][ T4191] device bridge_slave_1 entered promiscuous mode [ 68.434358][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.441372][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.467606][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.482095][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.489844][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.516955][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.528339][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.535702][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.543779][ T4192] device bridge_slave_0 entered promiscuous mode [ 68.587362][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.595120][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.603294][ T4192] device bridge_slave_1 entered promiscuous mode [ 68.615075][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.641332][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.648682][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.657438][ T4194] device bridge_slave_0 entered promiscuous mode [ 68.674754][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.684085][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.691368][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.699511][ T4183] device bridge_slave_0 entered promiscuous mode [ 68.708917][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.717294][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.725797][ T4183] device bridge_slave_1 entered promiscuous mode [ 68.740885][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.748375][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.756960][ T4194] device bridge_slave_1 entered promiscuous mode [ 68.814738][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.827138][ T4191] team0: Port device team_slave_0 added [ 68.835550][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.860185][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.879488][ T4191] team0: Port device team_slave_1 added [ 68.897048][ T4187] device hsr_slave_0 entered promiscuous mode [ 68.904825][ T4187] device hsr_slave_1 entered promiscuous mode [ 68.913239][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.925888][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.969537][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.995181][ T4192] team0: Port device team_slave_0 added [ 69.020471][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.027988][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.054600][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.075738][ T4192] team0: Port device team_slave_1 added [ 69.081985][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.089058][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.115857][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.137712][ T4183] team0: Port device team_slave_0 added [ 69.147737][ T4194] team0: Port device team_slave_0 added [ 69.171638][ T4183] team0: Port device team_slave_1 added [ 69.179740][ T4194] team0: Port device team_slave_1 added [ 69.239518][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.246837][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.273798][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.305342][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.312341][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.338572][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.350542][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.357901][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.384022][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.396853][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.404073][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.430119][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.441872][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.448874][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.475001][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.488531][ T4191] device hsr_slave_0 entered promiscuous mode [ 69.496129][ T4191] device hsr_slave_1 entered promiscuous mode [ 69.502806][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.510685][ T4191] Cannot create hsr debugfs directory [ 69.517249][ T2305] Bluetooth: hci0: command 0x0409 tx timeout [ 69.524217][ T2305] Bluetooth: hci1: command 0x0409 tx timeout [ 69.528943][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.538625][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.565076][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.594686][ T4225] Bluetooth: hci3: command 0x0409 tx timeout [ 69.604225][ T4195] Bluetooth: hci4: command 0x0409 tx timeout [ 69.610403][ T4195] Bluetooth: hci2: command 0x0409 tx timeout [ 69.679289][ T4183] device hsr_slave_0 entered promiscuous mode [ 69.686800][ T4183] device hsr_slave_1 entered promiscuous mode [ 69.693487][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.701655][ T4183] Cannot create hsr debugfs directory [ 69.717986][ T4192] device hsr_slave_0 entered promiscuous mode [ 69.724850][ T4192] device hsr_slave_1 entered promiscuous mode [ 69.731693][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.739565][ T4192] Cannot create hsr debugfs directory [ 69.759574][ T4194] device hsr_slave_0 entered promiscuous mode [ 69.766552][ T4194] device hsr_slave_1 entered promiscuous mode [ 69.773504][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.781155][ T4194] Cannot create hsr debugfs directory [ 70.058253][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.082685][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.103390][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.117917][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.169322][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.179912][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.202086][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.211563][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.277989][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.287838][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.301543][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.322568][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.430027][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.449776][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.465378][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.479378][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.497951][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.514071][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.546171][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.560389][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.588307][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.596247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.607248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.617158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.625469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.636325][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.643498][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.658856][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.677549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.687933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.699060][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.706499][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.717468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.744210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.757660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.767331][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.774471][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.788177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.799307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.808156][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.815525][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.828223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.875278][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.882721][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.892764][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.904769][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.913646][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.922303][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.932074][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.941464][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.948624][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.957057][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.966203][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.976483][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.985090][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.993463][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.002221][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.040372][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.051685][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.069062][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.082126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.092442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.102474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.111538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.120874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.131816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.141132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.150490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.160032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.169487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.178603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.187634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.200030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.221237][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.247100][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.288171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.297036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.305577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.314560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.340038][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.353993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.362807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.380702][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.387973][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.397245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.408147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.416803][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.424001][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.462955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.476178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.491760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.502641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.522089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.545110][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.552369][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.561284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.570420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.579812][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.586959][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.597331][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 71.602932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.615754][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.620830][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 71.622455][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.665046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.678840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.679119][ T1347] Bluetooth: hci2: command 0x041b tx timeout [ 71.687928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.701120][ T1347] Bluetooth: hci4: command 0x041b tx timeout [ 71.701213][ T1347] Bluetooth: hci3: command 0x041b tx timeout [ 71.716934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.726001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.735403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.743880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.752260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.762431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.771212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.779826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.787678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.804716][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.819746][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.829361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.838010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.848627][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.865818][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.895034][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.902252][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.916750][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.927151][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.938249][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.990857][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.000646][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.010774][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.021387][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.030280][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.039634][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.049690][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.059170][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.072442][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.082034][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.094162][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.138797][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.147503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.158413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.168819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.178822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.188589][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.195752][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.204465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.213464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.223604][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.230892][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.240851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.249618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.260431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.284897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.305557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.342012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.360305][ T4187] device veth0_vlan entered promiscuous mode [ 72.387049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.404814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.415311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.425201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.435283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.465084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.492913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.503504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.514172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.523256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.532891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.542561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.566040][ T4191] device veth0_vlan entered promiscuous mode [ 72.578327][ T4187] device veth1_vlan entered promiscuous mode [ 72.590441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.598873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.607592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.615826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.625487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.661288][ T4191] device veth1_vlan entered promiscuous mode [ 72.678373][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.687142][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.696332][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.705322][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.715314][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.723863][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.732653][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.741593][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.760904][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.787938][ T4194] device veth0_vlan entered promiscuous mode [ 72.810412][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.824412][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.841226][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.849370][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.857440][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.866758][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.881616][ T4194] device veth1_vlan entered promiscuous mode [ 72.896302][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.904780][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.915408][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.926116][ T4191] device veth0_macvtap entered promiscuous mode [ 72.977494][ T4187] device veth0_macvtap entered promiscuous mode [ 72.993212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.003255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.012596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.021549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.031926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.058115][ T4191] device veth1_macvtap entered promiscuous mode [ 73.069818][ T4187] device veth1_macvtap entered promiscuous mode [ 73.087259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.097932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.106590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.117897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.127049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.135726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.149972][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.166794][ T4194] device veth0_macvtap entered promiscuous mode [ 73.198985][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.213585][ T4194] device veth1_macvtap entered promiscuous mode [ 73.222942][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.232380][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.240823][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.249694][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.258741][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.268027][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.278457][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.296041][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.314794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.325206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.334517][ T4192] device veth0_vlan entered promiscuous mode [ 73.351681][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.364437][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.378129][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.387156][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.396894][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.406548][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.415520][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.438739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.447633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.476323][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.488295][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.498900][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.511516][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.523528][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.533966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.543005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.552794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.563025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.582306][ T4192] device veth1_vlan entered promiscuous mode [ 73.591993][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.604343][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.617002][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.638268][ T4183] device veth0_vlan entered promiscuous mode [ 73.647013][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.659710][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.671205][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.674339][ T4245] Bluetooth: hci0: command 0x040f tx timeout [ 73.688358][ T4245] Bluetooth: hci1: command 0x040f tx timeout [ 73.696018][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.707400][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.716128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.727125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.735868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.745673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.754367][ T4245] Bluetooth: hci3: command 0x040f tx timeout [ 73.761154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.769340][ T4245] Bluetooth: hci4: command 0x040f tx timeout [ 73.770338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.775681][ T4245] Bluetooth: hci2: command 0x040f tx timeout [ 73.791134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.800785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.808856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.828098][ T4183] device veth1_vlan entered promiscuous mode [ 73.847547][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.856439][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.867288][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.876302][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.898091][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.912445][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.922813][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.931916][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.048562][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.058059][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.067811][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.076919][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.086343][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.095772][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.106711][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.117395][ T4183] device veth0_macvtap entered promiscuous mode [ 74.143237][ T4192] device veth0_macvtap entered promiscuous mode [ 74.185333][ T4192] device veth1_macvtap entered promiscuous mode [ 74.185344][ T4261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.204859][ T4261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.225325][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.233446][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.249812][ T4183] device veth1_macvtap entered promiscuous mode [ 74.260428][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.268953][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.287966][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.304913][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.311109][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.329982][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.343637][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.356426][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.366624][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.381308][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.393064][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.415952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.425205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.434455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.460054][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.466438][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.475966][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.489749][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.501421][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.512388][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.526266][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.537346][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.549317][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.578160][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.588460][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.598575][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.611319][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.623265][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.634593][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.646704][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.657498][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.668222][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.678183][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.688915][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.700759][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.715094][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.733618][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.743057][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.752388][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.784037][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.792795][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.804558][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.830138][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.835584][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.855313][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.870385][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.882604][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.893166][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.904124][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.920506][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.934336][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.946426][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.971344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.979790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.990187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.018704][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.037417][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.060991][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.069977][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.084557][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.100031][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.160534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.301915][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.332405][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.402715][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.448556][ T1214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.470452][ T1214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.521370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.529893][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.556808][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.586525][ T4306] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 75.644823][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.687021][ T1214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.729987][ T1214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.754186][ T4195] Bluetooth: hci1: command 0x0419 tx timeout [ 75.763834][ T4195] Bluetooth: hci0: command 0x0419 tx timeout [ 75.793503][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.834530][ T4245] Bluetooth: hci2: command 0x0419 tx timeout [ 75.868979][ T4245] Bluetooth: hci4: command 0x0419 tx timeout [ 75.883976][ T4245] Bluetooth: hci3: command 0x0419 tx timeout [ 76.797923][ T4371] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 76.854178][ T4371] overlayfs: failed to look up (tracing) for ino (-66) [ 76.991374][ T4344] loop0: detected capacity change from 0 to 8192 [ 77.375873][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28e!!! [ 77.634594][ T4391] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.672107][ T4394] delete_channel: no stack [ 78.234317][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.326618][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.523910][ T1108] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.955251][ T1108] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.020128][ T1108] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 79.030917][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 79.072330][ T1108] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 79.101687][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.187482][ T4401] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 79.630764][ T4394] device veth1_to_team entered promiscuous mode [ 79.712098][ T4394] device bridge0 entered promiscuous mode [ 79.732125][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 79.903795][ T4245] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.027852][ T26] audit: type=1326 audit(1762290756.067:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5d5f76c9 code=0x7ffc0000 [ 80.065677][ T26] audit: type=1326 audit(1762290756.097:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5d5f76c9 code=0x7ffc0000 [ 80.102296][ T26] audit: type=1326 audit(1762290756.137:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7eff5d5f76c9 code=0x7ffc0000 [ 80.133896][ T26] audit: type=1326 audit(1762290756.137:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5d5f76c9 code=0x7ffc0000 [ 80.197098][ T4245] usb 4-1: Using ep0 maxpacket: 16 [ 80.225518][ T26] audit: type=1326 audit(1762290756.137:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff5d5f76c9 code=0x7ffc0000 [ 80.248382][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.267654][ T26] audit: type=1326 audit(1762290756.137:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5d5f76c9 code=0x7ffc0000 [ 80.287554][ T4423] loop1: detected capacity change from 0 to 512 [ 80.300791][ T26] audit: type=1326 audit(1762290756.137:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7eff5d5f76c9 code=0x7ffc0000 [ 80.334335][ T26] audit: type=1326 audit(1762290756.137:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4420 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5d5f76c9 code=0x7ffc0000 [ 80.453082][ T4423] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 80.477371][ T4423] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 80.506274][ T4423] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.23: Corrupt directory, running e2fsck is recommended [ 80.524770][ T4423] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 80.568883][ T4423] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2229: inode #15: comm syz.1.23: corrupted in-inode xattr [ 80.581319][ T4245] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 80.609538][ T4245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.646237][ T4423] EXT4-fs (loop1): Remounting filesystem read-only [ 80.647727][ T4245] usb 4-1: Product: syz [ 80.662863][ T4245] usb 4-1: Manufacturer: syz [ 80.669729][ T4245] usb 4-1: SerialNumber: syz [ 80.671121][ T4431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 80.675213][ T4423] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.23: couldn't read orphan inode 15 (err -117) [ 80.704918][ T4245] usb 4-1: config 0 descriptor?? [ 80.720103][ T4423] EXT4-fs (loop1): Remounting filesystem read-only [ 80.734344][ T4423] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.mb_optimize_scan=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 81.355160][ T4245] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 81.658438][ T4245] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 81.718222][ T4245] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 81.743814][ T4245] usb 4-1: media controller created [ 81.769845][ T4245] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 81.919829][ T4245] zl10353_read_register: readreg error (reg=127, ret==0) [ 82.063797][ T4245] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 82.135001][ T4245] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 82.208279][ T4447] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 82.233840][ T4447] overlayfs: failed to look up (tracing) for ino (-66) [ 82.276109][ T4245] usb 4-1: USB disconnect, device number 2 [ 82.488034][ T4245] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 82.939540][ T4225] usb 1-1: USB disconnect, device number 2 [ 83.666890][ T4464] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.702831][ T4471] loop1: detected capacity change from 0 to 512 [ 84.048692][ T4471] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 84.070350][ T4471] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 84.126135][ T4471] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.37: Corrupt directory, running e2fsck is recommended [ 84.141131][ T4471] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 84.174042][ T4471] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2229: inode #15: comm syz.1.37: corrupted in-inode xattr [ 84.225008][ T4471] EXT4-fs (loop1): Remounting filesystem read-only [ 84.231656][ T4471] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.37: couldn't read orphan inode 15 (err -117) [ 84.244256][ T4480] device syzkaller0 entered promiscuous mode [ 84.288989][ T4471] EXT4-fs (loop1): Remounting filesystem read-only [ 84.373988][ T4471] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.mb_optimize_scan=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 85.373976][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 85.383120][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 85.392646][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 85.433720][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 85.442717][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 86.006309][ T4245] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.354054][ T4288] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.423906][ T4245] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 86.458715][ T4245] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 86.589757][ T4513] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.609300][ T4245] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.615607][ T4288] usb 5-1: Using ep0 maxpacket: 8 [ 86.671431][ T4245] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 86.711321][ T4245] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 86.744008][ T4288] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 86.764039][ T4288] usb 5-1: config 179 has no interface number 0 [ 86.815993][ T4288] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 86.848263][ T4288] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 86.882132][ T4288] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 86.918224][ T4288] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 86.956153][ T4245] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 86.963436][ T13] cfg80211: failed to load regulatory.db [ 86.981964][ T4245] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.017049][ T4245] usb 4-1: Product: syz [ 87.021401][ T4245] usb 4-1: Manufacturer: syz [ 87.050341][ T4288] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 87.098220][ T4245] cdc_wdm 4-1:1.0: skipping garbage [ 87.147168][ T4288] usb 5-1: config 179 interface 65 has no altsetting 0 [ 87.151866][ T4245] cdc_wdm 4-1:1.0: skipping garbage [ 87.201137][ T4288] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 87.248210][ T4245] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 87.257490][ T4288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.277162][ T4245] cdc_wdm 4-1:1.0: Unknown control protocol [ 87.503412][ T4288] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5 [ 87.560678][ C1] cdc_wdm 4-1:1.0: Unexpected error -71 [ 87.567219][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 87.574150][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 87.605105][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 87.611872][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 87.623073][ T4245] usb 4-1: USB disconnect, device number 3 [ 87.761776][ T4516] netlink: 'syz.2.50': attribute type 12 has an invalid length. [ 89.286250][ T4535] loop1: detected capacity change from 0 to 512 [ 89.491835][ T4535] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 89.586725][ T4535] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 89.641662][ T4535] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.55: Corrupt directory, running e2fsck is recommended [ 89.691843][ T4535] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 89.712060][ T4535] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2229: inode #15: comm syz.1.55: corrupted in-inode xattr [ 89.794240][ T4535] EXT4-fs (loop1): Remounting filesystem read-only [ 89.813876][ T4535] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.55: couldn't read orphan inode 15 (err -117) [ 89.846683][ T4535] EXT4-fs (loop1): Remounting filesystem read-only [ 89.853422][ T4535] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.mb_optimize_scan=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 89.857831][ T4540] loop0: detected capacity change from 0 to 2048 [ 90.700072][ T4540] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.762768][ T4245] usb 5-1: USB disconnect, device number 2 [ 90.783855][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 90.800504][ T4245] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 91.222915][ T4556] netlink: 'syz.0.62': attribute type 12 has an invalid length. [ 91.345135][ T4245] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.574097][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.715396][ T4245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.740329][ T4245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.759618][ T4245] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.813086][ T4245] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.859535][ T4571] loop2: detected capacity change from 0 to 1024 [ 91.910553][ T4245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.092895][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.144945][ T4245] usb 5-1: config 0 descriptor?? [ 92.281052][ T4571] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 92.288737][ T4571] hfsplus: xattr search failed [ 92.665794][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.689982][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.824964][ T13] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.859985][ T4245] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 92.859990][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.906112][ T13] usb 2-1: config 0 descriptor?? [ 92.928944][ T26] audit: type=1326 audit(1762290768.967:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.3.68" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34ae03d6c9 code=0x0 [ 92.977580][ T4245] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 93.194634][ C1] plantronics 0003:047F:FFFF.0001: hid_field_extract() called with n (132) > 32! (syz.0.66) [ 93.416913][ T4245] usb 5-1: USB disconnect, device number 3 [ 94.068305][ T4605] netlink: 'syz.4.76': attribute type 12 has an invalid length. [ 95.024081][ T13] usbhid 2-1:0.0: can't add hid device: -71 [ 95.030327][ T13] usbhid: probe of 2-1:0.0 failed with error -71 [ 95.069672][ T13] usb 2-1: USB disconnect, device number 2 [ 95.828301][ T4641] loop1: detected capacity change from 0 to 512 [ 95.847463][ T4638] loop0: detected capacity change from 0 to 2048 [ 95.932990][ T4641] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 95.951716][ T4641] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 95.968891][ T4641] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.88: Corrupt directory, running e2fsck is recommended [ 95.973591][ T4638] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.025326][ T4641] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 96.034284][ T4641] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2229: inode #15: comm syz.1.88: corrupted in-inode xattr [ 96.070889][ T4630] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 96.101516][ T4641] EXT4-fs (loop1): Remounting filesystem read-only [ 96.123235][ T4641] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.88: couldn't read orphan inode 15 (err -117) [ 96.162334][ T4641] EXT4-fs (loop1): Remounting filesystem read-only [ 96.181260][ T4641] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.mb_optimize_scan=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 97.380014][ T4658] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 97.430164][ T4658] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 97.670957][ T4661] netlink: 'syz.4.92': attribute type 1 has an invalid length. [ 97.742302][ T4661] netlink: 'syz.4.92': attribute type 2 has an invalid length. [ 97.803567][ T4661] Zero length message leads to an empty skb [ 97.985448][ T4667] capability: warning: `syz.2.95' uses 32-bit capabilities (legacy support in use) [ 98.362272][ T4680] loop2: detected capacity change from 0 to 2048 [ 98.421609][ T4680] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.936151][ T4697] input: syz1 as /devices/virtual/input/input6 [ 99.093785][ T13] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 99.494063][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 99.544000][ T13] usb 5-1: not running at top speed; connect to a high speed hub [ 99.624229][ T13] usb 5-1: config 12 interface 0 altsetting 4 has an invalid endpoint with address 0xBE, skipping [ 99.649279][ T13] usb 5-1: config 12 interface 0 has no altsetting 0 [ 99.676535][ T4713] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x19 [ 99.824473][ T13] usb 5-1: New USB device found, idVendor=eb1a, idProduct=5051, bcdDevice=d0.01 [ 99.843584][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.913203][ T13] usb 5-1: Product: syz [ 99.931133][ T13] usb 5-1: Manufacturer: syz [ 99.939305][ T13] usb 5-1: SerialNumber: syz [ 99.949228][ T4718] netlink: 72 bytes leftover after parsing attributes in process `syz.3.114'. [ 100.003254][ T4716] loop2: detected capacity change from 0 to 2048 [ 100.103145][ T4716] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.284867][ T13] usb 5-1: USB disconnect, device number 4 [ 100.863632][ T4731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 101.315770][ T4733] netlink: 'syz.1.119': attribute type 12 has an invalid length. [ 102.437873][ T4764] loop1: detected capacity change from 0 to 2048 [ 102.548012][ T4764] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.998965][ T4774] loop2: detected capacity change from 0 to 1024 [ 103.424631][ T4774] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 103.431752][ T4774] hfsplus: xattr search failed [ 103.737511][ T4776] netlink: 'syz.2.133': attribute type 1 has an invalid length. [ 103.788159][ T4776] netlink: 'syz.2.133': attribute type 2 has an invalid length. [ 103.939229][ T4780] netlink: 'syz.1.134': attribute type 12 has an invalid length. [ 104.099264][ T4788] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 104.118217][ T4788] overlayfs: failed to look up (tracing) for ino (-66) [ 106.264102][ T4817] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 106.612980][ T4823] loop0: detected capacity change from 0 to 2048 [ 106.645516][ T4826] process 'syz.4.145' launched './file1' with NULL argv: empty string added [ 106.693860][ T4823] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.018956][ T4835] netlink: 'syz.0.146': attribute type 12 has an invalid length. [ 107.237116][ T26] audit: type=1326 audit(1762290783.277:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba2de16c9 code=0x7ffc0000 [ 107.260670][ T4844] tipc: Started in network mode [ 107.333748][ T4844] tipc: Node identity 4, cluster identity 4711 [ 107.398004][ T26] audit: type=1326 audit(1762290783.277:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffba2de16c9 code=0x7ffc0000 [ 107.421624][ T4844] tipc: Node number set to 4 [ 107.469883][ T26] audit: type=1326 audit(1762290783.277:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba2de16c9 code=0x7ffc0000 [ 107.492255][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.639077][ T26] audit: type=1326 audit(1762290783.277:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffba2de16c9 code=0x7ffc0000 [ 107.661408][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.733091][ T26] audit: type=1326 audit(1762290783.277:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba2de16c9 code=0x7ffc0000 [ 107.828710][ T26] audit: type=1326 audit(1762290783.277:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7ffba2de16c9 code=0x7ffc0000 [ 107.922454][ T26] audit: type=1326 audit(1762290783.277:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba2de16c9 code=0x7ffc0000 [ 107.945012][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.155671][ T4856] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 108.177711][ T4856] overlayfs: failed to look up (tracing) for ino (-66) [ 108.762325][ T4864] loop2: detected capacity change from 0 to 2048 [ 108.890943][ T4864] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.108675][ T4872] netlink: 'syz.1.161': attribute type 12 has an invalid length. [ 109.888028][ T4894] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 110.973138][ T4911] loop4: detected capacity change from 0 to 2048 [ 111.059444][ T4911] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.420089][ T4913] netlink: 'syz.4.173': attribute type 12 has an invalid length. [ 112.306177][ T26] audit: type=1326 audit(1762290788.347:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ae03d6c9 code=0x7ffc0000 [ 112.413889][ T4290] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 112.430144][ T26] audit: type=1326 audit(1762290788.377:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f34ae03d6c9 code=0x7ffc0000 [ 112.489462][ T26] audit: type=1326 audit(1762290788.377:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ae03d6c9 code=0x7ffc0000 [ 112.559903][ T26] audit: type=1326 audit(1762290788.377:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f34ae03d6c9 code=0x7ffc0000 [ 112.676511][ T4940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.181'. [ 112.683844][ T4290] usb 5-1: device descriptor read/64, error -71 [ 112.985463][ T4290] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 113.006725][ T26] audit: type=1326 audit(1762290789.047:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ae03d6c9 code=0x7ffc0000 [ 113.087489][ T26] audit: type=1326 audit(1762290789.047:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ae03d6c9 code=0x7ffc0000 [ 113.223854][ T4290] usb 5-1: device descriptor read/64, error -71 [ 113.337739][ T4946] loop2: detected capacity change from 0 to 2048 [ 113.344521][ T4290] usb usb5-port1: attempt power cycle [ 113.416763][ T4946] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.640402][ T4952] netlink: 'syz.0.186': attribute type 12 has an invalid length. [ 113.753768][ T4290] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 113.893902][ T4290] usb 5-1: device descriptor read/8, error -71 [ 113.994351][ T4962] tipc: Started in network mode [ 114.019270][ T4962] tipc: Node identity de4fdbeda8ad, cluster identity 4711 [ 114.066285][ T4962] tipc: Enabled bearer , priority 0 [ 114.088987][ T4967] device syzkaller0 entered promiscuous mode [ 114.150356][ T4962] tipc: Resetting bearer [ 114.165388][ T4290] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 114.206219][ T4958] tipc: Resetting bearer [ 114.262165][ T4958] tipc: Disabling bearer [ 114.343837][ T4290] usb 5-1: device descriptor read/8, error -71 [ 114.475092][ T4290] usb usb5-port1: unable to enumerate USB device [ 115.316989][ T4973] loop2: detected capacity change from 0 to 1024 [ 116.135235][ T4973] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 116.142536][ T4973] hfsplus: xattr search failed [ 117.021915][ T4984] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.210409][ T4988] netlink: 'syz.0.199': attribute type 12 has an invalid length. [ 117.218716][ T4252] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 117.623925][ T4252] usb 3-1: config 0 has no interfaces? [ 117.629525][ T4252] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 117.671311][ T5010] netlink: 188 bytes leftover after parsing attributes in process `syz.4.205'. [ 117.680948][ T4252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.715837][ T4252] usb 3-1: config 0 descriptor?? [ 117.933350][ T5012] netlink: 20 bytes leftover after parsing attributes in process `syz.4.205'. [ 117.985094][ T5012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.205'. [ 118.058432][ T4252] usb 3-1: USB disconnect, device number 2 [ 119.740407][ T5048] netlink: 'syz.3.214': attribute type 12 has an invalid length. [ 120.202725][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.246942][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.267139][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.472827][ T5066] device syzkaller0 entered promiscuous mode [ 120.941376][ T5087] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 121.277950][ T21] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 121.743926][ T21] usb 2-1: config 0 has an invalid interface number: 82 but max is 0 [ 121.785061][ T21] usb 2-1: config 0 has no interface number 0 [ 122.003859][ T21] usb 2-1: New USB device found, idVendor=0506, idProduct=11f8, bcdDevice=b6.28 [ 122.048012][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.063950][ T4252] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 122.113728][ T21] usb 2-1: Product: syz [ 122.140842][ T21] usb 2-1: Manufacturer: syz [ 122.188717][ T21] usb 2-1: SerialNumber: syz [ 122.262912][ T21] usb 2-1: config 0 descriptor?? [ 122.594717][ T4252] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 122.607960][ T4252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.610966][ T21] kaweth 2-1:0.82: Firmware present in device. [ 122.646337][ T4252] usb 5-1: Product: syz [ 122.676477][ T4252] usb 5-1: Manufacturer: syz [ 122.696909][ T4252] usb 5-1: SerialNumber: syz [ 122.766315][ T4252] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 122.783850][ T21] kaweth 2-1:0.82: Error reading configuration (-71), no net device created [ 122.835124][ T21] kaweth: probe of 2-1:0.82 failed with error -5 [ 122.896304][ T21] usb 2-1: USB disconnect, device number 3 [ 123.454065][ T4252] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 123.739752][ T5157] netlink: 'syz.3.229': attribute type 10 has an invalid length. [ 123.787365][ T5157] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.795978][ T5157] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.964496][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.971826][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.981279][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.988423][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.211007][ T5157] team0: Port device bridge0 added [ 124.360452][ T5157] syz.3.229 (5157) used greatest stack depth: 20496 bytes left [ 124.463820][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.595562][ T5169] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.733838][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 124.854739][ T13] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 124.873930][ T4252] usb 5-1: Service connection timeout for: 257 [ 124.880294][ T4252] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 124.893810][ T13] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.951972][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.975790][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.002409][ T13] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.036361][ T13] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.074385][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.112673][ T4264] usb 5-1: USB disconnect, device number 9 [ 125.120376][ T4252] ath9k_htc: Failed to initialize the device [ 125.158152][ T4264] usb 5-1: ath9k_htc: USB layer deinitialized [ 126.014015][ T5204] usbtmc 2-1:16.0: simple control status returned cf [ 126.216283][ T13] usb 2-1: USB disconnect, device number 4 [ 126.644321][ T5211] netlink: 256 bytes leftover after parsing attributes in process `syz.0.241'. [ 126.695950][ T5211] unsupported nlmsg_type 40 [ 126.843805][ T5213] [ 126.851160][ T5213] ============================= [ 126.874317][ T26] audit: type=1326 audit(1762290802.917:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5210 comm="syz.0.241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffba2de16c9 code=0x0 [ 126.877748][ T5213] WARNING: suspicious RCU usage [ 126.970766][ T5213] syzkaller #0 Not tainted [ 127.017445][ T5213] ----------------------------- [ 127.035080][ T5213] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 127.063444][ T5213] [ 127.063444][ T5213] other info that might help us debug this: [ 127.063444][ T5213] [ 127.096788][ T5213] [ 127.096788][ T5213] rcu_scheduler_active = 2, debug_locks = 1 [ 127.129913][ T5213] 1 lock held by syz.0.241/5213: [ 127.142932][ T5213] #0: ffffffff8d238988 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 127.213825][ T5213] [ 127.213825][ T5213] stack backtrace: [ 127.240468][ T5213] CPU: 1 PID: 5213 Comm: syz.0.241 Not tainted syzkaller #0 [ 127.247825][ T5213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.258137][ T5213] Call Trace: [ 127.261435][ T5213] [ 127.264370][ T5213] dump_stack_lvl+0x168/0x230 [ 127.269061][ T5213] ? load_image+0x3b0/0x3b0 [ 127.273600][ T5213] ? show_regs_print_info+0x20/0x20 [ 127.278864][ T5213] ? lockdep_rcu_suspicious+0x110/0x180 [ 127.284426][ T5213] ? local_bh_enable+0x20/0x20 [ 127.289202][ T5213] rhltable_lookup+0x77b/0x790 [ 127.294013][ T5213] ? lock_chain_count+0x20/0x20 [ 127.298912][ T5213] ? mr_mfc_find_parent+0x190/0x190 [ 127.304157][ T5213] ? local_bh_enable+0x20/0x20 [ 127.308935][ T5213] ? preempt_schedule+0xa7/0xb0 [ 127.313799][ T5213] ? ipmr_mfc_add+0x21ad/0x2eb0 [ 127.318670][ T5213] ? preempt_schedule+0xa7/0xb0 [ 127.323630][ T5213] ? schedule_preempt_disabled+0x20/0x20 [ 127.329308][ T5213] ? lock_chain_count+0x20/0x20 [ 127.334180][ T5213] mr_mfc_find_any_parent+0xb6/0x1e0 [ 127.339572][ T5213] ? local_bh_enable+0x20/0x20 [ 127.344870][ T5213] ip_mr_forward+0x24c/0xf90 [ 127.349568][ T5213] ipmr_mfc_add+0x2466/0x2eb0 [ 127.354261][ T5213] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 127.359248][ T5213] ? __lock_acquire+0x7c60/0x7c60 [ 127.364366][ T5213] ip_mroute_setsockopt+0xe33/0x11a0 [ 127.370053][ T5213] ? ipmr_rule_default+0x70/0x70 [ 127.375098][ T5213] ? preempt_schedule_irq+0xd0/0x150 [ 127.380388][ T5213] ? __might_sleep+0xf0/0xf0 [ 127.384984][ T5213] ip_setsockopt+0x4ad/0x3070 [ 127.390195][ T5213] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 127.395846][ T5213] ? aa_sk_perm+0x7b4/0x8f0 [ 127.400370][ T5213] ? aa_af_perm+0x2b0/0x2b0 [ 127.404895][ T5213] ? aa_sock_opt_perm+0x74/0x100 [ 127.409848][ T5213] ? sock_common_setsockopt+0x32/0xb0 [ 127.415323][ T5213] ? raw_setsockopt+0xc5/0x180 [ 127.420325][ T5213] ? sock_common_recvmsg+0x1b0/0x1b0 [ 127.425630][ T5213] __sys_setsockopt+0x2bf/0x3d0 [ 127.430505][ T5213] __x64_sys_setsockopt+0xb1/0xc0 [ 127.435704][ T5213] do_syscall_64+0x4c/0xa0 [ 127.440139][ T5213] ? clear_bhb_loop+0x30/0x80 [ 127.444828][ T5213] ? clear_bhb_loop+0x30/0x80 [ 127.449522][ T5213] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.455639][ T5213] RIP: 0033:0x7ffba2de16c9 [ 127.460065][ T5213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.479682][ T5213] RSP: 002b:00007ffba1027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 127.488448][ T5213] RAX: ffffffffffffffda RBX: 00007ffba3038090 RCX: 00007ffba2de16c9 [ 127.497087][ T5213] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000007 [ 127.505076][ T5213] RBP: 00007ffba2e63f91 R08: 000000000000003c R09: 0000000000000000 [ 127.513066][ T5213] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 127.521048][ T5213] R13: 00007ffba3038128 R14: 00007ffba3038090 R15: 00007ffc2684fba8 [ 127.529238][ T5213] [ 128.134695][ T5213] [ 128.139830][ T5213] ============================= [ 128.207079][ T5213] WARNING: suspicious RCU usage [ 128.262662][ T5213] syzkaller #0 Not tainted [ 128.301716][ T5213] ----------------------------- [ 128.387810][ T5213] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 128.552598][ T5213] [ 128.552598][ T5213] other info that might help us debug this: [ 128.552598][ T5213] [ 128.693761][ T5213] [ 128.693761][ T5213] rcu_scheduler_active = 2, debug_locks = 1 [ 128.712434][ T5213] 1 lock held by syz.0.241/5213: [ 128.723843][ T5213] #0: ffffffff8d238988 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 128.756967][ T5213] [ 128.756967][ T5213] stack backtrace: [ 128.779265][ T5213] CPU: 1 PID: 5213 Comm: syz.0.241 Not tainted syzkaller #0 [ 128.786807][ T5213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.796908][ T5213] Call Trace: [ 128.800358][ T5213] [ 128.803466][ T5213] dump_stack_lvl+0x168/0x230 [ 128.808447][ T5213] ? load_image+0x3b0/0x3b0 [ 128.812991][ T5213] ? show_regs_print_info+0x20/0x20 [ 128.818521][ T5213] ? lockdep_rcu_suspicious+0x110/0x180 [ 128.824095][ T5213] ? local_bh_enable+0x20/0x20 [ 128.828872][ T5213] rhltable_lookup+0x504/0x790 [ 128.833655][ T5213] ? local_bh_enable+0x20/0x20 [ 128.838451][ T5213] ? mr_mfc_find_parent+0x190/0x190 [ 128.843669][ T5213] ? local_bh_enable+0x20/0x20 [ 128.848474][ T5213] ? preempt_schedule+0xa7/0xb0 [ 128.853459][ T5213] ? ipmr_mfc_add+0x21ad/0x2eb0 [ 128.858550][ T5213] ? preempt_schedule+0xa7/0xb0 [ 128.863419][ T5213] ? schedule_preempt_disabled+0x20/0x20 [ 128.869254][ T5213] ? lock_chain_count+0x20/0x20 [ 128.874137][ T5213] mr_mfc_find_any_parent+0xb6/0x1e0 [ 128.879521][ T5213] ? local_bh_enable+0x20/0x20 [ 128.884319][ T5213] ip_mr_forward+0x24c/0xf90 [ 128.888946][ T5213] ipmr_mfc_add+0x2466/0x2eb0 [ 128.893671][ T5213] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 128.898651][ T5213] ? __lock_acquire+0x7c60/0x7c60 [ 128.903805][ T5213] ip_mroute_setsockopt+0xe33/0x11a0 [ 128.909138][ T5213] ? ipmr_rule_default+0x70/0x70 [ 128.914370][ T5213] ? preempt_schedule_irq+0xd0/0x150 [ 128.919714][ T5213] ? __might_sleep+0xf0/0xf0 [ 128.924456][ T5213] ip_setsockopt+0x4ad/0x3070 [ 128.929253][ T5213] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 128.934772][ T5213] ? aa_sk_perm+0x7b4/0x8f0 [ 128.939326][ T5213] ? aa_af_perm+0x2b0/0x2b0 [ 128.944060][ T5213] ? aa_sock_opt_perm+0x74/0x100 [ 128.949182][ T5213] ? sock_common_setsockopt+0x32/0xb0 [ 128.954787][ T5213] ? raw_setsockopt+0xc5/0x180 [ 128.959578][ T5213] ? sock_common_recvmsg+0x1b0/0x1b0 [ 128.964974][ T5213] __sys_setsockopt+0x2bf/0x3d0 [ 128.969843][ T5213] __x64_sys_setsockopt+0xb1/0xc0 [ 128.974887][ T5213] do_syscall_64+0x4c/0xa0 [ 128.979650][ T5213] ? clear_bhb_loop+0x30/0x80 [ 128.984350][ T5213] ? clear_bhb_loop+0x30/0x80 [ 128.989055][ T5213] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.995244][ T5213] RIP: 0033:0x7ffba2de16c9 [ 128.999677][ T5213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.019693][ T5213] RSP: 002b:00007ffba1027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 129.028121][ T5213] RAX: ffffffffffffffda RBX: 00007ffba3038090 RCX: 00007ffba2de16c9 [ 129.036106][ T5213] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000007 [ 129.044092][ T5213] RBP: 00007ffba2e63f91 R08: 000000000000003c R09: 0000000000000000 [ 129.052174][ T5213] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 129.060261][ T5213] R13: 00007ffba3038128 R14: 00007ffba3038090 R15: 00007ffc2684fba8 [ 129.068637][ T5213] [ 129.122778][ T5213] [ 129.134150][ T5213] ============================= [ 129.139494][ T5213] WARNING: suspicious RCU usage [ 129.155466][ T5213] syzkaller #0 Not tainted [ 129.164196][ T5213] ----------------------------- [ 129.169590][ T5213] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 129.183950][ T5213] [ 129.183950][ T5213] other info that might help us debug this: [ 129.183950][ T5213] [ 129.198025][ T5213] [ 129.198025][ T5213] rcu_scheduler_active = 2, debug_locks = 1 [ 129.209418][ T5213] 1 lock held by syz.0.241/5213: [ 129.215753][ T5213] #0: ffffffff8d238988 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 129.226847][ T5213] [ 129.226847][ T5213] stack backtrace: [ 129.233114][ T5213] CPU: 0 PID: 5213 Comm: syz.0.241 Not tainted syzkaller #0 [ 129.240578][ T5213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.250661][ T5213] Call Trace: [ 129.253952][ T5213] [ 129.256925][ T5213] dump_stack_lvl+0x168/0x230 [ 129.261629][ T5213] ? load_image+0x3b0/0x3b0 [ 129.266156][ T5213] ? show_regs_print_info+0x20/0x20 [ 129.271390][ T5213] ? lockdep_rcu_suspicious+0x110/0x180 [ 129.277113][ T5213] ? local_bh_enable+0x20/0x20 [ 129.282068][ T5213] rhltable_lookup+0x5f8/0x790 [ 129.286879][ T5213] ? local_bh_enable+0x20/0x20 [ 129.291925][ T5213] ? mr_mfc_find_parent+0x190/0x190 [ 129.297218][ T5213] ? local_bh_enable+0x20/0x20 [ 129.302023][ T5213] ? preempt_schedule+0xa7/0xb0 [ 129.307174][ T5213] ? ipmr_mfc_add+0x21ad/0x2eb0 [ 129.312182][ T5213] ? preempt_schedule+0xa7/0xb0 [ 129.317136][ T5213] ? schedule_preempt_disabled+0x20/0x20 [ 129.322811][ T5213] ? lock_chain_count+0x20/0x20 [ 129.327687][ T5213] mr_mfc_find_any_parent+0xb6/0x1e0 [ 129.333072][ T5213] ? local_bh_enable+0x20/0x20 [ 129.337859][ T5213] ip_mr_forward+0x24c/0xf90 [ 129.342525][ T5213] ipmr_mfc_add+0x2466/0x2eb0 [ 129.347265][ T5213] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 129.352348][ T5213] ? __lock_acquire+0x7c60/0x7c60 [ 129.357459][ T5213] ip_mroute_setsockopt+0xe33/0x11a0 [ 129.362803][ T5213] ? ipmr_rule_default+0x70/0x70 [ 129.367792][ T5213] ? preempt_schedule_irq+0xd0/0x150 [ 129.373225][ T5213] ? __might_sleep+0xf0/0xf0 [ 129.377864][ T5213] ip_setsockopt+0x4ad/0x3070 [ 129.382615][ T5213] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 129.388046][ T5213] ? aa_sk_perm+0x7b4/0x8f0 [ 129.392601][ T5213] ? aa_af_perm+0x2b0/0x2b0 [ 129.397150][ T5213] ? aa_sock_opt_perm+0x74/0x100 [ 129.402257][ T5213] ? sock_common_setsockopt+0x32/0xb0 [ 129.407721][ T5213] ? raw_setsockopt+0xc5/0x180 [ 129.412545][ T5213] ? sock_common_recvmsg+0x1b0/0x1b0 [ 129.418111][ T5213] __sys_setsockopt+0x2bf/0x3d0 [ 129.423012][ T5213] __x64_sys_setsockopt+0xb1/0xc0 [ 129.428079][ T5213] do_syscall_64+0x4c/0xa0 [ 129.432548][ T5213] ? clear_bhb_loop+0x30/0x80 [ 129.437412][ T5213] ? clear_bhb_loop+0x30/0x80 [ 129.442117][ T5213] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.448036][ T5213] RIP: 0033:0x7ffba2de16c9 [ 129.452460][ T5213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.472093][ T5213] RSP: 002b:00007ffba1027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 129.480683][ T5213] RAX: ffffffffffffffda RBX: 00007ffba3038090 RCX: 00007ffba2de16c9 [ 129.488789][ T5213] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000007 [ 129.497296][ T5213] RBP: 00007ffba2e63f91 R08: 000000000000003c R09: 0000000000000000 [ 129.505287][ T5213] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 129.513491][ T5213] R13: 00007ffba3038128 R14: 00007ffba3038090 R15: 00007ffc2684fba8 [ 129.521720][ T5213] [ 133.038797][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.047464][ T1423] ieee802154 phy1 wpan1: encryption failed: -22