last executing test programs: 10.125741148s ago: executing program 1 (id=2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x4890) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.564841748s ago: executing program 0 (id=8): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x0, 0x0}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x40, 0x21, 0x47, {0x47, 0x20, "c790968a4b7e242d68252076bc5caef354fde8b7ded9ae0505d3bde7005e540c2cee5668e76c7ad54b5e6fca17bb860837226ce6478554d9855f2a392d8c5c1f3a1ec1d525"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000b40)=ANY=[@ANYBLOB="40186100000016c081fb9a30b046119bfe8a5f905d48ec2c374516a2dfd5d95eb3a327b621a00bebb3ba6e66f07c45d63b69e0c0b9c979876f8b017c7e4534d9323a3e292ac97290c58a991ee8b5edcdd180635073544f15a1b65697821be7257768968da0d54202123694427a6c843f37d86a21e788b5665d6628f53656bcd578c2905109709c135e3e3f3fd78705f8fc0a7bcd6da50710a90f1ce434c367c9cf0fa3b0775b41530000b36f12355d4b570003f73c02257317deb40bfac6cc078e1411fa0e843a23cdb3218a7348cf7c5750931dc3d55518b5"], &(0x7f0000000600)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0xfff1, 0x6, 0xfffffffd, 0x0, 0xe414, 0x1, 0x6, 0x10000, 0x1, 0x7, 0x4, 0x4}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0xdb71}, &(0x7f0000000700)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2}, 0x0}) 9.296093245s ago: executing program 1 (id=9): ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) 9.199315605s ago: executing program 1 (id=10): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000240)={0x60, 0xd, 0x2, {0x2, 0xa}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}, 0x0, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xfb, 0x1, {0x22, 0xd00}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x20, 0x10, 0x87, "69b720d553f4f122fd0ee38582b97dade2d890db7f71139db4005e7d92f891e1c793060a6b156bc66e7fce38d9226391c21333807f4bdf3501379cd4dffdbcbaba0036c5d2711e391d522f9b97c10b69a5e97b39fa2fe652aa439f9789b440d855258ed6984b9858929693594263bdb622486d795b452f7d7d171b054c61478c783076fd6c8634"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0xff}}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.198960532s ago: executing program 1 (id=14): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x10c) fallocate(r0, 0x11, 0x0, 0x6) 5.857839175s ago: executing program 0 (id=19): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x10c) fallocate(r0, 0x11, 0x0, 0x6) 5.347128774s ago: executing program 4 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd22, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 5.13157725s ago: executing program 4 (id=23): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000140)="1f", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97", 0x7f, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) 5.072451132s ago: executing program 4 (id=25): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000240)={0x60, 0xd, 0x2, {0x2, 0xa}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}, 0x0, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xfb, 0x1, {0x22, 0xd00}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x20, 0x10, 0x87, "69b720d553f4f122fd0ee38582b97dade2d890db7f71139db4005e7d92f891e1c793060a6b156bc66e7fce38d9226391c21333807f4bdf3501379cd4dffdbcbaba0036c5d2711e391d522f9b97c10b69a5e97b39fa2fe652aa439f9789b440d855258ed6984b9858929693594263bdb622486d795b452f7d7d171b054c61478c783076fd6c8634"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0xff}}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.827287577s ago: executing program 1 (id=27): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x0, 0x0}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000b40)=ANY=[@ANYBLOB="40186100000016c081fb9a30b046119bfe8a5f905d48ec2c374516a2dfd5d95eb3a327b621a00bebb3ba6e66f07c45d63b69e0c0b9c979876f8b017c7e4534d9323a3e292ac97290c58a991ee8b5edcdd180635073544f15a1b65697821be7257768968da0d54202123694427a6c843f37d86a21e788b5665d6628f53656bcd578c2905109709c135e3e3f3fd78705f8fc0a7bcd6da50710a90f1ce434c367c9cf0fa3b0775b41530000b36f12355d4b570003f73c02257317deb40bfac6cc078e1411fa0e843a23cdb3218a7348cf7c5750931dc3d55518b5"], &(0x7f0000000600)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0xfff1, 0x6, 0xfffffffd, 0x0, 0xe414, 0x1, 0x6, 0x10000, 0x1, 0x7, 0x4, 0x4}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0xdb71}, &(0x7f0000000700)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2}, 0x0}) 3.659120162s ago: executing program 0 (id=28): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f982c"], 0xfce) 3.444212448s ago: executing program 0 (id=29): r0 = socket(0x1a, 0x80000, 0x10000000000002) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/14, &(0x7f0000000040)=0xe) connect$rxrpc(r0, &(0x7f0000000780)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000840)=0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB="ff0f000000000800008264c6877142581482c0a3c2a06100ecffffff08fa1724", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000600001018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001100)={0x2c, &(0x7f0000000d40)={0x20, 0x30, 0x20, {0x20, 0xa, "c9ede508b5c7e1553f1ac6582a1bca8c0ead37bfcb47b4634f3c1dd58b47"}}, &(0x7f0000000d80)={0x0, 0x3, 0xf2, @string={0xf2, 0x3, "0c1d705cd8e95b3f78a3ed4cc71ef4c885b8a4450b3ccaf5caab4eab8e14f321795bf8122fcc99f252606ac38099024a5636994eeecdef6b577835a4a8ae744dbfedcfe4200f57fca0ac7d58bc41fdd6af93cca37c5b035ad30c5f7ea0f4f5311ad42381946e18a1dd1079ab841f09a561803d1c274a1f29d2bd4af226a8e9a27f41ad3eacfdfbfd111f867587de35109be98988c26f335ae4a3f7640fb742d3f3a4d7fc11285aa55312825324e7969617bc6436445afd3354d06e3c5dce30fcf9b61fcf7113a556fda385591342667add337ae20b6d02f211d3bb97e3dd1048c90c1e17a98549bca175ac7775492c13"}}, &(0x7f0000000e80)={0x0, 0xf, 0x15f, {0x5, 0xf, 0x15f, 0x4, [@generic={0x69, 0x10, 0xb, "aac7e26dfc75e68fe8d5028e5d220395c0196002561f8800f83c97a03651ed1754def28e1ec3503be86dd8448aac87b1b483902852759e4f80a106a21b9d167d53d826fd59c222251f972bc3c256d7948246577f3e284463e5bcd2953db99bf7b527c0ed3c7b"}, @generic={0xdf, 0x10, 0x1, "779d0c9e6e833230d402df9d3ad4a3dcdb3676d0187a920514d02de03f00f956abf4055cd6eace30fe8f585abc685850be5d6729b637982830487b1233a7585ffd649ba05887dd4e440ebdfc860207da8c5c845f2a4b9b65f35d6a7059b88e92fd07667d4b83cbc2986e664d519e998c45ef33cadd6a47fa31bee62a242a8b98f1440e2571613d6cb60aabf7bfadc45374f09b012ebf243575828981baec7dad7991828712929267786e37a4b7cebec1f9df48efe3c623105a0fe26744a7598c7bb40ec1e8d022937d5207a435e3708b52374717f53f9da0221144c2"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x7, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x4, 0x80, 0x5, 0x7}]}}, &(0x7f0000001080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5d, 0x8, 0x6, 0xa9, "16853090", "e37c4152"}}, &(0x7f00000010c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x78, 0x3, 0x5, 0x7, 0x0, 0x7fff, 0x7}}}, &(0x7f0000001580)={0x84, &(0x7f0000001140)={0x40, 0x4, 0x58, "100295406c3844e6db977eb1e3b467ca1fb09d5f833c7b6c69d4ec0cf994662a9e0e4764cccad90e40b8d90dc6aa94789cf96b56c46bc770a0d698de0bcb3ce2bd6f7f6ad6f125f6e8583b5ee7136e7d976f85cdc62cf725"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0xeb}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x2b}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001280)={0x20, 0x0, 0x4, {0x200, 0x20}}, &(0x7f00000012c0)={0x40, 0x7, 0x2, 0x6}, 0x0, &(0x7f0000001340)={0x40, 0xb, 0x2, "d28e"}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0x101}, 0x0, &(0x7f0000001400)={0x40, 0x17, 0x6, @random="cde351f2d16b"}, &(0x7f0000001440)={0x40, 0x19, 0x2, "e157"}, &(0x7f0000001480)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001500)={0x40, 0x1e, 0x1, 0x2}, 0x0}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) syz_usb_connect$uac3(0x4, 0x12b, &(0x7f0000000a00)=ANY=[@ANYRES32=r2], &(0x7f0000000440)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x2, 0x7, 0x4, 0x40, 0xf}, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3421}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x416}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1}) syz_io_uring_setup(0x17, &(0x7f0000000140)={0x0, 0xb9c4, 0x21000, 0x3, 0x361}, 0x0, 0x0, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x40, 0x21, 0x47, {0x47, 0x20, "c790968a4b7e242d68252076bc5caef354fde8b7ded9ae0505d3bde7005e540c2cee5668e76c7ad54b5e6fca17bb860837226ce6478554d9855f2a392d8c5c1f3a1ec1d525"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000b40)=ANY=[@ANYBLOB="40186100000016c081fb9a30b046119bfe8a5f905d48ec2c374516a2dfd5d95eb3a327b621a00bebb3ba6e66f07c45d63b69e0c0b9c979876f8b017c7e4534d9323a3e292ac97290c58a991ee8b5edcdd180635073544f15a1b65697821be7257768968da0d54202123694427a6c843f37d86a21e788b5665d6628f53656bcd578c2905109709c135e3e3f3fd78705f8fc0a7bcd6da50710a90f1ce434c367c9cf0fa3b0775b41530000b36f12355d4b570003f73c02257317deb40bfac6cc078e1411fa0e843a23cdb3218a7348cf7c5750931dc3d55518b5"], &(0x7f0000000600)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0xfff1, 0x6, 0xfffffffd, 0x0, 0xe414, 0x1, 0x6, 0x10000, 0x1, 0x7, 0x4, 0x4}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0xdb71}, &(0x7f0000000700)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2}, 0x0}) 2.972448669s ago: executing program 2 (id=32): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x10c) fallocate(r0, 0x11, 0x0, 0x6) 2.297092902s ago: executing program 2 (id=36): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000140)="1f", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97", 0x7f, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) 2.188667825s ago: executing program 2 (id=37): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x200010, &(0x7f0000000500)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noquota}, {@nodioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@jqfmt_vfsold}, {@nojournal_checksum}]}, 0x1, 0x4c3, &(0x7f0000000f40)="$eJzs3M9vVNUeAPDvnWlLCzzax+OhIJgKGok/WlpQWbhA48KFJia6wGVtCyIDNbQmQBopxuDSkLhzYVyaGP8Ad26MujAmbjUxrgwJ0W4ormrunXvLdDotTGk72Pl8kumcc8+ZnnPuPWfm3HvmTgBtqz/9k0Rsj4hfIqK3Gl2cob/6NDc7PXprdno0ifn51/9Msnw3Z6dHi6zF67blkUOliNKHSRxPlpY7efHSmZFKZfx8FuuJwamz7w5OXrz09OmzI6fGT42fGz527OiRoeeeHX5mTdqZtuvm3vcn9u15+c1rr46euPbW91+m1dq9v5pe2447utWgQQ30p3vtr/lMfdpjTdT9/vf7V7WxpKN1NaE55YhID1dnNv57oxy3D15vfPpBSysHrKv0s2nL8skz88AmlkSrawC0RvFBn57/Fo8NmnrcF268ENGVh+dmp0fnFtrfEaV8e+c6lt8fESdm/v4sfUSz1yEAAFYhm9s8FbEl6ud/pdidPVfXOnbkayh9EfHfiNgZEf+LiF0R8f+ILO8DEfFg9cXzvXdZfn9dfOn8p3S9YZ3XSDr/e75m7jdX0/78qa+cx/6Ttb8zOXm6Mn443yeHonNLGh9aoYxvXvr54+XSaud/6SMtv5gL5hW43lF3gW5sZGpkrXbCjSsRezsatT9ZWAlIe8CeiNjb3L/eUQROP/HFvuUy3bn9K1iDdab5zyMerx7/mahrfyENrbA+OdgdlfHDg0WvWOqHn66+tlz599T+NXDjwEPVwO3jX5ejpqNVKuPnJ5sv4+qvHy17TrPa/t+VvJGtWf/4dnXbhZGpqfNDEV3JK1m8OKfLtg/ffu2FkameNF7kT/v/oYONx//O/DXp8U/3UtqJ90fEw/m2tO6PRMSBiDi4Qvu/e/HRd1ZofxJJtO74X4kYa/j+t9D/+5La9fpVBMpnvv16uRXzuzv+R2Mme6+tyt7/7qBBLYqURUn3sOsAAADgX6MUEdsjKQ1Uw/3bo1QaGKh+h39XbC1VJiannjw58d65seo9An3RWSqudPXWXA8dSmby/5jFLw/n14qL9CP5deNPyj1ZfGB0ojLW4rZDu9u2ePxHMf5Tf5RbXTtg3blfC9pX/fgvNcjTtUF1ATZWNv63rpzHuQBsTos//7sj+0UOoC04/4f21Wj8X66Lm//D5rR0/P/W4CfrgM3I/B/al/EP7cv4h7bUzO38cXy5pO6IaOZnAYqbBe669Ly2Mwtbuhvc4b/GgZhZ9yJWGSg3Siq+oLWepffEpTNd+ZYorWdLi9+mbJBUbrKzbYpAOmI2tlBf+QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADaHfwIAAP//jo/XvA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0xc2) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) 2.087604736s ago: executing program 3 (id=38): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.993152626s ago: executing program 4 (id=39): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f982c"], 0xfce) 1.821601353s ago: executing program 3 (id=40): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.147389046s ago: executing program 4 (id=41): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x6f, 0x10080, 0xfffffffe, 0x83f2, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xcf4, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67ab, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x1ff, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x19, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x8000, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x24400}, 0x4004051) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0xdddd1000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.103920085s ago: executing program 2 (id=42): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x181042, 0x65) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x84fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x48881) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000100)=0xc3, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000"/34], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x18, 0x7, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0x8, 0x2}]}}}}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.005094296s ago: executing program 4 (id=43): syz_emit_ethernet(0x66, &(0x7f0000000600)=ANY=[], 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80d00, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x600) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000580)={'\x00', 0x200, 0x6, 0x1, 0x4, 0x0, "000000000000000000002ff7b03900", "00108000", "fe710001", "dd00", ["c2fffedbff00ffdfffffffff", "60ed852aeb3d139c12f42ebd", "070500110800c1024b00", "38a70ed483c99b9f1600d333"]}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0xfffffffffffffeb4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x4) r2 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000240), 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x1f) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0x8) keyctl$revoke(0x3, r2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = syz_io_uring_setup(0x5d92, 0x0, 0x0, 0x0, &(0x7f0000000000)) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102", @ANYRESDEC, @ANYRES8=r4, @ANYBLOB="f418cd349f9ccdd9a016bdb211de09c58bdf2699da9a849d1904a70d571e86e4505105de0ca21e3e5719f91cc7d44ffdfdbafe64af6755cef8c85f000f4090493fc365d1237b6bf0455b318608e201603bd074aa570df9c90277b17d801e7a9c9f635c35931f4dd89be20467491357936c9ba7176b471b59f29fdc78548abf840efdd73239ece6b45148dffa2fbe8b02afc7645ac0d9724e20cfbea9f4124d73cfc7c3326fdc22467e90f86ec2168fd32bf4a7ef0c1eaf7f43206aed2e87e43896c69d5d3f1ebd805853d8aad6c88d", @ANYRES16=r1], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f00000002c0)=[{r6, 0x8000}, {0xffffffffffffffff, 0x8000}, {r0, 0x64e0}, {r8, 0x1200}, {0xffffffffffffffff, 0x80}], 0x5, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) 988.78762ms ago: executing program 3 (id=44): r0 = syz_open_dev$I2C(0x0, 0x2, 0x1) ioctl$I2C_RDWR(r0, 0x707, 0x0) 877.369974ms ago: executing program 3 (id=45): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40854}, 0x4844) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x24000009) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 545.779234ms ago: executing program 3 (id=46): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd22, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 337.537688ms ago: executing program 2 (id=47): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000140)="1f", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97", 0x7f, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) 271.696732ms ago: executing program 0 (id=48): syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0802020900"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6018232500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000201"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x5a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x0, 0x800) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x44080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711805000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x8841) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffdff, 0xffffffff, 0xffffffff, 0xfffffbff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x3ffc, 0x0, 0x0, 0x1}, {0x0, 0xf4241, 0x0, 0x0, 0x1}]}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x6000, 0x2000001, 0x13, r3, 0x33a0e000) preadv2(0xffffffffffffffff, &(0x7f00000017c0)=[{0x0}, {&(0x7f0000000380)=""/251, 0xfb}], 0x2, 0x7, 0x4, 0x1) 187.14523ms ago: executing program 3 (id=49): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x10c) fallocate(r0, 0x11, 0x0, 0x6) 152.326547ms ago: executing program 2 (id=50): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000240)={0x60, 0xd, 0x2, {0x2, 0xa}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}, 0x0, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xfb, 0x1, {0x22, 0xd00}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x20, 0x10, 0x87, "69b720d553f4f122fd0ee38582b97dade2d890db7f71139db4005e7d92f891e1c793060a6b156bc66e7fce38d9226391c21333807f4bdf3501379cd4dffdbcbaba0036c5d2711e391d522f9b97c10b69a5e97b39fa2fe652aa439f9789b440d855258ed6984b9858929693594263bdb622486d795b452f7d7d171b054c61478c783076fd6c8634"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0xff}}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f982c"], 0xfce) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. [ 51.863214][ T4172] cgroup: Unknown subsys name 'net' [ 51.968046][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.195188][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.522991][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 54.547120][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 54.609825][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 54.648791][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 54.693693][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 54.727056][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.734875][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.743241][ T4189] device bridge_slave_0 entered promiscuous mode [ 54.765139][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.772404][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.780053][ T4184] device bridge_slave_0 entered promiscuous mode [ 54.795903][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.803546][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.812137][ T4189] device bridge_slave_1 entered promiscuous mode [ 54.826309][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.833650][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.842138][ T4184] device bridge_slave_1 entered promiscuous mode [ 54.912587][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.922162][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.929281][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.937425][ T4191] device bridge_slave_0 entered promiscuous mode [ 54.946494][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.957943][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.973578][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.980799][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.988513][ T4185] device bridge_slave_0 entered promiscuous mode [ 54.997771][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.020606][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.027697][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.036103][ T4191] device bridge_slave_1 entered promiscuous mode [ 55.047578][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.055053][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.063575][ T4186] device bridge_slave_0 entered promiscuous mode [ 55.071314][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.078377][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.086255][ T4185] device bridge_slave_1 entered promiscuous mode [ 55.095992][ T4184] team0: Port device team_slave_0 added [ 55.112154][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.119230][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.127478][ T4186] device bridge_slave_1 entered promiscuous mode [ 55.140513][ T4184] team0: Port device team_slave_1 added [ 55.154185][ T4189] team0: Port device team_slave_0 added [ 55.162152][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.189881][ T4189] team0: Port device team_slave_1 added [ 55.196931][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.213641][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.225301][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.241779][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.262095][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.272162][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.279120][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.305197][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.340342][ T4185] team0: Port device team_slave_0 added [ 55.352524][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.359509][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.385824][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.397305][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.404513][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.430509][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.442909][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.449860][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.476474][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.489207][ T4185] team0: Port device team_slave_1 added [ 55.497159][ T4191] team0: Port device team_slave_0 added [ 55.505800][ T4191] team0: Port device team_slave_1 added [ 55.545336][ T4186] team0: Port device team_slave_0 added [ 55.553236][ T4186] team0: Port device team_slave_1 added [ 55.577648][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.585066][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.611138][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.635442][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.642627][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.668794][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.698022][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.705036][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.731067][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.742724][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.749678][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.776205][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.793654][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.800722][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.826759][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.843156][ T4189] device hsr_slave_0 entered promiscuous mode [ 55.849933][ T4189] device hsr_slave_1 entered promiscuous mode [ 55.857279][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.864339][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.890438][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.907688][ T4184] device hsr_slave_0 entered promiscuous mode [ 55.914634][ T4184] device hsr_slave_1 entered promiscuous mode [ 55.921619][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.929518][ T4184] Cannot create hsr debugfs directory [ 55.974233][ T4185] device hsr_slave_0 entered promiscuous mode [ 55.981524][ T4185] device hsr_slave_1 entered promiscuous mode [ 55.988107][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.995890][ T4185] Cannot create hsr debugfs directory [ 56.042886][ T4191] device hsr_slave_0 entered promiscuous mode [ 56.049532][ T4191] device hsr_slave_1 entered promiscuous mode [ 56.056792][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.064656][ T4191] Cannot create hsr debugfs directory [ 56.091343][ T4186] device hsr_slave_0 entered promiscuous mode [ 56.098162][ T4186] device hsr_slave_1 entered promiscuous mode [ 56.105022][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.112815][ T4186] Cannot create hsr debugfs directory [ 56.311069][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 56.311069][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 56.311553][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 56.330531][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 56.336628][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 56.398463][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.416272][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.425236][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.435401][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.489944][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.505644][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.516638][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.526859][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.564467][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.587303][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.609139][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.632381][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.689833][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.704860][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.735174][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.744350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.754008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.776331][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.788460][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.805191][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.812251][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.821780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.831742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.840899][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.848097][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.858946][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.868038][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.884642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.893011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.902198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.910816][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.917877][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.930901][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.940432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.953289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.961815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.983478][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.998636][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.013371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.033525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.044083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.052913][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.059992][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.067962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.079878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.088418][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.095532][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.124599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.132959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.142685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.153417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.162442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.171494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.179947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.188731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.197212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.210985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.227181][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.236539][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.247145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.258330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.267201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.275818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.284718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.308457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.317342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.327745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.337934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.346605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.355881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.371217][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.388355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.397075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.411447][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.445940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.455606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.469521][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.476695][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.490796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.499451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.509518][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.516741][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.524811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.542661][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.564327][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.591090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.599794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.607739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.635347][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.645345][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.655963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.665399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.675823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.683853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.703257][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.718832][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.736404][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.766008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.774910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.784110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.794459][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.801573][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.809402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.818402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.826951][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.834051][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.844051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.852914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.861654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.870140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.878611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.888043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.896991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.905825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.928092][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.952173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.963449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.972639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.982515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.991801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.999641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.008218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.017494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.026429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.034378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.042170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.051055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.059260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.067457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.076154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.092388][ T4189] device veth0_vlan entered promiscuous mode [ 58.106712][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.119401][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.128404][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.144106][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.156671][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.181751][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.191950][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.202100][ T4234] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.209184][ T4234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.216989][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.224599][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.233759][ T4189] device veth1_vlan entered promiscuous mode [ 58.244249][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.255692][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.275789][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.284035][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.297808][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.306851][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.321346][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.329974][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.340090][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.347227][ T4234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.355139][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.363984][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.393890][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.400723][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 58.400764][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 58.420980][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.426013][ T26] Bluetooth: hci2: command 0x041b tx timeout [ 58.441121][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.449365][ T26] Bluetooth: hci1: command 0x041b tx timeout [ 58.449919][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.465313][ T26] Bluetooth: hci4: command 0x041b tx timeout [ 58.479875][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.498916][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.512025][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.520165][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.538222][ T4189] device veth0_macvtap entered promiscuous mode [ 58.549956][ T4184] device veth0_vlan entered promiscuous mode [ 58.563574][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.574431][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.584956][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.597370][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.607674][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.617502][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.628953][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.638479][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.648956][ T4189] device veth1_macvtap entered promiscuous mode [ 58.679202][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.693622][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.707833][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.716893][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.725411][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.737617][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.747203][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.762980][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.772319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.782082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.794436][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.809579][ T4184] device veth1_vlan entered promiscuous mode [ 58.823372][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.843749][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.858682][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.868020][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.883310][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.904384][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.914459][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.923564][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.934481][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.971299][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.980037][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.000293][ T4191] device veth0_vlan entered promiscuous mode [ 59.018862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.027440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.037641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.046428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.058871][ T4185] device veth0_vlan entered promiscuous mode [ 59.075264][ T4191] device veth1_vlan entered promiscuous mode [ 59.085721][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.095430][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.103780][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.113485][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.121988][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.129418][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.137221][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.145219][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.174901][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.203269][ T4185] device veth1_vlan entered promiscuous mode [ 59.212755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.221356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.229812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.252571][ T4184] device veth0_macvtap entered promiscuous mode [ 59.275881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.285001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.293843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.303135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.312468][ T4191] device veth0_macvtap entered promiscuous mode [ 59.322797][ T4184] device veth1_macvtap entered promiscuous mode [ 59.347763][ T4191] device veth1_macvtap entered promiscuous mode [ 59.366520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.374723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.383805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.392852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.401682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.410083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.419173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.432677][ T4185] device veth0_macvtap entered promiscuous mode [ 59.444977][ T4185] device veth1_macvtap entered promiscuous mode [ 59.466996][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.476104][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.489385][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.502389][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.515300][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.543392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.552234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.560154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.568685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.577720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.587439][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.598661][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.611729][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.619096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.629279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.641446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.649735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.660110][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.672275][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.682694][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.693410][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.704930][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.714119][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.725064][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.735399][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.746079][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.758452][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.769558][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.782895][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.792420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.800735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.808503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.817516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.826699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.835686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.851018][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.858856][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.870177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.885869][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.896414][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.906561][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.918418][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.929319][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.938247][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.948991][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.959493][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.970088][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.980189][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.992510][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.003796][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.024027][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.033004][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.043105][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.052392][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.062528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.072114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.082240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.091576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.101937][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.111246][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.119939][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.128686][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.139248][ T4186] device veth0_vlan entered promiscuous mode [ 60.147743][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.157170][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.165962][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.174755][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.226795][ T4186] device veth1_vlan entered promiscuous mode [ 60.372358][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.392437][ T4263] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.393131][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.422844][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.437275][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.451219][ T4186] device veth0_macvtap entered promiscuous mode [ 60.462732][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.478444][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.481291][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 60.487322][ T4186] device veth1_macvtap entered promiscuous mode [ 60.493032][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 60.504766][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 60.511161][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 60.520184][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.529183][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.539488][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.559050][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.559250][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 60.573961][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.587832][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.650052][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.663137][ T1210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.663413][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.690684][ T1210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.703669][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.715794][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.725847][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.736540][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.746979][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.757667][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.768838][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.789130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.799006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.808128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.818926][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.830816][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.841640][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.852373][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.862237][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.876318][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.887666][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.898651][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.910034][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.926513][ T1210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.935454][ T1210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.937946][ T4234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.948065][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.965155][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.967590][ T4234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.975572][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.989088][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.001890][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.010894][ T4229] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 61.011160][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.027763][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.039053][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.073434][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.087009][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.122700][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.189330][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.216642][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.244653][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.260392][ T4229] usb 4-1: Using ep0 maxpacket: 16 [ 61.318016][ T4277] tipc: Started in network mode [ 61.337171][ T4277] tipc: Node identity c62ac899c8c8, cluster identity 4711 [ 61.349517][ T4277] tipc: Enabled bearer , priority 0 [ 61.367692][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.374640][ T4277] device syzkaller0 entered promiscuous mode [ 61.386365][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.390815][ T4277] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 61.406367][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 61.419338][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.522226][ T4277] tipc: Resetting bearer [ 61.552741][ T4275] tipc: Resetting bearer [ 61.569350][ T4275] tipc: Disabling bearer [ 61.581038][ T4229] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 61.597036][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.606737][ T4229] usb 4-1: Product: syz [ 61.611604][ T4229] usb 4-1: Manufacturer: syz [ 61.616341][ T4229] usb 4-1: SerialNumber: syz [ 61.639037][ T4229] usb 4-1: config 0 descriptor?? [ 61.671196][ T4270] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 61.694114][ T4229] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 61.705208][ T4229] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 61.850369][ T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 62.050533][ T4270] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024 [ 62.067836][ T4270] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 62.080359][ T1107] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.090500][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 62.099157][ T4270] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.210488][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 62.271833][ T4270] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 62.281157][ T4270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 62.289371][ T4270] usb 5-1: Product: syz [ 62.293823][ T4270] usb 5-1: Manufacturer: syz [ 62.298418][ T4270] usb 5-1: SerialNumber: syz [ 62.322156][ T4272] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 62.340606][ T4229] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 62.350379][ T1107] usb 1-1: Using ep0 maxpacket: 16 [ 62.380446][ T26] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 62.389541][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.398211][ T26] usb 3-1: Product: syz [ 62.402484][ T4230] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 62.410006][ T26] usb 3-1: Manufacturer: syz [ 62.414718][ T26] usb 3-1: SerialNumber: syz [ 62.427704][ T26] usb 3-1: config 0 descriptor?? [ 62.470931][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 62.483053][ T26] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 62.492535][ T26] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 62.558131][ T4270] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 62.579573][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 62.586408][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 62.595589][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 62.604482][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 62.632864][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 62.640340][ T4230] usb 2-1: Using ep0 maxpacket: 32 [ 62.650671][ T1107] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 62.659820][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.668164][ T1107] usb 1-1: Product: syz [ 62.672657][ T1107] usb 1-1: Manufacturer: syz [ 62.677257][ T1107] usb 1-1: SerialNumber: syz [ 62.688254][ T1107] usb 1-1: config 0 descriptor?? [ 62.732845][ T1107] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 62.744080][ T1107] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 62.760562][ T4230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.770772][ T4230] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 62.783690][ T4230] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 62.794419][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.805309][ T4230] usb 2-1: config 0 descriptor?? [ 62.829331][ T4192] usb 5-1: USB disconnect, device number 2 [ 62.845593][ T4272] usblp0: removed [ 62.856282][ T4230] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 62.881000][ T4229] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 62.890793][ T4229] em28xx 4-1:0.0: board has no eeprom [ 63.100428][ T26] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 63.340333][ T4229] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 63.348330][ T4229] em28xx 4-1:0.0: dvb set to bulk mode. [ 63.364584][ T4228] em28xx 4-1:0.0: Binding DVB extension [ 63.381203][ T1107] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 63.529496][ T4307] loop4: detected capacity change from 0 to 512 [ 63.545781][ T4307] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 63.567234][ T4307] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 63.575453][ T4307] System zones: 1-12 [ 63.582478][ T4307] EXT4-fs error (device loop4): ext4_quota_enable:6440: comm syz.4.13: Bad quota inum: 2934046720, type: 1 [ 63.595711][ T4307] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix. [ 63.611696][ T26] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 63.619706][ T26] em28xx 3-1:0.0: board has no eeprom [ 63.621947][ T4307] EXT4-fs (loop4): mount failed [ 63.910861][ T1107] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 63.919196][ T1107] em28xx 1-1:0.0: board has no eeprom [ 64.540375][ T1107] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 64.548330][ T1107] em28xx 1-1:0.0: dvb set to bulk mode. [ 64.620997][ T4268] em28xx 4-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 64.633056][ T4192] usb 4-1: USB disconnect, device number 2 [ 64.639356][ T4192] em28xx 4-1:0.0: Disconnecting em28xx [ 64.651212][ T4228] em28xx 4-1:0.0: Registering input extension [ 64.651249][ T4282] em28xx 4-1:0.0: writing to i2c device at 0xe failed (error=-19) [ 64.658808][ T4192] em28xx 4-1:0.0: Closing input extension [ 64.676748][ T2301] em28xx 1-1:0.0: Binding DVB extension [ 64.770338][ T26] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 64.778196][ T26] em28xx 3-1:0.0: dvb set to bulk mode. [ 64.796964][ T26] usb 3-1: USB disconnect, device number 2 [ 64.808381][ T26] em28xx 3-1:0.0: Disconnecting em28xx [ 64.925048][ T7] usb 1-1: USB disconnect, device number 2 [ 64.932028][ T4192] em28xx 4-1:0.0: Freeing device [ 64.940715][ T7] em28xx 1-1:0.0: Disconnecting em28xx [ 64.964999][ T2301] em28xx 1-1:0.0: Registering input extension [ 64.972261][ T4295] em28xx 3-1:0.0: Binding DVB extension [ 64.996136][ T4295] em28xx 3-1:0.0: Registering input extension [ 65.002686][ T7] em28xx 1-1:0.0: Closing input extension [ 65.008458][ T26] em28xx 3-1:0.0: Closing input extension [ 65.027643][ T7] em28xx 1-1:0.0: Freeing device [ 65.028258][ T26] em28xx 3-1:0.0: Freeing device [ 65.130606][ T4295] usb 2-1: USB disconnect, device number 2 [ 65.165500][ T4320] syz.4.15 uses obsolete (PF_INET,SOCK_PACKET) [ 66.020365][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 66.274237][ T4350] loop2: detected capacity change from 0 to 512 [ 66.354273][ T4350] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 66.384844][ T4350] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 66.411361][ T4350] System zones: 1-12 [ 66.421264][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024 [ 66.449632][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 66.450484][ T4350] EXT4-fs error (device loop2): ext4_quota_enable:6440: comm syz.2.24: Bad quota inum: 2934046720, type: 1 [ 66.465143][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.491885][ T4350] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix. [ 66.514674][ T4350] EXT4-fs (loop2): mount failed [ 66.645463][ T4322] loop1: detected capacity change from 0 to 128 [ 66.671675][ T4192] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 66.780641][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 66.793049][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 66.806790][ T7] usb 4-1: Product: syz [ 66.813586][ T7] usb 4-1: Manufacturer: syz [ 66.818198][ T7] usb 4-1: SerialNumber: syz [ 67.190275][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 67.210247][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 67.220244][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 67.230235][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 67.240238][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 67.250242][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 67.260236][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 67.270239][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 67.280240][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 67.290243][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 67.341313][ T4342] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 67.377905][ T4322] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.399043][ T4322] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.409681][ T4192] usb 5-1: Using ep0 maxpacket: 32 [ 67.540417][ T4192] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.551109][ T4192] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 67.584978][ T4192] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 67.597196][ T7] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 67.616625][ T4192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.636697][ T4192] usb 5-1: config 0 descriptor?? [ 67.698739][ T4192] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 67.853703][ T2301] usb 4-1: USB disconnect, device number 3 [ 67.880128][ T4342] usblp0: removed [ 67.930401][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 68.013671][ T4360] loop2: detected capacity change from 0 to 128 [ 68.150761][ T4360] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.161782][ T4360] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.190453][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 68.220449][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 68.355190][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 68.440949][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 68.550603][ T7] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 68.560050][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.560522][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 68.568324][ T7] usb 2-1: Product: syz [ 68.604159][ T7] usb 2-1: Manufacturer: syz [ 68.609577][ T7] usb 2-1: SerialNumber: syz [ 68.638393][ T7] usb 2-1: config 0 descriptor?? [ 68.697327][ T7] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 68.714213][ T7] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 68.750468][ T26] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 68.769928][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.787621][ T26] usb 1-1: Product: syz [ 68.792142][ T26] usb 1-1: Manufacturer: syz [ 68.796738][ T26] usb 1-1: SerialNumber: syz [ 68.815248][ T26] usb 1-1: config 0 descriptor?? [ 68.862501][ T26] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 68.885882][ T26] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 68.893682][ T4384] loop2: detected capacity change from 0 to 128 [ 68.948578][ T4384] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.959865][ T4384] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.183824][ T4395] loop2: detected capacity change from 0 to 512 [ 69.218704][ T4395] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 69.250055][ T4395] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 69.270603][ T4395] System zones: 1-12 [ 69.278482][ T4395] EXT4-fs error (device loop2): ext4_quota_enable:6440: comm syz.2.37: Bad quota inum: 2934046720, type: 1 [ 69.286968][ T4398] device syzkaller0 entered promiscuous mode [ 69.297796][ T4395] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix. [ 69.317889][ T4395] EXT4-fs (loop2): mount failed [ 69.330807][ T2301] usb 5-1: USB disconnect, device number 3 [ 69.380576][ T7] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 69.544808][ T26] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 69.572968][ T4404] tipc: Started in network mode [ 69.577880][ T4404] tipc: Node identity 724459fc6cb7, cluster identity 4711 [ 69.585447][ T4404] tipc: Enabled bearer , priority 0 [ 69.594088][ T4404] device syzkaller0 entered promiscuous mode [ 69.639534][ T4404] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 70.104819][ T4404] tipc: Resetting bearer [ 70.162408][ T4403] tipc: Resetting bearer [ 70.199484][ T4403] tipc: Disabling bearer [ 70.220444][ T26] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 70.257135][ T26] em28xx 1-1:0.0: board has no eeprom [ 70.273718][ T4414] loop2: detected capacity change from 0 to 512 [ 70.306539][ T4414] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.360384][ T4414] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.417702][ T4414] EXT4-fs (loop2): 1 truncate cleaned up [ 70.421974][ T7] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 70.427891][ T4414] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 70.436914][ T7] em28xx 2-1:0.0: board has no eeprom [ 70.603423][ T26] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 70.611615][ T26] em28xx 1-1:0.0: dvb set to bulk mode. [ 70.654379][ T26] usb 1-1: USB disconnect, device number 3 [ 70.660488][ T2301] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 70.676588][ T26] em28xx 1-1:0.0: Disconnecting em28xx [ 70.699961][ T4295] em28xx 1-1:0.0: Binding DVB extension [ 70.784008][ T4295] em28xx 1-1:0.0: Registering input extension [ 70.806537][ T26] em28xx 1-1:0.0: Closing input extension [ 70.855264][ T7] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 70.864220][ T7] em28xx 2-1:0.0: dvb set to bulk mode. [ 70.870884][ T4228] em28xx 2-1:0.0: Binding DVB extension [ 71.041361][ T2301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024 [ 71.072933][ T2301] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 71.087357][ T2301] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.259943][ T4230] usb 2-1: USB disconnect, device number 3 [ 71.275555][ T2301] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 71.277101][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.291008][ T26] em28xx 1-1:0.0: Freeing device [ 71.295826][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.296175][ T2301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 71.321282][ T4230] em28xx 2-1:0.0: Disconnecting em28xx [ 71.379864][ T4228] em28xx 2-1:0.0: Registering input extension [ 71.388800][ T4230] em28xx 2-1:0.0: Closing input extension [ 71.397719][ T2301] usb 5-1: Product: syz [ 71.404439][ T4450] ================================================================== [ 71.407521][ T4230] em28xx 2-1:0.0: Freeing device [ 71.412758][ T4450] BUG: KASAN: use-after-free in tcf_ct_act+0x361f/0x3b40 [ 71.412823][ T4450] Write of size 4 at addr ffff88807d38d814 by task syz.0.51/4450 [ 71.412838][ T4450] [ 71.412853][ T4450] CPU: 0 PID: 4450 Comm: syz.0.51 Not tainted syzkaller #0 [ 71.418511][ T2301] usb 5-1: Manufacturer: syz [ 71.424839][ T4450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.424877][ T4450] Call Trace: [ 71.424886][ T4450] [ 71.424894][ T4450] dump_stack_lvl+0x188/0x250 [ 71.424920][ T4450] ? show_regs_print_info+0x20/0x20 [ 71.424940][ T4450] ? load_image+0x410/0x410 [ 71.460574][ T2301] usb 5-1: SerialNumber: syz [ 71.463007][ T4450] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 71.487343][ T4450] ? ipv6_defrag+0x3a0/0x3a0 [ 71.491934][ T4450] print_address_description+0x60/0x2d0 [ 71.497506][ T4450] ? tcf_ct_act+0x361f/0x3b40 [ 71.499535][ T4416] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 71.502184][ T4450] kasan_report+0xdf/0x130 [ 71.513529][ T4450] ? tcf_ct_act+0x361f/0x3b40 [ 71.518218][ T4450] tcf_ct_act+0x361f/0x3b40 [ 71.522731][ T4450] ? tunnel_key_exit_net+0x100/0x100 [ 71.528000][ T4450] ? __lock_acquire+0x13dc/0x7b50 [ 71.533008][ T4450] ? skb_copy_bits+0x310/0x740 [ 71.537778][ T4450] ? skb_zerocopy+0x198/0x10a0 [ 71.542536][ T4450] ? rcu_lockdep_current_cpu_online+0x35/0x130 [ 71.548712][ T4450] ? rcu_read_lock_held+0x40/0x40 [ 71.553728][ T4450] tcf_action_exec+0x177/0x570 [ 71.558528][ T4450] tcf_classify+0x218/0xad0 [ 71.563028][ T4450] __netif_receive_skb_core+0x1cd8/0x3670 [ 71.568750][ T4450] ? set_rps_cpu+0x660/0x660 [ 71.573329][ T4450] ? ktime_get_with_offset+0xff/0x320 [ 71.578688][ T4450] ? read_lock_is_recursive+0x10/0x10 [ 71.584047][ T4450] ? lock_chain_count+0x20/0x20 [ 71.588885][ T4450] ? do_user_addr_fault+0x69f/0xc90 [ 71.594068][ T4450] __netif_receive_skb+0x74/0x290 [ 71.599087][ T4450] ? ktime_get_with_offset+0x2d7/0x320 [ 71.604534][ T4450] netif_receive_skb+0x19e/0x700 [ 71.609457][ T4450] ? __bpf_trace_softirq+0x10/0x10 [ 71.614664][ T4450] ? netif_receive_skb_core+0x210/0x210 [ 71.620254][ T4450] tun_rx_batched+0x606/0x760 [ 71.620683][ T4295] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 71.624940][ T4450] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 71.624971][ T4450] ? local_bh_enable+0x20/0x20 [ 71.624987][ T4450] ? __local_bh_enable_ip+0x136/0x1c0 [ 71.648553][ T4450] ? read_lock_is_recursive+0x10/0x10 [ 71.653931][ T4450] ? __local_bh_enable_ip+0x136/0x1c0 [ 71.659313][ T4450] ? _local_bh_enable+0xa0/0xa0 [ 71.664174][ T4450] tun_get_user+0x2bf4/0x3b10 [ 71.668850][ T4450] ? tun_ring_recv+0xc90/0xc90 [ 71.673600][ T4450] ? rcu_lock_release+0x5/0x20 [ 71.678366][ T4450] ? __lock_acquire+0x7b50/0x7b50 [ 71.683397][ T4450] tun_chr_write_iter+0x112/0x1e0 [ 71.688495][ T4450] vfs_write+0x748/0xd70 [ 71.692864][ T4450] ? file_end_write+0x250/0x250 [ 71.697743][ T4450] ? __fget_files+0x402/0x470 [ 71.702431][ T4450] ? __fdget_pos+0x1e2/0x370 [ 71.707026][ T4450] ? ksys_write+0x70/0x260 [ 71.711447][ T4450] ksys_write+0x153/0x260 [ 71.715766][ T4450] ? __ia32_sys_read+0x80/0x80 [ 71.720530][ T4450] ? lockdep_hardirqs_on+0x94/0x140 [ 71.725747][ T4450] do_syscall_64+0x4c/0xa0 [ 71.730146][ T4450] ? clear_bhb_loop+0x30/0x80 [ 71.734805][ T4450] ? clear_bhb_loop+0x30/0x80 [ 71.739478][ T4450] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.745364][ T4450] RIP: 0033:0x7fc04e2b1159 [ 71.749769][ T4450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.769459][ T4450] RSP: 002b:00007fc04c509028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.777909][ T4450] RAX: ffffffffffffffda RBX: 00007fc04e538fa0 RCX: 00007fc04e2b1159 [ 71.785883][ T4450] RDX: 0000000000000fce RSI: 0000200000001280 RDI: 0000000000000003 [ 71.793840][ T4450] RBP: 00007fc04e34806b R08: 0000000000000000 R09: 0000000000000000 [ 71.801900][ T4450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.809858][ T4450] R13: 00007fc04e539038 R14: 00007fc04e538fa0 R15: 00007ffe5da80068 [ 71.817824][ T4450] [ 71.820826][ T4450] [ 71.823154][ T4450] Allocated by task 4450: [ 71.827454][ T4450] __kasan_slab_alloc+0x92/0xc0 [ 71.832288][ T4450] slab_post_alloc_hook+0x4c/0x380 [ 71.837379][ T4450] kmem_cache_alloc_node+0x184/0x2c0 [ 71.842639][ T4450] __alloc_skb+0xf4/0x750 [ 71.847038][ T4450] alloc_skb_with_frags+0xa7/0x720 [ 71.852130][ T4450] sock_alloc_send_pskb+0x87f/0x9a0 [ 71.857425][ T4450] tun_get_user+0x8f7/0x3b10 [ 71.861994][ T4450] tun_chr_write_iter+0x112/0x1e0 [ 71.867013][ T4450] vfs_write+0x748/0xd70 [ 71.871240][ T4450] ksys_write+0x153/0x260 [ 71.875564][ T4450] do_syscall_64+0x4c/0xa0 [ 71.879959][ T4450] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.885831][ T4450] [ 71.888165][ T4450] Freed by task 4450: [ 71.892122][ T4450] kasan_set_track+0x4b/0x70 [ 71.896691][ T4450] kasan_set_free_info+0x1f/0x40 [ 71.901614][ T4450] ____kasan_slab_free+0xd5/0x110 [ 71.906643][ T4450] slab_free_freelist_hook+0xec/0x170 [ 71.912123][ T4450] kmem_cache_free+0x8f/0x210 [ 71.916815][ T4450] nf_ct_frag6_gather+0x1002/0x1da0 [ 71.922097][ T4450] tcf_ct_act+0xc8d/0x3b40 [ 71.926526][ T4450] tcf_action_exec+0x177/0x570 [ 71.931294][ T4450] tcf_classify+0x218/0xad0 [ 71.935797][ T4450] __netif_receive_skb_core+0x1cd8/0x3670 [ 71.941525][ T4450] __netif_receive_skb+0x74/0x290 [ 71.946536][ T4450] netif_receive_skb+0x19e/0x700 [ 71.951479][ T4450] tun_rx_batched+0x606/0x760 [ 71.956157][ T4450] tun_get_user+0x2bf4/0x3b10 [ 71.960843][ T4450] tun_chr_write_iter+0x112/0x1e0 [ 71.966039][ T4450] vfs_write+0x748/0xd70 [ 71.970265][ T4450] ksys_write+0x153/0x260 [ 71.974591][ T4450] do_syscall_64+0x4c/0xa0 [ 71.979006][ T4450] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.984891][ T4450] [ 71.987197][ T4450] The buggy address belongs to the object at ffff88807d38d780 [ 71.987197][ T4450] which belongs to the cache skbuff_head_cache of size 232 [ 72.001769][ T4450] The buggy address is located 148 bytes inside of [ 72.001769][ T4450] 232-byte region [ffff88807d38d780, ffff88807d38d868) [ 72.015051][ T4450] The buggy address belongs to the page: [ 72.020693][ T4450] page:ffffea0001f4e340 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d38d [ 72.030850][ T4450] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 72.038389][ T4450] raw: 00fff00000000200 ffffea00005f7400 0000000400000004 ffff88801bbe6140 [ 72.046957][ T4450] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 72.055525][ T4450] page dumped because: kasan: bad access detected [ 72.061934][ T4450] page_owner tracks the page as allocated [ 72.067629][ T4450] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 3568, ts 29453410476, free_ts 29437088040 [ 72.083760][ T4450] get_page_from_freelist+0x24f6/0x2670 [ 72.089304][ T4450] __alloc_pages+0x1ee/0x480 [ 72.093881][ T4450] new_slab+0xc0/0x4b0 [ 72.097940][ T4450] ___slab_alloc+0x807/0xdd0 [ 72.102512][ T4450] kmem_cache_alloc_node+0x118/0x2c0 [ 72.107780][ T4450] __alloc_skb+0xf4/0x750 [ 72.112093][ T4450] alloc_skb_with_frags+0xa7/0x720 [ 72.117187][ T4450] sock_alloc_send_pskb+0x87f/0x9a0 [ 72.122379][ T4450] unix_dgram_sendmsg+0x6f8/0x19c0 [ 72.127470][ T4450] sock_write_iter+0x2a6/0x3a0 [ 72.132280][ T4450] vfs_write+0x748/0xd70 [ 72.136530][ T4450] ksys_write+0x153/0x260 [ 72.140853][ T4450] do_syscall_64+0x4c/0xa0 [ 72.145254][ T4450] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.151226][ T4450] page last free stack trace: [ 72.155914][ T4450] free_unref_page_prepare+0x637/0x6c0 [ 72.161360][ T4450] free_unref_page+0x8f/0x2a0 [ 72.166203][ T4450] qlist_free_all+0x35/0x90 [ 72.170721][ T4450] kasan_quarantine_reduce+0x150/0x160 [ 72.176525][ T4450] __kasan_slab_alloc+0x2f/0xc0 [ 72.181376][ T4450] slab_post_alloc_hook+0x4c/0x380 [ 72.186583][ T4450] __kmalloc+0x189/0x340 [ 72.190818][ T4450] tomoyo_realpath_from_path+0xed/0x5e0 [ 72.196368][ T4450] tomoyo_path_perm+0x23f/0x5d0 [ 72.201207][ T4450] security_inode_getattr+0xcf/0x120 [ 72.206562][ T4450] vfs_getattr+0x26/0x3a0 [ 72.210874][ T4450] vfs_statx+0x146/0x4c0 [ 72.215100][ T4450] __x64_sys_newfstatat+0x15f/0x200 [ 72.220291][ T4450] do_syscall_64+0x4c/0xa0 [ 72.224689][ T4450] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.230571][ T4450] [ 72.232881][ T4450] Memory state around the buggy address: [ 72.238512][ T4450] ffff88807d38d700: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 72.246568][ T4450] ffff88807d38d780: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.254612][ T4450] >ffff88807d38d800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 72.262662][ T4450] ^ [ 72.267237][ T4450] ffff88807d38d880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 72.275298][ T4450] ffff88807d38d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.283479][ T4450] ================================================================== [ 72.291543][ T4450] Disabling lock debugging due to kernel taint [ 72.297867][ T4450] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 72.305233][ T4450] CPU: 0 PID: 4450 Comm: syz.0.51 Tainted: G B syzkaller #0 [ 72.313844][ T4450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.323905][ T4450] Call Trace: [ 72.327174][ T4450] [ 72.330102][ T4450] dump_stack_lvl+0x188/0x250 [ 72.334782][ T4450] ? show_regs_print_info+0x20/0x20 [ 72.339976][ T4450] ? load_image+0x410/0x410 [ 72.344480][ T4450] panic+0x2f8/0x850 [ 72.348370][ T4450] ? bpf_jit_dump+0xd0/0xd0 [ 72.352855][ T4450] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 72.358747][ T4450] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 72.365055][ T4450] ? _raw_spin_unlock+0x40/0x40 [ 72.369894][ T4450] ? tcf_ct_act+0x361f/0x3b40 [ 72.374553][ T4450] check_panic_on_warn+0x80/0xa0 [ 72.379489][ T4450] ? tcf_ct_act+0x361f/0x3b40 [ 72.384340][ T4450] end_report+0x6d/0xf0 [ 72.388484][ T4450] kasan_report+0x102/0x130 [ 72.392975][ T4450] ? tcf_ct_act+0x361f/0x3b40 [ 72.397652][ T4450] tcf_ct_act+0x361f/0x3b40 [ 72.402339][ T4450] ? tunnel_key_exit_net+0x100/0x100 [ 72.407620][ T4450] ? __lock_acquire+0x13dc/0x7b50 [ 72.412628][ T4450] ? skb_copy_bits+0x310/0x740 [ 72.417465][ T4450] ? skb_zerocopy+0x198/0x10a0 [ 72.422227][ T4450] ? rcu_lockdep_current_cpu_online+0x35/0x130 [ 72.428377][ T4450] ? rcu_read_lock_held+0x40/0x40 [ 72.433384][ T4450] tcf_action_exec+0x177/0x570 [ 72.438149][ T4450] tcf_classify+0x218/0xad0 [ 72.442650][ T4450] __netif_receive_skb_core+0x1cd8/0x3670 [ 72.448899][ T4450] ? set_rps_cpu+0x660/0x660 [ 72.453497][ T4450] ? ktime_get_with_offset+0xff/0x320 [ 72.458877][ T4450] ? read_lock_is_recursive+0x10/0x10 [ 72.464242][ T4450] ? lock_chain_count+0x20/0x20 [ 72.469095][ T4450] ? do_user_addr_fault+0x69f/0xc90 [ 72.474300][ T4450] __netif_receive_skb+0x74/0x290 [ 72.479308][ T4450] ? ktime_get_with_offset+0x2d7/0x320 [ 72.484769][ T4450] netif_receive_skb+0x19e/0x700 [ 72.489704][ T4450] ? __bpf_trace_softirq+0x10/0x10 [ 72.494808][ T4450] ? netif_receive_skb_core+0x210/0x210 [ 72.500354][ T4450] tun_rx_batched+0x606/0x760 [ 72.505009][ T4450] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 72.511467][ T4450] ? local_bh_enable+0x20/0x20 [ 72.516226][ T4450] ? __local_bh_enable_ip+0x136/0x1c0 [ 72.521594][ T4450] ? read_lock_is_recursive+0x10/0x10 [ 72.526958][ T4450] ? __local_bh_enable_ip+0x136/0x1c0 [ 72.532314][ T4450] ? _local_bh_enable+0xa0/0xa0 [ 72.537148][ T4450] tun_get_user+0x2bf4/0x3b10 [ 72.541810][ T4450] ? tun_ring_recv+0xc90/0xc90 [ 72.546555][ T4450] ? rcu_lock_release+0x5/0x20 [ 72.551312][ T4450] ? __lock_acquire+0x7b50/0x7b50 [ 72.556345][ T4450] tun_chr_write_iter+0x112/0x1e0 [ 72.561360][ T4450] vfs_write+0x748/0xd70 [ 72.565599][ T4450] ? file_end_write+0x250/0x250 [ 72.570432][ T4450] ? __fget_files+0x402/0x470 [ 72.575092][ T4450] ? __fdget_pos+0x1e2/0x370 [ 72.579663][ T4450] ? ksys_write+0x70/0x260 [ 72.584059][ T4450] ksys_write+0x153/0x260 [ 72.588441][ T4450] ? __ia32_sys_read+0x80/0x80 [ 72.593217][ T4450] ? lockdep_hardirqs_on+0x94/0x140 [ 72.598412][ T4450] do_syscall_64+0x4c/0xa0 [ 72.602830][ T4450] ? clear_bhb_loop+0x30/0x80 [ 72.607484][ T4450] ? clear_bhb_loop+0x30/0x80 [ 72.612138][ T4450] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.618029][ T4450] RIP: 0033:0x7fc04e2b1159 [ 72.622438][ T4450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.642024][ T4450] RSP: 002b:00007fc04c509028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.650415][ T4450] RAX: ffffffffffffffda RBX: 00007fc04e538fa0 RCX: 00007fc04e2b1159 [ 72.658375][ T4450] RDX: 0000000000000fce RSI: 0000200000001280 RDI: 0000000000000003 [ 72.666601][ T4450] RBP: 00007fc04e34806b R08: 0000000000000000 R09: 0000000000000000 [ 72.674567][ T4450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.682535][ T4450] R13: 00007fc04e539038 R14: 00007fc04e538fa0 R15: 00007ffe5da80068 [ 72.690494][ T4450] [ 72.693606][ T4450] Kernel Offset: disabled [ 72.697925][ T4450] Rebooting in 86400 seconds..