last executing test programs: 19.520611037s ago: executing program 1 (id=324): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x3b, 0x4, 0x3c8, 0x0, 0x0, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1ff, 0x6, 0x2}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@broadcast, @multicast2, @rand_addr=0x64010102}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x2b3) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x64842, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x401, 0xf0bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x5081}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}}, 0x20000080) 16.740161062s ago: executing program 2 (id=326): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0xfffffffffffffffe) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x9, 0x1, "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"}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_driver={0x7, 0x4, &(0x7f0000000180)="0b5585998960"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000240)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x7e) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x3, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 16.612188173s ago: executing program 1 (id=329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002440), 0x0, 0x10) 15.139438059s ago: executing program 1 (id=330): setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) socket(0x10, 0x3, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="180900"/15, @ANYRESOCT], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000001440)=""/40, &(0x7f0000001480)=0x28) 11.534032381s ago: executing program 2 (id=332): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd25, 0x21dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc0d4}, 0x4000000) 9.364293603s ago: executing program 0 (id=339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc928000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) close_range(r3, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) 8.165793593s ago: executing program 0 (id=341): socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/93, 0x5d}], 0x1, 0x3, 0x8000) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x48c5) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x4a0f01, 0x31) openat(0xffffffffffffffff, &(0x7f0000000340)='./bus/file0\x00', 0x343000, 0x137) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x1, 0x77) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus/file0\x00', 0x2) close_range(r3, r1, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x5}) socket$vsock_stream(0x28, 0x1, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) 7.283580298s ago: executing program 0 (id=344): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000780)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d", 0x5}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.518817586s ago: executing program 4 (id=346): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$ITER_CREATE(0x22, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40080c1}, 0x800) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x200000000000006) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r4) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="00000000717e00d48e243f76a908dfa9eccf048c875b9d789db7a2b61b583e310ee9d3400eac9cd2aa5fc189937a7d9631e11633906d558692fef96c632ac6af3c6838a81200d51974f3b275ac5a4b2aac550627616ecec8c7a3d71a75ede3a9daa210c955565246592621e0af03e57119ce4aa40e3c8b6a1f8a2718d4a572b485d9a1", @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xb, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="665f3200d8de0a630a00000000100061114c000000000085000000aa0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46}, 0x94) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000101401"], 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r3, &(0x7f0000000040)=[{0x0, 0x2b}], 0x1, 0x5, 0x40) rt_sigqueueinfo(0x0, 0x3c, &(0x7f00000000c0)={0x17, 0x7b7, 0xfffffffc}) 6.493919027s ago: executing program 0 (id=347): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r5, &(0x7f00000008c0)={&(0x7f0000000900)=@pppoe={0x18, 0x0, {0x4, @broadcast, 'team0\x00'}}, 0x80, 0x0}, 0x20004000) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f00000000c0)) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x5000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xc, 0x0, 0x1}}, 0x40) get_mempolicy(0x0, 0x0, 0xffffffffffffffff, &(0x7f00008b2000/0x4000)=nil, 0x3) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106"], 0x18}], 0x1}, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r7, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x5008, 0x0) socket(0x400000000010, 0x3, 0x0) read$msr(r6, &(0x7f0000000300)=""/193, 0xc1) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000011006bec9e3be3f9ff17aa31076b876c1d0000007ea20864160af3653c001ac00400020208000200030001001400030007b556a737c160f9555b4755bb05251e618200000051f60a84c9f4d4938037", 0x53}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x2000c004) 6.19535863s ago: executing program 1 (id=348): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x60}}, 0x20040481) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000080)=0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) syz_io_uring_setup(0x1073, &(0x7f0000000300)={0x0, 0xa902, 0x0, 0x2, 0xbfdbfdfc}, &(0x7f0000000000), &(0x7f00000001c0), 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000000100000080000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="030000000100"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x6, r6, 0x0, 0x0, 0x1}}, 0x20) 6.15535235s ago: executing program 3 (id=349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fadvise64(0xffffffffffffffff, 0x88, 0x0, 0x3) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000140)=@fd={0x295, 0x2, 0x4, 0x2000, 0x4, {}, {0x5, 0x1, 0x2, 0x2, 0x1, 0x20, "7e9fe623"}, 0x8, 0x4, {}, 0xffffffff}) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000043000701fefffffffcdbdf25017c000004004580204c2482c3aadc0173153dfbd98a88e29e90aadce7cd6bb2dbb47cdd57e02a79e6a2dc12cbec78254e470841d034d49e18dff337610e2d837022d8722e4abc238ec42ac19a6707f9940d37dd5ee7229308aad75ef606dc902658f1fc07236221cf5da3102ec005205863c9b31ac84f886890b1b35de000caa1600abb9feea90dbb800ee6b61cfeff40a94ed9937f6bb9accea479ceaa38892050398c7d2d7161b956"], 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0x400c080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000108000140000000010900010073797a300000000014000000110001"], 0xe0}}, 0x0) 3.330232212s ago: executing program 0 (id=350): r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = fsopen(0x0, 0x0) fsmount(r4, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) chmod(0x0, 0x23f) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, 0x0, 0x40000) 3.081463536s ago: executing program 1 (id=351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, 0x1, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x5800) io_submit(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) 3.080824865s ago: executing program 2 (id=352): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93", 0xad}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540", 0x6d}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) 3.078538435s ago: executing program 4 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x5, 0x10, 0x8000000000000000, 0xd}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2, 0x8}, &(0x7f0000000300)=0x8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)}, 0x700) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x4000080) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000090) 2.822462038s ago: executing program 3 (id=354): socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(0x0, 0x4000) stat(0x0, &(0x7f0000000200)) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x80, 0x40100000, 0xffffffffffffffff, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) 2.358966553s ago: executing program 2 (id=355): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f) 2.247769454s ago: executing program 0 (id=356): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) syz_io_uring_setup(0x112, &(0x7f0000000340)={0x0, 0x800fa9b, 0x20, 0x14, 0x18a}, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0x834, 0x1, [0x2, 0x8, 0x1, 0x6, 0xf], [0x109, 0x81, 0x7, 0x0, 0x6, 0x3, 0x81, 0xe4, 0x5f1, 0xff, 0x3, 0x1, 0xffffffff, 0x6, 0x4, 0xffffffff, 0x9, 0x4, 0x7, 0x7, 0x6, 0x6, 0x2, 0xe15, 0xad, 0xfffffffffffffffe, 0x6, 0x9, 0x2, 0x7, 0x0, 0x3ff, 0x1, 0x9, 0x4, 0x80000000, 0x1000, 0x6, 0x4d1f, 0x9, 0xfffffffffffffff0, 0x0, 0x1000000000000000, 0x5c, 0x6, 0x3ff, 0xa, 0x0, 0x4, 0xffffffffffffffff, 0x8, 0x2, 0x6, 0x1, 0x5, 0x82, 0x0, 0x9, 0x3ff, 0x8, 0x7fffffff, 0x8, 0x0, 0x9, 0x2, 0x1, 0x3147, 0x79c, 0x9, 0x4, 0xa19, 0x1, 0x6, 0x8, 0x1, 0x9, 0x4, 0x0, 0xfffffffffffffffa, 0xbf0b72b, 0x18, 0x4, 0x93f8, 0xffff, 0x800, 0xa06a, 0x2, 0x0, 0x461e, 0xb05, 0x3, 0x1, 0x4, 0x7, 0xfffffffffffffff8, 0x8, 0x5, 0xfffffffffffffff7, 0x6, 0x4, 0x0, 0x1, 0x22f, 0x6, 0x3, 0x0, 0x800, 0xfffffffffffffff9, 0x800000000, 0xf42b, 0x75, 0x3, 0x9, 0x1, 0xf0, 0x6, 0x8001, 0x7, 0x6, 0x8, 0xaf]}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r7, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept(r7, &(0x7f0000000280)=@can, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000440)={r6, "7a4d3513ea0a04b9ba24da28a0c31db1"}) 2.188168495s ago: executing program 1 (id=357): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) unshare(0x20000400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r2 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) read$FUSE(r1, &(0x7f0000003380)={0x2020}, 0x2020) prctl$PR_SET_TIMERSLACK(0x1d, 0x7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaa783fa9aaaaaa23014dfd0dec3ee72b90bc8844670c80c20000000800450000b0000000000011907800000011ffffffff00004e20009c907801000000000000007b4b143b7461fd777b1c012bd14e01a049fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881e51852e4451b57de579d3c045942824251d7d17b5191584acd4fbe40a23424dbcfd56f1374361caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcb"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) ppoll(&(0x7f00000005c0)=[{r4, 0x60}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0x70, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa35080045000062000000000011907864010101ac141421fffd4e20004e9078fc69fe7d84cec4c60629393ec5c602008bf17d753daa9579b4f7761ba71dcd53b85111410735ddce7903135fd6bfbe99d85aa2da7ec0e0ccb8c86b00"/112], 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.187668975s ago: executing program 4 (id=358): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, 0x0, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x0) 1.578776612s ago: executing program 2 (id=359): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a300000000008000940000000020c"], 0x558}}, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@llc={0x4, {@snap={0x0, 0x0, "c0", "118190", 0xa00}}}}}, 0x0) 1.535746543s ago: executing program 3 (id=360): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d46c0000007f00000100000000000000000000000000000000000000009201000000000000511c000000000000ffff00000000000000000000000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcffffff29bd700000000000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080016"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.391695124s ago: executing program 4 (id=361): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x4044010) 1.390983254s ago: executing program 2 (id=362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket(0x23, 0x80805, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004801}, 0x80) 1.280061636s ago: executing program 3 (id=363): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000780)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d", 0x5}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.248761826s ago: executing program 4 (id=364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fadvise64(0xffffffffffffffff, 0x88, 0x0, 0x3) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000140)=@fd={0x295, 0x2, 0x4, 0x2000, 0x4, {}, {0x5, 0x1, 0x2, 0x2, 0x1, 0x20, "7e9fe623"}, 0x8, 0x4, {}, 0xffffffff}) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800000043000701fefffffffcdbdf25017c000004004580204c2482c3aadc0173153dfbd98a88e29e90aadce7cd6bb2dbb47cdd57e02a79e6a2dc12cbec78254e470841d034d49e18dff337610e2d837022d8722e4abc238ec42ac19a6707f9940d37dd5ee7229308aad75ef606dc902658f1fc07236221cf5da3102ec005205863c9b31ac84f886890b1b35de000caa1600abb9feea90dbb800ee6b61cfeff40a94ed9937f6bb9accea479ceaa38892050398c7d2d7161b95646"], 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0x400c080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.170009347s ago: executing program 3 (id=365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002440), 0x0, 0x10) 184.149448ms ago: executing program 4 (id=366): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x0, 0x8, 0xfa04, 0x108, 0x6c02, 0x230, 0x194, 0x194, 0x230, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0x108, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [0x2], 0x0, 0x0, 0x7a}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0xfffffffc, 0x2b0, 'pptp\x00', 'syz1\x00', {0x47c}}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x1, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000480)={{0x2, 0x0, @loopback}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000040)={0x2, [[0x2, 0x0, 0x400, 0xfffffffc], [0x8], [0x8000, 0x57c0]], '\x00', [{0x6, 0x6}, {}, {}, {0x1}, {}, {0x2}, {}, {0x1}, {}, {0x3f}, {0x0, 0xfffffffe}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, 0x0, 0x0) 0s ago: executing program 3 (id=367): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.95' (ED25519) to the list of known hosts. syzkaller login: [ 70.499836][ T4267] cgroup: Unknown subsys name 'net' [ 70.606879][ T4267] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.261574][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.268112][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.129252][ T4267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 73.583145][ T4294] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.591638][ T4294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.599879][ T4294] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.600826][ T4295] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.609714][ T4294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.619922][ T4295] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.622963][ T4294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.629866][ T4295] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.640324][ T4294] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.643362][ T4295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.650579][ T4294] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.658874][ T4295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.664089][ T4294] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.670417][ T4295] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.677883][ T4294] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.687231][ T4295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.693804][ T4294] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.706169][ T4295] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.706860][ T4294] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.720531][ T4296] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.721541][ T4294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.729699][ T4296] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.735621][ T4294] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.742737][ T4296] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.750814][ T4294] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.758191][ T4296] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.800938][ T4294] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.809605][ T4294] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.816859][ T4294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.824303][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.212085][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 74.314423][ T4286] chnl_net:caif_netlink_parms(): no params data found [ 74.374060][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 74.407402][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 74.450271][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 74.503180][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.511067][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.519269][ T4284] device bridge_slave_0 entered promiscuous mode [ 74.543464][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.552777][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.562112][ T4286] device bridge_slave_0 entered promiscuous mode [ 74.570806][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.577935][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.586381][ T4286] device bridge_slave_1 entered promiscuous mode [ 74.594033][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.601317][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.609698][ T4284] device bridge_slave_1 entered promiscuous mode [ 74.673875][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.681646][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.690072][ T4279] device bridge_slave_0 entered promiscuous mode [ 74.705158][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.712883][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.721455][ T4279] device bridge_slave_1 entered promiscuous mode [ 74.744363][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.769870][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.795691][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.813644][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.846395][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.853732][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.862466][ T4281] device bridge_slave_0 entered promiscuous mode [ 74.879008][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.888255][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.895771][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.903962][ T4280] device bridge_slave_0 entered promiscuous mode [ 74.919945][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.927078][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.935543][ T4281] device bridge_slave_1 entered promiscuous mode [ 74.951205][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.961402][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.968511][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.976994][ T4280] device bridge_slave_1 entered promiscuous mode [ 74.986870][ T4284] team0: Port device team_slave_0 added [ 75.003096][ T4286] team0: Port device team_slave_0 added [ 75.024881][ T4286] team0: Port device team_slave_1 added [ 75.032420][ T4284] team0: Port device team_slave_1 added [ 75.081950][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.093901][ T4279] team0: Port device team_slave_0 added [ 75.102383][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.118365][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.128387][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.154653][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.168540][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.189535][ T4279] team0: Port device team_slave_1 added [ 75.196812][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.206784][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.213804][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.241343][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.254683][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.262127][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.288278][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.323848][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.330921][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.356955][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.399212][ T4280] team0: Port device team_slave_0 added [ 75.408049][ T4281] team0: Port device team_slave_0 added [ 75.414710][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.424164][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.454269][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.472261][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.482560][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.509222][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.528537][ T4280] team0: Port device team_slave_1 added [ 75.535932][ T4281] team0: Port device team_slave_1 added [ 75.583339][ T4284] device hsr_slave_0 entered promiscuous mode [ 75.590580][ T4284] device hsr_slave_1 entered promiscuous mode [ 75.599687][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.606675][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.632799][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.648311][ T4286] device hsr_slave_0 entered promiscuous mode [ 75.655657][ T4286] device hsr_slave_1 entered promiscuous mode [ 75.662656][ T4286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.671768][ T4286] Cannot create hsr debugfs directory [ 75.701125][ T4279] device hsr_slave_0 entered promiscuous mode [ 75.708204][ T4279] device hsr_slave_1 entered promiscuous mode [ 75.715345][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.722990][ T4279] Cannot create hsr debugfs directory [ 75.736375][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.746571][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.772845][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.792934][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.800632][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.826912][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.839704][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.846702][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.873039][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.899975][ T4297] Bluetooth: hci4: command 0x0409 tx timeout [ 75.906267][ T4297] Bluetooth: hci3: command 0x0409 tx timeout [ 75.912556][ T4293] Bluetooth: hci1: command 0x0409 tx timeout [ 75.912585][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 75.912860][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 76.001856][ T4281] device hsr_slave_0 entered promiscuous mode [ 76.009056][ T4281] device hsr_slave_1 entered promiscuous mode [ 76.015789][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.023720][ T4281] Cannot create hsr debugfs directory [ 76.094414][ T4280] device hsr_slave_0 entered promiscuous mode [ 76.102253][ T4280] device hsr_slave_1 entered promiscuous mode [ 76.109407][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.116993][ T4280] Cannot create hsr debugfs directory [ 76.400019][ T4284] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.413012][ T4284] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.424399][ T4284] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.435819][ T4284] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.487228][ T4279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.498243][ T4279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.514190][ T4279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.524783][ T4279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.615432][ T4281] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.642633][ T4281] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.668175][ T4281] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.702758][ T4281] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.724426][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.781927][ T4286] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.795998][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.811545][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.823664][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.833635][ T4286] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.864861][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.874920][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.889895][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.904545][ T4286] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.914277][ T4286] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.936296][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.947713][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.957473][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.964786][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.974181][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.990187][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.999167][ T4280] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.026393][ T4280] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.037930][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.052365][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.064197][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.071382][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.080696][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.089726][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.098124][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.105283][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.113640][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.123590][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.132787][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.139954][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.147860][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.174798][ T4280] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.193272][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.204777][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.213796][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.223917][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.236823][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.246717][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.258078][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.267129][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.276692][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.285555][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.294631][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.309093][ T4280] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.336333][ T4284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.348743][ T4284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.362769][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.371813][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.379948][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.389800][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.398228][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.406541][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.415000][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.423786][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.433183][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.442270][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.450961][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.467261][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.501118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.510621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.520192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.530060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.540764][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.547917][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.556975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.581791][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.594747][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.646634][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.660345][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.679718][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.700300][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.707482][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.729112][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.765461][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.775883][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.787030][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.797091][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.806770][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.817074][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.854343][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.870065][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.904209][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.927692][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.977595][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.985966][ T4291] Bluetooth: hci2: command 0x041b tx timeout [ 77.990635][ T4297] Bluetooth: hci3: command 0x041b tx timeout [ 77.992133][ T4291] Bluetooth: hci1: command 0x041b tx timeout [ 77.998010][ T4297] Bluetooth: hci0: command 0x041b tx timeout [ 78.004382][ T4293] Bluetooth: hci4: command 0x041b tx timeout [ 78.029661][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.081527][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.117106][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.144307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.155248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.174227][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.192007][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.201465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.210183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.225212][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.242174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.252108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.260741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.270502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.280338][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.287494][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.297226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.310353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.319335][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.326611][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.361629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.377711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.388235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.403560][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.410832][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.428189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.437865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.453026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.473682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.501134][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.508286][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.564244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.579889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.599271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.619275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.638219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.652984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.665491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.678261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.693607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.705364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.716480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.726851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.736237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.747711][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.758136][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.785749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.795233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.815198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.829673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.845526][ T4280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.865044][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.883310][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.898180][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.907250][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.924945][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.936995][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.959412][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.992215][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.051355][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.084267][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.183824][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.199420][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.229687][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.252346][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.277662][ T4279] device veth0_vlan entered promiscuous mode [ 79.326150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.334899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.381227][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.391411][ T4279] device veth1_vlan entered promiscuous mode [ 79.473712][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.486162][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.531975][ T4279] device veth0_macvtap entered promiscuous mode [ 79.565782][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.587631][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.605463][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.647696][ T4279] device veth1_macvtap entered promiscuous mode [ 79.692033][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.711353][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.719196][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.732413][ T4281] device veth0_vlan entered promiscuous mode [ 79.756448][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.766238][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.775931][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.785850][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.795995][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.805555][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.814019][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.835499][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.865978][ T4281] device veth1_vlan entered promiscuous mode [ 79.873411][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.885282][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.894956][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.905081][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.914238][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.931482][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.941223][ T4284] device veth0_vlan entered promiscuous mode [ 79.986569][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.996373][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.006845][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.015155][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.024575][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.033722][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.042609][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.055177][ T4279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.064175][ T4297] Bluetooth: hci1: command 0x040f tx timeout [ 80.064209][ T4297] Bluetooth: hci4: command 0x040f tx timeout [ 80.069977][ T4297] Bluetooth: hci0: command 0x040f tx timeout [ 80.075575][ T4291] Bluetooth: hci3: command 0x040f tx timeout [ 80.076457][ T4294] Bluetooth: hci2: command 0x040f tx timeout [ 80.096276][ T4279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.105095][ T4279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.113869][ T4279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.131893][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.139969][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.154543][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.176579][ T4284] device veth1_vlan entered promiscuous mode [ 80.193285][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.207072][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.217539][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.257830][ T4280] device veth0_vlan entered promiscuous mode [ 80.267947][ T4281] device veth0_macvtap entered promiscuous mode [ 80.287131][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.296236][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.306360][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.317156][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.329450][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.337698][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.352012][ T4284] device veth0_macvtap entered promiscuous mode [ 80.367037][ T4280] device veth1_vlan entered promiscuous mode [ 80.377897][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.397203][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.405765][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.414369][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.423198][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.441770][ T4284] device veth1_macvtap entered promiscuous mode [ 80.481353][ T4281] device veth1_macvtap entered promiscuous mode [ 80.498072][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.517521][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.529850][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.543480][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.570201][ T4286] device veth0_vlan entered promiscuous mode [ 80.586520][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.595626][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.604587][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.614428][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.643238][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.656315][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.672564][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.685626][ T4286] device veth1_vlan entered promiscuous mode [ 80.695102][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.711887][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.723325][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.736219][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.749699][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.757338][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.768345][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.776486][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.785769][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.794688][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.803967][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.814097][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.833812][ T4284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.843625][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.852908][ T4284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.861129][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.867683][ T4284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.878947][ T4284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.892360][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.928550][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.944950][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.954921][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.968670][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.982234][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.006438][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.017576][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.033659][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.052488][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.061335][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.072664][ T4280] device veth0_macvtap entered promiscuous mode [ 81.094379][ T4281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.104418][ T4281] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.114485][ T4281] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.123350][ T4281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.142174][ T4280] device veth1_macvtap entered promiscuous mode [ 81.157730][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.157790][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.170680][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.183579][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.192125][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.205095][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.215641][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.229792][ T4286] device veth0_macvtap entered promiscuous mode [ 81.292153][ T4286] device veth1_macvtap entered promiscuous mode [ 81.334041][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.346355][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.358192][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.369034][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.378921][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.392388][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.404042][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.422389][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.441620][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.450611][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.462130][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.470663][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.480013][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.493388][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.516736][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.549595][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.561301][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.572403][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.587573][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.598751][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.610435][ T4365] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 81.617737][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.626631][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.638084][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.650455][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.665765][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.678479][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.696100][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.708836][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.724359][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.743379][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.755319][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.767961][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.782193][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.793462][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.804207][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.814874][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.825254][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.836003][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.847855][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.864205][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.878454][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.889593][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.899341][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.909732][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.919752][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.935356][ T4280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.948155][ T4280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.957275][ T4280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.967137][ T4280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.026732][ T4286] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.038158][ T4286] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.047541][ T4286] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.056785][ T4286] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.094667][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.103632][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.104581][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.139937][ T4294] Bluetooth: hci3: command 0x0419 tx timeout [ 82.140301][ T4291] Bluetooth: hci2: command 0x0419 tx timeout [ 82.146047][ T4294] Bluetooth: hci0: command 0x0419 tx timeout [ 82.152236][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 82.160382][ T4297] Bluetooth: hci1: command 0x0419 tx timeout [ 82.180361][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.218840][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.226737][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.369976][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.377901][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.445453][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.499514][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.515411][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.529276][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.537145][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.572471][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.596258][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.669647][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.677526][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.697881][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.725686][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.743577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.771893][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.079027][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.227508][ T4385] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.244893][ T4327] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.281109][ T22] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 83.303494][ T22] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 83.365637][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 83.392542][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 83.411542][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 83.454028][ T22] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 83.478748][ T4327] usb 3-1: Using ep0 maxpacket: 32 [ 83.490575][ T22] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 83.502969][ T4327] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 83.513568][ T22] usb 2-1: Product: syz [ 83.522376][ T22] usb 2-1: Manufacturer: syz [ 83.577432][ T22] cdc_wdm 2-1:1.0: skipping garbage [ 83.594201][ T22] cdc_wdm 2-1:1.0: skipping garbage [ 83.630470][ T22] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 83.650810][ T22] cdc_wdm 2-1:1.0: Unknown control protocol [ 83.697185][ T4327] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 83.826788][ C1] cdc_wdm 2-1:1.0: unknown notification 12 received: index 3468 len 39329 [ 83.840106][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 83.861502][ T4327] usb 3-1: Product: syz [ 83.878171][ T4327] usb 3-1: Manufacturer: syz [ 83.894085][ T4327] usb 3-1: SerialNumber: syz [ 83.932492][ T4327] usb 3-1: config 0 descriptor?? [ 83.962111][ T4379] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 84.031027][ T22] usb 2-1: USB disconnect, device number 2 [ 84.276779][ T4379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.291706][ T4379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.333955][ T22] usb 3-1: USB disconnect, device number 2 [ 85.088696][ T4325] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.133047][ T4396] QAT: Invalid ioctl 21531 [ 85.288724][ T4325] usb 2-1: Using ep0 maxpacket: 16 [ 85.300405][ T4325] usb 2-1: config 0 has no interfaces? [ 85.334199][ T4325] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 85.494834][ T4400] capability: warning: `syz.3.11' uses deprecated v2 capabilities in a way that may be insecure [ 85.877130][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.897175][ T4325] usb 2-1: config 0 descriptor?? [ 86.190740][ T4287] usb 2-1: USB disconnect, device number 3 [ 86.621913][ T33] cfg80211: failed to load regulatory.db [ 88.138284][ T4430] 9pnet_fd: Insufficient options for proto=fd [ 90.539222][ T4297] Bluetooth: hci5: command 0x1003 tx timeout [ 90.539823][ T4294] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 91.558179][ T4445] QAT: Invalid ioctl 21531 [ 93.509682][ T4456] Zero length message leads to an empty skb [ 95.104447][ T4483] ======================================================= [ 95.104447][ T4483] WARNING: The mand mount option has been deprecated and [ 95.104447][ T4483] and is ignored by this kernel. Remove the mand [ 95.104447][ T4483] option from the mount to silence this warning. [ 95.104447][ T4483] ======================================================= [ 95.145101][ T4483] ntfs3: loop0: try to read out of volume at offset 0x0 [ 98.059357][ T4294] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 98.067401][ T4297] Bluetooth: hci5: command 0x1003 tx timeout [ 99.374742][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 100.736001][ T4522] ntfs3: loop3: try to read out of volume at offset 0x0 [ 103.575904][ T4551] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 103.664199][ T4551] overlayfs: failed to look up (tracing) for ino (-66) [ 104.598637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 104.658603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 105.786646][ T4556] team0: Device ip6tnl1 is of different type [ 108.015665][ T4596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'. [ 108.515767][ T4608] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 109.567061][ T4626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 109.978622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 109.988648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 109.998628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.008639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.018629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.028628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 110.038632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 110.308613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.509853][ T4651] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 111.803720][ T4661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.105'. [ 113.128746][ T4326] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.488816][ T4326] usb 1-1: Using ep0 maxpacket: 32 [ 113.522697][ T4326] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 113.589154][ T4326] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 113.598459][ T4326] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 113.619137][ T4326] usb 1-1: Product: syz [ 113.623446][ T4326] usb 1-1: Manufacturer: syz [ 113.628210][ T4326] usb 1-1: SerialNumber: syz [ 113.669258][ T4326] usb 1-1: config 0 descriptor?? [ 113.677920][ T4678] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.085751][ T4678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.127230][ T4678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.138212][ T4691] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.524099][ T14] usb 1-1: USB disconnect, device number 2 [ 117.758729][ T4328] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.258899][ T4732] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 118.447648][ T4328] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 118.467109][ T4328] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 118.511555][ T4328] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 118.530913][ T4328] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 118.563166][ T4328] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 118.609923][ T4328] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 118.653961][ T4328] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 118.698815][ T4328] usb 4-1: Product: syz [ 118.719799][ T4328] usb 4-1: Manufacturer: syz [ 118.763045][ T4328] cdc_wdm 4-1:1.0: skipping garbage [ 118.808061][ T4328] cdc_wdm 4-1:1.0: skipping garbage [ 118.840074][ T4328] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 118.862107][ T4328] cdc_wdm 4-1:1.0: Unknown control protocol [ 119.005841][ C0] cdc_wdm 4-1:1.0: unknown notification 12 received: index 3468 len 39329 [ 119.207937][ T4328] usb 4-1: USB disconnect, device number 2 [ 119.638699][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 119.828713][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 119.836731][ T22] usb 5-1: config 0 has no interfaces? [ 119.885631][ T22] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 119.931554][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.967767][ T22] usb 5-1: config 0 descriptor?? [ 120.037861][ T4757] ntfs3: loop3: try to read out of volume at offset 0x0 [ 120.187896][ T22] usb 5-1: USB disconnect, device number 2 [ 124.846546][ T4801] ntfs3: loop2: try to read out of volume at offset 0x0 [ 125.393995][ T4793] team0: Device ip6tnl1 is of different type [ 128.247505][ T4840] ntfs3: loop3: try to read out of volume at offset 0x0 [ 132.701174][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.707531][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.408661][ T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 136.631018][ T22] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 136.650683][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.683153][ T22] usb 3-1: Product: syz [ 136.691197][ T22] usb 3-1: Manufacturer: syz [ 136.695869][ T22] usb 3-1: SerialNumber: syz [ 136.745783][ T22] usb 3-1: config 0 descriptor?? [ 136.761593][ T22] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 136.807558][ T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 136.846137][ T22] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 136.863124][ T22] usb 3-1: media controller created [ 136.897690][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.607859][ T4927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.192'. [ 137.617267][ T4927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 137.824890][ T22] DVB: Unable to find symbol mt352_attach() [ 139.231424][ T22] DVB: Unable to find symbol nxt6000_attach() [ 139.241861][ T22] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 139.285242][ T22] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 139.342077][ T22] dvb-usb: schedule remote query interval to 1000 msecs. [ 139.362669][ T22] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 139.417592][ T22] dvb-usb: bulk message failed: -22 (7/0) [ 139.439627][ T22] dvb-usb: bulk message failed: -22 (7/0) [ 139.468274][ T22] usb 3-1: USB disconnect, device number 3 [ 139.600934][ T22] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 140.628700][ T4287] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 140.709825][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.869891][ T4287] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 140.886155][ T4287] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 140.922785][ T22] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 140.932001][ T4287] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 140.938674][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.959795][ T22] usb 3-1: Product: syz [ 140.964249][ T22] usb 3-1: Manufacturer: syz [ 140.967258][ T4287] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 140.969174][ T22] usb 3-1: SerialNumber: syz [ 140.993602][ T22] usb 3-1: config 0 descriptor?? [ 141.045303][ T22] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 141.084912][ T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.099619][ T22] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 141.109578][ T22] usb 3-1: media controller created [ 141.228497][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.583925][ T4287] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 141.598404][ T4287] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.618412][ T4287] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.713196][ T4973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.207'. [ 141.722476][ T4973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 141.938754][ T4287] usb 2-1: Product: syz [ 141.942989][ T4287] usb 2-1: Manufacturer: syz [ 141.964568][ T4287] cdc_wdm 2-1:1.0: skipping garbage [ 142.059786][ T4287] cdc_wdm 2-1:1.0: skipping garbage [ 142.308834][ T4287] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 142.580043][ T4287] cdc_wdm 2-1:1.0: Unknown control protocol [ 142.588062][ T4287] usb 2-1: USB disconnect, device number 4 [ 143.127754][ T22] DVB: Unable to find symbol mt352_attach() [ 143.334482][ T22] DVB: Unable to find symbol nxt6000_attach() [ 143.341907][ T22] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 143.353984][ T22] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 143.384744][ T22] dvb-usb: schedule remote query interval to 1000 msecs. [ 143.413181][ T22] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 143.449297][ T22] dvb-usb: bulk message failed: -22 (7/0) [ 143.473706][ T22] dvb-usb: bulk message failed: -22 (7/0) [ 143.573468][ T22] usb 3-1: USB disconnect, device number 4 [ 144.058671][ T4999] syz.0.213 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 144.243594][ T4999] ubi31: attaching mtd0 [ 144.256426][ T4999] ubi31: scanning is finished [ 144.261249][ T4999] ubi31: empty MTD device detected [ 144.862049][ T4294] Bluetooth: Frame is too long (len 12, expected len 4) [ 144.890155][ T22] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 145.029310][ T4999] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 150.188699][ T4329] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 150.392704][ T4329] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 150.422336][ T4329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.448731][ T4329] usb 1-1: Product: syz [ 150.463211][ T4329] usb 1-1: Manufacturer: syz [ 150.467879][ T4329] usb 1-1: SerialNumber: syz [ 150.514963][ T4329] usb 1-1: config 0 descriptor?? [ 150.540093][ T4329] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 150.601080][ T4329] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 150.866262][ T4329] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 151.116794][ T4329] usb 1-1: media controller created [ 151.130096][ T5052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.225'. [ 151.139286][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 151.236680][ T4329] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.385905][ T4329] DVB: Unable to find symbol mt352_attach() [ 151.824096][ T4329] DVB: Unable to find symbol nxt6000_attach() [ 151.844090][ T4329] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 151.923555][ T4329] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 151.999869][ T4329] dvb-usb: schedule remote query interval to 1000 msecs. [ 152.024702][ T4329] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 152.037836][ T4329] dvb-usb: bulk message failed: -22 (7/0) [ 152.046441][ T4329] dvb-usb: bulk message failed: -22 (7/0) [ 152.959436][ T4981] usb 1-1: USB disconnect, device number 3 [ 153.518027][ T4981] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 154.038969][ T4325] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 154.275517][ T4325] usb 5-1: Using ep0 maxpacket: 32 [ 154.296040][ T4325] usb 5-1: unable to get BOS descriptor or descriptor too short [ 154.336448][ T4325] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 154.363236][ T4325] usb 5-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 154.383982][ T4325] usb 5-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 0.09 [ 154.394814][ T4325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.403776][ T4325] usb 5-1: SerialNumber: syz [ 155.988479][ T4981] usb 5-1: USB disconnect, device number 3 [ 156.621950][ T4328] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 157.482499][ T4328] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 157.548938][ T4328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.557173][ T4328] usb 1-1: Product: syz [ 157.585473][ T4328] usb 1-1: Manufacturer: syz [ 157.938864][ T4328] usb 1-1: SerialNumber: syz [ 157.961239][ T4328] usb 1-1: config 0 descriptor?? [ 158.085105][ T4328] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 158.097965][ T4328] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 158.118929][ T4328] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 158.128226][ T4328] usb 1-1: media controller created [ 158.159356][ T4328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.447699][ T5128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.248'. [ 158.456896][ T5128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 159.021079][ T4329] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 159.251489][ T4329] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 159.298718][ T4329] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 159.322182][ T4329] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 159.358249][ T4328] DVB: Unable to find symbol mt352_attach() [ 159.367906][ T4329] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 159.448610][ T4329] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 159.570073][ T4328] DVB: Unable to find symbol nxt6000_attach() [ 159.576220][ T4328] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 159.592871][ T4329] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 159.638040][ T4329] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 159.665614][ T4328] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 159.683248][ T4329] usb 2-1: Product: syz [ 159.708410][ T4329] usb 2-1: Manufacturer: syz [ 159.721552][ T4328] dvb-usb: schedule remote query interval to 1000 msecs. [ 161.673195][ T4329] cdc_wdm 2-1:1.0: skipping garbage [ 161.680891][ T4328] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 161.790919][ T4328] dvb-usb: bulk message failed: -22 (7/0) [ 161.861360][ T4328] dvb-usb: bulk message failed: -22 (7/0) [ 161.908818][ T4294] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 161.915167][ T4297] Bluetooth: hci5: command 0x1003 tx timeout [ 162.057138][ T4328] usb 1-1: USB disconnect, device number 4 [ 163.394996][ T4329] cdc_wdm 2-1:1.0: skipping garbage [ 163.549097][ T4329] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 163.555078][ T4329] cdc_wdm 2-1:1.0: Unknown control protocol [ 163.570002][ T4329] usb 2-1: USB disconnect, device number 5 [ 163.716057][ T4328] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 163.838081][ T5154] ubi31: attaching mtd0 [ 163.844306][ T5154] ubi31: scanning is finished [ 164.688723][ T4294] Bluetooth: Frame is too long (len 12, expected len 4) [ 164.765277][ T5154] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 165.326854][ T5162] ntfs3: loop2: try to read out of volume at offset 0x0 [ 165.950286][ T5168] futex_wake_op: syz.0.266 tries to shift op by -1; fix this program [ 168.583750][ T4329] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 168.786157][ T4329] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 168.816937][ T4329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.867389][ T4329] usb 5-1: Product: syz [ 168.882309][ T4329] usb 5-1: Manufacturer: syz [ 168.887054][ T4329] usb 5-1: SerialNumber: syz [ 168.944319][ T4329] usb 5-1: config 0 descriptor?? [ 168.966823][ T4329] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 169.033634][ T4329] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 169.070155][ T4329] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 169.090104][ T4329] usb 5-1: media controller created [ 169.144644][ T4329] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.421964][ T5198] netlink: 20 bytes leftover after parsing attributes in process `syz.4.269'. [ 169.431199][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 169.638249][ T4329] DVB: Unable to find symbol mt352_attach() [ 170.227482][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 171.022774][ T5216] ntfs3: loop2: try to read out of volume at offset 0x0 [ 171.254235][ T4329] DVB: Unable to find symbol nxt6000_attach() [ 171.802567][ T4329] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 171.828673][ T4329] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 171.850260][ T4329] dvb-usb: schedule remote query interval to 1000 msecs. [ 171.858773][ T4329] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 171.879396][ T4329] dvb-usb: bulk message failed: -22 (7/0) [ 171.885601][ T4329] dvb-usb: bulk message failed: -22 (7/0) [ 172.086638][ T4329] usb 5-1: USB disconnect, device number 4 [ 172.323731][ T4294] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 172.323778][ T4297] Bluetooth: hci5: command 0x1003 tx timeout [ 173.119549][ T4329] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 174.287300][ T5251] ntfs3: loop2: try to read out of volume at offset 0x0 [ 174.294799][ T126] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 174.929726][ T126] usb 4-1: Using ep0 maxpacket: 16 [ 174.991795][ T126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.136436][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.198449][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 175.486118][ T126] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 175.734702][ T126] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.814425][ T126] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 175.847149][ T126] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 175.864902][ T126] usb 4-1: Manufacturer: syz [ 175.895334][ T126] usb 4-1: config 0 descriptor?? [ 175.903041][ T5263] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 177.063773][ T4401] Bluetooth: hci5: Frame reassembly failed (-84) [ 178.375123][ T5287] input: syz1 as /devices/virtual/input/input11 [ 178.398834][ T126] rc_core: IR keymap rc-hauppauge not found [ 178.404808][ T126] Registered IR keymap rc-empty [ 178.422330][ T126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 178.711999][ T126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 178.790139][ T126] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 178.847538][ T126] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 178.949451][ T126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 178.985097][ T126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 179.109336][ T4297] Bluetooth: hci5: command 0x1003 tx timeout [ 179.116750][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 179.233924][ T126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 179.288678][ T126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 179.568784][ T126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 179.603116][ T126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 179.678768][ T126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 179.790183][ T5302] ntfs3: loop0: try to read out of volume at offset 0x0 [ 180.374905][ T126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 180.558722][ T126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 180.598715][ T126] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 180.630181][ T126] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 180.638250][ T126] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 180.660148][ T126] usb 4-1: USB disconnect, device number 3 [ 182.877322][ T5333] netlink: 'syz.1.313': attribute type 2 has an invalid length. [ 186.090009][ T5350] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 4294967272. macoff=96 [ 186.360623][ T5358] ntfs3: loop4: try to read out of volume at offset 0x0 [ 187.198933][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 193.205832][ T5382] syz.4.327 (5382): drop_caches: 2 [ 194.154116][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.161868][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.559434][ T5402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.336'. [ 195.700505][ T5406] use of bytesused == 0 is deprecated and will be removed in the future, [ 195.709281][ T5406] use the actual size instead. [ 196.318751][ T4297] Bluetooth: hci2: command 0x0406 tx timeout [ 196.324979][ T4297] Bluetooth: hci1: command 0x0406 tx timeout [ 196.331141][ T4297] Bluetooth: hci0: command 0x0406 tx timeout [ 196.337261][ T4297] Bluetooth: hci4: command 0x0406 tx timeout [ 196.349021][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 198.313674][ T5418] Bluetooth: MGMT ver 1.22 [ 198.340999][ T5428] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 198.636178][ T5436] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 198.657713][ T5436] overlayfs: missing 'lowerdir' [ 202.149547][ T5452] ubi31: attaching mtd0 [ 202.154879][ T5452] ubi31: scanning is finished [ 202.521510][ T5452] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 204.428833][ T4325] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 204.449155][ T5146] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 204.636000][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.647898][ T5146] usb 1-1: Using ep0 maxpacket: 32 [ 204.655066][ T5146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.680252][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.696510][ T5146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.701145][ T4325] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.914050][ T4325] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.923422][ T5146] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 204.947242][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.968394][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.374502][ T5146] usb 1-1: config 0 descriptor?? [ 205.382589][ T5146] hub 1-1:0.0: USB hub found [ 205.393777][ T4325] usb 2-1: config 0 descriptor?? [ 205.835593][ T5478] ------------[ cut here ]------------ [ 205.841721][ T5478] WARNING: CPU: 0 PID: 5478 at include/linux/fs.h:503 hugetlb_split+0x234/0x2a0 [ 205.850983][ T5478] Modules linked in: [ 205.855063][ T5478] CPU: 0 PID: 5478 Comm: syz.1.357 Not tainted syzkaller #0 [ 205.862503][ T5478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.872780][ T5478] RIP: 0010:hugetlb_split+0x234/0x2a0 [ 205.878232][ T5478] Code: b4 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7d e8 98 98 b4 ff 0f 0b e9 65 fe ff ff e8 8c 98 b4 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 a4 28 20 8e 80 e1 07 80 c1 03 38 c1 [ 205.898087][ T5478] RSP: 0018:ffffc900040575c8 EFLAGS: 00010283 [ 205.904310][ T5478] RAX: ffffffff81cddcc4 RBX: 0000200000200000 RCX: 0000000000080000 [ 205.913236][ T5478] RDX: ffffc9000619a000 RSI: 0000000000001224 RDI: 0000000000001225 [ 205.922141][ T5478] RBP: 0000000000000000 R08: ffff88807dcab56f R09: 1ffff1100fb956ad [ 205.930476][ T5478] R10: dffffc0000000000 R11: ffffed100fb956ae R12: ffff888076b91730 [ 205.938499][ T5478] R13: dffffc0000000000 R14: ffff888076b916c0 R15: ffff88802fdae438 [ 205.946650][ T5478] FS: 00007fe8678046c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 205.955666][ T5478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.958533][ T4297] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 205.962410][ T5478] CR2: 000000110c2adb5f CR3: 0000000052207000 CR4: 00000000003506f0 [ 205.972394][ T4297] CPU: 1 PID: 4297 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 205.980191][ T5478] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 205.987641][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.995718][ T5478] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 206.005775][ T4297] Workqueue: hci0 hci_rx_work [ 206.005809][ T4297] Call Trace: [ 206.005839][ T4297] [ 206.013856][ T5478] Call Trace: [ 206.018468][ T4297] dump_stack_lvl+0x188/0x24e [ 206.021851][ T5478] [ 206.024705][ T4297] ? show_regs_print_info+0x12/0x12 [ 206.027995][ T5478] __vma_adjust+0x4a3/0x1cd0 [ 206.032674][ T4297] ? load_image+0x400/0x400 [ 206.032715][ T4297] sysfs_create_dir_ns+0x26a/0x290 [ 206.035670][ T5478] ? __shm_open+0x345/0x3b0 [ 206.040870][ T4297] ? sysfs_warn_dup+0xa0/0xa0 [ 206.040905][ T4297] ? do_raw_spin_unlock+0x11d/0x230 [ 206.045500][ T5478] ? validate_mm+0x2e0/0x2e0 [ 206.050010][ T4297] kobject_add_internal+0x61c/0xcc0 [ 206.050047][ T4297] kobject_add+0x160/0x230 [ 206.055166][ T5478] ? radix_tree_lookup+0x235/0x280 [ 206.059691][ T4297] ? kobject_init+0x1d0/0x1d0 [ 206.059726][ T4297] ? klist_children_get+0x50/0x50 [ 206.064425][ T5478] ? __shm_open+0x351/0x3b0 [ 206.069619][ T4297] ? get_device_parent+0x121/0x3f0 [ 206.069647][ T4297] device_add+0x483/0xfb0 [ 206.069670][ T4297] ? kmem_cache_free+0xf7/0x290 [ 206.074267][ T5478] ? hugetlb_unshare_pmds+0xf60/0xf60 [ 206.079481][ T4297] hci_conn_add_sysfs+0xd1/0x1e0 [ 206.079521][ T4297] le_conn_complete_evt+0x1062/0x1670 [ 206.083935][ T5478] __split_vma+0x3a7/0x500 [ 206.089065][ T4297] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 206.093792][ T5478] do_mas_align_munmap+0x7b9/0x12b0 [ 206.098815][ T4297] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 206.103390][ T5478] ? do_mas_munmap+0x2b0/0x2b0 [ 206.108486][ T4297] ? skb_pull_data+0xf7/0x200 [ 206.112958][ T5478] ? mtree_range_walk+0x672/0x7b0 [ 206.117690][ T4297] hci_le_conn_complete_evt+0x183/0x440 [ 206.123200][ T5478] ? mas_walk+0x15f/0x180 [ 206.128008][ T4297] ? hci_remote_host_features_evt+0x270/0x270 [ 206.133539][ T5478] ? mas_find+0x1e8/0x230 [ 206.137842][ T4297] hci_event_packet+0x7b9/0x1280 [ 206.144192][ T5478] do_mas_munmap+0x240/0x2b0 [ 206.149296][ T4297] ? bis_list+0x280/0x280 [ 206.154953][ T5478] mmap_region+0x6e0/0x1ca0 [ 206.159707][ T4297] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 206.159740][ T4297] ? kcov_remote_start+0x4c7/0x7e0 [ 206.164471][ T5478] ? file_mmap_ok+0x170/0x170 [ 206.169461][ T4297] ? netdev_warn+0x3e/0x16c [ 206.169498][ T4297] ? hci_send_to_monitor+0x9c/0x4a0 [ 206.175051][ T5478] ? validate_mm+0x23f/0x2e0 [ 206.179386][ T4297] hci_rx_work+0x3eb/0xd40 [ 206.179416][ T4297] ? _raw_spin_unlock+0x40/0x40 [ 206.185493][ T5478] ? arch_get_unmapped_area+0x660/0x660 [ 206.189835][ T4297] ? process_one_work+0x7b0/0x1160 [ 206.189882][ T4297] process_one_work+0x8a2/0x1160 [ 206.194900][ T5478] ? cap_mmap_addr+0x165/0x2e0 [ 206.199512][ T4297] ? worker_detach_from_pool+0x240/0x240 [ 206.203866][ T5478] ? shmem_get_unmapped_area+0x2dc/0x710 [ 206.208381][ T4297] ? _raw_spin_lock_irq+0xb7/0xf0 [ 206.214440][ T5478] do_mmap+0x964/0xfd0 [ 206.219383][ T4297] ? _raw_spin_lock_irqsave+0x100/0x100 [ 206.219413][ T4297] ? kthread_data+0x4b/0xc0 [ 206.224120][ T5478] ? mlock_future_check+0x100/0x100 [ 206.228645][ T4297] worker_thread+0xaa2/0x1270 [ 206.228735][ T4297] ? __kthread_parkme+0x162/0x1c0 [ 206.233887][ T5478] ? ima_file_free+0x3e0/0x3e0 [ 206.238491][ T4297] kthread+0x29d/0x330 [ 206.243048][ T5478] vm_mmap_pgoff+0x1c1/0x2d0 [ 206.247762][ T4297] ? worker_clr_flags+0x1a0/0x1a0 [ 206.253432][ T5478] ? account_locked_vm+0xe0/0xe0 [ 206.258416][ T4297] ? kthread_blkcg+0xd0/0xd0 [ 206.263463][ T5478] ? ksys_mmap_pgoff+0xe6/0x6f0 [ 206.268129][ T4297] ret_from_fork+0x1f/0x30 [ 206.273865][ T5478] ? lockdep_hardirqs_on+0x94/0x140 [ 206.279591][ T4297] [ 206.319818][ T4297] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 206.322963][ T5478] do_syscall_64+0x4c/0xa0 [ 206.323003][ T5478] ? clear_bhb_loop+0x60/0xb0 [ 206.328158][ T4297] Bluetooth: hci0: failed to register connection device [ 206.332677][ T5478] ? clear_bhb_loop+0x60/0xb0 [ 206.332713][ T5478] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.332743][ T5478] RIP: 0033:0x7fe86699cdd9 [ 206.405333][ T5478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.425042][ T5478] RSP: 002b:00007fe867804028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 206.433557][ T5478] RAX: ffffffffffffffda RBX: 00007fe866c15fa0 RCX: 00007fe86699cdd9 [ 206.441636][ T5478] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 206.449694][ T5478] RBP: 00007fe866a32d69 R08: ffffffffffffffff R09: 00000000ec776000 [ 206.457708][ T5478] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000000 [ 206.465851][ T5478] R13: 00007fe866c16038 R14: 00007fe866c15fa0 R15: 00007ffc22cada18 [ 206.474020][ T5478] [ 206.477085][ T5478] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 206.484400][ T5478] CPU: 0 PID: 5478 Comm: syz.1.357 Not tainted syzkaller #0 [ 206.491714][ T5478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 206.501880][ T5478] Call Trace: [ 206.505186][ T5478] [ 206.508139][ T5478] dump_stack_lvl+0x188/0x24e [ 206.512872][ T5478] ? memcpy+0x3c/0x60 [ 206.516878][ T5478] ? show_regs_print_info+0x12/0x12 [ 206.522113][ T5478] ? load_image+0x400/0x400 [ 206.526662][ T5478] panic+0x2e5/0x730 [ 206.530608][ T5478] ? bpf_jit_dump+0xd0/0xd0 [ 206.535159][ T5478] __warn+0x2f8/0x4f0 [ 206.539176][ T5478] ? hugetlb_split+0x234/0x2a0 [ 206.543966][ T5478] ? hugetlb_split+0x234/0x2a0 [ 206.548752][ T5478] report_bug+0x2ba/0x4f0 [ 206.553115][ T5478] ? hugetlb_split+0x234/0x2a0 [ 206.557938][ T5478] handle_bug+0x3a/0x70 [ 206.562140][ T5478] exc_invalid_op+0x16/0x40 [ 206.566672][ T5478] asm_exc_invalid_op+0x16/0x20 [ 206.571549][ T5478] RIP: 0010:hugetlb_split+0x234/0x2a0 [ 206.576954][ T5478] Code: b4 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7d e8 98 98 b4 ff 0f 0b e9 65 fe ff ff e8 8c 98 b4 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 a4 28 20 8e 80 e1 07 80 c1 03 38 c1 [ 206.596588][ T5478] RSP: 0018:ffffc900040575c8 EFLAGS: 00010283 [ 206.602689][ T5478] RAX: ffffffff81cddcc4 RBX: 0000200000200000 RCX: 0000000000080000 [ 206.610693][ T5478] RDX: ffffc9000619a000 RSI: 0000000000001224 RDI: 0000000000001225 [ 206.618742][ T5478] RBP: 0000000000000000 R08: ffff88807dcab56f R09: 1ffff1100fb956ad [ 206.626740][ T5478] R10: dffffc0000000000 R11: ffffed100fb956ae R12: ffff888076b91730 [ 206.634824][ T5478] R13: dffffc0000000000 R14: ffff888076b916c0 R15: ffff88802fdae438 [ 206.642831][ T5478] ? hugetlb_split+0x234/0x2a0 [ 206.647638][ T5478] ? hugetlb_split+0x234/0x2a0 [ 206.652436][ T5478] __vma_adjust+0x4a3/0x1cd0 [ 206.657068][ T5478] ? __shm_open+0x345/0x3b0 [ 206.661600][ T5478] ? validate_mm+0x2e0/0x2e0 [ 206.666220][ T5478] ? radix_tree_lookup+0x235/0x280 [ 206.671375][ T5478] ? __shm_open+0x351/0x3b0 [ 206.675898][ T5478] ? hugetlb_unshare_pmds+0xf60/0xf60 [ 206.681296][ T5478] __split_vma+0x3a7/0x500 [ 206.685749][ T5478] do_mas_align_munmap+0x7b9/0x12b0 [ 206.691075][ T5478] ? do_mas_munmap+0x2b0/0x2b0 [ 206.695890][ T5478] ? mtree_range_walk+0x672/0x7b0 [ 206.700972][ T5478] ? mas_walk+0x15f/0x180 [ 206.705355][ T5478] ? mas_find+0x1e8/0x230 [ 206.709739][ T5478] do_mas_munmap+0x240/0x2b0 [ 206.714370][ T5478] mmap_region+0x6e0/0x1ca0 [ 206.718915][ T5478] ? file_mmap_ok+0x170/0x170 [ 206.723649][ T5478] ? validate_mm+0x23f/0x2e0 [ 206.728272][ T5478] ? arch_get_unmapped_area+0x660/0x660 [ 206.733841][ T5478] ? cap_mmap_addr+0x165/0x2e0 [ 206.738632][ T5478] ? shmem_get_unmapped_area+0x2dc/0x710 [ 206.744309][ T5478] do_mmap+0x964/0xfd0 [ 206.748452][ T5478] ? mlock_future_check+0x100/0x100 [ 206.753691][ T5478] ? ima_file_free+0x3e0/0x3e0 [ 206.758505][ T5478] vm_mmap_pgoff+0x1c1/0x2d0 [ 206.763195][ T5478] ? account_locked_vm+0xe0/0xe0 [ 206.768194][ T5478] ? ksys_mmap_pgoff+0xe6/0x6f0 [ 206.773090][ T5478] ? lockdep_hardirqs_on+0x94/0x140 [ 206.778342][ T5478] do_syscall_64+0x4c/0xa0 [ 206.782804][ T5478] ? clear_bhb_loop+0x60/0xb0 [ 206.787513][ T5478] ? clear_bhb_loop+0x60/0xb0 [ 206.792228][ T5478] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.798166][ T5478] RIP: 0033:0x7fe86699cdd9 [ 206.802615][ T5478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.822248][ T5478] RSP: 002b:00007fe867804028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 206.830695][ T5478] RAX: ffffffffffffffda RBX: 00007fe866c15fa0 RCX: 00007fe86699cdd9 [ 206.838691][ T5478] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 206.846690][ T5478] RBP: 00007fe866a32d69 R08: ffffffffffffffff R09: 00000000ec776000 [ 206.854693][ T5478] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000000 [ 206.862685][ T5478] R13: 00007fe866c16038 R14: 00007fe866c15fa0 R15: 00007ffc22cada18 [ 206.870696][ T5478] [ 206.874318][ T5478] Kernel Offset: disabled [ 206.878785][ T5478] Rebooting in 86400 seconds..