last executing test programs: 28.523763574s ago: executing program 1 (id=233): creat(0x0, 0xe5) syz_open_dev$video4linux(0x0, 0x106, 0x40440) r0 = syz_io_uring_setup(0x80001e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x2000}, &(0x7f0000002000)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48ed, 0x0, 0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bff000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) 26.711253137s ago: executing program 1 (id=236): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'ipvlan0\x00', {0x2, 0x0, @private}}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0xffffffffffffff7f, 0x5b81, 0xc0, 0x2, 0x9, 0x9, 0x0, 0x0, 0x101}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r7 = dup(r6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r7, {0xfffffffffffffffe}}, './file0\x00'}) ioctl$BLKRRPART(r7, 0x125f, 0x0) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) 25.161644247s ago: executing program 1 (id=238): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'ipvlan0\x00', {0x2, 0x0, @private}}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0xffffffffffffff7f, 0x5b81, 0xc0, 0x2, 0x9, 0x9, 0x0, 0x0, 0x101}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) dup(r6) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) 22.013739273s ago: executing program 1 (id=241): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ee}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000010300)={&(0x7f00000102c0)='kvm_fpu\x00', r1, 0x0, 0x1}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r3, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x20, 0x2, "08000000f28f00"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r4) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x42400) 19.950207687s ago: executing program 4 (id=245): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x50) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000200)='./file0\x00', 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) 19.7997895s ago: executing program 0 (id=246): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34a7bf6a5102ae", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff0100000000000000000000000000010500030007000000090002"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4000) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000006800e978feffffffffdbdf250a0000000000000008000500", @ANYRES32=r9, @ANYBLOB="dec43c3f5bf547e73965fcb3291c9cd0cbe524b24d139c47c40ab04771664e69f845a63b838bb1b2a968987f666a53119e96f9e9eb757f9d26db3e44934b75c2ae6ea62b884de5c65b107d30ce6981c2489860f1dc26fc188c48b7a1b53083f5b6840022618e60f9d7b041b880f878e9932a0b004e2b69824a78a696fb3b3d3f51986983cad54fc1fabe806098e69cf65960d031b3e19520c6f11902719ae57ffa28999f4fdd1dd608"], 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x192}}, 0x20}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x800008, 0x0) 19.325595909s ago: executing program 4 (id=248): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'ipvlan0\x00', {0x2, 0x0, @private}}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0xffffffffffffff7f, 0x5b81, 0xc0, 0x2, 0x9, 0x9, 0x0, 0x0, 0x101}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r7 = dup(r6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r7, {0xfffffffffffffffe}}, './file0\x00'}) ioctl$BLKRRPART(r7, 0x125f, 0x0) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) 17.143197124s ago: executing program 4 (id=251): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'ipvlan0\x00', {0x2, 0x0, @private}}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0xffffffffffffff7f, 0x5b81, 0xc0, 0x2, 0x9, 0x9, 0x0, 0x0, 0x101}) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) 16.874245607s ago: executing program 2 (id=252): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) setpriority(0x2, 0x0, 0x7) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x10, 0x140d, 0xe3263c25d365e57d, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 14.691968381s ago: executing program 1 (id=253): r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x30000014}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xa080, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() fcntl$setsig(0xffffffffffffffff, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x0) 13.657039258s ago: executing program 0 (id=255): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x6) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) socket$netlink(0x10, 0x3, 0x4) 13.578318825s ago: executing program 4 (id=257): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="000004000000acfb0955", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r5, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003200)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x40c4) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000000701010000000000000000030000040c000640"], 0x38}, 0x1, 0x0, 0x0, 0x2004c810}, 0x804) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000140)={'geneve1\x00', 0x400}) 12.306070322s ago: executing program 0 (id=258): ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10021, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000050f68436ba123bb8eaa2b24f442cb30be009c8ed63f51820817a2c92322bfd1b9a780f3ab7ef03eeab27a4eaa9690a02ae2bab4a7f672b7cf896e6ba4298d8a8630f69cc", 0x49}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) 12.305271572s ago: executing program 2 (id=259): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) 12.032692205s ago: executing program 0 (id=261): socket(0x2, 0x3, 0x67) socket(0x11, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x4) pipe2(&(0x7f0000000080), 0x80800) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usbip_server_init(0x3) r1 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x6, 0x25d}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x22, 0x2000, @fd_index, 0x0, 0x7fffffff, 0x9, 0xa, 0x1, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 11.107546473s ago: executing program 3 (id=262): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000035327ae308fa", @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) accept4(r1, &(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f0000000540)=0x80, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11.03237751s ago: executing program 3 (id=263): syz_io_uring_setup(0x9ee, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r1 = socket$kcm(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000380)={0x6, 0x8000, 0x1, 0xd, 0xfffffffe, 0xfdfffffa}) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) pidfd_send_signal(r3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000022c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x41000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x40010) sendmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) 10.205297759s ago: executing program 0 (id=264): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f00000003c0), 0x1003) socketpair$unix(0x1, 0x5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), 0x800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f00004ad000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000057a000/0x3000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f00005fa000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f00004db000/0x3000)=nil, 0x0}, 0x68) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x4, 0x3, 0x2, 0x5, 0xcc9, 0xf, 0x7, 0x5, 0x2000000, 0xefb, 0x1, 0x6, 0x1, 0x6, 0x101, 0x1000, 0x1a449, 0x3, 0x40000007, 0x9d, 0xcaa7, 0x4, 0x20001e58, 0x4, 0xe69, 0x3c, 0x8, 0x5, 0x0, 0xfffffff8]}) sendmsg$NFT_BATCH(r3, 0x0, 0x0) 9.081022394s ago: executing program 0 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34a7bf6a5102ae", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff0100000000000000000000000000010500030007000000090002"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4000) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000006800e978feffffffffdbdf250a0000000000000008000500", @ANYRES32=r9, @ANYBLOB="dec43c3f5bf547e73965fcb3291c9cd0cbe524b24d139c47c40ab04771664e69f845a63b838bb1b2a968987f666a53119e96f9e9eb757f9d26db3e44934b75c2ae6ea62b884de5c65b107d30ce6981c2489860f1dc26fc188c48b7a1b53083f5b6840022618e60f9d7b041b880f878e9932a0b004e2b69824a78a696fb3b3d3f51986983cad54fc1fabe806098e69cf65960d031b3e19520c6f11902719ae57ffa28999f4fdd1dd608"], 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x192}}, 0x20}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x800008, 0x0) 8.959353965s ago: executing program 2 (id=266): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 8.958132895s ago: executing program 3 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 8.42150505s ago: executing program 2 (id=268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r6, 0x0, 0x0, 0x4100, 0x0, 0x0) 8.369900164s ago: executing program 4 (id=269): epoll_create1(0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000080)=0x1, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0xb00, 0x0) r2 = syz_io_uring_setup(0x5169, 0x0, 0x0, 0x0) syz_io_uring_setup(0xa94, &(0x7f00000005c0), 0x0, &(0x7f0000000140)) io_uring_enter(r2, 0x48e9, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1000, 0x10, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001b00)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4044088) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 7.183659094s ago: executing program 2 (id=270): r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8000, 0x0, &(0x7f0000795000/0x8000)=nil) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) r5 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x183002) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000080)={0x2, 0x0, 0x5, 0x3, 0xfffffffc}) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'vxcan1\x00', 0x2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 7.183237614s ago: executing program 3 (id=271): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x6) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) write(0xffffffffffffffff, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) 5.801985991s ago: executing program 3 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}, {0x3, 0xfffb, 0xc00}], 0x2, 0x0) unshare(0x2c040000) 3.986205764s ago: executing program 1 (id=273): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) setpriority(0x2, 0x0, 0x7) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x10, 0x140d, 0xe3263c25d365e57d, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1.811384467s ago: executing program 4 (id=274): socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f00000000c0), 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x0, &(0x7f0000000200)}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) fchdir(r6) open(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) dup(0xffffffffffffffff) 1.629571443s ago: executing program 2 (id=275): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'ipvlan0\x00', {0x2, 0x0, @private}}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0xffffffffffffff7f, 0x5b81, 0xc0, 0x2, 0x9, 0x9, 0x0, 0x0, 0x101}) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) 0s ago: executing program 3 (id=276): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x4, 0x3, 0x2, 0x5, 0xcc9, 0xf, 0x7, 0x5, 0x2000000, 0xefb, 0x1, 0x6, 0x1, 0x6, 0x101, 0x1000, 0x1a449, 0x3, 0x40000007, 0x9d, 0xcaa7, 0x4, 0x20001e58, 0x4, 0xe69, 0x3c, 0x8, 0x5, 0x0, 0xfffffff8]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. [ 75.245056][ T4254] cgroup: Unknown subsys name 'net' [ 75.357063][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.937829][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 78.426461][ T4269] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.436368][ T4269] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.449352][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.459250][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.468606][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.478597][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.487657][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.495817][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.506075][ T4276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.507207][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.516286][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.526438][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.531787][ T4276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.538665][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.554215][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.556121][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.562693][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.572392][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.577089][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.584988][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.594917][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.610041][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.619109][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.628296][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.629974][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.636906][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.651956][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.662082][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.670516][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.678854][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.187329][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 79.203735][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 79.314695][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 79.368093][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 79.413442][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 79.448677][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.457706][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.467339][ T4271] device bridge_slave_0 entered promiscuous mode [ 79.496778][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.504812][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.513883][ T4264] device bridge_slave_0 entered promiscuous mode [ 79.523239][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.530977][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.539458][ T4264] device bridge_slave_1 entered promiscuous mode [ 79.557868][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.565397][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.574118][ T4271] device bridge_slave_1 entered promiscuous mode [ 79.642451][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.650374][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.658945][ T4273] device bridge_slave_0 entered promiscuous mode [ 79.686264][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.699548][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.710919][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.718348][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.727048][ T4273] device bridge_slave_1 entered promiscuous mode [ 79.737160][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.776519][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.847766][ T4271] team0: Port device team_slave_0 added [ 79.856639][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.875061][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.882732][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.891421][ T4265] device bridge_slave_0 entered promiscuous mode [ 79.910339][ T4271] team0: Port device team_slave_1 added [ 79.916793][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.924711][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.934590][ T4277] device bridge_slave_0 entered promiscuous mode [ 79.944991][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.958354][ T4264] team0: Port device team_slave_0 added [ 79.965355][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.973221][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.982214][ T4265] device bridge_slave_1 entered promiscuous mode [ 79.998843][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.006883][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.016304][ T4277] device bridge_slave_1 entered promiscuous mode [ 80.041369][ T4264] team0: Port device team_slave_1 added [ 80.050238][ T4273] team0: Port device team_slave_0 added [ 80.097496][ T4273] team0: Port device team_slave_1 added [ 80.115442][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.123467][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.152371][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.192706][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.202796][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.210544][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.239082][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.253020][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.263285][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.271078][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.298169][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.320764][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.336098][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.349669][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.358605][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.388771][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.402511][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.410171][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.438212][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.485953][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.494952][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.522490][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.566392][ T4277] team0: Port device team_slave_0 added [ 80.579419][ T4265] team0: Port device team_slave_0 added [ 80.589324][ T4271] device hsr_slave_0 entered promiscuous mode [ 80.597475][ T4271] device hsr_slave_1 entered promiscuous mode [ 80.617021][ T4277] team0: Port device team_slave_1 added [ 80.636078][ T4265] team0: Port device team_slave_1 added [ 80.660737][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 80.690654][ T4264] device hsr_slave_0 entered promiscuous mode [ 80.698389][ T4264] device hsr_slave_1 entered promiscuous mode [ 80.706341][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.717932][ T4264] Cannot create hsr debugfs directory [ 80.724661][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.732059][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.740731][ T4269] Bluetooth: hci3: command 0x0409 tx timeout [ 80.764997][ T4274] Bluetooth: hci2: command 0x0409 tx timeout [ 80.765201][ T4274] Bluetooth: hci4: command 0x0409 tx timeout [ 80.771968][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 80.779358][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.826561][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.833971][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.861455][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.883457][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.891346][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.919520][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.944618][ T4273] device hsr_slave_0 entered promiscuous mode [ 80.952117][ T4273] device hsr_slave_1 entered promiscuous mode [ 80.959087][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.967773][ T4273] Cannot create hsr debugfs directory [ 80.974529][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.982079][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.009223][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.153199][ T4277] device hsr_slave_0 entered promiscuous mode [ 81.161562][ T4277] device hsr_slave_1 entered promiscuous mode [ 81.168871][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.177808][ T4277] Cannot create hsr debugfs directory [ 81.233338][ T4265] device hsr_slave_0 entered promiscuous mode [ 81.240970][ T4265] device hsr_slave_1 entered promiscuous mode [ 81.248090][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.256427][ T4265] Cannot create hsr debugfs directory [ 81.508071][ T4271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.524878][ T4271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.557775][ T4271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.569673][ T4271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.599125][ T4264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.615985][ T4264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.645153][ T4264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.656103][ T4264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.728309][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.758204][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.781134][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.791949][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.876071][ T4265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.888884][ T4265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.912350][ T4265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.943456][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.954262][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.971347][ T4265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.018554][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.029036][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.039794][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.048864][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.062467][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.084730][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.107697][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.123579][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.134053][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.141812][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.152847][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.162950][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.171859][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.179253][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.205715][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.220280][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.233517][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.245658][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.255353][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.263182][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.273636][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.283621][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.294352][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.302101][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.311321][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.320925][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.344272][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.358603][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.371641][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.396639][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.407346][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.419173][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.430083][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.441266][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.456716][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.475952][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.491457][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.503329][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.514208][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.524001][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.535010][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.545329][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.555425][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.566982][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.588725][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.601814][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.622395][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.632937][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.663384][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.674519][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.686407][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.697346][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.707270][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.722375][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.740392][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 82.798799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.811641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.820133][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 82.820862][ T4269] Bluetooth: hci2: command 0x041b tx timeout [ 82.826713][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 82.834552][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 82.857996][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.911702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.923640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.934092][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.945445][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.956160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.996253][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.017455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.033262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.046440][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.054907][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.071481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.115128][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.131983][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.152825][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.181499][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.201142][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.226969][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.261546][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.298626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.309662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.320058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.328327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.338001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.351359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.360914][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.368915][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.377636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.398778][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.409342][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.425433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.439011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.450410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.461277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.474589][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.491928][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.501783][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.512266][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.520240][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.528955][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.553215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.564026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.588251][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.627515][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.636266][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.647999][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.658829][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.677091][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.686315][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.703876][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.743029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.756049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.767544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.780317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.793192][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.801455][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.810081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.820375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.831731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.859365][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.871294][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.882761][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.890456][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.905256][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.917447][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.953184][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.967882][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.992184][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.008943][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.027355][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.038309][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.053396][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.065185][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.074612][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.085428][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.095505][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.139505][ T4264] device veth0_vlan entered promiscuous mode [ 84.149729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.167855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.178448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.191983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.203010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.214283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.233844][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.248976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.275524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.291494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.327118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.346961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.396306][ T4271] device veth0_vlan entered promiscuous mode [ 84.407920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.431618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.454654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.480663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.491103][ T4264] device veth1_vlan entered promiscuous mode [ 84.512252][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.535900][ T4271] device veth1_vlan entered promiscuous mode [ 84.608464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.623150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.636801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.649727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.699237][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.715729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.726676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.744146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.758416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.768414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.788913][ T4271] device veth0_macvtap entered promiscuous mode [ 84.799713][ T4264] device veth0_macvtap entered promiscuous mode [ 84.816470][ T4273] device veth0_vlan entered promiscuous mode [ 84.823171][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 84.825419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.842233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.852051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.862017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.869815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.878390][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.891624][ T4271] device veth1_macvtap entered promiscuous mode [ 84.901433][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 84.907507][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 84.909406][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 84.915922][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 84.941534][ T4264] device veth1_macvtap entered promiscuous mode [ 84.965435][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.996464][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.011414][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.025181][ T4264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.035838][ T4264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.046973][ T4264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.056176][ T4264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.070646][ T4273] device veth1_vlan entered promiscuous mode [ 85.095038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.104528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.113567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.122718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.143654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.153675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.163664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.173382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.182028][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.189716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.201321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.218157][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.237700][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.255827][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.314714][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.329002][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.344505][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.364286][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.381286][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.397595][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.409317][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.430980][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.449209][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.469643][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.514596][ T4265] device veth0_vlan entered promiscuous mode [ 85.538728][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.553259][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.567204][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.605813][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.624452][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.639413][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.657702][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.744227][ T4265] device veth1_vlan entered promiscuous mode [ 85.776566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.793589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.832177][ T4273] device veth0_macvtap entered promiscuous mode [ 85.915952][ T4273] device veth1_macvtap entered promiscuous mode [ 85.961364][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.963478][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.977381][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.983101][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.002789][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.011938][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.022399][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.041482][ T4265] device veth0_macvtap entered promiscuous mode [ 86.069788][ T4265] device veth1_macvtap entered promiscuous mode [ 86.116473][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.132550][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.144011][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.155093][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.168577][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.190227][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.209133][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.219772][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.233470][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.249100][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.268636][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.288590][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.306675][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.317594][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.338565][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.352785][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.385480][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.397789][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.407459][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.419440][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.431213][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.442286][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.454845][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.463244][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.475020][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.485547][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.497136][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.508395][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.519810][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.532885][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.551652][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.560048][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.568227][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.580123][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.589524][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.601959][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.612294][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.624713][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.635043][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.646035][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.655518][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.671669][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.682295][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.692427][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.701748][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.773312][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.788580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.807444][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.816197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.890880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.900630][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 86.957034][ T4277] device veth0_vlan entered promiscuous mode [ 86.973158][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.987835][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.990622][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 86.996578][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 87.002518][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 87.002568][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 87.037645][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.039783][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.056521][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.087284][ T4277] device veth1_vlan entered promiscuous mode [ 87.107929][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.142031][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.169043][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.188386][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.197547][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.221889][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.231722][ T4377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 87.272774][ T4379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 87.309824][ T4379] device gretap1 entered promiscuous mode [ 87.355313][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.451622][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.462874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.477879][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.487113][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.503226][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.521146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.555886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.569639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.592729][ T4277] device veth0_macvtap entered promiscuous mode [ 87.613863][ T4277] device veth1_macvtap entered promiscuous mode [ 88.101341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.109808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.118578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 88.127262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 88.135666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.144300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.152901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.161514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.170184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.178624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 89.108759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.124113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.353831][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.371871][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.383683][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.198959][ T4383] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 90.217084][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.311737][ T4401] comedi comedi0: Minor 3 could not be opened [ 90.318561][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.353963][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.365375][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.376487][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.388089][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.399588][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.427216][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.442588][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.458054][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.489724][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.508880][ T4403] tipc: Started in network mode [ 90.515977][ T4403] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 90.526441][ T4403] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 90.542725][ T4403] tipc: Enabled bearer , priority 10 [ 90.567138][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.583819][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.638934][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.678943][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.693418][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.733654][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.756432][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.777962][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.805975][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.863883][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.881961][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.897377][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.909597][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.005982][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.006770][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.705687][ T4323] tipc: Node number set to 1 [ 91.904492][ T4418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'. [ 92.114770][ T4363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.134788][ T4363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.182125][ T27] cfg80211: failed to load regulatory.db [ 92.282935][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.311058][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.356417][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.398127][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.770959][ T4437] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.794580][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.001017][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 94.076116][ T7] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 94.107023][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 94.139993][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.174837][ T7] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.231854][ T7] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.276730][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.460895][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.792457][ T7] usb 5-1: GET_CAPABILITIES returned 0 [ 94.831498][ T7] usbtmc 5-1:16.0: can't read capabilities [ 95.149547][ T7] usb 5-1: USB disconnect, device number 2 [ 95.176414][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.276394][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.210626][ T4469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23'. [ 97.819164][ T4465] process 'syz.2.25' launched './file0' with NULL argv: empty string added [ 98.900696][ T2120] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.110078][ T2120] usb 2-1: Using ep0 maxpacket: 32 [ 99.125220][ T2120] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 99.331596][ T4431] Bluetooth: hci5: Frame reassembly failed (-84) [ 99.353861][ T2120] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 99.929011][ T2120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.236390][ T2120] usb 2-1: Product: syz [ 100.240966][ T2120] usb 2-1: Manufacturer: syz [ 100.246067][ T2120] usb 2-1: SerialNumber: syz [ 100.336059][ T2120] usb 2-1: config 0 descriptor?? [ 100.348144][ T4472] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 101.106882][ T4308] usb 2-1: USB disconnect, device number 2 [ 101.300327][ T4281] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 103.135555][ T4308] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.665155][ T4527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.38'. [ 104.293761][ T4308] usb 4-1: Using ep0 maxpacket: 32 [ 104.363107][ T4308] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.434691][ T4308] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 104.480199][ T4308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.542238][ T4308] usb 4-1: Product: syz [ 104.615197][ T4308] usb 4-1: Manufacturer: syz [ 104.630068][ T4308] usb 4-1: SerialNumber: syz [ 104.653783][ T4308] usb 4-1: config 0 descriptor?? [ 105.689988][ T4308] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 106.676914][ T4550] fuse: Bad value for 'group_id' [ 106.710229][ T4308] usb 4-1: USB disconnect, device number 2 [ 107.183469][ T4565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.51'. [ 107.421702][ T4565] device hsr_slave_0 left promiscuous mode [ 108.078111][ T4565] device hsr_slave_1 left promiscuous mode [ 109.325242][ T4581] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.52'. [ 109.670120][ T4316] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.351948][ T4316] usb 1-1: device descriptor read/64, error -71 [ 110.779557][ T4316] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.449773][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.005486][ T4621] sctp: failed to load transform for md5: -2 [ 118.839141][ T4722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.82'. [ 123.889686][ T4753] fuse: Unknown parameter 'use' [ 124.170052][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.375988][ T22] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 124.410194][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.429737][ T22] usb 1-1: Product: syz [ 124.440543][ T22] usb 1-1: Manufacturer: syz [ 124.445675][ T22] usb 1-1: SerialNumber: syz [ 124.490747][ T22] usb 1-1: config 0 descriptor?? [ 125.081430][ T22] usb 1-1: USB disconnect, device number 4 [ 125.832663][ T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.424077][ T4773] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 126.850055][ T22] usb 1-1: device not accepting address 5, error -71 [ 127.782013][ T4789] Zero length message leads to an empty skb [ 128.235016][ T4795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.100'. [ 128.876775][ T4501] udevd[4501]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.013197][ T4793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.046756][ T4793] device batadv_slave_0 entered promiscuous mode [ 133.144200][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.151560][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.866786][ T4842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.112'. [ 135.986988][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 136.004483][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.015135][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.027433][ T4856] device bridge_slave_0 left promiscuous mode [ 136.038306][ T4856] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.144131][ T4856] device bridge_slave_1 left promiscuous mode [ 136.206629][ T4856] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.102437][ T4856] bond0: (slave bond_slave_0): Releasing backup interface [ 137.649980][ T4856] bond0: (slave bond_slave_1): Releasing backup interface [ 137.783810][ T4856] team0: Port device team_slave_0 removed [ 137.853332][ T4856] team0: Port device team_slave_1 removed [ 137.860486][ T4856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.868401][ T4856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.886751][ T4856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.090313][ T4856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.551923][ T4867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.123'. [ 138.570245][ T4867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.123'. [ 139.151457][ T4884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.127'. [ 142.308963][ T4918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.353443][ T4918] device batadv_slave_0 entered promiscuous mode [ 143.244770][ T4941] syz.0.146 uses obsolete (PF_INET,SOCK_PACKET) [ 143.588687][ T4945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.144'. [ 144.485331][ T4281] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 144.495815][ T4281] CPU: 1 PID: 4281 Comm: kworker/u5:8 Not tainted 6.1.148-syzkaller #0 [ 144.504695][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.515732][ T4281] Workqueue: hci1 hci_rx_work [ 144.520611][ T4281] Call Trace: [ 144.524026][ T4281] [ 144.527187][ T4281] dump_stack_lvl+0x168/0x22e [ 144.532069][ T4281] ? show_regs_print_info+0x12/0x12 [ 144.537470][ T4281] ? load_image+0x3b0/0x3b0 [ 144.542031][ T4281] sysfs_create_dir_ns+0x252/0x280 [ 144.547277][ T4281] ? hci_rx_work+0x3eb/0xd40 [ 144.552090][ T4281] ? sysfs_warn_dup+0xa0/0xa0 [ 144.556923][ T4281] ? do_raw_spin_unlock+0x11d/0x230 [ 144.562465][ T4281] kobject_add_internal+0x6b8/0xc80 [ 144.568064][ T4281] kobject_add+0x152/0x210 [ 144.573913][ T4281] ? kobject_init+0x1d0/0x1d0 [ 144.578823][ T4281] ? klist_children_get+0x50/0x50 [ 144.584500][ T4281] ? get_device_parent+0x121/0x3f0 [ 144.589747][ T4281] device_add+0x483/0xfb0 [ 144.594493][ T4281] ? kmem_cache_free+0xf7/0x290 [ 144.599840][ T4281] hci_conn_add_sysfs+0xd1/0x1e0 [ 144.605276][ T4281] le_conn_complete_evt+0xd1d/0x1320 [ 144.610970][ T4281] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 144.617741][ T4281] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 144.623856][ T4281] ? skb_pull_data+0xf7/0x200 [ 144.628761][ T4281] hci_le_conn_complete_evt+0x183/0x440 [ 144.634630][ T4281] ? hci_remote_host_features_evt+0x270/0x270 [ 144.640911][ T4281] hci_event_packet+0x791/0x1210 [ 144.646247][ T4281] ? bis_list+0x280/0x280 [ 144.650783][ T4281] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 144.656835][ T4281] ? kcov_remote_start+0x4c7/0x7e0 [ 144.662161][ T4281] ? mt_dump_node+0xbd0/0x1930 [ 144.667099][ T4281] ? hci_send_to_monitor+0x9c/0x4a0 [ 144.672872][ T4281] hci_rx_work+0x3eb/0xd40 [ 144.677350][ T4281] ? _raw_spin_unlock+0x40/0x40 [ 144.683256][ T4281] ? process_one_work+0x7a1/0x1160 [ 144.688667][ T4281] process_one_work+0x898/0x1160 [ 144.694015][ T4281] ? worker_detach_from_pool+0x240/0x240 [ 144.701013][ T4281] ? _raw_spin_lock_irq+0xab/0xe0 [ 144.706617][ T4281] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 144.712465][ T4281] ? kthread_data+0x4b/0xc0 [ 144.717527][ T4281] worker_thread+0xaa2/0x1250 [ 144.722543][ T4281] ? __kthread_parkme+0x162/0x1c0 [ 144.728268][ T4281] kthread+0x29d/0x330 [ 144.732467][ T4281] ? worker_clr_flags+0x1a0/0x1a0 [ 144.737631][ T4281] ? kthread_blkcg+0xd0/0xd0 [ 144.742464][ T4281] ret_from_fork+0x1f/0x30 [ 144.747115][ T4281] [ 144.756897][ T4281] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 144.772187][ T4281] Bluetooth: hci1: failed to register connection device [ 146.523044][ T4983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.158'. [ 146.820105][ T4281] Bluetooth: hci1: command 0x2016 tx timeout [ 147.321177][ T4995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.161'. [ 147.861836][ T4281] Bluetooth: hci4: command 0x0405 tx timeout [ 150.457488][ T4968] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 150.516999][ T4968] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 150.685949][ T4968] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 150.874256][ T4968] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 150.879427][ T4997] Bluetooth: MGMT ver 1.22 [ 150.896159][ T4968] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 150.916597][ T4968] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 150.973314][ T4968] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 150.984114][ T4968] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 151.172489][ T4968] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 151.324749][ T4968] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 151.340133][ T4968] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 151.367261][ T4968] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 151.449037][ T4968] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 151.479009][ T4968] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 151.496057][ T4968] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 151.582561][ T4281] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 151.592986][ T4281] CPU: 1 PID: 4281 Comm: kworker/u5:8 Not tainted 6.1.148-syzkaller #0 [ 151.601994][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.612902][ T4281] Workqueue: hci4 hci_rx_work [ 151.617891][ T4281] Call Trace: [ 151.621382][ T4281] [ 151.624740][ T4281] dump_stack_lvl+0x168/0x22e [ 151.629722][ T4281] ? show_regs_print_info+0x12/0x12 [ 151.634958][ T4281] ? load_image+0x3b0/0x3b0 [ 151.639889][ T4281] sysfs_create_dir_ns+0x252/0x280 [ 151.645556][ T4281] ? hci_rx_work+0x3eb/0xd40 [ 151.650291][ T4281] ? sysfs_warn_dup+0xa0/0xa0 [ 151.655124][ T4281] ? do_raw_spin_unlock+0x11d/0x230 [ 151.660503][ T4281] kobject_add_internal+0x6b8/0xc80 [ 151.666285][ T4281] kobject_add+0x152/0x210 [ 151.671111][ T4281] ? kobject_init+0x1d0/0x1d0 [ 151.676654][ T4281] ? klist_children_get+0x50/0x50 [ 151.682026][ T4281] ? get_device_parent+0x121/0x3f0 [ 151.687191][ T4281] device_add+0x483/0xfb0 [ 151.691990][ T4281] ? kmem_cache_free+0xf7/0x290 [ 151.697078][ T4281] hci_conn_add_sysfs+0xd1/0x1e0 [ 151.702854][ T4281] le_conn_complete_evt+0xd1d/0x1320 [ 151.708832][ T4281] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 151.715964][ T4281] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 151.721997][ T4281] ? skb_pull_data+0xf7/0x200 [ 151.726988][ T4281] hci_le_conn_complete_evt+0x183/0x440 [ 151.732937][ T4281] ? hci_remote_host_features_evt+0x270/0x270 [ 151.739557][ T4281] hci_event_packet+0x791/0x1210 [ 151.744697][ T4281] ? bis_list+0x280/0x280 [ 151.749163][ T4281] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 151.755987][ T4281] ? kcov_remote_start+0x4c7/0x7e0 [ 151.763459][ T4281] ? mt_dump_node+0xbd0/0x1930 [ 151.768646][ T4281] ? hci_send_to_monitor+0x9c/0x4a0 [ 151.774315][ T4281] hci_rx_work+0x3eb/0xd40 [ 151.779009][ T4281] ? _raw_spin_unlock+0x40/0x40 [ 151.784429][ T4281] ? process_one_work+0x7a1/0x1160 [ 151.790209][ T4281] process_one_work+0x898/0x1160 [ 151.795575][ T4281] ? worker_detach_from_pool+0x240/0x240 [ 151.801807][ T4281] ? _raw_spin_lock_irq+0xab/0xe0 [ 151.807144][ T4281] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 151.812986][ T4281] ? kthread_data+0x4b/0xc0 [ 151.817608][ T4281] worker_thread+0xaa2/0x1250 [ 151.822591][ T4281] ? __kthread_parkme+0x162/0x1c0 [ 151.827996][ T4281] kthread+0x29d/0x330 [ 151.832179][ T4281] ? worker_clr_flags+0x1a0/0x1a0 [ 151.837550][ T4281] ? kthread_blkcg+0xd0/0xd0 [ 151.842263][ T4281] ret_from_fork+0x1f/0x30 [ 151.846907][ T4281] [ 151.859471][ T4281] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 151.873869][ T4281] Bluetooth: hci4: failed to register connection device [ 152.500482][ T4281] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.905099][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.980921][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.380060][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.463908][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 153.849958][ T4413] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 154.068442][ T5026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.172'. [ 154.733197][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 154.800077][ T4413] usb 3-1: Using ep0 maxpacket: 32 [ 154.823971][ T4413] usb 3-1: config 0 interface 0 has no altsetting 0 [ 154.875990][ T4413] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 154.896827][ T4413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.995430][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 155.042574][ T5031] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 155.075799][ T5031] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 155.165450][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 155.482928][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 155.540297][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 155.828061][ T4413] usb 3-1: Product: syz [ 155.838342][ T4413] usb 3-1: Manufacturer: syz [ 155.843559][ T4413] usb 3-1: SerialNumber: syz [ 155.880821][ T4413] usb 3-1: config 0 descriptor?? [ 156.301780][ T4413] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 156.502924][ T4413] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 156.665363][ T4413] gs_usb: probe of 3-1:0.0 failed with error -71 [ 156.958879][ T4413] usb 3-1: USB disconnect, device number 2 [ 157.313917][ T4281] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 157.324511][ T4281] CPU: 1 PID: 4281 Comm: kworker/u5:8 Not tainted 6.1.148-syzkaller #0 [ 157.333327][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.343581][ T4281] Workqueue: hci3 hci_rx_work [ 157.348570][ T4281] Call Trace: [ 157.352043][ T4281] [ 157.355082][ T4281] dump_stack_lvl+0x168/0x22e [ 157.359878][ T4281] ? show_regs_print_info+0x12/0x12 [ 157.365115][ T4281] ? load_image+0x3b0/0x3b0 [ 157.369905][ T4281] sysfs_create_dir_ns+0x252/0x280 [ 157.375254][ T4281] ? hci_rx_work+0x3eb/0xd40 [ 157.380058][ T4281] ? sysfs_warn_dup+0xa0/0xa0 [ 157.384879][ T4281] ? do_raw_spin_unlock+0x11d/0x230 [ 157.390305][ T4281] kobject_add_internal+0x6b8/0xc80 [ 157.395975][ T4281] kobject_add+0x152/0x210 [ 157.400454][ T4281] ? kobject_init+0x1d0/0x1d0 [ 157.405254][ T4281] ? klist_children_get+0x50/0x50 [ 157.410710][ T4281] ? get_device_parent+0x121/0x3f0 [ 157.416214][ T4281] device_add+0x483/0xfb0 [ 157.421284][ T4281] ? kmem_cache_free+0xf7/0x290 [ 157.426697][ T4281] hci_conn_add_sysfs+0xd1/0x1e0 [ 157.432360][ T4281] le_conn_complete_evt+0xd1d/0x1320 [ 157.438021][ T4281] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 157.446505][ T4281] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 157.453621][ T4281] ? skb_pull_data+0xf7/0x200 [ 157.458815][ T4281] hci_le_conn_complete_evt+0x183/0x440 [ 157.465042][ T4281] ? hci_remote_host_features_evt+0x270/0x270 [ 157.471529][ T4281] hci_event_packet+0x791/0x1210 [ 157.477770][ T4281] ? bis_list+0x280/0x280 [ 157.482851][ T4281] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 157.489419][ T4281] ? kcov_remote_start+0x4c7/0x7e0 [ 157.495191][ T4281] ? mt_dump_node+0xbd0/0x1930 [ 157.500539][ T4281] ? hci_send_to_monitor+0x9c/0x4a0 [ 157.506261][ T4281] hci_rx_work+0x3eb/0xd40 [ 157.510795][ T4281] ? _raw_spin_unlock+0x40/0x40 [ 157.516236][ T4281] ? process_one_work+0x7a1/0x1160 [ 157.521688][ T4281] process_one_work+0x898/0x1160 [ 157.527321][ T4281] ? worker_detach_from_pool+0x240/0x240 [ 157.533817][ T4281] ? _raw_spin_lock_irq+0xab/0xe0 [ 157.539090][ T4281] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 157.547299][ T4281] ? kthread_data+0x4b/0xc0 [ 157.552357][ T4281] worker_thread+0xaa2/0x1250 [ 157.557542][ T4281] ? __kthread_parkme+0x162/0x1c0 [ 157.562960][ T4281] kthread+0x29d/0x330 [ 157.567409][ T4281] ? worker_clr_flags+0x1a0/0x1a0 [ 157.572898][ T4281] ? kthread_blkcg+0xd0/0xd0 [ 157.578054][ T4281] ret_from_fork+0x1f/0x30 [ 157.582641][ T4281] [ 157.585827][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.597992][ T4281] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 157.612895][ T4281] Bluetooth: hci3: failed to register connection device [ 157.620720][ T4269] Bluetooth: hci4: command 0x2016 tx timeout [ 159.531545][ T5066] overlayfs: overlapping lowerdir path [ 159.705814][ T4281] Bluetooth: hci3: command 0x2016 tx timeout [ 162.426376][ T5091] fuse: Unknown parameter 'group_i00000000000000000000' [ 162.731474][ T5098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.192'. [ 162.801805][ T5098] bond1 (unregistering): Released all slaves [ 163.245138][ T4349] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 163.562081][ T5116] tmpfs: Unknown parameter 'usrquota' [ 164.270090][ T4349] usb 2-1: Using ep0 maxpacket: 32 [ 164.311939][ T4349] usb 2-1: config 0 interface 0 has no altsetting 0 [ 164.374566][ T4349] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 164.392324][ T4349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.414715][ T4349] usb 2-1: Product: syz [ 164.421112][ T4349] usb 2-1: Manufacturer: syz [ 164.436933][ T5119] siw: device registration error -23 [ 164.443095][ T4349] usb 2-1: SerialNumber: syz [ 164.457633][ T4349] usb 2-1: config 0 descriptor?? [ 164.594548][ T5117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.611514][ T5117] device batadv_slave_0 entered promiscuous mode [ 164.889046][ T4349] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 165.106245][ T4349] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 165.710438][ T4349] gs_usb: probe of 2-1:0.0 failed with error -71 [ 165.888756][ T4349] usb 2-1: USB disconnect, device number 3 [ 166.869251][ T5143] fuse: Unknown parameter 'group_id00000000000000000000' [ 168.707545][ T5160] tmpfs: Unknown parameter 'usrquota' [ 169.253429][ T4316] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 169.850527][ T5171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 169.876298][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 170.020251][ T4316] usb 4-1: Using ep0 maxpacket: 32 [ 170.028124][ T4316] usb 4-1: config 0 interface 0 has no altsetting 0 [ 170.052361][ T4316] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 170.072817][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.098111][ T4316] usb 4-1: Product: syz [ 170.112705][ T4316] usb 4-1: Manufacturer: syz [ 170.127772][ T4316] usb 4-1: SerialNumber: syz [ 170.136160][ T4316] usb 4-1: config 0 descriptor?? [ 170.156516][ T5176] fuse: Unknown parameter 'group_id00000000000000000000' [ 170.563947][ T4316] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 170.765952][ T4316] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 170.776929][ T4316] gs_usb: probe of 4-1:0.0 failed with error -71 [ 170.829107][ T4316] usb 4-1: USB disconnect, device number 3 [ 172.522909][ T5195] device batadv_slave_0 entered promiscuous mode [ 172.830971][ T5202] tmpfs: Unknown parameter 'usrquota' [ 175.100278][ T126] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 180.137199][ T5234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 180.407565][ T5235] tmpfs: Unknown parameter 'usrquota' [ 181.860264][ T126] usb 4-1: device descriptor read/all, error -110 [ 182.011200][ T126] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 182.240293][ T126] usb 4-1: device descriptor read/64, error -32 [ 182.380540][ T126] usb usb4-port1: attempt power cycle [ 182.821557][ T126] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 182.890495][ T126] usb 4-1: device descriptor read/8, error -32 [ 183.952802][ T5243] tmpfs: Unknown parameter 'usrquota' [ 186.644492][ T5266] ======================================================= [ 186.644492][ T5266] WARNING: The mand mount option has been deprecated and [ 186.644492][ T5266] and is ignored by this kernel. Remove the mand [ 186.644492][ T5266] option from the mount to silence this warning. [ 186.644492][ T5266] ======================================================= [ 186.682367][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.713437][ T5266] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 188.558073][ T5286] tmpfs: Unknown parameter 'usrquota' [ 189.527758][ T5288] tmpfs: Unknown parameter 'usrquota' [ 189.734229][ T5294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 194.449134][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 194.495907][ T5317] device bridge_slave_0 left promiscuous mode [ 194.517691][ T5317] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.547950][ T5317] device bridge_slave_1 left promiscuous mode [ 194.550059][ T5319] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 194.561332][ T5319] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 194.565964][ T5317] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.588545][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.595577][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.600745][ T5322] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 194.608744][ T5322] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 194.626106][ T5319] vhci_hcd vhci_hcd.0: Device attached [ 194.641998][ T5322] vhci_hcd vhci_hcd.0: Device attached [ 194.648786][ T5319] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 194.655796][ T5319] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 194.665568][ T5317] bond0: (slave bond_slave_0): Releasing backup interface [ 194.678771][ T5319] vhci_hcd vhci_hcd.0: Device attached [ 194.688163][ T5317] bond0: (slave bond_slave_1): Releasing backup interface [ 194.706411][ T5319] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(14) [ 194.713502][ T5319] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 194.760312][ T5319] vhci_hcd vhci_hcd.0: Device attached [ 194.777207][ T5322] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 194.785532][ T5322] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 194.819994][ T4413] vhci_hcd: vhci_device speed not set [ 194.829665][ T5322] vhci_hcd vhci_hcd.0: Device attached [ 194.858817][ T5317] team0: Port device team_slave_0 removed [ 194.861069][ T5319] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 194.899939][ T4413] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 194.921299][ T5317] team0: Port device team_slave_1 removed [ 194.944992][ T5317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.966232][ T5334] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 194.977171][ T5335] netlink: 24 bytes leftover after parsing attributes in process `syz.4.257'. [ 195.004861][ T5319] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 195.061775][ T5317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.083289][ T5317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.125484][ T5319] vhci_hcd vhci_hcd.0: port 0 already used [ 195.251719][ T5329] vhci_hcd: connection closed [ 195.252483][ T5331] vhci_hcd: connection closed [ 195.253107][ T5327] vhci_hcd: connection closed [ 195.253285][ T5324] vhci_hcd: connection closed [ 195.253421][ T5321] vhci_hcd: connection reset by peer [ 195.264365][ T4459] vhci_hcd: stop threads [ 195.264866][ T4459] vhci_hcd: release socket [ 195.265715][ T4459] vhci_hcd: disconnect device [ 195.266705][ T4459] vhci_hcd: stop threads [ 195.266715][ T4459] vhci_hcd: release socket [ 195.267324][ T4459] vhci_hcd: disconnect device [ 195.267543][ T4459] vhci_hcd: stop threads [ 195.267551][ T4459] vhci_hcd: release socket [ 195.267609][ T4459] vhci_hcd: disconnect device [ 195.267715][ T4459] vhci_hcd: stop threads [ 195.267723][ T4459] vhci_hcd: release socket [ 195.267782][ T4459] vhci_hcd: disconnect device [ 195.267948][ T4459] vhci_hcd: stop threads [ 195.267956][ T4459] vhci_hcd: release socket [ 195.268003][ T4459] vhci_hcd: disconnect device [ 196.200063][ T5345] netlink: 'syz.3.263': attribute type 4 has an invalid length. [ 196.605398][ T5349] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 200.021098][ T4413] vhci_hcd: vhci_device speed not set [ 201.781178][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 201.788746][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 201.789272][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 201.789338][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 201.789389][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 206.504418][ T5392] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 206.517767][ T5392] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 206.527458][ T5392] CPU: 1 PID: 5392 Comm: syz.3.276 Not tainted 6.1.148-syzkaller #0 [ 206.536520][ T5392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.547775][ T5392] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 206.553791][ T5392] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 dd 56 16 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 bc 56 16 fa 4d 8b 24 24 48 83 c3 [ 206.576355][ T5392] RSP: 0018:ffffc90003997a78 EFLAGS: 00010206 [ 206.582917][ T5392] RAX: 0000000000000005 RBX: ffff88807d2d4500 RCX: 0000000000080000 [ 206.591559][ T5392] RDX: ffffc9000cd41000 RSI: 000000000000041f RDI: 0000000000000420 [ 206.600402][ T5392] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed10298ef726 [ 206.609336][ T5392] R10: ffffed10298ef726 R11: 1ffff110298ef725 R12: 0000000000000028 [ 206.618037][ T5392] R13: dffffc0000000000 R14: ffff88814c77b800 R15: dffffc0000000000 [ 206.626928][ T5392] FS: 00007fc6484406c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 206.636073][ T5392] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.642762][ T5392] CR2: 00007ffc9a7f7010 CR3: 0000000077d71000 CR4: 00000000003506e0 [ 206.651205][ T5392] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 206.659465][ T5392] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 206.667856][ T5392] Call Trace: [ 206.671810][ T5392] [ 206.674846][ T5392] pcl818_detach+0x62/0xd0 [ 206.679368][ T5392] comedi_device_detach+0x12d/0x6e0 [ 206.685112][ T5392] comedi_unlocked_ioctl+0xb6b/0xf20 [ 206.690519][ T5392] ? comedi_poll+0x8b0/0x8b0 [ 206.695534][ T5392] ? __fget_files+0x28/0x4d0 [ 206.700583][ T5392] ? bpf_lsm_file_ioctl+0x5/0x10 [ 206.705722][ T5392] ? security_file_ioctl+0x7c/0xa0 [ 206.711511][ T5392] ? comedi_poll+0x8b0/0x8b0 [ 206.716502][ T5392] __se_sys_ioctl+0xfa/0x170 [ 206.721480][ T5392] do_syscall_64+0x4c/0xa0 [ 206.727057][ T5392] ? clear_bhb_loop+0x60/0xb0 [ 206.732168][ T5392] ? clear_bhb_loop+0x60/0xb0 [ 206.737412][ T5392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.744316][ T5392] RIP: 0033:0x7fc64758ebe9 [ 206.750193][ T5392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.783725][ T5392] RSP: 002b:00007fc648440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.797565][ T5392] RAX: ffffffffffffffda RBX: 00007fc6477b5fa0 RCX: 00007fc64758ebe9 [ 206.810488][ T5392] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 206.822209][ T5392] RBP: 00007fc647611e19 R08: 0000000000000000 R09: 0000000000000000 [ 206.836828][ T5392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.847336][ T5392] R13: 00007fc6477b6038 R14: 00007fc6477b5fa0 R15: 00007ffc9a7f6bf8 [ 206.857541][ T5392] [ 206.860720][ T5392] Modules linked in: [ 206.871585][ T5390] tmpfs: Unknown parameter 'usrquota' [ 206.922754][ T5392] ---[ end trace 0000000000000000 ]--- [ 206.930348][ T5392] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 206.937227][ T5392] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 dd 56 16 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 bc 56 16 fa 4d 8b 24 24 48 83 c3 [ 206.960335][ T5392] RSP: 0018:ffffc90003997a78 EFLAGS: 00010206 [ 206.969673][ T5392] RAX: 0000000000000005 RBX: ffff88807d2d4500 RCX: 0000000000080000 [ 206.978672][ T5392] RDX: ffffc9000cd41000 RSI: 000000000000041f RDI: 0000000000000420 [ 206.988114][ T5392] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed10298ef726 [ 206.999769][ T5392] R10: ffffed10298ef726 R11: 1ffff110298ef725 R12: 0000000000000028 [ 207.010876][ T5392] R13: dffffc0000000000 R14: ffff88814c77b800 R15: dffffc0000000000 [ 207.021203][ T5392] FS: 00007fc6484406c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 207.034287][ T5392] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.042631][ T5392] CR2: 000020000001b000 CR3: 0000000077d71000 CR4: 00000000003506f0 [ 207.051731][ T5392] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 207.060960][ T5392] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 207.073433][ T5392] Kernel panic - not syncing: Fatal exception [ 207.081583][ T5392] Kernel Offset: disabled [ 207.086522][ T5392] Rebooting in 86400 seconds..