last executing test programs: 3m21.26316655s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r1, &(0x7f0000001240)={&(0x7f0000001000)={0x1d, r2, 0x0, {0x2, 0xff, 0x2}, 0xff}, 0x18, &(0x7f00000010c0)={0x0}, 0x1, 0x0, 0x0, 0x42000}, 0x2004c080) listen(r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) 3m20.075817422s ago: executing program 1 (id=6): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 3m17.034508985s ago: executing program 4 (id=5): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 3m4.885917379s ago: executing program 32 (id=6): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 3m1.058806987s ago: executing program 33 (id=5): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 1m52.758192387s ago: executing program 0 (id=165): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) connect$inet(r4, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000100)=0xfffffffc, 0x56) 1m49.590182037s ago: executing program 0 (id=172): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',rootmode=0000', @ANYRESDEC=0x0, @ANYBLOB]) syz_fuse_handle_req(r1, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x2, {0x7, 0x29, 0x7, 0x2300c29, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x40, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x200000002) 1m48.005642316s ago: executing program 0 (id=175): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a3, 0x8c, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0xffff, 0x3, 0x27ff, 0x2800, 0x2, 0x200bb6, 0x0, 0x8, {0x80000000, 0xffffffff}, 0xd0, 0x9}}) 1m47.70103358s ago: executing program 0 (id=177): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x20, 0x4, 0x31384142, 0x3234564e, [0x10001, 0x4], [0x1000, 0x8], 0x13a}}) accept4(r0, 0x0, &(0x7f00000001c0), 0x800) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r7, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) recvfrom$ax25(r7, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1m46.833707528s ago: executing program 0 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) close(0x3) r2 = getpid() ptrace$setregs(0xd, r2, 0x1000, &(0x7f0000000000)="1904a54186f6677cd60aa075412fd80353e3985ee4618358f96ae0067c447f218a834a1c2138008c6b73de292606037dea991cf1e6e00f0a885bd84e5d20e9afb0eb5b7293db88a7e63d50fb6fcc55d116a504100a3a540b654ef7e6cf257dbb0e6b") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) madvise(&(0x7f000083b000/0x4000)=nil, 0x4000, 0xc) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f5, 0x300, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040010}, 0x41140) 1m44.27545022s ago: executing program 0 (id=181): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$inet(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = eventfd(0x80000b) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f0000000f0800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x8844) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd29, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) unshare(0x64000600) 1m38.745044483s ago: executing program 2 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) close(0x3) r2 = getpid() ptrace$setregs(0xd, r2, 0x1000, &(0x7f0000000000)="1904a54186f6677cd60aa075412fd80353e3985ee4618358f96ae0067c447f218a834a1c2138008c6b73de292606037dea991cf1e6e00f0a885bd84e5d20e9afb0eb5b7293db88a7e63d50fb6fcc55d116a504100a3a540b654ef7e6cf257dbb0e6b") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) madvise(&(0x7f000083b000/0x4000)=nil, 0x4000, 0xc) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f5, 0x300, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040010}, 0x41140) 1m37.785477435s ago: executing program 2 (id=193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xe0480, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) 1m36.742080561s ago: executing program 2 (id=194): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x82002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x94}}, 0xe040) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x20, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f0000000180)) 1m33.934384334s ago: executing program 2 (id=202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) prlimit64(r1, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) bind$rds(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000090601080000000000000000050000000900020073797a3100000000050001000700000020000780060004404e21050005000700ff0000000c000180080001400a"], 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 1m33.555092591s ago: executing program 2 (id=204): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x20, 0x4, 0x31384142, 0x3234564e, [0x10001, 0x4], [0x1000, 0x8], 0x13a}}) accept4(r0, 0x0, &(0x7f00000001c0), 0x800) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) 1m30.235114917s ago: executing program 2 (id=210): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000000210", @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 1m29.140023035s ago: executing program 34 (id=181): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$inet(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = eventfd(0x80000b) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f0000000f0800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x8844) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd29, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) unshare(0x64000600) 1m14.553600446s ago: executing program 35 (id=210): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000000210", @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 14.107319341s ago: executing program 8 (id=382): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) 13.927640039s ago: executing program 8 (id=385): ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x4f, 0x0, 0x0, 0x80000000}) 13.086624545s ago: executing program 6 (id=386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000000)={0x10201, 0x100, 0x200, &(0x7f00000002c0)=[0x2, 0xffffffff, 0xffffffffffffffff, 0xbff2ee14000, 0xb, 0x4, 0xf20b, 0x6, 0x8, 0x3, 0x8, 0x2, 0x7, 0x6, 0x5a1a, 0xe, 0x4, 0x800, 0x0, 0x8000, 0x1, 0x21d8, 0x3, 0x7fff, 0xee, 0xe, 0x8, 0xa800000, 0xffffffffffffffdc, 0x6, 0x7, 0x1, 0xa0000000000, 0x2000, 0x2, 0x3, 0xffffffff, 0xa, 0x800, 0xe0, 0x1, 0xf, 0x0, 0x2b, 0x7f, 0x5, 0x5, 0x5, 0x6, 0x910, 0x9, 0x6, 0x500, 0x2, 0x9, 0x2, 0xe7, 0x100000001, 0x3, 0x100, 0x5, 0x4, 0x9, 0x4, 0x80, 0xba, 0x8ddb, 0x7fff, 0x7, 0x101, 0x8000000000000001, 0x7f, 0x7, 0xd, 0x4, 0x68a, 0x8000, 0xfffffffffffffff8, 0x9, 0xb, 0x9, 0x7f, 0x7, 0x6, 0x10, 0x5, 0x1000, 0x6, 0x2, 0x3, 0xffffffffffffff3d, 0x0, 0x9e2, 0x9, 0x8, 0x400, 0x4e, 0x364, 0x148, 0x2, 0x0, 0x1, 0x3, 0x4, 0x4c, 0xf, 0xffffffffffffffff, 0x8, 0xffff, 0xb1eb, 0x4, 0x3, 0x6, 0x9, 0x401, 0xffffffff, 0x200, 0x5, 0x9, 0x0, 0x7d3, 0xffffffffffffa2d4, 0x9, 0x0, 0x2, 0x9, 0xff, 0xfffffffffffffff8]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.00472886s ago: executing program 8 (id=389): io_setup(0x9, &(0x7f00000000c0)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/uevent_helper', 0x28201, 0x152) r1 = eventfd(0x410b) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000440)="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", 0x176, 0x0, 0x0, 0x6, r1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xf, 0xb, r0, &(0x7f0000000340)="ce8ff6e9b158993691eb1c49418121cbe330c138c8525a036563035c01f4201be0b05d08a3967bb1181f49148ff2bb110d228f0774456d651ae9d2f8c3e694db18436924756e1825098413682211691d0edc8a1988d2e2457404f1fa3c5166eba40f06cba35affe90d7fee9dc11bb631285943fbe8bb80a5f90112f3b6a8e37223076141695562051461d56efb96861becc4136f336763fb0bddd9a2eabdf5e08f2b0262082e35e0447ad0a004c85f9ee8c0dc7b74e06926db49a8a351d7a0032038e8ca22c0f75d15a6135c98eaf3432e180b", 0xd3, 0x6, 0x0, 0x1, r1}]) syz_emit_ethernet(0x52, &(0x7f0000000640)=ANY=[@ANYBLOB="567f8c12428f090e9d95007065f8c44637c9ae569c85955474a98cc2cecffa219b5539515e06512ac8a06ab403236983b2a7a12da350ddd4988ba6a28c1420fb144794fe9469de568a569802814aafbdf7021d80094aacea28f453feed04ce2ab22ad623facdf8d58c1141b3f60a49bc6c692f5da3019088ce872686400cb19589", @ANYRESHEX, @ANYBLOB], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={0x0, 0xe0}}, 0x44040800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x508, 0x98, 0x208, 0x208, 0x3a0, 0x208, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) 12.035950492s ago: executing program 7 (id=390): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000500)="36cafc853000327331e5caa8b8083f5b480cb12e7dff016503f1f153ced8ca2ce07c3237358cdfd8069bd2416f2a1fb47b2fef0d96d87815e7e60fda353dd1efe290aee7d89edbebf167e3846a9602f9a67241ad8719a8e35507dcbedc506066ee8fd73446b62b679f3cb6c9f902d86aae04304d4134f7113554867137345dde4c5833911d7df508bf22c5a73ee8d4df5ea6870ebd02fa6d6f809d23d3528c840300e0517f9ab0d98e7a0cdd36be1483f216bdfdf77bb687a5c9e9d895cccefd64efd8981361647ae4cd9347da6e9ebe1e07caa3e27ad0ce02787e2e5a94b156ad93aa6cfa7b94a1ffbf7ada70db4ae1d2f2f9fbfd5e14f679629fc91fffc54c120ca9d5edec146cd5d0fd", 0xf000}, {0x0, 0x55}], 0x2) syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff}, 0x94) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000000180)=""/42) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000280)='asymmetric\x00', &(0x7f00000003c0)=@chain) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0xfffffffe) accept4(r7, 0x0, 0x0, 0x80800) 11.367957071s ago: executing program 8 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getrlimit(0x1, &(0x7f00000003c0)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x200c0) ioctl$I2C_PEC(r1, 0x708, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x10}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf2509000000050007000f00000005000800100000000c00060000000000000000000c00060001000000010000000800010002000000"], 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x4048000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x5, &(0x7f0000000080)={0x1f, "14a6c63d876ff44271f19ca6e4482707dab7299602aed83463604d70b41d4008e3"}}) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x22) socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x30}, {@remote, 0x4e20, 0x10000, 0xba6, 0x2}}, 0x44) migrate_pages(0x0, 0x2, &(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x3ff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x4044045) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3252009c", @ANYRES16, @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) 11.15280315s ago: executing program 6 (id=394): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',rootmode=0000', @ANYRESDEC=0x0, @ANYBLOB]) syz_fuse_handle_req(r1, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x2, {0x7, 0x29, 0x7, 0x2300c29, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x40, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x200000002) 8.157055962s ago: executing program 5 (id=399): ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x4f, 0x0, 0x0, 0x80000000}) 8.047844987s ago: executing program 8 (id=400): syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x1, 0xbffffffd, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x1, 0x794, 0x4e23, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0xffffffff, 0x9, 0x1ff, 0xffff, 0x8251d, 0xfffffffffffffffe, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x3, 0x1, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 8.011378139s ago: executing program 7 (id=401): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000040)) 7.905023373s ago: executing program 5 (id=402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setrlimit(0x1, 0x0) keyctl$read(0x2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, 0x0, 0x0, 0x40800) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) 7.035428091s ago: executing program 5 (id=404): io_setup(0x9, &(0x7f00000000c0)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/uevent_helper', 0x28201, 0x152) r1 = eventfd(0x410b) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000440)="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", 0x176, 0x0, 0x0, 0x6, r1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xf, 0xb, r0, &(0x7f0000000340)="ce8ff6e9b158993691eb1c49418121cbe330c138c8525a036563035c01f4201be0b05d08a3967bb1181f49148ff2bb110d228f0774456d651ae9d2f8c3e694db18436924756e1825098413682211691d0edc8a1988d2e2457404f1fa3c5166eba40f06cba35affe90d7fee9dc11bb631285943fbe8bb80a5f90112f3b6a8e37223076141695562051461d56efb96861becc4136f336763fb0bddd9a2eabdf5e08f2b0262082e35e0447ad0a004c85f9ee8c0dc7b74e06926db49a8a351d7a0032038e8ca22c0f75d15a6135c98eaf3432e180b", 0xd3, 0x6, 0x0, 0x1, r1}]) syz_emit_ethernet(0x52, &(0x7f0000000640)=ANY=[@ANYBLOB="567f8c12428f090e9d95007065f8c44637c9ae569c85955474a98cc2cecffa219b5539515e06512ac8a06ab403236983b2a7a12da350ddd4988ba6a28c1420fb144794fe9469de568a569802814aafbdf7021d80094aacea28f453feed04ce2ab22ad623facdf8d58c1141b3f60a49bc6c692f5da3019088ce872686400cb19589", @ANYRESHEX, @ANYBLOB], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={0x0, 0xe0}}, 0x44040800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x508, 0x98, 0x208, 0x208, 0x3a0, 0x208, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) 7.034547832s ago: executing program 8 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r1, &(0x7f0000001240)={&(0x7f0000001000)={0x1d, r2, 0x0, {0x2, 0xff, 0x2}, 0xff}, 0x18, &(0x7f00000010c0)={0x0}, 0x1, 0x0, 0x0, 0x42000}, 0x2004c080) listen(r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xf, 0x4, 0x4, 0xa4}, 0x50) 6.090004733s ago: executing program 3 (id=406): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, 0x0, 0x20000000) 5.433058942s ago: executing program 3 (id=407): r0 = gettid() r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.377107774s ago: executing program 5 (id=408): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 5.266900149s ago: executing program 3 (id=409): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 5.105156646s ago: executing program 5 (id=410): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.11840684s ago: executing program 7 (id=411): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000500)="36cafc853000327331e5caa8b8083f5b480cb12e7dff016503f1f153ced8ca2ce07c3237358cdfd8069bd2416f2a1fb47b2fef0d96d87815e7e60fda353dd1efe290aee7d89edbebf167e3846a9602f9a67241ad8719a8e35507dcbedc506066ee8fd73446b62b679f3cb6c9f902d86aae04304d4134f7113554867137345dde4c5833911d7df508bf22c5a73ee8d4df5ea6870ebd02fa6d6f809d23d3528c840300e0517f9ab0d98e7a0cdd36be1483f216bdfdf77bb687a5c9e9d895cccefd64efd8981361647ae4cd9347da6e9ebe1e07caa3e27ad0ce02787e2e5a94b156ad93aa6cfa7b94a1ffbf7ada70db4ae1d2f2f9fbfd5e14f679629fc91fffc54c120ca9d5edec146cd5d0fd", 0xf000}, {0x0, 0x55}], 0x2) syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff}, 0x94) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000000180)=""/42) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000280)='asymmetric\x00', &(0x7f00000003c0)=@chain) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0xfffffffe) accept4(r7, 0x0, 0x0, 0x80800) 4.118166959s ago: executing program 6 (id=412): r0 = openat$comedi(0xffffff9c, 0x0, 0x2000, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x4f, 0x0, 0x0, 0x80000000}) 3.304794885s ago: executing program 6 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x99c822, &(0x7f0000000000)=ANY=[@ANYBLOB='grpquota']) pipe(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 2.75301619s ago: executing program 3 (id=414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setrlimit(0x1, 0x0) keyctl$read(0x2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, 0x0, 0x0, 0x40800) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) 2.402365665s ago: executing program 7 (id=415): syz_open_dev$sndctrl(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x1, 0xbffffffd, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x1, 0x794, 0x4e23, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0xffffffff, 0x9, 0x1ff, 0xffff, 0x8251d, 0xfffffffffffffffe, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x3, 0x1, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 2.299375879s ago: executing program 7 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r1, &(0x7f0000001240)={&(0x7f0000001000)={0x1d, r2, 0x0, {0x2, 0xff, 0x2}, 0xff}, 0x18, &(0x7f00000010c0)={0x0}, 0x1, 0x0, 0x0, 0x42000}, 0x2004c080) listen(r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r6 = accept(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r6}, 0x20) 1.392970559s ago: executing program 3 (id=417): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') socket$inet_udp(0x2, 0x2, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f0000"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) 1.392643349s ago: executing program 6 (id=418): io_setup(0x9, &(0x7f00000000c0)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/uevent_helper', 0x28201, 0x152) r1 = eventfd(0x410b) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000440)="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", 0x176, 0x0, 0x0, 0x6, r1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xf, 0xb, r0, &(0x7f0000000340)="ce8ff6e9b158993691eb1c49418121cbe330c138c8525a036563035c01f4201be0b05d08a3967bb1181f49148ff2bb110d228f0774456d651ae9d2f8c3e694db18436924756e1825098413682211691d0edc8a1988d2e2457404f1fa3c5166eba40f06cba35affe90d7fee9dc11bb631285943fbe8bb80a5f90112f3b6a8e37223076141695562051461d56efb96861becc4136f336763fb0bddd9a2eabdf5e08f2b0262082e35e0447ad0a004c85f9ee8c0dc7b74e06926db49a8a351d7a0032038e8ca22c0f75d15a6135c98eaf3432e180b", 0xd3, 0x6, 0x0, 0x1, r1}]) syz_emit_ethernet(0x52, &(0x7f0000000640)=ANY=[@ANYBLOB="567f8c12428f090e9d95007065f8c44637c9ae569c85955474a98cc2cecffa219b5539515e06512ac8a06ab403236983b2a7a12da350ddd4988ba6a28c1420fb144794fe9469de568a569802814aafbdf7021d80094aacea28f453feed04ce2ab22ad623facdf8d58c1141b3f60a49bc6c692f5da3019088ce872686400cb19589", @ANYRESHEX, @ANYBLOB], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={0x0, 0xe0}}, 0x44040800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r4, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) 118.993376ms ago: executing program 3 (id=419): syz_open_dev$video4linux(0x0, 0x5, 0x20040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r4 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$RNDADDENTROPY(r3, 0x40045201, 0xffffffffffffffff) 63.270908ms ago: executing program 5 (id=420): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) 50.703759ms ago: executing program 6 (id=421): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000040)) 0s ago: executing program 7 (id=422): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2003, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, 0x0, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): erface batadv_slave_1 (retrying later): interface not active [ 72.728578][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.760204][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.767419][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.793796][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.825175][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.831724][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.843487][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.855099][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.867789][ T4184] team0: Port device team_slave_0 added [ 72.874338][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.881560][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.908456][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.945089][ T4184] team0: Port device team_slave_1 added [ 72.953751][ T4187] team0: Port device team_slave_0 added [ 72.967550][ T4183] team0: Port device team_slave_0 added [ 72.987939][ T4187] team0: Port device team_slave_1 added [ 73.010980][ T4183] team0: Port device team_slave_1 added [ 73.033525][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.040514][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.066759][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.089919][ T4186] device hsr_slave_0 entered promiscuous mode [ 73.096977][ T4186] device hsr_slave_1 entered promiscuous mode [ 73.104761][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.112062][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.138470][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.151701][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.158759][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.184897][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.204054][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.211030][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.237284][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.281790][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.288825][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.315601][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.330526][ T4185] device hsr_slave_0 entered promiscuous mode [ 73.337959][ T4185] device hsr_slave_1 entered promiscuous mode [ 73.344788][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.352882][ T4185] Cannot create hsr debugfs directory [ 73.380978][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.388220][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.414283][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.462216][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 73.462216][ T4174] Bluetooth: hci0: command 0x0409 tx timeout [ 73.462873][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 73.468451][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 73.486724][ T4174] Bluetooth: hci4: command 0x0409 tx timeout [ 73.500301][ T4187] device hsr_slave_0 entered promiscuous mode [ 73.507599][ T4187] device hsr_slave_1 entered promiscuous mode [ 73.514280][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.521943][ T4187] Cannot create hsr debugfs directory [ 73.543288][ T4184] device hsr_slave_0 entered promiscuous mode [ 73.550242][ T4184] device hsr_slave_1 entered promiscuous mode [ 73.556949][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.564703][ T4184] Cannot create hsr debugfs directory [ 73.649696][ T4183] device hsr_slave_0 entered promiscuous mode [ 73.656859][ T4183] device hsr_slave_1 entered promiscuous mode [ 73.664011][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.671754][ T4183] Cannot create hsr debugfs directory [ 73.947595][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.962117][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.972311][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.987666][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.043537][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.057287][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.070383][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.088114][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.119564][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.130005][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.140765][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.166402][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.235973][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.273227][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.287133][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.298137][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.310133][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.323902][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.337429][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.370172][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.469489][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.489946][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.512352][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.523641][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.545998][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.557969][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.570602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.579810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.602550][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.610915][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.625319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.635542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.645159][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.652446][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.664516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.673440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.682424][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.689517][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.698792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.722636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.731779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.740498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.753950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.764946][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.772100][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.780090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.789287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.800329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.808556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.817784][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.826541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.848339][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.867170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.877092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.886309][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.893482][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.902173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.910891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.920231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.931129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.939870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.948508][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.955723][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.964522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.973563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.983590][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.990666][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.006230][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.025564][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.035285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.043741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.053713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.061657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.070074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.081072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.096036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.104977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.114277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.140860][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.150934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.160002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.171381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.179886][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.187016][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.196132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.205062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.213688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.223012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.231651][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.238734][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.246559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.256860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.265436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.280300][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.300007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.309236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.322302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.334170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.344321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.353597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.364490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.373154][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.380256][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.388168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.397588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.406352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.414515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.451692][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.469375][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.480660][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.496907][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.508006][ T3085] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.515291][ T3085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.524275][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.533284][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.542914][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.542965][ T1344] Bluetooth: hci4: command 0x041b tx timeout [ 75.553581][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.564344][ T1344] Bluetooth: hci1: command 0x041b tx timeout [ 75.566641][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.571069][ T1344] Bluetooth: hci2: command 0x041b tx timeout [ 75.581787][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.586269][ T1344] Bluetooth: hci0: command 0x041b tx timeout [ 75.599184][ T1344] Bluetooth: hci3: command 0x041b tx timeout [ 75.602067][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.614396][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.623515][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.632465][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.665266][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.679973][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.693340][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.704200][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.715197][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.724731][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.734063][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.743051][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.752122][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.760767][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.770813][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.779811][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.789239][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.798452][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.807806][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.817311][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.826231][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.844252][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.857683][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.868266][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.892532][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.907427][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.926182][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.949842][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.975831][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.985194][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.999914][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.008614][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.083411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.108230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.163882][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.183191][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.202545][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.212515][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.229075][ T4186] device veth0_vlan entered promiscuous mode [ 76.246618][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.266137][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.287946][ T4186] device veth1_vlan entered promiscuous mode [ 76.318449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.327617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.344062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.364646][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.385861][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.414945][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.424465][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.432403][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.439888][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.448205][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.468557][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.485675][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.493858][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.505299][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.551385][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.560206][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.573134][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.583265][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.596324][ T4186] device veth0_macvtap entered promiscuous mode [ 76.610613][ T4187] device veth0_vlan entered promiscuous mode [ 76.630833][ T4184] device veth0_vlan entered promiscuous mode [ 76.641086][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.657879][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.669677][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.678716][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.688449][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.699049][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.707284][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.715455][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.724033][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.738198][ T4187] device veth1_vlan entered promiscuous mode [ 76.748076][ T4186] device veth1_macvtap entered promiscuous mode [ 76.758453][ T4184] device veth1_vlan entered promiscuous mode [ 76.767112][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.775922][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.785010][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.795023][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.804649][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.860560][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.876857][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.889728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.899195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.909463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.918888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.928118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.946902][ T4185] device veth0_vlan entered promiscuous mode [ 76.967965][ T4187] device veth0_macvtap entered promiscuous mode [ 76.976043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.985389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.994610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.005243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.014379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.024807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.033788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.042523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.072537][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.084598][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.093415][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.102360][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.124301][ T4187] device veth1_macvtap entered promiscuous mode [ 77.141587][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.150432][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.160096][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.169046][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.187012][ T4185] device veth1_vlan entered promiscuous mode [ 77.198837][ T4184] device veth0_macvtap entered promiscuous mode [ 77.246058][ T4184] device veth1_macvtap entered promiscuous mode [ 77.255487][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.268055][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.280443][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.291576][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.303309][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.315086][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.336524][ T4183] device veth0_vlan entered promiscuous mode [ 77.358402][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.378268][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.388353][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.397304][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.406293][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.415587][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.425929][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.434744][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.446310][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.454574][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.469140][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.478530][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.488578][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.497675][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.516556][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.527492][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.538290][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.550340][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.562932][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.585690][ T4183] device veth1_vlan entered promiscuous mode [ 77.596890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.606598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.616171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.625153][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 77.631314][ T4292] Bluetooth: hci0: command 0x040f tx timeout [ 77.638070][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 77.644676][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 77.646431][ T4185] device veth0_macvtap entered promiscuous mode [ 77.650821][ T4292] Bluetooth: hci4: command 0x040f tx timeout [ 77.702206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.710876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.720789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.736645][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.747312][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.757525][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.768687][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.783383][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.797912][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.808215][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.817641][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.826459][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.851394][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.859641][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.869999][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.882239][ T4185] device veth1_macvtap entered promiscuous mode [ 77.903303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.912809][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.923694][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.925134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.939978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.972879][ T4183] device veth0_macvtap entered promiscuous mode [ 77.986479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.999440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.012508][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.024859][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.035095][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.045881][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.056386][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.067146][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.079550][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.097279][ T4183] device veth1_macvtap entered promiscuous mode [ 78.116479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.125712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.134779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.154909][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.166118][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.176166][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.187319][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.197993][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.208612][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.220332][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.237878][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.248985][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.259218][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.270332][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.280667][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.291373][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.301817][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.312365][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.324870][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.337480][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.349486][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.360571][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.373533][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.383705][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.394462][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.404582][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.416189][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.428477][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.437994][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.446415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.450324][ T4277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.456831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.474733][ T4277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.476323][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.486692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.499609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.509371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.518456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.528115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.539785][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.549167][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.557969][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.566932][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.607145][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.616525][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.625316][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.634816][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.645391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.759866][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.768549][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.780516][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.819575][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.854906][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.921412][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.961114][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.971109][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.985386][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.197011][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.206180][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.985571][ T4298] Bluetooth: hci4: command 0x0419 tx timeout [ 79.991863][ T4298] Bluetooth: hci1: command 0x0419 tx timeout [ 79.997941][ T4298] Bluetooth: hci2: command 0x0419 tx timeout [ 80.004450][ T4298] Bluetooth: hci0: command 0x0419 tx timeout [ 80.010520][ T4298] Bluetooth: hci3: command 0x0419 tx timeout [ 80.053777][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.103082][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.111131][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.158038][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.169112][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.179079][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.196038][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.203792][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.251144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.439663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.249847][ T4327] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.4'. [ 83.163621][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 83.172746][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 83.181737][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 83.191198][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 83.200266][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 83.209258][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 83.218249][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 83.227406][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 83.237038][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 83.601893][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 85.154559][ T4339] ======================================================= [ 85.154559][ T4339] WARNING: The mand mount option has been deprecated and [ 85.154559][ T4339] and is ignored by this kernel. Remove the mand [ 85.154559][ T4339] option from the mount to silence this warning. [ 85.154559][ T4339] ======================================================= [ 85.915661][ T4348] overlayfs: missing 'lowerdir' [ 89.382569][ T4353] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.879583][ T4353] tipc: Enabling of bearer rejected, failed to enable media [ 93.137955][ T4382] binder: 4376:4382 ioctl c0306201 0 returned -14 [ 93.476848][ T1108] cfg80211: failed to load regulatory.db [ 93.681366][ T4298] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.971274][ T4298] usb 3-1: Using ep0 maxpacket: 8 [ 94.121348][ T4298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.151283][ T4298] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 94.211568][ T4298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.415333][ T4298] usb 3-1: config 0 descriptor?? [ 95.279545][ T4394] atomic_op ffff88801b805198 conn xmit_atomic 0000000000000000 [ 95.441301][ T26] audit: type=1800 audit(1764023203.437:2): pid=4381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.18" name="bus" dev="ramfs" ino=32867 res=0 errno=0 [ 95.674976][ T4298] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 95.973904][ T4298] usb 3-1: USB disconnect, device number 2 [ 96.414956][ T4396] chnl_net:caif_netlink_parms(): no params data found [ 96.702499][ T4396] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.710395][ T4396] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.842057][ T4396] device bridge_slave_0 entered promiscuous mode [ 96.853496][ T4396] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.862396][ T4396] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.872495][ T4396] device bridge_slave_1 entered promiscuous mode [ 97.183809][ T9] Bluetooth: (null): Invalid header checksum [ 97.818385][ T4396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.862072][ T4396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.872178][ T23] Bluetooth: hci5: command 0x0409 tx timeout [ 97.968192][ T4396] team0: Port device team_slave_0 added [ 98.003859][ T4396] team0: Port device team_slave_1 added [ 98.081369][ T4298] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.152803][ T4396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.159855][ T4396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.267388][ T4396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.310193][ T4396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.335054][ T4396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.361089][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.368970][ T4298] usb 3-1: Using ep0 maxpacket: 32 [ 98.416704][ T4396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.511508][ T4298] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 98.576847][ T4396] device hsr_slave_0 entered promiscuous mode [ 98.635107][ T4396] device hsr_slave_1 entered promiscuous mode [ 98.676692][ T4396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.705929][ T4396] Cannot create hsr debugfs directory [ 98.731614][ T4298] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 98.769626][ T4298] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 98.800073][ T4298] usb 3-1: Product: syz [ 98.840654][ T4298] usb 3-1: Manufacturer: syz [ 98.870064][ T4298] usb 3-1: SerialNumber: syz [ 98.892023][ T4298] usb 3-1: config 0 descriptor?? [ 98.941544][ T4416] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 99.586305][ T4396] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.670757][ T4396] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.802285][ T4396] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.893815][ T4396] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.951910][ T23] Bluetooth: hci5: command 0x041b tx timeout [ 101.584306][ T4435] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 101.838104][ T1344] usb 3-1: USB disconnect, device number 3 [ 102.074962][ T142] Bluetooth: (null): Invalid header checksum [ 102.123566][ T142] Bluetooth: (null): Invalid header checksum [ 102.225694][ T142] Bluetooth: (null): Invalid header checksum [ 102.414458][ T142] Bluetooth: (null): Invalid header checksum [ 102.508017][ T142] Bluetooth: (null): Invalid header checksum [ 102.605437][ T1111] Bluetooth: hci5: command 0x040f tx timeout [ 102.940069][ T4448] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.846739][ T7] Bluetooth: hci6: command 0x0409 tx timeout [ 103.939969][ T4349] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.177004][ T4349] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.309477][ T4349] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.526303][ T4396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.606600][ T4349] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.661484][ T4237] Bluetooth: hci5: command 0x0419 tx timeout [ 105.023196][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.063918][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.177398][ T4396] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.258955][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.289269][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.329738][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.336925][ T4270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.445770][ T4424] chnl_net:caif_netlink_parms(): no params data found [ 105.524225][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.564306][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.585896][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.605340][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.612524][ T4270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.633664][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.716855][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.799173][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.887541][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.942861][ T4237] Bluetooth: hci6: command 0x041b tx timeout [ 105.969259][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.044222][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.522179][ T4472] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 106.551751][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.778635][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.790896][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.836196][ T4396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.897298][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.925905][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.969215][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.486115][ T4270] Bluetooth: (null): Invalid header checksum [ 107.528511][ T4270] Bluetooth: (null): Invalid header checksum [ 108.022271][ T4237] Bluetooth: hci6: command 0x040f tx timeout [ 108.112672][ T4424] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.119841][ T4424] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.187864][ T4424] device bridge_slave_0 entered promiscuous mode [ 108.220640][ T4424] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.228305][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.249361][ T4424] device bridge_slave_1 entered promiscuous mode [ 108.281254][ T4237] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.442627][ T4424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.533419][ T4424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.551419][ T4237] usb 4-1: Using ep0 maxpacket: 32 [ 108.793188][ T4237] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.835508][ T4424] team0: Port device team_slave_0 added [ 108.880564][ T4424] team0: Port device team_slave_1 added [ 109.096970][ T4424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.129867][ T4424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.156036][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.211825][ T4237] usb 4-1: config 0 has an invalid interface number: 36 but max is 0 [ 109.226934][ T4237] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 109.257171][ T4237] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 109.289838][ T4237] usb 4-1: config 0 has no interface number 0 [ 109.300316][ T4424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.331781][ T4237] usb 4-1: config 0 has no interface number 1 [ 109.355184][ T4237] usb 4-1: config 0 interface 36 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 109.424887][ T4396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.441228][ T4237] usb 4-1: too many endpoints for config 0 interface 5 altsetting 156: 226, using maximum allowed: 30 [ 109.471508][ T4237] usb 4-1: config 0 interface 5 altsetting 156 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 110.304592][ T4237] usb 4-1: config 0 interface 36 has no altsetting 0 [ 110.338478][ T4237] usb 4-1: config 0 interface 5 has no altsetting 0 [ 111.464992][ T7] Bluetooth: hci6: command 0x0419 tx timeout [ 111.498074][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.505641][ T4237] usb 4-1: string descriptor 0 read error: -71 [ 111.521401][ T4237] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=64.67 [ 111.532279][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.556740][ T4237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.814386][ T4424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.951389][ T4424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.968986][ T4237] usb 4-1: config 0 descriptor?? [ 111.977565][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.979260][ T4424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.150590][ T4237] usb 4-1: can't set config #0, error -71 [ 112.213229][ T4526] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 112.234303][ T4237] usb 4-1: USB disconnect, device number 2 [ 112.623864][ T4424] device hsr_slave_0 entered promiscuous mode [ 112.685504][ T4424] device hsr_slave_1 entered promiscuous mode [ 112.701425][ T4424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.709098][ T4424] Cannot create hsr debugfs directory [ 114.025171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.034860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.257854][ T4349] device hsr_slave_0 left promiscuous mode [ 115.288117][ T4349] device hsr_slave_1 left promiscuous mode [ 115.313721][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.341686][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.520449][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.317299][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.327251][ T4349] device bridge_slave_1 left promiscuous mode [ 116.340151][ T4349] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.390686][ T4349] device bridge_slave_0 left promiscuous mode [ 117.292448][ T4349] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.344165][ T4349] device veth1_macvtap left promiscuous mode [ 117.350772][ T4349] device veth0_macvtap left promiscuous mode [ 117.367073][ T4349] device veth1_vlan left promiscuous mode [ 117.374765][ T4349] device veth0_vlan left promiscuous mode [ 117.552041][ T1344] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.803699][ T1344] usb 3-1: Using ep0 maxpacket: 32 [ 117.931685][ T1344] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 117.951596][ T1344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.013977][ T1344] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 118.067479][ T4349] team0 (unregistering): Port device team_slave_1 removed [ 118.106425][ T4349] team0 (unregistering): Port device team_slave_0 removed [ 118.134813][ T4349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.174344][ T4349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.287177][ T4349] bond0 (unregistering): Released all slaves [ 118.364933][ T4603] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 118.375496][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.392465][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.433975][ T4396] device veth0_vlan entered promiscuous mode [ 118.442944][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.450930][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.513227][ T4396] device veth1_vlan entered promiscuous mode [ 118.575226][ T4424] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 118.634604][ T4622] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 118.641611][ T4622] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 118.662749][ T4622] vhci_hcd vhci_hcd.0: Device attached [ 118.798636][ T4424] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 118.941514][ T7] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 119.029447][ T4424] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 119.221611][ T4424] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 119.362174][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.422725][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.470762][ T4623] vhci_hcd: connection reset by peer [ 119.484315][ T4277] vhci_hcd: stop threads [ 119.490291][ T4277] vhci_hcd: release socket [ 119.578294][ T4277] vhci_hcd: disconnect device [ 119.772147][ T4396] device veth0_macvtap entered promiscuous mode [ 120.094148][ T23] usb 3-1: USB disconnect, device number 4 [ 120.658699][ T4396] device veth1_macvtap entered promiscuous mode [ 120.781015][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.823883][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.918094][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.930546][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.943631][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.397101][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.419036][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.431612][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.444623][ T4396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.455871][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.475571][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.535211][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.579735][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.590723][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.604083][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.814454][ T4396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.825483][ T4396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.852410][ T4396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.154272][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.212288][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.252233][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.261379][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.338941][ T4396] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.400283][ T4396] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.427904][ T4396] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.467530][ T4396] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.804092][ T4307] Bluetooth: (null): Invalid header checksum [ 122.908689][ T4307] Bluetooth: (null): Invalid header checksum [ 123.586001][ T4424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.621896][ T4424] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.682544][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.702995][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.140343][ T4681] process 'syz.3.77' launched './file1' with NULL argv: empty string added [ 124.152806][ T7] vhci_hcd: vhci_device speed not set [ 124.356891][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.835609][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.882153][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.889275][ T4319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.947379][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.072354][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.090623][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.108247][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.115527][ T4277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.131644][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.460898][ T4689] loop7: detected capacity change from 0 to 7 [ 125.509723][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.578888][ T4689] Dev loop7: unable to read RDB block 7 [ 125.593546][ T4689] loop7: unable to read partition table [ 125.604191][ T4689] loop7: partition table beyond EOD, truncated [ 125.616387][ T4689] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 125.659030][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.732735][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.833922][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.702103][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.710877][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.771695][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.780406][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.872358][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.890860][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.918104][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.004509][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.016665][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.087647][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.131976][ T4706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.81'. [ 127.361690][ T4524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.447834][ T4524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.697623][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.234946][ T4731] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.254871][ T4735] tipc: Started in network mode [ 129.259968][ T4735] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 129.269652][ T4735] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 129.278714][ T4735] tipc: Enabled bearer , priority 10 [ 129.581522][ T4174] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.687926][ T4741] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 129.719150][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.810346][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.831455][ T4174] usb 1-1: Using ep0 maxpacket: 32 [ 129.952029][ T4174] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.048658][ T4174] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.103625][ T4424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.251868][ T4174] usb 1-1: config 0 interface 0 has no altsetting 0 [ 130.651403][ T4174] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 130.670860][ T4174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.698395][ T7] tipc: Node number set to 1 [ 130.785289][ T4748] erofs: (device nbd2): erofs_read_superblock: cannot find valid erofs superblock [ 131.087934][ T4174] usb 1-1: config 0 descriptor?? [ 131.159409][ T4174] usb 1-1: can't set config #0, error -71 [ 131.192985][ T4174] usb 1-1: USB disconnect, device number 2 [ 131.424309][ T1108] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 132.831236][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 133.052208][ T1108] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.410440][ T1108] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 133.491332][ T1108] usb 4-1: config 0 interface 0 has no altsetting 0 [ 133.521694][ T1108] usb 4-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 133.552879][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.592444][ T1108] usb 4-1: config 0 descriptor?? [ 133.811491][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.840942][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.900232][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.929086][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.971630][ T4424] device veth0_vlan entered promiscuous mode [ 134.004976][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.032171][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.070895][ T4424] device veth1_vlan entered promiscuous mode [ 134.181498][ T4298] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 134.183386][ T1108] hid-generic 0003:0C70:F003.0001: unknown main item tag 0x0 [ 134.268234][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.279705][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.681390][ T4298] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.684906][ T1108] hid-generic 0003:0C70:F003.0001: unknown main item tag 0x0 [ 134.691755][ T4298] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 134.724361][ T4798] (syz.0.97,4798,1):dlmfs_mkdir:413 ERROR: invalid domain name for directory. [ 134.741216][ T4298] usb 3-1: config 1 has no interface number 0 [ 134.741577][ T1108] hid-generic 0003:0C70:F003.0001: unknown main item tag 0x0 [ 134.767748][ T1108] hid-generic 0003:0C70:F003.0001: unknown main item tag 0x0 [ 134.771227][ T4298] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.779763][ T1108] hid-generic 0003:0C70:F003.0001: unknown main item tag 0x0 [ 134.814424][ T4298] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 134.820832][ T1108] hid-generic 0003:0C70:F003.0001: hidraw0: USB HID v0.05 Device [HID 0c70:f003] on usb-dummy_hcd.3-1/input0 [ 134.849153][ T4298] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 134.868674][ T4298] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.896553][ T4298] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.929336][ T1108] usb 4-1: USB disconnect, device number 3 [ 135.010117][ T4349] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.032468][ T4803] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 135.084811][ T4802] fido_id[4802]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 135.253665][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 135.281490][ T4298] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.301379][ T4298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.309568][ T4298] usb 3-1: Product: syz [ 135.322680][ T4298] usb 3-1: Manufacturer: syz [ 135.327420][ T4298] usb 3-1: SerialNumber: syz [ 136.161683][ T4779] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 136.290797][ T4349] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.399389][ T4810] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 137.227012][ T4349] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.240238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.332063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.742194][ T4298] cdc_ncm 3-1:1.1: bind() failure [ 137.881385][ T4298] usb 3-1: USB disconnect, device number 5 [ 137.882526][ T4349] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.890243][ T4818] loop3: detected capacity change from 0 to 256 [ 137.954559][ T4424] device veth0_macvtap entered promiscuous mode [ 137.988346][ T4424] device veth1_macvtap entered promiscuous mode [ 138.091525][ T4818] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.131539][ T4818] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 138.151821][ T4818] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 138.162684][ T4424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.240554][ T4424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.289139][ T4424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.330419][ T4424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.408593][ T4424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.470427][ T4424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.501478][ T4424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.531262][ T4424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.563962][ T4424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.620877][ T4424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.656332][ T4424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.700930][ T4424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.734730][ T4424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.833578][ T4424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.875551][ T4424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.917470][ T4424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.959852][ T4424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.021227][ T4424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.070805][ T4424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.107229][ T4424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.161178][ T4424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.232344][ T4424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.283540][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.332640][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.354992][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.384943][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.426389][ T4424] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.471290][ T4424] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.542758][ T4424] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.606589][ T4424] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.054353][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.067659][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.081070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.333524][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.122586][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.370262][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.760449][ T4868] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 145.726372][ T4890] loop0: detected capacity change from 0 to 256 [ 145.732958][ T4349] device hsr_slave_0 left promiscuous mode [ 145.806572][ T4349] device hsr_slave_1 left promiscuous mode [ 145.824392][ T4890] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.839129][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.851269][ T4890] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 145.870922][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.044188][ T4890] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 146.069439][ T4349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.812110][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.824948][ T4349] device bridge_slave_1 left promiscuous mode [ 146.841498][ T4349] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.871976][ T4349] device bridge_slave_0 left promiscuous mode [ 146.899737][ T4349] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.615080][ T4349] device veth1_macvtap left promiscuous mode [ 148.658954][ T4349] device veth0_macvtap left promiscuous mode [ 148.727025][ T4349] device veth1_vlan left promiscuous mode [ 148.735716][ T4349] device veth0_vlan left promiscuous mode [ 150.921421][ T4298] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 151.037204][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 151.053704][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 151.263196][ T4932] ceph: No mds server is up or the cluster is laggy [ 151.333576][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 151.339676][ T4298] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 151.348959][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 151.355554][ T4298] usb 6-1: config 0 has no interface number 0 [ 151.362263][ T4298] usb 6-1: too many endpoints for config 0 interface 231 altsetting 238: 205, using maximum allowed: 30 [ 151.374118][ T4298] usb 6-1: config 0 interface 231 altsetting 238 has 0 endpoint descriptors, different from the interface descriptor's value: 205 [ 151.388031][ T4298] usb 6-1: config 0 interface 231 has no altsetting 0 [ 151.581654][ T4298] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 151.604186][ T4298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.621605][ T4298] usb 6-1: Product: syz [ 151.626190][ T4298] usb 6-1: Manufacturer: syz [ 151.631022][ T4298] usb 6-1: SerialNumber: syz [ 151.666409][ T4298] usb 6-1: config 0 descriptor?? [ 152.042382][ T4298] hub 6-1:0.231: bad descriptor, ignoring hub [ 152.048526][ T4298] hub: probe of 6-1:0.231 failed with error -5 [ 152.111699][ T4865] ALSA: mixer_oss: invalid OSS volume '' [ 152.141571][ T4298] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 152.352396][ T4298] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 152.392344][ T4298] dib0700: firmware download failed at 7 with -22 [ 152.470437][ T4298] usb 6-1: USB disconnect, device number 2 [ 153.020283][ T4349] team0 (unregistering): Port device team_slave_1 removed [ 153.144015][ T4349] team0 (unregistering): Port device team_slave_0 removed [ 153.242632][ T4349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.297528][ T4349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.079764][ T4974] loop5: detected capacity change from 0 to 256 [ 155.162343][ T4974] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.245472][ T4974] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 155.289201][ T4349] bond0 (unregistering): Released all slaves [ 155.302105][ T4974] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 155.848819][ T4921] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 155.947159][ T4976] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 159.112789][ T5027] loop5: detected capacity change from 0 to 256 [ 159.200899][ T5027] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.281868][ T5027] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 159.379112][ T5027] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 170.500877][ T5142] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 172.121942][ T5154] loop3: detected capacity change from 0 to 256 [ 172.184978][ T5154] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.354277][ T5154] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 172.440099][ T5163] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 172.443497][ T5154] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 172.840176][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 177.808691][ T5205] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 178.947710][ T5202] infiniband syz!: set active [ 178.953558][ T5202] infiniband syz!: added team_slave_0 [ 179.160718][ T4307] Bluetooth: (null): Invalid header checksum [ 180.006841][ T5202] infiniband syz!: Couldn't open port 1 [ 180.235211][ T5230] loop6: detected capacity change from 0 to 256 [ 180.438941][ T5230] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.502277][ T5230] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 180.528542][ T5230] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 181.372835][ T5202] RDS/IB: syz!: added [ 181.377413][ T5202] smc: adding ib device syz! with port count 1 [ 181.389797][ T5202] smc: ib device syz! port 1 has pnetid [ 183.559276][ T5265] xt_hashlimit: max too large, truncated to 1048576 [ 184.318556][ T5284] syz.3.197 uses obsolete (PF_INET,SOCK_PACKET) [ 186.449330][ T4307] Bluetooth: (null): Invalid header checksum [ 186.466704][ T4307] Bluetooth: (null): Invalid header checksum [ 186.483257][ T4307] Bluetooth: (null): Invalid header checksum [ 186.558437][ T4349] Bluetooth: (null): Invalid header checksum [ 186.623300][ T9] Bluetooth: (null): Invalid header checksum [ 186.644304][ T5311] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 187.061967][ T5321] erofs: (device nbd5): erofs_read_superblock: cannot find valid erofs superblock [ 190.748333][ T5361] loop6: detected capacity change from 0 to 256 [ 190.885094][ T5361] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.917866][ T5361] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 190.966715][ T5361] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 192.389505][ T142] Bluetooth: (null): Invalid header checksum [ 192.397410][ T142] Bluetooth: (null): Invalid header checksum [ 192.413657][ T142] Bluetooth: (null): Invalid header checksum [ 192.573753][ T4307] Bluetooth: (null): Invalid header checksum [ 193.931138][ C0] sched: RT throttling activated [ 195.491900][ T4627] Bluetooth: hci0: command 0x0409 tx timeout [ 195.633437][ T5418] ceph: No mds server is up or the cluster is laggy [ 195.655441][ T4237] libceph: connect (1)[c::]:6789 error -101 [ 195.671645][ T4237] libceph: mon0 (1)[c::]:6789 connect error [ 195.705656][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.712200][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.808801][ T5425] netlink: 'syz.3.224': attribute type 10 has an invalid length. [ 195.827016][ T5425] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 195.971386][ T4237] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 196.271754][ T4237] usb 6-1: Using ep0 maxpacket: 16 [ 196.349677][ T1108] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 196.721528][ T4237] usb 6-1: unable to get BOS descriptor or descriptor too short [ 196.817241][ T4237] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 196.851600][ T4237] usb 6-1: can't read configurations, error -71 [ 196.925389][ T5388] chnl_net:caif_netlink_parms(): no params data found [ 196.981950][ T1108] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 197.004258][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.045971][ T1108] usb 7-1: config 0 descriptor?? [ 197.110983][ T5446] loop3: detected capacity change from 0 to 256 [ 197.171086][ T5446] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.249082][ T5388] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.267299][ T5388] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.276118][ T5388] device bridge_slave_0 entered promiscuous mode [ 197.310638][ T5388] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.320519][ T5446] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 197.324960][ T5388] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.355054][ T1108] kaweth 7-1:0.0: Firmware present in device. [ 197.366989][ T5388] device bridge_slave_1 entered promiscuous mode [ 197.393942][ T5446] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 198.086654][ T4627] Bluetooth: hci0: command 0x041b tx timeout [ 199.103705][ T1108] kaweth 7-1:0.0: Statistics collection: 0 [ 199.103761][ T1108] kaweth 7-1:0.0: Multicast filter limit: 0 [ 199.103778][ T1108] kaweth 7-1:0.0: MTU: 0 [ 199.103793][ T1108] kaweth 7-1:0.0: Read MAC address 00:00:00:00:00:00 [ 199.157868][ T4262] Bluetooth: hci2: command 0x0406 tx timeout [ 199.157948][ T4262] Bluetooth: hci1: command 0x0406 tx timeout [ 199.191447][ T1108] kaweth: probe of 7-1:0.0 failed with error -5 [ 199.194758][ T1108] usb 7-1: USB disconnect, device number 2 [ 199.528170][ T5388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.608984][ T5388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.672141][ T4349] Bluetooth: (null): Invalid header checksum [ 199.679198][ T4349] Bluetooth: (null): Invalid header checksum [ 199.800668][ T4349] Bluetooth: (null): Invalid header checksum [ 199.869677][ T5388] team0: Port device team_slave_0 added [ 199.891522][ T4349] Bluetooth: (null): Invalid header checksum [ 199.930998][ T5388] team0: Port device team_slave_1 added [ 200.010516][ T142] Bluetooth: (null): Invalid header checksum [ 200.310327][ T5388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.592507][ T5388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.905506][ T5388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.959840][ T5388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.981845][ T5388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.058909][ T5388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.191379][ T1108] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 201.231545][ T4237] Bluetooth: hci0: command 0x040f tx timeout [ 201.245283][ T5388] device hsr_slave_0 entered promiscuous mode [ 201.484240][ T5388] device hsr_slave_1 entered promiscuous mode [ 201.515937][ T1108] usb 6-1: Using ep0 maxpacket: 32 [ 202.111461][ T1108] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 202.141278][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.170864][ T1108] usb 6-1: Product: syz [ 202.191161][ T1108] usb 6-1: Manufacturer: syz [ 202.223080][ T5517] mmap: syz.3.238 (5517) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 202.231469][ T1108] usb 6-1: SerialNumber: syz [ 202.303139][ T1108] usb 6-1: config 0 descriptor?? [ 202.317497][ T5519] loop2: detected capacity change from 0 to 7 [ 202.496498][ T5521] loop6: detected capacity change from 0 to 256 [ 202.613664][ T5521] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.754696][ T5521] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 202.780416][ T5519] Dev loop2: unable to read RDB block 7 [ 202.788723][ T5519] loop2: unable to read partition table [ 202.805242][ T5521] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 202.821322][ T1108] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 202.830377][ T5519] loop2: partition table beyond EOD, truncated [ 202.839235][ T1108] peak_usb 6-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 202.874782][ T5519] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 202.992750][ T5388] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 203.362287][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 203.372916][ T5388] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 203.750424][ T1108] peak_usb: probe of 6-1:0.0 failed with error -71 [ 203.750682][ T5388] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 203.768656][ T1108] usb 6-1: USB disconnect, device number 5 [ 203.835699][ T5388] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 204.177385][ T5388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.238376][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.272088][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.317486][ T5388] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.375113][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.406334][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.455518][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.462703][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.494201][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.504307][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.521768][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.529000][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.555254][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.573582][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.595431][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.643253][ T4270] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.662160][ T9] Bluetooth: (null): Invalid header checksum [ 204.668637][ T9] Bluetooth: (null): Invalid header checksum [ 204.688928][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.707921][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.773255][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.780884][ T9] Bluetooth: (null): Invalid header checksum [ 204.797586][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.814014][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.848142][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.876493][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.909275][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.965026][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.989306][ T154] Bluetooth: (null): Invalid header checksum [ 204.996640][ T154] Bluetooth: (null): Invalid header checksum [ 205.018935][ T4270] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.139374][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.665316][ T4270] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.899114][ T5577] netlink: 60 bytes leftover after parsing attributes in process `syz.6.248'. [ 205.931364][ T5577] Zero length message leads to an empty skb [ 206.655385][ T4270] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.961560][ T5596] loop3: detected capacity change from 0 to 256 [ 207.246219][ T5596] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.658087][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.669522][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.700396][ T5596] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 207.717857][ T5596] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 207.768617][ T5388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.644017][ T1344] Bluetooth: hci3: command 0x0409 tx timeout [ 210.692846][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 211.569711][ T5644] device syzkaller0 entered promiscuous mode [ 211.578997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.595474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.651429][ T5650] loop6: detected capacity change from 0 to 256 [ 211.675897][ T5580] chnl_net:caif_netlink_parms(): no params data found [ 211.711736][ T5644] tipc: Started in network mode [ 211.721309][ T5644] tipc: Node identity ce4d50eba609, cluster identity 4711 [ 211.729041][ T5644] tipc: Enabled bearer , priority 0 [ 211.750732][ T5650] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.767815][ T5650] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 211.814005][ T5650] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 212.078718][ T5642] tipc: Resetting bearer [ 212.542766][ T26] audit: type=1326 audit(1764023833.445:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.5.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6b988749 code=0x7fc00000 [ 212.564810][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.645878][ T26] audit: type=1326 audit(1764023833.445:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.5.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f7f6b988749 code=0x7fc00000 [ 212.722646][ T26] audit: type=1326 audit(1764023833.445:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.5.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6b988749 code=0x7fc00000 [ 212.744861][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.801982][ T4262] Bluetooth: hci3: command 0x040f tx timeout [ 212.843030][ T5642] tipc: Disabling bearer [ 212.852971][ T4261] tipc: Node number set to 1749307627 [ 212.858673][ T26] audit: type=1326 audit(1764023833.445:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.5.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6b988749 code=0x7fc00000 [ 212.880700][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.897004][ T26] audit: type=1326 audit(1764023833.445:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.5.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6b988749 code=0x7fc00000 [ 212.932222][ T26] audit: type=1326 audit(1764023833.445:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.5.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6b988749 code=0x7fc00000 [ 212.955780][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.976968][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.997151][ T26] audit: type=1326 audit(1764023833.455:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.5.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6b988749 code=0x7fc00000 [ 213.003121][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.044715][ T26] audit: type=1326 audit(1764023833.455:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.5.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6b988749 code=0x7fc00000 [ 213.067692][ T26] audit: type=1326 audit(1764023833.455:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.5.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6b988749 code=0x7fc00000 [ 213.090594][ T26] audit: type=1326 audit(1764023833.455:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.5.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6b988749 code=0x7fc00000 [ 213.115286][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.129060][ T5388] device veth0_vlan entered promiscuous mode [ 213.180191][ T5388] device veth1_vlan entered promiscuous mode [ 214.317133][ T5677] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 214.968792][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 215.213902][ T5388] device veth0_macvtap entered promiscuous mode [ 215.231587][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.239507][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.258275][ T5580] device bridge_slave_0 entered promiscuous mode [ 215.303067][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.323261][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.339153][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.833629][ T154] Bluetooth: (null): Invalid header checksum [ 215.910574][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.011312][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.055255][ T5580] device bridge_slave_1 entered promiscuous mode [ 216.450781][ T5713] loop3: detected capacity change from 0 to 256 [ 216.471781][ T5713] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.486347][ T5388] device veth1_macvtap entered promiscuous mode [ 216.500337][ T5713] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 216.525674][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.534506][ T5713] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 216.696890][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.731955][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.534882][ T5388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.552004][ T5388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.577800][ T5388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.600563][ T5388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.629505][ T5388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.659987][ T5388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.700469][ T5388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.751240][ T5388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.779424][ T5388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.801189][ T5388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.821897][ T5388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.981632][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.992227][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.035189][ T5388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.950896][ T4262] Bluetooth: hci5: command 0x0406 tx timeout [ 220.040452][ T5388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.050693][ T5388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.068457][ T5388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.084127][ T5388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.107225][ T5388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.124798][ T5388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.141229][ T5388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.151431][ T5388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.162213][ T5388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.173973][ T5388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.288231][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.447122][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.606672][ T5580] team0: Port device team_slave_0 added [ 220.868149][ T5388] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.921200][ T5388] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.953554][ T5388] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.989982][ T5388] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.617973][ T5580] team0: Port device team_slave_1 added [ 222.409859][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.437342][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.477722][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.601213][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.608243][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.674348][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.181387][ T4292] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 224.561399][ T4174] Bluetooth: hci6: command 0x0406 tx timeout [ 224.738701][ T4270] device hsr_slave_0 left promiscuous mode [ 224.754449][ T4270] device hsr_slave_1 left promiscuous mode [ 224.769029][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.780650][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.809257][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.817770][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.832920][ T4270] device bridge_slave_1 left promiscuous mode [ 224.839251][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.847083][ T4292] usb 6-1: Using ep0 maxpacket: 32 [ 224.854912][ T4270] device bridge_slave_0 left promiscuous mode [ 224.861382][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.876521][ T4270] rdma_rxe: ignoring netdev event = 10 for team_slave_0 [ 224.898217][ T4270] device veth1_macvtap left promiscuous mode [ 224.915193][ T4270] device veth0_macvtap left promiscuous mode [ 224.927794][ T4270] device veth1_vlan left promiscuous mode [ 224.936888][ T4270] device veth0_vlan left promiscuous mode [ 225.088261][ T4270] rdma_rxe: ignoring netdev event = 27 for team_slave_0 [ 225.113423][ T4270] infiniband syz!: set down [ 225.141530][ T4292] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 225.158534][ T4292] usb 6-1: config 0 has no interface number 0 [ 225.180407][ T4292] usb 6-1: config 0 interface 184 has no altsetting 0 [ 225.347896][ T4270] team0 (unregistering): Port device team_slave_1 removed [ 225.361866][ T4292] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 225.363980][ T4270] rdma_rxe: ignoring netdev event = 27 for team_slave_0 [ 225.370989][ T4292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.378256][ T4270] rdma_rxe: ignoring netdev event = 26 for team_slave_0 [ 225.395898][ T4270] rdma_rxe: ignoring netdev event = 21 for team_slave_0 [ 225.399138][ T4292] usb 6-1: Product: syz [ 225.407616][ T4292] usb 6-1: Manufacturer: syz [ 225.410061][ T4270] rdma_rxe: ignoring netdev event = 9 for team_slave_0 [ 225.412413][ T4292] usb 6-1: SerialNumber: syz [ 225.420065][ T4270] rdma_rxe: ignoring netdev event = 8 for team_slave_0 [ 225.428398][ T4292] usb 6-1: config 0 descriptor?? [ 225.436726][ T4270] team0 (unregistering): Port device team_slave_0 removed [ 225.456707][ T4270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.457923][ T4277] smc: removing ib device syz! [ 225.483134][ T4270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.483147][ T4292] smsc75xx v1.0.0 [ 225.583367][ T4270] bond0 (unregistering): Released all slaves [ 225.669564][ T5580] device hsr_slave_0 entered promiscuous mode [ 225.676932][ T5580] device hsr_slave_1 entered promiscuous mode [ 225.720319][ T5580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.730438][ T5580] Cannot create hsr debugfs directory [ 225.934315][ T4322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.987671][ T4322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.073956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.191445][ T4292] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 226.309773][ T4292] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 226.336106][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.376420][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.548301][ T4292] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 226.581379][ T4292] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 226.600654][ T4292] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 226.611421][ T4292] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 226.625116][ T4292] smsc75xx: probe of 6-1:0.184 failed with error -32 [ 226.866530][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 227.968840][ T21] usb 6-1: USB disconnect, device number 6 [ 228.162868][ T5580] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 228.213221][ T5580] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 228.297618][ T5580] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 228.387195][ T5580] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 231.024163][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.205392][ T4188] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 231.216185][ T4188] CPU: 0 PID: 4188 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 231.219819][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.223778][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.223834][ T4188] Workqueue: hci6 hci_rx_work [ 231.223892][ T4188] Call Trace: [ 231.248620][ T4188] [ 231.251654][ T4188] dump_stack_lvl+0x168/0x230 [ 231.256470][ T4188] ? show_regs_print_info+0x20/0x20 [ 231.261714][ T4188] ? load_image+0x3b0/0x3b0 [ 231.266273][ T4188] sysfs_create_dir_ns+0x252/0x280 [ 231.271431][ T4188] ? __lock_acquire+0x7c60/0x7c60 [ 231.276574][ T4188] ? sysfs_warn_dup+0xa0/0xa0 [ 231.281291][ T4188] ? do_raw_spin_unlock+0x11d/0x230 [ 231.286594][ T4188] kobject_add_internal+0x662/0xd00 [ 231.291816][ T4188] kobject_add+0x152/0x210 [ 231.296313][ T4188] ? kobject_init+0x1d0/0x1d0 [ 231.301000][ T4188] ? klist_children_get+0x50/0x50 [ 231.306034][ T4188] ? get_device_parent+0x121/0x3f0 [ 231.311175][ T4188] device_add+0x483/0xfb0 [ 231.315528][ T4188] hci_conn_add_sysfs+0xd1/0x1e0 [ 231.320482][ T4188] le_conn_complete_evt+0xcbc/0x1590 [ 231.325784][ T4188] ? cs_le_create_conn+0x5e0/0x5e0 [ 231.330904][ T4188] ? __mutex_trylock_common+0x14f/0x250 [ 231.336488][ T4188] hci_le_meta_evt+0x289/0x3b80 [ 231.341350][ T4188] ? hci_event_packet+0x36d/0x12f0 [ 231.346467][ T4188] ? hci_event_packet+0x2e2/0x12f0 [ 231.351586][ T4188] ? __lock_acquire+0x7c60/0x7c60 [ 231.356628][ T4188] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 231.362616][ T4188] ? lock_chain_count+0x20/0x20 [ 231.367616][ T4188] ? hci_remote_host_features_evt+0x280/0x280 [ 231.373742][ T4188] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 231.379383][ T4188] ? mutex_unlock+0x10/0x10 [ 231.383891][ T4188] ? asm_sysvec_call_function_single+0x16/0x20 [ 231.390055][ T4188] hci_event_packet+0xe05/0x12f0 [ 231.395008][ T4188] ? lockdep_hardirqs_on+0x94/0x140 [ 231.400218][ T4188] ? rcu_lock_release+0x20/0x20 [ 231.405091][ T4188] ? hci_send_to_monitor+0x9c/0x4a0 [ 231.410294][ T4188] hci_rx_work+0x255/0xa10 [ 231.414726][ T4188] process_one_work+0x863/0x1000 [ 231.419676][ T4188] ? worker_detach_from_pool+0x240/0x240 [ 231.425424][ T4188] ? lockdep_hardirqs_off+0x70/0x100 [ 231.430719][ T4188] ? _raw_spin_lock_irq+0xab/0xe0 [ 231.435742][ T4188] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 231.441121][ T4188] ? wq_worker_running+0x97/0x170 [ 231.446161][ T4188] worker_thread+0xaa8/0x12a0 [ 231.450926][ T4188] kthread+0x436/0x520 [ 231.455015][ T4188] ? rcu_lock_release+0x20/0x20 [ 231.459875][ T4188] ? kthread_blkcg+0xd0/0xd0 [ 231.464472][ T4188] ret_from_fork+0x1f/0x30 [ 231.468911][ T4188] [ 231.492389][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.519601][ T4188] kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 231.535226][ T4188] Bluetooth: hci6: failed to register connection device [ 231.543802][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.556292][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 231.625551][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.638632][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.650783][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.658028][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.672804][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.723965][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.833485][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.840646][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.841387][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 231.888220][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.910540][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.954670][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.991738][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.059595][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.073148][ T7] usb 4-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 232.185382][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.195156][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.204844][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.211701][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 232.222220][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.254451][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.270743][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.301461][ T7] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 232.310879][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.359512][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.390234][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.410129][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.453027][ T7] usb 4-1: config 0 descriptor?? [ 232.543292][ T5872] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 232.578465][ T5872] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 232.595169][ T7] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 233.253623][ T5866] sctp: failed to load transform for md5: -2 [ 233.713297][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.749889][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.829008][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.019006][ T5901] crypto_alloc_aead failed rc=-2 [ 234.827178][ T142] Bluetooth: (null): Invalid header checksum [ 234.838119][ T142] Bluetooth: (null): Invalid header checksum [ 235.109190][ T142] Bluetooth: (null): Invalid header checksum [ 235.762666][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.788397][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.850508][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.890807][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.932361][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.958024][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.990718][ T5580] device veth0_vlan entered promiscuous mode [ 236.035234][ T5580] device veth1_vlan entered promiscuous mode [ 236.131070][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 236.148459][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 236.178421][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 236.188108][ T4292] usb 4-1: USB disconnect, device number 4 [ 236.228351][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 236.290597][ T5580] device veth0_macvtap entered promiscuous mode [ 236.353094][ T5580] device veth1_macvtap entered promiscuous mode [ 237.268022][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.372326][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.567911][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.681181][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.981240][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.173422][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.354340][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.500268][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.510498][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.521570][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.531771][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.543586][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.555380][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.581307][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.595703][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.605699][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.616319][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.626336][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.637504][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.657704][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.679253][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.076241][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.139655][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.411378][ T5203] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 239.434782][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.596545][ T5963] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 239.596870][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 239.597644][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.598209][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.598858][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.635191][ T5580] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.635276][ T5580] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.635306][ T5580] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.635436][ T5580] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.972478][ T5203] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.972537][ T5203] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 239.972564][ T5203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.976970][ T5203] usb 6-1: config 0 descriptor?? [ 240.033902][ T5203] pwc: Askey VC010 type 2 USB webcam detected. [ 240.047648][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.047775][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.051808][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 240.135988][ T5701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.136072][ T5701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.139993][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 240.426457][ T5998] MD5 Hash mismatch for [fe80::bb]:0->[fe80::aa]:20002 L3 index 0 [ 240.451377][ T5203] pwc: recv_control_msg error -32 req 02 val 2b00 [ 240.571329][ T5203] pwc: recv_control_msg error -32 req 02 val 2700 [ 240.611279][ T5203] pwc: recv_control_msg error -32 req 02 val 2c00 [ 240.661915][ T5203] pwc: recv_control_msg error -32 req 04 val 1000 [ 240.864758][ T5203] pwc: recv_control_msg error -32 req 04 val 1300 [ 240.937364][ T5203] pwc: recv_control_msg error -32 req 04 val 1400 [ 241.881659][ T5203] pwc: recv_control_msg error -32 req 02 val 2000 [ 241.942270][ T5203] pwc: recv_control_msg error -32 req 02 val 2100 [ 242.332913][ T5203] pwc: recv_control_msg error -71 req 02 val 2500 [ 242.351560][ T5203] pwc: recv_control_msg error -71 req 02 val 2400 [ 242.371441][ T5203] pwc: recv_control_msg error -71 req 02 val 2600 [ 242.401289][ T5203] pwc: recv_control_msg error -71 req 02 val 2900 [ 242.431831][ T5203] pwc: recv_control_msg error -71 req 02 val 2800 [ 242.472463][ T5203] pwc: recv_control_msg error -71 req 04 val 1100 [ 242.525954][ T5203] pwc: recv_control_msg error -71 req 04 val 1200 [ 242.618119][ T5203] pwc: Registered as video103. [ 242.662205][ T5203] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input5 [ 242.951785][ T5203] usb 6-1: USB disconnect, device number 7 [ 246.010092][ T6058] ALSA: mixer_oss: invalid OSS volume '' [ 247.554633][ T5618] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 248.191315][ T5618] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 248.471416][ T5618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.481518][ T5618] usb 6-1: Product: syz [ 248.485731][ T5618] usb 6-1: Manufacturer: syz [ 248.490346][ T5618] usb 6-1: SerialNumber: syz [ 248.502321][ T5618] usb 6-1: config 0 descriptor?? [ 248.562809][ T5618] hub 6-1:0.0: bad descriptor, ignoring hub [ 248.572924][ T5618] hub: probe of 6-1:0.0 failed with error -5 [ 248.650651][ T6105] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 248.931333][ T5618] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 248.940647][ T6099] netlink: 24 bytes leftover after parsing attributes in process `syz.6.338'. [ 248.959646][ T5618] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 248.985947][ T5618] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 249.137318][ T5618] usb 6-1: media controller created [ 249.155855][ T5618] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.229637][ T5618] DVB: Unable to find symbol dib7000p_attach() [ 249.239901][ T5618] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 249.443130][ T4270] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.481349][ T5618] rc_core: IR keymap rc-dib0700-rc5 not found [ 249.644299][ T5618] Registered IR keymap rc-empty [ 249.674885][ T5618] dvb-usb: could not initialize remote control. [ 249.682923][ T5618] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 249.720794][ T5618] usb 6-1: USB disconnect, device number 8 [ 250.331988][ T4270] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.398620][ T5618] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 250.804973][ T4270] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.321352][ T5618] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 252.006209][ T4270] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.341215][ T5618] usb 8-1: Using ep0 maxpacket: 16 [ 252.691405][ T5618] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.711190][ T5618] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.745414][ T5618] usb 8-1: config 0 interface 0 has no altsetting 0 [ 252.762576][ T5618] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 252.796902][ T5618] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.805687][ T6130] sctp: failed to load transform for md5: -2 [ 252.922063][ T5618] usb 8-1: config 0 descriptor?? [ 253.583129][ T5618] hid-generic 0003:1E71:2009.0002: unknown main item tag 0x0 [ 253.591323][ T5618] hid-generic 0003:1E71:2009.0002: unknown main item tag 0x0 [ 253.598776][ T5618] hid-generic 0003:1E71:2009.0002: unknown main item tag 0x0 [ 253.607744][ T5618] hid-generic 0003:1E71:2009.0002: unknown main item tag 0x0 [ 253.620819][ T5618] hid-generic 0003:1E71:2009.0002: unknown main item tag 0x0 [ 253.667893][ T5618] hid-generic 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 255.208842][ T4270] device hsr_slave_0 left promiscuous mode [ 255.408342][ T4270] device hsr_slave_1 left promiscuous mode [ 255.432615][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.440107][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.764328][ T7] usb 8-1: USB disconnect, device number 2 [ 256.291593][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.398035][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.442387][ T4270] device bridge_slave_1 left promiscuous mode [ 256.448772][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.522735][ T4270] device bridge_slave_0 left promiscuous mode [ 256.561598][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.663395][ T4270] device veth1_macvtap left promiscuous mode [ 256.753484][ T4270] device veth0_macvtap left promiscuous mode [ 257.009059][ T4270] device veth1_vlan left promiscuous mode [ 257.089444][ T4270] device veth0_vlan left promiscuous mode [ 257.154055][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.160439][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.702219][ T6222] sctp: failed to load transform for md5: -2 [ 258.941598][ T4524] Bluetooth: (null): Invalid header checksum [ 258.954449][ T4524] Bluetooth: (null): Invalid header checksum [ 259.070215][ T4319] Bluetooth: (null): Invalid header checksum [ 261.385090][ T4270] team0 (unregistering): Port device team_slave_1 removed [ 261.636602][ T4270] team0 (unregistering): Port device team_slave_0 removed [ 262.253708][ T6269] sctp: failed to load transform for md5: -2 [ 262.265225][ T4270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.301392][ T4270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.066611][ T4270] bond0 (unregistering): Released all slaves [ 264.307711][ T6300] xt_cgroup: xt_cgroup: no path or classid specified [ 264.940347][ T9] Bluetooth: (null): Invalid header checksum [ 264.993391][ T9] Bluetooth: (null): Invalid header checksum [ 265.163156][ T9] Bluetooth: (null): Invalid header checksum [ 265.169784][ T9] Bluetooth: (null): Invalid header checksum [ 265.176576][ T9] Bluetooth: (null): Invalid header checksum [ 268.337420][ T6343] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=36315 (72630 ns) > initial count (256 ns). Using initial count to start timer. [ 268.772309][ T6351] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 270.841365][ T6348] sctp: failed to load transform for md5: -2 [ 272.591470][ T1108] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 273.996741][ T1108] usb 8-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 274.013907][ T1108] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.022918][ T1108] usb 8-1: Product: syz [ 274.027119][ T1108] usb 8-1: Manufacturer: syz [ 274.032399][ T1108] usb 8-1: SerialNumber: syz [ 274.042023][ T1108] usb 8-1: config 0 descriptor?? [ 274.093017][ T1108] hub 8-1:0.0: bad descriptor, ignoring hub [ 274.098995][ T1108] hub: probe of 8-1:0.0 failed with error -5 [ 274.491352][ T1108] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 274.517197][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 274.547339][ T1108] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 274.556116][ T1108] usb 8-1: media controller created [ 274.646496][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.930413][ T1108] DVB: Unable to find symbol dib7000p_attach() [ 274.941191][ T1108] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 275.142052][ T1108] rc_core: IR keymap rc-dib0700-rc5 not found [ 275.157940][ T1108] Registered IR keymap rc-empty [ 275.192037][ T1108] dvb-usb: could not initialize remote control. [ 275.258521][ T1108] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 275.418850][ T1108] usb 8-1: USB disconnect, device number 3 [ 275.586449][ T1108] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 275.741166][ T21] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 276.021217][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 276.301822][ T21] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 276.369970][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.541907][ T21] usb 6-1: Product: syz [ 276.617515][ T21] usb 6-1: Manufacturer: syz [ 276.710334][ T21] usb 6-1: SerialNumber: syz [ 276.961993][ T21] usb 6-1: config 0 descriptor?? [ 277.041637][ T6449] sctp: failed to load transform for md5: -2 [ 277.082375][ T21] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 277.487095][ T6459] tmpfs: Unknown parameter 'grpquota' [ 280.021633][ T21] gspca_stk1135: reg_w 0x2ff err -71 [ 280.028171][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 280.051473][ T21] gspca_stk1135: Sensor write failed [ 280.056893][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 280.063663][ T21] gspca_stk1135: Sensor write failed [ 280.069010][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 280.076272][ T21] gspca_stk1135: Sensor read failed [ 280.082169][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 280.088542][ T21] gspca_stk1135: Sensor read failed [ 280.098339][ T21] gspca_stk1135: Detected sensor type unknown (0x0) [ 280.105814][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 280.121736][ T21] gspca_stk1135: Sensor read failed [ 280.127132][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 280.156574][ T6486] ================================================================== [ 280.165224][ T6486] BUG: KASAN: use-after-free in ax25_fillin_cb+0x459/0x640 [ 280.172454][ T6486] Read of size 4 at addr ffff8880200f7a38 by task syz.5.420/6486 [ 280.180187][ T6486] [ 280.182522][ T6486] CPU: 0 PID: 6486 Comm: syz.5.420 Not tainted syzkaller #0 [ 280.189819][ T6486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.199901][ T6486] Call Trace: [ 280.203208][ T6486] [ 280.206160][ T6486] dump_stack_lvl+0x168/0x230 [ 280.210873][ T6486] ? show_regs_print_info+0x20/0x20 [ 280.216118][ T6486] ? _printk+0xcc/0x110 [ 280.220287][ T6486] ? ax25_fillin_cb+0x459/0x640 [ 280.225146][ T6486] ? load_image+0x3b0/0x3b0 [ 280.229662][ T6486] print_address_description+0x60/0x2d0 [ 280.235218][ T6486] ? ax25_fillin_cb+0x459/0x640 [ 280.240166][ T6486] kasan_report+0xdf/0x130 [ 280.244706][ T6486] ? ax25_fillin_cb+0x459/0x640 [ 280.249590][ T6486] ax25_fillin_cb+0x459/0x640 [ 280.254275][ T6486] ax25_setsockopt+0x8a2/0xa40 [ 280.259053][ T6486] ? ax25_shutdown+0x10/0x10 [ 280.263652][ T6486] ? aa_sock_opt_perm+0x74/0x100 [ 280.268609][ T6486] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 280.274168][ T6486] ? security_socket_setsockopt+0x7a/0xa0 [ 280.279897][ T6486] ? ax25_shutdown+0x10/0x10 [ 280.284491][ T6486] __sys_setsockopt+0x2bf/0x3d0 [ 280.289357][ T6486] __x64_sys_setsockopt+0xb1/0xc0 [ 280.294392][ T6486] do_syscall_64+0x4c/0xa0 [ 280.298817][ T6486] ? clear_bhb_loop+0x30/0x80 [ 280.303503][ T6486] ? clear_bhb_loop+0x30/0x80 [ 280.308189][ T6486] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.314091][ T6486] RIP: 0033:0x7f7f6b988749 [ 280.318517][ T6486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.338194][ T6486] RSP: 002b:00007f7f69bef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 280.346630][ T6486] RAX: ffffffffffffffda RBX: 00007f7f6bbdefa0 RCX: 00007f7f6b988749 [ 280.354608][ T6486] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004 [ 280.362673][ T6486] RBP: 00007f7f6ba0cf91 R08: 0000000000000010 R09: 0000000000000000 [ 280.370693][ T6486] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 280.378672][ T6486] R13: 00007f7f6bbdf038 R14: 00007f7f6bbdefa0 R15: 00007ffdcc56ba38 [ 280.386751][ T6486] [ 280.389771][ T6486] [ 280.392099][ T6486] Allocated by task 5168: [ 280.396585][ T6486] __kasan_kmalloc+0xb5/0xf0 [ 280.401185][ T6486] ax25_dev_device_up+0x50/0x580 [ 280.406136][ T6486] ax25_device_event+0x483/0x4f0 [ 280.411084][ T6486] raw_notifier_call_chain+0xcb/0x160 [ 280.416468][ T6486] __dev_notify_flags+0x178/0x2d0 [ 280.421501][ T6486] dev_change_flags+0xe3/0x1a0 [ 280.426293][ T6486] dev_ifsioc+0x147/0xe70 [ 280.430627][ T6486] dev_ioctl+0x55f/0xe50 [ 280.434872][ T6486] sock_do_ioctl+0x222/0x2f0 [ 280.439475][ T6486] sock_ioctl+0x4ed/0x6e0 [ 280.443812][ T6486] __se_sys_ioctl+0xfa/0x170 [ 280.448410][ T6486] do_syscall_64+0x4c/0xa0 [ 280.452828][ T6486] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.458729][ T6486] [ 280.461056][ T6486] Freed by task 6349: [ 280.465040][ T6486] kasan_set_track+0x4b/0x70 [ 280.469639][ T6486] kasan_set_free_info+0x1f/0x40 [ 280.474672][ T6486] ____kasan_slab_free+0xd5/0x110 [ 280.479702][ T6486] slab_free_freelist_hook+0xea/0x170 [ 280.485076][ T6486] kfree+0xef/0x2a0 [ 280.488885][ T6486] ax25_release+0x661/0x870 [ 280.493418][ T6486] sock_close+0xd5/0x240 [ 280.497701][ T6486] __fput+0x234/0x930 [ 280.501709][ T6486] task_work_run+0x125/0x1a0 [ 280.506329][ T6486] exit_to_user_mode_loop+0x10f/0x130 [ 280.511726][ T6486] exit_to_user_mode_prepare+0xee/0x180 [ 280.517305][ T6486] syscall_exit_to_user_mode+0x16/0x40 [ 280.522778][ T6486] do_syscall_64+0x58/0xa0 [ 280.527207][ T6486] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.533115][ T6486] [ 280.535453][ T6486] Last potentially related work creation: [ 280.541170][ T6486] kasan_save_stack+0x35/0x60 [ 280.545859][ T6486] kasan_record_aux_stack+0xb8/0x100 [ 280.551157][ T6486] insert_work+0x54/0x3d0 [ 280.555490][ T6486] __queue_work+0x9c5/0xd50 [ 280.560010][ T6486] queue_work_on+0x11d/0x1d0 [ 280.564650][ T6486] netdevice_event+0x803/0x900 [ 280.569437][ T6486] raw_notifier_call_chain+0xcb/0x160 [ 280.574827][ T6486] unregister_netdevice_many+0xf57/0x18f0 [ 280.580566][ T6486] default_device_exit_batch+0x336/0x390 [ 280.586213][ T6486] cleanup_net+0x77b/0xb80 [ 280.590710][ T6486] process_one_work+0x863/0x1000 [ 280.595658][ T6486] worker_thread+0xaa8/0x12a0 [ 280.600347][ T6486] kthread+0x436/0x520 [ 280.604431][ T6486] ret_from_fork+0x1f/0x30 [ 280.608985][ T6486] [ 280.611315][ T6486] Second to last potentially related work creation: [ 280.618024][ T6486] kasan_save_stack+0x35/0x60 [ 280.622735][ T6486] kasan_record_aux_stack+0xb8/0x100 [ 280.628029][ T6486] insert_work+0x54/0x3d0 [ 280.632486][ T6486] __queue_work+0x9c5/0xd50 [ 280.636991][ T6486] queue_work_on+0x11d/0x1d0 [ 280.641602][ T6486] netdevice_event+0x803/0x900 [ 280.646394][ T6486] raw_notifier_call_chain+0xcb/0x160 [ 280.651770][ T6486] __dev_notify_flags+0x178/0x2d0 [ 280.656809][ T6486] dev_change_flags+0xe3/0x1a0 [ 280.661581][ T6486] do_setlink+0xc01/0x3980 [ 280.666006][ T6486] rtnl_newlink+0x1419/0x17d0 [ 280.670773][ T6486] rtnetlink_rcv_msg+0x7ff/0xe90 [ 280.675719][ T6486] netlink_rcv_skb+0x1e0/0x430 [ 280.680481][ T6486] netlink_unicast+0x774/0x920 [ 280.685264][ T6486] netlink_sendmsg+0x8ab/0xbc0 [ 280.690029][ T6486] __sys_sendto+0x423/0x580 [ 280.694540][ T6486] __x64_sys_sendto+0xda/0xf0 [ 280.699224][ T6486] do_syscall_64+0x4c/0xa0 [ 280.703645][ T6486] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.709546][ T6486] [ 280.711876][ T6486] The buggy address belongs to the object at ffff8880200f7a00 [ 280.711876][ T6486] which belongs to the cache kmalloc-192 of size 192 [ 280.726072][ T6486] The buggy address is located 56 bytes inside of [ 280.726072][ T6486] 192-byte region [ffff8880200f7a00, ffff8880200f7ac0) [ 280.739473][ T6486] The buggy address belongs to the page: [ 280.745191][ T6486] page:ffffea0000803dc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x200f7 [ 280.755567][ T6486] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 280.763373][ T6486] raw: 00fff00000000200 ffffea00007fb700 0000000400000002 ffff888016841a00 [ 280.771984][ T6486] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 280.780575][ T6486] page dumped because: kasan: bad access detected [ 280.787042][ T6486] page_owner tracks the page as allocated [ 280.792759][ T6486] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 11242162138, free_ts 0 [ 280.807665][ T6486] get_page_from_freelist+0x1b77/0x1c60 [ 280.813342][ T6486] __alloc_pages+0x1e1/0x470 [ 280.817943][ T6486] new_slab+0xb6/0x4b0 [ 280.822042][ T6486] ___slab_alloc+0x81e/0xdf0 [ 280.826633][ T6486] __kmalloc_node+0x200/0x3b0 [ 280.831333][ T6486] sbitmap_init_node+0x2bc/0x6c0 [ 280.836276][ T6486] blk_mq_realloc_hw_ctxs+0x7f7/0x1760 [ 280.841889][ T6486] blk_mq_init_allocated_queue+0x408/0x1790 [ 280.847855][ T6486] __blk_mq_alloc_disk+0x81/0x150 [ 280.852918][ T6486] loop_add+0x288/0x8a0 [ 280.857086][ T6486] loop_init+0x173/0x230 [ 280.861408][ T6486] do_one_initcall+0x1ee/0x680 [ 280.866198][ T6486] do_initcall_level+0x137/0x1f0 [ 280.871143][ T6486] do_initcalls+0x4b/0x90 [ 280.875475][ T6486] kernel_init_freeable+0x3ce/0x560 [ 280.880764][ T6486] kernel_init+0x19/0x1b0 [ 280.885110][ T6486] page_owner free stack trace missing [ 280.890481][ T6486] [ 280.892805][ T6486] Memory state around the buggy address: [ 280.898438][ T6486] ffff8880200f7900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 280.906502][ T6486] ffff8880200f7980: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 280.914584][ T6486] >ffff8880200f7a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 280.922643][ T6486] ^ [ 280.928539][ T6486] ffff8880200f7a80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 280.936607][ T6486] ffff8880200f7b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 280.944669][ T6486] ================================================================== [ 280.952727][ T6486] Disabling lock debugging due to kernel taint [ 280.958950][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.972596][ T21] gspca_stk1135: Sensor read failed [ 280.978081][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 280.985363][ T21] gspca_stk1135: Sensor write failed [ 280.990803][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 280.997860][ T21] gspca_stk1135: Sensor write failed [ 281.003617][ T21] stk1135: probe of 6-1:0.0 failed with error -71 [ 281.014134][ T21] usb 6-1: USB disconnect, device number 9 [ 281.042134][ T6486] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 281.049509][ T6486] CPU: 1 PID: 6486 Comm: syz.5.420 Tainted: G B syzkaller #0 [ 281.058222][ T6486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 281.068303][ T6486] Call Trace: [ 281.071604][ T6486] [ 281.074557][ T6486] dump_stack_lvl+0x168/0x230 [ 281.079268][ T6486] ? show_regs_print_info+0x20/0x20 [ 281.084494][ T6486] ? load_image+0x3b0/0x3b0 [ 281.089120][ T6486] panic+0x2c9/0x7f0 [ 281.093044][ T6486] ? bpf_jit_dump+0xd0/0xd0 [ 281.097611][ T6486] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 281.103525][ T6486] ? _raw_spin_unlock+0x40/0x40 [ 281.108399][ T6486] ? print_memory_metadata+0x314/0x400 [ 281.113891][ T6486] ? ax25_fillin_cb+0x459/0x640 [ 281.118763][ T6486] check_panic_on_warn+0x80/0xa0 [ 281.123773][ T6486] ? ax25_fillin_cb+0x459/0x640 [ 281.128659][ T6486] end_report+0x6d/0xf0 [ 281.132848][ T6486] kasan_report+0x102/0x130 [ 281.137389][ T6486] ? ax25_fillin_cb+0x459/0x640 [ 281.142274][ T6486] ax25_fillin_cb+0x459/0x640 [ 281.146981][ T6486] ax25_setsockopt+0x8a2/0xa40 [ 281.151775][ T6486] ? ax25_shutdown+0x10/0x10 [ 281.156461][ T6486] ? aa_sock_opt_perm+0x74/0x100 [ 281.161438][ T6486] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 281.167018][ T6486] ? security_socket_setsockopt+0x7a/0xa0 [ 281.172772][ T6486] ? ax25_shutdown+0x10/0x10 [ 281.177396][ T6486] __sys_setsockopt+0x2bf/0x3d0 [ 281.182288][ T6486] __x64_sys_setsockopt+0xb1/0xc0 [ 281.187347][ T6486] do_syscall_64+0x4c/0xa0 [ 281.191802][ T6486] ? clear_bhb_loop+0x30/0x80 [ 281.196529][ T6486] ? clear_bhb_loop+0x30/0x80 [ 281.201249][ T6486] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 281.207178][ T6486] RIP: 0033:0x7f7f6b988749 [ 281.211686][ T6486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.231495][ T6486] RSP: 002b:00007f7f69bef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 281.239945][ T6486] RAX: ffffffffffffffda RBX: 00007f7f6bbdefa0 RCX: 00007f7f6b988749 [ 281.247949][ T6486] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004 [ 281.255949][ T6486] RBP: 00007f7f6ba0cf91 R08: 0000000000000010 R09: 0000000000000000 [ 281.263957][ T6486] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 281.271960][ T6486] R13: 00007f7f6bbdf038 R14: 00007f7f6bbdefa0 R15: 00007ffdcc56ba38 [ 281.279976][ T6486] [ 281.283285][ T6486] Kernel Offset: disabled [ 281.295484][ T6486] Rebooting in 86400 seconds..