last executing test programs: 4.684121644s ago: executing program 3 (id=324): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) close(0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, 0x0) 3.137598286s ago: executing program 1 (id=341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.896000803s ago: executing program 1 (id=343): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000400)={0xffffffffffffffff}) 2.895765673s ago: executing program 3 (id=344): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x10000000, 0x10000000, {0x0, 0xd08, 0xfffffffffffffffd, 0x100, 0x0, 0x0, 0x7, 0x1000002, 0x122, 0x6000, 0x10000, r4, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x6}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TUNSETIFF(r5, 0x932, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.759012323s ago: executing program 1 (id=346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000641000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x45, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000649000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a39, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.631585876s ago: executing program 0 (id=347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4003, 0x0, 0x1d, 0x6, 0x0, @empty, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40}}}}}}, 0x0) 2.533992494s ago: executing program 3 (id=348): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0606120c"], 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 2.459957228s ago: executing program 0 (id=350): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdb6, 0x3, [@default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 2.444202165s ago: executing program 1 (id=351): syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) fsopen(&(0x7f0000000000)='pstore\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x7}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 2.418400139s ago: executing program 3 (id=352): ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xa00965, 0x2}) fsopen(0x0, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) close(0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x3}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80480c0}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xe}, {0x10, 0xfff1}, {0xd, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x40000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 2.338689201s ago: executing program 0 (id=353): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000240)=@vmx={0x5, 0x0, 0x2080, {0x80a0000, 0xfec00000, {0x5}, 0x1, 0x6}, {"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", "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"}}) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB='OGAIN \''], 0xbb) close(r0) 2.306280234s ago: executing program 0 (id=354): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adbaa402}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000b00)={@val={0xa}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x4d, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x4f19, 0x4e20, 0x4d, 0x0, @opaque="6032a60d61027fc56132c70c5b2e374ea5c9f253bf510947670b66f27987c44cc92a4983e3a69d4d66f715db6bc3764c5d931bc54d44513770f4b8bab1f436c8435573795c"}}}}}}}, 0x87) recvmmsg(r0, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000c40)=""/200, 0xc8}], 0x1}, 0x7dcf}], 0x1, 0x120, 0x0) 2.24440669s ago: executing program 1 (id=355): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000200)={{@local, 0x10000}, 0x0, 0x2}) 2.047765038s ago: executing program 1 (id=356): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) close(0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120110022cca2008"], 0x0) socket$netlink(0x10, 0x3, 0x0) close(0x3) 2.047511257s ago: executing program 3 (id=357): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) creat(&(0x7f0000000000)='./file0\x00', 0x14e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r2, r0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) 1.911915548s ago: executing program 0 (id=360): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1, 0x3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc018620b, &(0x7f0000000080)) 1.819894678s ago: executing program 0 (id=363): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x4e100) 1.671833175s ago: executing program 4 (id=366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x3000, 0x8, 0xb, 0x3, 0xd0, 0x42, 0x7, 0x0, 0x34, 0x19}, {0x10000, 0x2, 0x0, 0x2, 0x43, 0x7, 0x7f, 0x6, 0x5, 0x6, 0x3}, {0x5000, 0xd000, 0x3, 0x5, 0x1, 0x7, 0x0, 0x9, 0x0, 0x8, 0x8, 0x81}, {0x100000, 0x54000, 0xa, 0x6, 0x3, 0x2, 0xfd, 0xf8, 0xa, 0x7, 0xa8, 0xf1}, {0xc000, 0x2000, 0x10, 0x3, 0xf6, 0x2, 0xa7, 0x7f, 0x41, 0x83, 0xf7, 0x6}, {0xeeef0000, 0x191bd000, 0xc, 0x77, 0xb3, 0x6, 0x1, 0x4, 0x80, 0x13, 0x5}, {0x25000, 0x1, 0xb, 0x5, 0x0, 0x2, 0x4, 0x43, 0x3, 0x7d, 0x2, 0x70}, {0x80a0000, 0xeeef0000, 0xc, 0x8, 0xf, 0x7, 0x0, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0xeeef0000, 0x29ad}, {0x1000, 0xfff7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x400000006, 0x0, 0xfec00000, [0xa4, 0x1000, 0x400000000063, 0xfffffffffffffff8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.514622141s ago: executing program 4 (id=369): write(0xffffffffffffffff, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff8", 0x1a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967", 0x91}, {&(0x7f0000000540)="b4e007f06d", 0x5}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a3", 0x34}, {0x0}, {&(0x7f0000000ac0)}], 0x5, 0x4d9e, 0x8) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.399838686s ago: executing program 3 (id=370): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="610304"], 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 708.847405ms ago: executing program 2 (id=371): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 636.319009ms ago: executing program 2 (id=372): writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aef", 0x10}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80400000000009, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x7fffffff, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 548.93298ms ago: executing program 4 (id=373): syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x20042, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(r0, &(0x7f0000000000)='L', 0x1, 0x7f) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 389.626665ms ago: executing program 4 (id=374): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xe, 0x94, &(0x7f0000000000)={0x11, 0x86dd, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 388.707295ms ago: executing program 2 (id=384): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x221, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x24}, 0x1, 0x0, 0x0, 0x24080020}, 0x4000000) 271.706959ms ago: executing program 2 (id=375): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x1fa, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000000, 0x0) 231.35707ms ago: executing program 4 (id=376): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x4, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x4, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x100, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x4, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 91.75872ms ago: executing program 2 (id=377): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @vbi={0x9, 0xdc, 0x2, 0x32314142, [0x1, 0x1], [0x8, 0x5], 0x1}}) 83.890048ms ago: executing program 2 (id=378): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) 0s ago: executing program 4 (id=379): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. syzkaller login: [ 47.789213][ T4174] cgroup: Unknown subsys name 'net' [ 47.907853][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.154971][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.474549][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 50.502051][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 50.530007][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 50.570122][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 50.636319][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 50.659546][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.667397][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.675732][ T4192] device bridge_slave_0 entered promiscuous mode [ 50.684968][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.692021][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.699966][ T4192] device bridge_slave_1 entered promiscuous mode [ 50.722334][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.729430][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.739883][ T4186] device bridge_slave_0 entered promiscuous mode [ 50.772715][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.780206][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.787991][ T4186] device bridge_slave_1 entered promiscuous mode [ 50.802941][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.810003][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.817857][ T4198] device bridge_slave_0 entered promiscuous mode [ 50.827295][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.851399][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.859406][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.867372][ T4198] device bridge_slave_1 entered promiscuous mode [ 50.876051][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.888978][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.896618][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.904778][ T4187] device bridge_slave_0 entered promiscuous mode [ 50.925309][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.939698][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.947241][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.955412][ T4187] device bridge_slave_1 entered promiscuous mode [ 50.972102][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.982547][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.990205][ T4196] device bridge_slave_0 entered promiscuous mode [ 51.000209][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.022875][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.032071][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.039338][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.047175][ T4196] device bridge_slave_1 entered promiscuous mode [ 51.056982][ T4192] team0: Port device team_slave_0 added [ 51.080317][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.102672][ T4192] team0: Port device team_slave_1 added [ 51.110476][ T4186] team0: Port device team_slave_0 added [ 51.118360][ T4186] team0: Port device team_slave_1 added [ 51.127050][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.164558][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.182049][ T4198] team0: Port device team_slave_0 added [ 51.190414][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.202256][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.222835][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.229784][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.256198][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.269262][ T4198] team0: Port device team_slave_1 added [ 51.287041][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.294238][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.320278][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.334036][ T4187] team0: Port device team_slave_0 added [ 51.340318][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.347310][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.373330][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.385299][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.392239][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.418435][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.443910][ T4196] team0: Port device team_slave_0 added [ 51.454854][ T4187] team0: Port device team_slave_1 added [ 51.471847][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.478840][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.505941][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.518095][ T4196] team0: Port device team_slave_1 added [ 51.542910][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.549870][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.580551][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.614050][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.621098][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.647693][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.660380][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.667825][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.693883][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.709237][ T4186] device hsr_slave_0 entered promiscuous mode [ 51.716147][ T4186] device hsr_slave_1 entered promiscuous mode [ 51.745292][ T4192] device hsr_slave_0 entered promiscuous mode [ 51.752130][ T4192] device hsr_slave_1 entered promiscuous mode [ 51.759150][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.767361][ T4192] Cannot create hsr debugfs directory [ 51.777404][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.784745][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.810722][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.832646][ T4198] device hsr_slave_0 entered promiscuous mode [ 51.839479][ T4198] device hsr_slave_1 entered promiscuous mode [ 51.846289][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.853948][ T4198] Cannot create hsr debugfs directory [ 51.885119][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.892083][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.918680][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.993493][ T4187] device hsr_slave_0 entered promiscuous mode [ 52.000155][ T4187] device hsr_slave_1 entered promiscuous mode [ 52.007011][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.014833][ T4187] Cannot create hsr debugfs directory [ 52.033471][ T4196] device hsr_slave_0 entered promiscuous mode [ 52.040258][ T4196] device hsr_slave_1 entered promiscuous mode [ 52.047069][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.054816][ T4196] Cannot create hsr debugfs directory [ 52.133531][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 52.140228][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 52.212537][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 52.212645][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 52.244337][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 52.321929][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.333811][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.343825][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.353324][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.396857][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.427274][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.444346][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.454253][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.512224][ T4198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.523321][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.530195][ T4198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.562426][ T4198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.570793][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.581383][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.593319][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.608773][ T4198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.630908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.640065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.651863][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.659093][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.687780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.695940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.706313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.715087][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.722146][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.731042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.740654][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.750811][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.764521][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.775392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.787079][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.797009][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.819831][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.831558][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.850316][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.859377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.869214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.878479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.887705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.896339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.904829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.914485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.922961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.931205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.939397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.948552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.956625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.988989][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.999104][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.009828][ T3093] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.016950][ T3093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.054591][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.069029][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.078423][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.088228][ T3093] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.095383][ T3093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.104531][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.113255][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.134154][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.145302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.155143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.166214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.183095][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.194847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.204132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.234604][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.246627][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.259303][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.271412][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.280690][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.314743][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.326334][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.350236][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.359350][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.373541][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.381088][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.398214][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.410515][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.419894][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.429718][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.441992][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.454604][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.461698][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.489428][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.505019][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.511948][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.521562][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.531168][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.539219][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.548278][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.557934][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.565072][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.595624][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.620628][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.640028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.663508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.672153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.681541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.706528][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.716792][ T4198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.728600][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.741394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.752335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.761164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.770256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.779651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.788774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.797668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.806476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.815989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.824491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.854042][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.860938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.870928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.881758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.898006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.907757][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.914846][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.922639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.931166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.939875][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.946998][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.955190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.963929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.972016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.984694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.999264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.019294][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.030293][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.045417][ T3093] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.052632][ T3093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.068464][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.077455][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.086750][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.095541][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.109507][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.119067][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.128239][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.135395][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.144516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.158672][ T4186] device veth0_vlan entered promiscuous mode [ 54.171566][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.181397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.189843][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.199629][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.208379][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.216647][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 54.227846][ T4196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.238427][ T2241] Bluetooth: hci0: command 0x041b tx timeout [ 54.239696][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.269750][ T4186] device veth1_vlan entered promiscuous mode [ 54.282994][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.291329][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.298950][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 54.302090][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.305675][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 54.318857][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 54.319023][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.335450][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.346200][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.355591][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.364300][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.373062][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.381642][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.391071][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.400006][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.407721][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.427508][ T4192] device veth0_vlan entered promiscuous mode [ 54.447172][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.463792][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.471903][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.479909][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.494995][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.504052][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.512304][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.521227][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.529799][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.539415][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.547754][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.556290][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.565080][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.573209][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.588794][ T4192] device veth1_vlan entered promiscuous mode [ 54.601396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.655033][ T4186] device veth0_macvtap entered promiscuous mode [ 54.675541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.686070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.703619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.736117][ T4192] device veth0_macvtap entered promiscuous mode [ 54.754897][ T4186] device veth1_macvtap entered promiscuous mode [ 54.762496][ T4192] device veth1_macvtap entered promiscuous mode [ 54.775852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.785466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.794782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.804091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.813137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.821728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.830238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.851004][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.864615][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.876562][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.888294][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.897415][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.915256][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.925436][ T4198] device veth0_vlan entered promiscuous mode [ 54.941123][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.949082][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.957346][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.966730][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.974751][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.984271][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.993693][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.005579][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.019144][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.029629][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.040403][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.051854][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.062615][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.071478][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.081030][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.090231][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.104279][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.113939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.123377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.132047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.140837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.151626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.159830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.170381][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.179391][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.188451][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.197381][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.223455][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.232365][ T4198] device veth1_vlan entered promiscuous mode [ 55.284630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.298514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.307538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.316348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.367733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.379690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.388485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.400163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.409819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.419082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.440023][ T4196] device veth0_vlan entered promiscuous mode [ 55.465436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.476176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.489891][ T4198] device veth0_macvtap entered promiscuous mode [ 55.521294][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.530955][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.539897][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.548508][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.557490][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.567294][ T4187] device veth0_vlan entered promiscuous mode [ 55.586829][ T4196] device veth1_vlan entered promiscuous mode [ 55.600117][ T3093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.606971][ T4187] device veth1_vlan entered promiscuous mode [ 55.613746][ T3093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.617990][ T4198] device veth1_macvtap entered promiscuous mode [ 55.621461][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.639328][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.650745][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.663112][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.673900][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.681517][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.692793][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.703970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.712121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.722144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.730713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.739741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.753436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.761148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.770069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.794086][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.804755][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.816103][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.826912][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.838278][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.869462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.880502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.889477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.899889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.912947][ T4198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.921772][ T4198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.931515][ T4198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.940512][ T4198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.963602][ T4187] device veth0_macvtap entered promiscuous mode [ 55.979637][ T4196] device veth0_macvtap entered promiscuous mode [ 55.995274][ T4196] device veth1_macvtap entered promiscuous mode [ 56.002415][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.011334][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.020627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.029513][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.038451][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.064676][ T4187] device veth1_macvtap entered promiscuous mode [ 56.072275][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.080590][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.091498][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.099831][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.100112][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.120018][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.131674][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.144069][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.154104][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.164543][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.176463][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.190546][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.201461][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.216514][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.227288][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.237976][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.248616][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.259545][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.269176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.277713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.285788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.293904][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 56.298008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.308676][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 56.311206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.324427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.334206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.348011][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.358637][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.369098][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.380064][ T4236] Bluetooth: hci2: command 0x040f tx timeout [ 56.384082][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.390940][ T4236] Bluetooth: hci4: command 0x040f tx timeout [ 56.396399][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.402249][ T4236] Bluetooth: hci3: command 0x040f tx timeout [ 56.413675][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.428734][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.439272][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.451469][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.497394][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.511576][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.520892][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.529890][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.545354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.555043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.567556][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.578967][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.589888][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.600616][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.610711][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.622276][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.633891][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.644355][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.655761][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.714857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.728797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.741032][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.751406][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.753290][ T4266] Bluetooth: hci0: unsupported parameter 255 [ 56.765378][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.780392][ T4266] Bluetooth: hci0: unsupported parameter 255 [ 56.797076][ T4268] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 56.812105][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.843862][ T3093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.898728][ T3093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.939039][ T4193] Bluetooth: Unexpected continuation frame (len 4) [ 56.996059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.038066][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.056582][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.064503][ T3093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.072320][ T3093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.085075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.095774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.130621][ T3093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.141954][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.156315][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.164730][ T3093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.192563][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.200461][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.203611][ T3093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.266871][ T3093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.280403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.675567][ T4293] kvm: pic: non byte write [ 57.800209][ T4300] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 58.373709][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 58.381117][ T1336] Bluetooth: hci1: command 0x0419 tx timeout [ 58.458803][ T1336] Bluetooth: hci3: command 0x0419 tx timeout [ 58.463042][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 58.478679][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 58.691847][ T4193] Bluetooth: hci4: Dropping invalid advertising data [ 58.995959][ T4365] tipc: Started in network mode [ 59.001110][ T4365] tipc: Node identity 365cfc8a4d19, cluster identity 4711 [ 59.032663][ T4365] tipc: Enabled bearer , priority 0 [ 59.048460][ T4365] device syzkaller0 entered promiscuous mode [ 59.116953][ T4365] tipc: Resetting bearer [ 59.144233][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.152902][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.212151][ T4364] tipc: Resetting bearer [ 59.262128][ T4364] tipc: Disabling bearer [ 59.702720][ T1336] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 59.882620][ T2241] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 60.072803][ T1336] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 60.084644][ T1336] usb 4-1: config 1 has no interface number 0 [ 60.091614][ T1336] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 60.106385][ T1336] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.141481][ T21] cfg80211: failed to load regulatory.db [ 60.263412][ T2241] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 60.272677][ T1336] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 60.285044][ T2241] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 60.295915][ T2241] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 60.312205][ T1336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.321566][ T1336] usb 4-1: Product: syz [ 60.323120][ T2241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.326253][ T1336] usb 4-1: Manufacturer: syz [ 60.339072][ T1336] usb 4-1: SerialNumber: syz [ 60.373950][ T4383] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 60.383361][ T4387] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 60.399812][ T1336] usb 4-1: Expected 3 endpoints, found: 2 [ 60.513176][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.627687][ T4231] usb 3-1: USB disconnect, device number 2 [ 60.745809][ T4227] usb 4-1: USB disconnect, device number 2 [ 60.773064][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 60.776168][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.932845][ T7] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 60.941129][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 60.952766][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 60.962693][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 60.972718][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.986541][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 60.995694][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.032925][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 61.152676][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.167884][ T21] usb 5-1: config 0 has no interfaces? [ 61.262782][ T7] usb 1-1: usb_control_msg returned -32 [ 61.268435][ T7] usbtmc 1-1:16.0: can't read capabilities [ 61.332918][ T21] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 61.350129][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.394529][ T21] usb 5-1: Product: syz [ 61.398729][ T21] usb 5-1: Manufacturer: syz [ 61.416949][ T21] usb 5-1: SerialNumber: syz [ 61.435036][ T21] usb 5-1: config 0 descriptor?? [ 61.519576][ T7] usb 1-1: USB disconnect, device number 2 [ 61.523290][ T4423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 61.536313][ T4399] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 63.300331][ T4442] binder: BINDER_SET_CONTEXT_MGR already set [ 63.308152][ T4442] binder: 4407:4442 ioctl 4018620d 200000004a80 returned -16 [ 63.365114][ T4448] binder_alloc: 4444: pid 4444 spamming oneway? 1 buffers allocated for a total size of 5336 [ 63.621598][ T4455] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 63.652691][ T21] Bluetooth: hci3: command 0x0401 tx timeout [ 63.682457][ C0] sched: RT throttling activated [ 63.780627][ T4446] team0 (unregistering): Port device team_slave_0 removed [ 63.807729][ T4446] team0 (unregistering): Failed to send options change via netlink (err -105) [ 63.826592][ T4446] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 63.871570][ T4446] team0 (unregistering): Port device team_slave_1 removed [ 63.950368][ T4460] device syzkaller1 entered promiscuous mode [ 64.153952][ T4478] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 64.234096][ T4482] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 64.243781][ T4480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 64.253191][ T4475] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 64.261748][ T4475] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 64.393774][ T7] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 64.419772][ T2241] usb 5-1: USB disconnect, device number 2 [ 66.080888][ T4513] team0 (unregistering): Port device team_slave_0 removed [ 66.128796][ T4513] team0 (unregistering): Port device team_slave_1 removed [ 66.682527][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.699284][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 66.709629][ T7] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 66.807377][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.823536][ T7] usb 3-1: config 0 descriptor?? [ 66.867731][ T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 66.878111][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 66.904905][ T4538] lo speed is unknown, defaulting to 1000 [ 66.906033][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 66.911111][ T4538] lo speed is unknown, defaulting to 1000 [ 66.963381][ T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 66.975278][ T4538] lo speed is unknown, defaulting to 1000 [ 66.981938][ T7] usb 3-1: media controller created [ 67.004785][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 67.026009][ T4538] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 67.053619][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 67.089351][ T4538] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 67.106858][ T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 67.195961][ T4538] lo speed is unknown, defaulting to 1000 [ 67.204210][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 67.239853][ T4538] lo speed is unknown, defaulting to 1000 [ 67.247434][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 67.254484][ T4559] tmpfs: Unknown parameter 'grpquota' [ 67.269646][ T4538] lo speed is unknown, defaulting to 1000 [ 67.299645][ T4538] lo speed is unknown, defaulting to 1000 [ 67.305502][ T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 67.333463][ T4538] lo speed is unknown, defaulting to 1000 [ 67.459592][ T4571] binder: 4568:4571 ioctl 40046205 0 returned -22 [ 67.469227][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 67.495114][ T7] dvb-usb: error while querying for an remote control event. [ 67.548308][ T4571] binder: 4568:4571 ioctl c0306201 2000000001c0 returned -11 [ 67.569181][ T1108] usb 3-1: USB disconnect, device number 3 [ 67.667221][ T1108] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 67.729331][ T4577] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 67.879408][ T4582] team0 (unregistering): Port device team_slave_0 removed [ 67.919283][ T4582] team0 (unregistering): Failed to send options change via netlink (err -105) [ 67.949007][ T4582] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 67.982268][ T4582] team0 (unregistering): Port device team_slave_1 removed [ 68.054091][ T1108] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 68.093267][ T1108] Bluetooth: hci1: Injecting HCI hardware error event [ 68.101727][ T4193] Bluetooth: hci1: hardware error 0x00 [ 68.190792][ T4592] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 68.267454][ T4592] overlayfs: missing 'lowerdir' [ 68.507745][ T4606] siw: device registration error -23 [ 68.742299][ T4197] Bluetooth: Wrong link type (-22) [ 69.068245][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.076619][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.182564][ T1336] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 69.347615][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.375197][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.582615][ T1336] usb 2-1: unable to get BOS descriptor or descriptor too short [ 69.622730][ T1336] usb 2-1: not running at top speed; connect to a high speed hub [ 69.655168][ T4614] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.664343][ T4614] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.678611][ T4614] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.687849][ T4614] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.703257][ T1336] usb 2-1: config 1 interface 0 altsetting 12 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 69.714836][ T1336] usb 2-1: config 1 interface 0 altsetting 12 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 69.727016][ T1336] usb 2-1: config 1 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.741045][ T1336] usb 2-1: config 1 interface 0 has no altsetting 0 [ 69.903758][ T1336] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.924393][ T1336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.936379][ T1336] usb 2-1: Product: syz [ 69.940888][ T1336] usb 2-1: Manufacturer: syz [ 69.952017][ T1336] usb 2-1: SerialNumber: syz [ 69.982795][ T4629] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 69.989858][ T4629] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 70.085545][ T4655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.129'. [ 70.105826][ T4655] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.115237][ T4655] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.124041][ T4655] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.132792][ T4655] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.149434][ T4655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.129'. [ 70.158827][ T4655] Zero length message leads to an empty skb [ 70.228563][ T4660] lo speed is unknown, defaulting to 1000 [ 70.241880][ T4660] lo speed is unknown, defaulting to 1000 [ 70.251192][ T4660] lo speed is unknown, defaulting to 1000 [ 70.268775][ T4662] device syzkaller1 entered promiscuous mode [ 70.271131][ T4660] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 70.308759][ T4660] lo speed is unknown, defaulting to 1000 [ 70.315268][ T4660] lo speed is unknown, defaulting to 1000 [ 70.321683][ T4660] lo speed is unknown, defaulting to 1000 [ 70.324012][ T1336] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 70.333970][ T4660] lo speed is unknown, defaulting to 1000 [ 70.342080][ T4660] lo speed is unknown, defaulting to 1000 [ 70.362809][ T1336] usb 2-1: USB disconnect, device number 2 [ 70.474989][ T4665] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 70.499761][ T4665] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 71.336959][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.344742][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.513697][ T4708] tmpfs: Unknown parameter 'quota' [ 73.578549][ T4751] netlink: 48 bytes leftover after parsing attributes in process `syz.3.163'. [ 73.649098][ T4757] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.743654][ T4232] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 74.342798][ T4232] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 74.351885][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 74.365858][ T4232] usb 1-1: Product: syz [ 74.370069][ T4232] usb 1-1: Manufacturer: syz [ 74.392550][ T4232] usb 1-1: SerialNumber: syz [ 74.400513][ T4232] usb 1-1: config 0 descriptor?? [ 74.412831][ T1336] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.469565][ T4197] Bluetooth: hci3: unexpected event for opcode 0x200d [ 74.660999][ T4641] usb 1-1: USB disconnect, device number 3 [ 74.667296][ T1336] usb 5-1: Using ep0 maxpacket: 8 [ 74.765921][ T4805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.185'. [ 74.793925][ T1336] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 74.817322][ T1336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.885872][ T1336] pvrusb2: Hardware description: Terratec Grabster AV400 [ 74.898504][ T1336] pvrusb2: ********** [ 74.902865][ T1336] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 74.918470][ T1336] pvrusb2: Important functionality might not be entirely working. [ 74.926872][ T1336] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 74.944961][ T1336] pvrusb2: ********** [ 75.055386][ T4811] device syzkaller1 entered promiscuous mode [ 75.094159][ T7] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 75.102618][ T4232] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 75.110627][ T2423] pvrusb2: Invalid write control endpoint [ 75.120163][ T7] Bluetooth: hci2: Injecting HCI hardware error event [ 75.131091][ T4197] Bluetooth: hci2: hardware error 0x00 [ 75.197662][ T2423] pvrusb2: Invalid write control endpoint [ 75.208078][ T2423] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 75.219068][ T2423] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 75.227019][ T2423] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 75.237368][ T2423] pvrusb2: Device being rendered inoperable [ 75.245557][ T2423] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 75.254911][ T2423] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 75.285182][ T2423] pvrusb2: Attached sub-driver cx25840 [ 75.305033][ T2423] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 75.320206][ T4641] usb 5-1: USB disconnect, device number 3 [ 75.334263][ T2423] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 75.515678][ T4232] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.534465][ T4232] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 75.556322][ T4232] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 75.567996][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.612933][ T4807] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 76.556769][ T4843] ======================================================= [ 76.556769][ T4843] WARNING: The mand mount option has been deprecated and [ 76.556769][ T4843] and is ignored by this kernel. Remove the mand [ 76.556769][ T4843] option from the mount to silence this warning. [ 76.556769][ T4843] ======================================================= [ 76.591715][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.648227][ T4844] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 76.866058][ T4846] HTB: quantum of class FFF10008 is small. Consider r2q change. [ 76.925196][ T4850] comedi comedi3: pcmmio: I/O port conflict (0x7,32) [ 77.194557][ T4862] tipc: Started in network mode [ 77.209712][ T4862] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 77.238228][ T4862] tipc: Enabled bearer , priority 0 [ 77.296527][ T4232] usb 3-1: USB disconnect, device number 4 [ 77.507123][ T4871] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 77.521710][ T4871] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 77.634199][ T4877] loop6: detected capacity change from 0 to 7 [ 77.693672][ T4640] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.869021][ T4884] HTB: quantum of class FFF10008 is small. Consider r2q change. [ 77.878973][ T4886] device syzkaller0 entered promiscuous mode [ 77.999743][ T4640] usb 5-1: Using ep0 maxpacket: 32 [ 78.152963][ T4640] usb 5-1: config 0 has no interfaces? [ 78.243369][ T4902] process 'syz.3.222' launched './file0' with NULL argv: empty string added [ 78.263343][ T4232] tipc: Node number set to 9611946 [ 78.363013][ T4640] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 78.386843][ T4640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.413267][ T4640] usb 5-1: Product: syz [ 78.417503][ T4640] usb 5-1: Manufacturer: syz [ 78.422110][ T4640] usb 5-1: SerialNumber: syz [ 78.447568][ T4640] usb 5-1: config 0 descriptor?? [ 78.532717][ T4641] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 78.547889][ T4641] Bluetooth: hci3: Injecting HCI hardware error event [ 78.565348][ T4195] Bluetooth: hci3: hardware error 0x00 [ 78.741726][ T4641] usb 5-1: USB disconnect, device number 4 [ 81.573868][ T4232] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 81.787356][ T5001] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 81.818048][ T5001] SQUASHFS error: Failed to read block 0x0: -5 [ 81.832319][ T5001] unable to read squashfs_super_block [ 81.842554][ T4232] usb 3-1: Using ep0 maxpacket: 8 [ 81.962780][ T4232] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 82.142850][ T4232] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 82.172389][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.193009][ T4232] usb 3-1: Product: syz [ 82.197202][ T4232] usb 3-1: Manufacturer: syz [ 82.201833][ T4232] usb 3-1: SerialNumber: syz [ 82.254887][ T4232] usb 3-1: config 0 descriptor?? [ 82.323542][ T4232] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 82.411211][ T5010] netlink: 36 bytes leftover after parsing attributes in process `syz.3.265'. [ 82.530411][ T4227] usb 3-1: USB disconnect, device number 5 [ 83.067711][ T5033] xt_hashlimit: size too large, truncated to 1048576 [ 83.092276][ T5029] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 83.131067][ T5029] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 83.460787][ T5044] lo speed is unknown, defaulting to 1000 [ 83.542143][ T5048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.276'. [ 83.622850][ T5045] lo speed is unknown, defaulting to 1000 [ 85.414122][ T4197] Bluetooth: hci2: hardware error 0x00 [ 85.800033][ T5089] syz.1.289 uses obsolete (PF_INET,SOCK_PACKET) [ 86.683382][ T5105] tipc: Enabled bearer , priority 0 [ 86.881963][ T5105] device syzkaller0 entered promiscuous mode [ 87.038973][ T5104] tipc: Resetting bearer [ 87.140010][ T5104] tipc: Disabling bearer [ 87.942522][ T4640] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.202661][ T4640] usb 2-1: Using ep0 maxpacket: 8 [ 88.346901][ T4640] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.389914][ T4640] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 88.430833][ T4640] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 88.487609][ T4640] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 88.539649][ T4640] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 88.565914][ T4640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.658816][ T4640] hub 2-1:1.0: bad descriptor, ignoring hub [ 88.668280][ T4640] hub: probe of 2-1:1.0 failed with error -5 [ 88.716037][ T4640] cdc_wdm 2-1:1.0: skipping garbage [ 88.721449][ T4640] cdc_wdm 2-1:1.0: skipping garbage [ 88.788097][ T4640] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 88.830224][ T4640] cdc_wdm 2-1:1.0: Unknown control protocol [ 88.928337][ T4640] usb 2-1: USB disconnect, device number 3 [ 89.285577][ T4641] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.462778][ T4640] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.533201][ T4641] usb 1-1: Using ep0 maxpacket: 32 [ 89.578271][ T5186] binder: 5185:5186 unknown command 1074553619 [ 89.585359][ T5186] binder: 5185:5186 ioctl c0306201 2000000001c0 returned -22 [ 89.672970][ T4641] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 89.743395][ T4640] usb 2-1: Using ep0 maxpacket: 8 [ 89.833845][ T1336] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.842725][ T4641] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 89.862668][ T4640] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.870403][ T4641] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 89.885326][ T5200] 9pnet_virtio: no channels available for device syz [ 89.887445][ T4641] usb 1-1: Product: syz [ 89.898861][ T4641] usb 1-1: Manufacturer: syz [ 89.909300][ T4641] usb 1-1: SerialNumber: syz [ 89.912611][ T4640] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.928630][ T4641] usb 1-1: config 0 descriptor?? [ 89.942580][ T4640] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.952943][ T5155] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.969594][ T4640] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 89.990398][ T4640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.063552][ T4640] hub 2-1:1.0: bad descriptor, ignoring hub [ 90.069600][ T4640] hub: probe of 2-1:1.0 failed with error -5 [ 90.097619][ T4640] cdc_wdm 2-1:1.0: skipping garbage [ 90.109549][ T4640] cdc_wdm 2-1:1.0: skipping garbage [ 90.118964][ T4640] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 90.227770][ T1336] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 90.256787][ T1336] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.281861][ T1336] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.303574][ T1336] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.339094][ T4641] usb 1-1: USB disconnect, device number 4 [ 90.392943][ T4640] usb 2-1: USB disconnect, device number 4 [ 90.453379][ T1336] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.462968][ T1336] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.474318][ T1336] usb 4-1: Product: syz [ 90.478580][ T1336] usb 4-1: Manufacturer: syz [ 90.523499][ T1336] cdc_wdm 4-1:1.0: skipping garbage [ 90.529974][ T1336] cdc_wdm 4-1:1.0: skipping garbage [ 90.539959][ T1336] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 90.546282][ T1336] cdc_wdm 4-1:1.0: Unknown control protocol [ 90.729147][ T1336] usb 4-1: USB disconnect, device number 3 [ 91.145197][ T5232] tipc: Started in network mode [ 91.153396][ T5232] tipc: Node identity 3a6863eb449a, cluster identity 4711 [ 91.168971][ T5232] tipc: Enabled bearer , priority 0 [ 91.197428][ T5230] tipc: Disabling bearer [ 91.366366][ T5239] binder: 5237:5239 ioctl c00c620f 200000000400 returned -22 [ 91.528765][ T5240] block device autoloading is deprecated and will be removed. [ 91.616211][ T5247] kvm: emulating exchange as write [ 91.680531][ T5218] syz.2.336 (5218) used greatest stack depth: 20624 bytes left [ 91.907790][ T5255] 0xfffffffffffffffd-0x00000001fff7 : "" [ 91.932564][ T5255] mtd: partition "" is out of reach -- disabled [ 91.990060][ T5255] ftl_cs: FTL header not found. [ 92.012141][ T5267] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.259909][ T4195] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 92.298551][ T5281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'. [ 92.482507][ T4232] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 92.605895][ T5294] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.662617][ T4641] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 92.747500][ T4232] usb 2-1: Using ep0 maxpacket: 32 [ 92.890841][ T4517] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 92.891226][ T5307] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.906585][ T4232] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 93.037572][ T4641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.062508][ T4641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.102643][ T4232] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 93.102646][ T4641] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 93.102671][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 93.132030][ T4641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.149021][ T4232] usb 2-1: Product: syz [ 93.157816][ T4232] usb 2-1: Manufacturer: syz [ 93.167009][ T4232] usb 2-1: SerialNumber: syz [ 93.168590][ T4641] usb 1-1: config 0 descriptor?? [ 93.183424][ T4232] usb 2-1: config 0 descriptor?? [ 93.212860][ T5275] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.243309][ T4232] hub 2-1:0.0: bad descriptor, ignoring hub [ 93.250550][ T4232] hub: probe of 2-1:0.0 failed with error -5 [ 93.683609][ T4641] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 93.722254][ T4641] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 93.763033][ T4641] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0001/input/input7 [ 93.787290][ T4232] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 93.793674][ T4641] cm6533_jd 0003:0D8C:0022.0001: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 93.859456][ T5322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 93.872645][ T4232] usb 2-1: device reset changed ep0 maxpacket size! [ 93.881727][ T4641] usb 1-1: USB disconnect, device number 5 [ 93.897659][ T4232] usb 2-1: USB disconnect, device number 5 [ 94.022277][ T5323] fido_id[5323]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 94.049454][ T5328] input: syz0 as /devices/virtual/input/input8 [ 94.250523][ T1336] [ 94.252884][ T1336] ====================================================== [ 94.259899][ T1336] WARNING: possible circular locking dependency detected [ 94.266932][ T1336] syzkaller #0 Not tainted [ 94.271342][ T1336] ------------------------------------------------------ [ 94.278347][ T1336] kworker/1:3/1336 is trying to acquire lock: [ 94.284391][ T1336] ffff88807ac40c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 94.295430][ T1336] [ 94.295430][ T1336] but task is already holding lock: [ 94.302778][ T1336] ffffffff8d6c4b48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 94.311816][ T1336] [ 94.311816][ T1336] which lock already depends on the new lock. [ 94.311816][ T1336] [ 94.322294][ T1336] [ 94.322294][ T1336] the existing dependency chain (in reverse order) is: [ 94.331282][ T1336] [ 94.331282][ T1336] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 94.339346][ T1336] __mutex_lock_common+0x1e3/0x2400 [ 94.345054][ T1336] mutex_lock_nested+0x17/0x20 [ 94.350329][ T1336] rfkill_register+0x33/0x8a0 [ 94.355507][ T1336] hci_register_dev+0x452/0x970 [ 94.360859][ T1336] vhci_create_device+0x32c/0x5c0 [ 94.366390][ T1336] vhci_write+0x391/0x450 [ 94.371314][ T1336] vfs_write+0x745/0xd60 [ 94.376064][ T1336] ksys_write+0x152/0x260 [ 94.380894][ T1336] do_syscall_64+0x4c/0xa0 [ 94.385811][ T1336] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.392208][ T1336] [ 94.392208][ T1336] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 94.400002][ T1336] __mutex_lock_common+0x1e3/0x2400 [ 94.405700][ T1336] mutex_lock_nested+0x17/0x20 [ 94.410962][ T1336] vhci_send_frame+0x88/0x100 [ 94.416142][ T1336] hci_send_frame+0x1a9/0x2e0 [ 94.421325][ T1336] hci_tx_work+0x9f9/0x1710 [ 94.426325][ T1336] process_one_work+0x85f/0x1010 [ 94.431763][ T1336] worker_thread+0xaa6/0x1290 [ 94.436938][ T1336] kthread+0x436/0x520 [ 94.441505][ T1336] ret_from_fork+0x1f/0x30 [ 94.446420][ T1336] [ 94.446420][ T1336] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 94.455605][ T1336] __flush_work+0x116/0x210 [ 94.460612][ T1336] hci_dev_do_close+0x1e7/0x1030 [ 94.466048][ T1336] hci_error_reset+0x101/0x2c0 [ 94.471489][ T1336] process_one_work+0x85f/0x1010 [ 94.476924][ T1336] worker_thread+0xaa6/0x1290 [ 94.482097][ T1336] kthread+0x436/0x520 [ 94.486663][ T1336] ret_from_fork+0x1f/0x30 [ 94.491579][ T1336] [ 94.491579][ T1336] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 94.499196][ T1336] __mutex_lock_common+0x1e3/0x2400 [ 94.504899][ T1336] mutex_lock_nested+0x17/0x20 [ 94.510160][ T1336] bg_scan_update+0x44/0x3b0 [ 94.515250][ T1336] process_one_work+0x85f/0x1010 [ 94.520685][ T1336] worker_thread+0xaa6/0x1290 [ 94.525862][ T1336] kthread+0x436/0x520 [ 94.530430][ T1336] ret_from_fork+0x1f/0x30 [ 94.535345][ T1336] [ 94.535345][ T1336] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 94.545139][ T1336] __lock_acquire+0x2c42/0x7d10 [ 94.550493][ T1336] lock_acquire+0x19e/0x400 [ 94.555495][ T1336] __flush_work+0x116/0x210 [ 94.560495][ T1336] __cancel_work_timer+0x3f4/0x560 [ 94.566104][ T1336] hci_request_cancel_all+0xcc/0x300 [ 94.571909][ T1336] hci_dev_do_close+0x4e/0x1030 [ 94.577262][ T1336] hci_rfkill_set_block+0x10a/0x190 [ 94.582959][ T1336] rfkill_set_block+0x1c6/0x420 [ 94.588315][ T1336] rfkill_epo+0x75/0x170 [ 94.593146][ T1336] rfkill_op_handler+0x76/0x220 [ 94.598513][ T1336] process_one_work+0x85f/0x1010 [ 94.603951][ T1336] worker_thread+0xaa6/0x1290 [ 94.609152][ T1336] kthread+0x436/0x520 [ 94.613805][ T1336] ret_from_fork+0x1f/0x30 [ 94.618729][ T1336] [ 94.618729][ T1336] other info that might help us debug this: [ 94.618729][ T1336] [ 94.628934][ T1336] Chain exists of: [ 94.628934][ T1336] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 94.628934][ T1336] [ 94.644636][ T1336] Possible unsafe locking scenario: [ 94.644636][ T1336] [ 94.652080][ T1336] CPU0 CPU1 [ 94.657604][ T1336] ---- ---- [ 94.662948][ T1336] lock(rfkill_global_mutex); [ 94.667704][ T1336] lock(&data->open_mutex); [ 94.674801][ T1336] lock(rfkill_global_mutex); [ 94.682235][ T1336] lock((work_completion)(&hdev->bg_scan_update)); [ 94.688800][ T1336] [ 94.688800][ T1336] *** DEADLOCK *** [ 94.688800][ T1336] [ 94.697035][ T1336] 3 locks held by kworker/1:3/1336: [ 94.702313][ T1336] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 94.712659][ T1336] #1: ffffc900053a7d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 94.722989][ T1336] #2: ffffffff8d6c4b48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 94.732453][ T1336] [ 94.732453][ T1336] stack backtrace: [ 94.738419][ T1336] CPU: 1 PID: 1336 Comm: kworker/1:3 Not tainted syzkaller #0 [ 94.745852][ T1336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.755977][ T1336] Workqueue: events rfkill_op_handler [ 94.761359][ T1336] Call Trace: [ 94.764622][ T1336] [ 94.767531][ T1336] dump_stack_lvl+0x188/0x250 [ 94.772194][ T1336] ? load_image+0x400/0x400 [ 94.776677][ T1336] ? show_regs_print_info+0x20/0x20 [ 94.781857][ T1336] ? print_circular_bug+0x12b/0x1a0 [ 94.787046][ T1336] check_noncircular+0x296/0x330 [ 94.791982][ T1336] ? look_up_lock_class+0x71/0x110 [ 94.797094][ T1336] ? add_chain_block+0x940/0x940 [ 94.802015][ T1336] ? lockdep_lock+0xf1/0x1f0 [ 94.806592][ T1336] ? __lock_acquire+0x12e8/0x7d10 [ 94.811596][ T1336] ? mark_lock+0x94/0x320 [ 94.816020][ T1336] __lock_acquire+0x2c42/0x7d10 [ 94.820867][ T1336] ? verify_lock_unused+0x140/0x140 [ 94.826063][ T1336] lock_acquire+0x19e/0x400 [ 94.830566][ T1336] ? __flush_work+0xfa/0x210 [ 94.835145][ T1336] ? __lock_acquire+0x7d10/0x7d10 [ 94.840164][ T1336] ? read_lock_is_recursive+0x10/0x10 [ 94.845532][ T1336] ? start_flush_work+0x776/0x820 [ 94.850564][ T1336] __flush_work+0x116/0x210 [ 94.855060][ T1336] ? __flush_work+0xfa/0x210 [ 94.859636][ T1336] ? flush_work+0x20/0x20 [ 94.863947][ T1336] ? try_to_grab_pending+0xfa/0x7f0 [ 94.869126][ T1336] ? mark_lock+0x94/0x320 [ 94.873438][ T1336] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 94.879403][ T1336] ? lock_chain_count+0x20/0x20 [ 94.884239][ T1336] ? mark_lock+0x94/0x320 [ 94.888555][ T1336] ? __cancel_work_timer+0x36a/0x560 [ 94.894038][ T1336] __cancel_work_timer+0x3f4/0x560 [ 94.899152][ T1336] ? cancel_work_sync+0x20/0x20 [ 94.903987][ T1336] ? __cancel_work+0x1f9/0x2e0 [ 94.908729][ T1336] ? lockdep_hardirqs_on+0x94/0x140 [ 94.913906][ T1336] ? __cancel_work+0x27b/0x2e0 [ 94.918651][ T1336] ? cancel_work+0x20/0x20 [ 94.923050][ T1336] hci_request_cancel_all+0xcc/0x300 [ 94.928327][ T1336] hci_dev_do_close+0x4e/0x1030 [ 94.933156][ T1336] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 94.939029][ T1336] ? _raw_spin_unlock+0x40/0x40 [ 94.943897][ T1336] ? kobject_uevent_env+0x371/0x890 [ 94.949080][ T1336] hci_rfkill_set_block+0x10a/0x190 [ 94.954266][ T1336] ? rcu_lock_release+0x20/0x20 [ 94.959109][ T1336] rfkill_set_block+0x1c6/0x420 [ 94.963944][ T1336] rfkill_epo+0x75/0x170 [ 94.968168][ T1336] rfkill_op_handler+0x76/0x220 [ 94.973027][ T1336] process_one_work+0x85f/0x1010 [ 94.978037][ T1336] ? worker_detach_from_pool+0x240/0x240 [ 94.983649][ T1336] ? lockdep_hardirqs_off+0x70/0x100 [ 94.988931][ T1336] ? _raw_spin_lock_irq+0xb7/0xf0 [ 94.993958][ T1336] ? _raw_spin_lock_irqsave+0x100/0x100 [ 94.999488][ T1336] ? wq_worker_running+0x97/0x170 [ 95.004496][ T1336] worker_thread+0xaa6/0x1290 [ 95.009160][ T1336] ? lockdep_hardirqs_on+0x94/0x140 [ 95.014340][ T1336] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 95.020220][ T1336] kthread+0x436/0x520 [ 95.024272][ T1336] ? rcu_lock_release+0x20/0x20 [ 95.029106][ T1336] ? kthread_blkcg+0xd0/0xd0 [ 95.033674][ T1336] ret_from_fork+0x1f/0x30 [ 95.038078][ T1336] [ 95.041243][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.112485][ T4232] usb 2-1: new high-speed USB device number 6 using dummy_hcd