last executing test programs: 11.223404331s ago: executing program 0 (id=203): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$inet_tcp(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) flock(0xffffffffffffffff, 0x2) flock(0xffffffffffffffff, 0x2) 9.111742181s ago: executing program 3 (id=211): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xfff1}, {0x0, 0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 8.224157906s ago: executing program 3 (id=214): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000005740)=""/4071, 0xfe7}, {&(0x7f00000001c0)=""/115, 0x73}, {&(0x7f0000000880)=""/79, 0x4f}], 0x3}, 0x40010100) 8.126291969s ago: executing program 3 (id=215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000004) syz_emit_ethernet(0xea, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa00030000000086dd60a24b9f00b42b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) 7.551314105s ago: executing program 1 (id=216): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000580)=[{0x0}, {&(0x7f00000000c0)="e98f", 0x2}], 0x2) 7.39650633s ago: executing program 3 (id=217): syz_open_procfs(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0552060000c9000028001280090001007665746800000000180002801400010000000000", @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) 7.326342862s ago: executing program 1 (id=218): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa, 0x3}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x30, 0x0, 0x1}, 0x28) 7.155256537s ago: executing program 1 (id=219): socket$inet_tcp(0x2, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x42200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40002b6, 0x2, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 5.446199825s ago: executing program 1 (id=221): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa3"], 0x0}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004e00004c00000000000690780a010102ac1414aa070f0476bc4b4c9e3e260cbfad990444140b01e000000100000000e0000001000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090ddb82a"], 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 5.151517173s ago: executing program 0 (id=223): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 4.996244987s ago: executing program 4 (id=225): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000040)='fuse\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.999319116s ago: executing program 2 (id=226): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0xed, 0x207fff) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000101c0)={0x0, 0x2, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x8001, 0x0, 0x1000000, "64f778ddcf2907e63600"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) 3.983014476s ago: executing program 1 (id=227): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) shutdown(r1, 0x2) 3.915975478s ago: executing program 0 (id=228): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b28", 0x3d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d3672656730000000000000000014000200677265746170300000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="400001801400020070696d3672656730"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.752006143s ago: executing program 0 (id=229): syz_usb_connect(0x2, 0x24, &(0x7f0000002780)={{0x12, 0x1, 0x310, 0xee, 0x7, 0x25, 0x40, 0x18d1, 0x1eaf, 0x2d0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x2, 0x30, 0x0, "", [{{0x9, 0x4, 0xe9, 0x6, 0x0, 0x66, 0x70, 0x65, 0xe1}}]}}]}}, &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0}) 3.627372377s ago: executing program 4 (id=230): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r4) 2.336715783s ago: executing program 4 (id=231): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x1c, 0x0, &(0x7f0000000840)=[@increfs_done, @decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) 2.258630976s ago: executing program 1 (id=232): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d0101"], 0x0) r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x64, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x8752, 0x4000, 0xfffffffc, 0x17e}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001380)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x1}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @remote}, 0x2, 0x3, 0x0, 0x1}}, 0x2e) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340)) readv(r8, &(0x7f0000005400)=[{0x0}, {&(0x7f0000005200)=""/247, 0xf7}], 0x2) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) process_vm_readv(0x0, &(0x7f0000002440)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/86, 0x56}], 0x2, &(0x7f0000003640)=[{&(0x7f0000003480)=""/133, 0x85}, {0x0}], 0x2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000300)={0x800, 0x0, [0x15142068, 0x7, 0x1, 0x20c], &(0x7f00000000c0)}) syz_usb_disconnect(r0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac2(0x3, 0xa4, &(0x7f0000002480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x6, 0x30, 0xef, {0x8, 0xb, 0x2, 0x2, 0x1, 0x3, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x7, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x7, 0x1a, 0x1, 0x1001, 0x9, 0x7fff, 0xb}, @as_header={0x10, 0x24, 0x1, 0x2, 0xf8, 0x0, 0x1, 0x8a, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0xe, 0x0, {0x8, 0x25, 0x1, 0x1, 0xd, 0xe, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x29, 0x7, 0xd, 0x0, 0xff}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x3, 0x67, 0x1, {0x8, 0x25, 0x1, 0x0, 0x3f, 0x54, 0x5}}}}}}}}]}}, &(0x7f0000002940)={0x0, 0x0, 0x136, &(0x7f00000029c0)={0x5, 0xf, 0x136, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x1, 0x0, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x10, 0x6, 0x47, 0x3}, @generic={0xe5, 0x10, 0x1, "551b8e72e9428c39ec09e6c55e76902768242d8328a05a6567b9ef9959c31af666384daa3a27e7ac0c87a857a16b9afe1631035e7aad6b3994846c8dab49f72451f2a510f79c644470217a5b88d9b605320d0e8377e4ab8f3785b9c8b9cc31e1e83ad783db02e1442de97543fef3dfc2841e2633595e817eae2a6bb681ccb2613a89852be720772d277638b95ba1176ef5ebb7a5df18e027e88a2ce0bf1af9aaf1fddfc270834e5d5bb2200f40c95131f3dfbe340ac47aae13d00469a5cfd3695cc1eb7d4e5dce8d024cf796fcbda3986fda4c6ed68eb25ec10710dcd9201cea90cc"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "0f1e21d38b1d5cae2eee9919b492c003"}, @ssp_cap={0x24, 0x10, 0xa, 0xd, 0x6, 0x5, 0x770f, 0x2, [0xf, 0xff3f00, 0xff00c0, 0x3f3f, 0xff000f, 0xff0000]}]}, 0x8, [{0x7, &(0x7f00000026c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40b}}, {0x0, 0x0}, {0x4, &(0x7f0000002780)=@lang_id={0x4, 0x3, 0x446}}, {0x81, &(0x7f00000027c0)=ANY=[@ANYBLOB="8103aae0d578504ebdb9d46b673552f0daa132865ab789f494ed73f3cd29e22d702d10d99ddf12c5192b8ac32f2230741be056d54f5d282169947be55b070056b439d4faa8d5b5e5825a53d5add77b7a7a862f4642d5402899df0e0cce8a0b70ff322faa8e4cc0a8be7e71dd54b43a3d5858f6034823e8b7bb8b38c45f606fd6af"]}, {0x4, &(0x7f0000002880)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f00000028c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000002900)=@lang_id={0x4, 0x3, 0x2409}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="400c01000000fb86cdcc710e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.043299202s ago: executing program 3 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x3, 0x0) fcntl$notify(r1, 0x402, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r4) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.455853338s ago: executing program 4 (id=234): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x000'], 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, 0x0}, 0x4) 963.310682ms ago: executing program 3 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x30000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/52, 0x34}, {0x0}], 0x2, 0xb, 0x1000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000180)=0xf0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000080)=0xd0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a3000000000090003007379"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000"], 0x122}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000014000101a4bd7000fddbdf25011f88104e244e"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x40000) 956.534773ms ago: executing program 2 (id=236): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x30}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 868.817585ms ago: executing program 2 (id=237): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803", 0x81}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db6", 0x66}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYRES32], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 718.164789ms ago: executing program 2 (id=238): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803", 0x81}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYRES32=r0], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 615.195122ms ago: executing program 0 (id=239): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d800000018008106", 0x8}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4001) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x3}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0xcc840) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 528.562154ms ago: executing program 4 (id=240): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b664", 0x41}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d3672656730000000000000000014000200677265746170300000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="400001801400020070696d3672656730"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 407.065438ms ago: executing program 2 (id=241): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe758, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x3, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) 351.842899ms ago: executing program 4 (id=242): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x9, 0x1}, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x10) 336.03797ms ago: executing program 0 (id=243): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403810b61200000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="400807060000070ae78b52d9c7"], 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) close(r0) 0s ago: executing program 2 (id=244): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. [ 59.435723][ T4175] cgroup: Unknown subsys name 'net' [ 59.540362][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.000220][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.850639][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 62.906477][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 62.948491][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 62.958712][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 63.047223][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 63.109704][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.117092][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.126801][ T4192] device bridge_slave_0 entered promiscuous mode [ 63.156960][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.164258][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.172429][ T4192] device bridge_slave_1 entered promiscuous mode [ 63.187000][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.194149][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.203107][ T4188] device bridge_slave_0 entered promiscuous mode [ 63.216814][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.224296][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.232376][ T4188] device bridge_slave_1 entered promiscuous mode [ 63.257180][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.265297][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.276379][ T4187] device bridge_slave_0 entered promiscuous mode [ 63.295672][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.302912][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.310767][ T4190] device bridge_slave_0 entered promiscuous mode [ 63.328848][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.338111][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.345479][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.353249][ T4187] device bridge_slave_1 entered promiscuous mode [ 63.360142][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.367445][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.375281][ T4198] device bridge_slave_0 entered promiscuous mode [ 63.390118][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.397299][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.405154][ T4198] device bridge_slave_1 entered promiscuous mode [ 63.419438][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.427357][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.435276][ T4190] device bridge_slave_1 entered promiscuous mode [ 63.444808][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.460681][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.495603][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.506137][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.518650][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.542780][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.553899][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.569618][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.581888][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.594383][ T4192] team0: Port device team_slave_0 added [ 63.629789][ T4192] team0: Port device team_slave_1 added [ 63.658841][ T4187] team0: Port device team_slave_0 added [ 63.667289][ T4188] team0: Port device team_slave_0 added [ 63.675642][ T4188] team0: Port device team_slave_1 added [ 63.688778][ T4198] team0: Port device team_slave_0 added [ 63.695811][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.703227][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.729360][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.743014][ T4187] team0: Port device team_slave_1 added [ 63.749119][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.756280][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.782761][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.801383][ T4190] team0: Port device team_slave_0 added [ 63.810175][ T4190] team0: Port device team_slave_1 added [ 63.817821][ T4198] team0: Port device team_slave_1 added [ 63.865042][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.872439][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.898921][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.918051][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.925238][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.952686][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.965513][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.972784][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.998881][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.019976][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.027317][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.053613][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.065676][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.072824][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.099033][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.112327][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.119295][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.145408][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.162174][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.169156][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.196347][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.232171][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.239437][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.266052][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.286916][ T4192] device hsr_slave_0 entered promiscuous mode [ 64.294013][ T4192] device hsr_slave_1 entered promiscuous mode [ 64.340362][ T4198] device hsr_slave_0 entered promiscuous mode [ 64.347091][ T4198] device hsr_slave_1 entered promiscuous mode [ 64.354762][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.362860][ T4198] Cannot create hsr debugfs directory [ 64.384741][ T4187] device hsr_slave_0 entered promiscuous mode [ 64.392041][ T4187] device hsr_slave_1 entered promiscuous mode [ 64.399125][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.407025][ T4187] Cannot create hsr debugfs directory [ 64.416056][ T4188] device hsr_slave_0 entered promiscuous mode [ 64.423333][ T4188] device hsr_slave_1 entered promiscuous mode [ 64.429955][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.437676][ T4188] Cannot create hsr debugfs directory [ 64.470972][ T4190] device hsr_slave_0 entered promiscuous mode [ 64.477850][ T4190] device hsr_slave_1 entered promiscuous mode [ 64.484987][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.492724][ T4190] Cannot create hsr debugfs directory [ 64.572663][ T2236] Bluetooth: hci4: command 0x0409 tx timeout [ 64.582232][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 64.594773][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 64.622922][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 64.629079][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 64.847662][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.863203][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.872770][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.882361][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.922439][ T4198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.931638][ T4198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.947707][ T4198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.959124][ T4198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.008218][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.026992][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.037005][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.048743][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.134000][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.144923][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.168944][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.180907][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.250475][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.278915][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.288437][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.300571][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.311052][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.324867][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.338603][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.348834][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.369657][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.380032][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.389572][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.400315][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.407982][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.416844][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.431704][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.441090][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.457860][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.467110][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.475247][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.484434][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.493535][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.500611][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.508744][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.517810][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.528750][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.537683][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.544786][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.558288][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.582783][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.590706][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.600407][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.608475][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.617956][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.628600][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.637447][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.644596][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.653012][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.661653][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.670392][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.679573][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.688796][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.721000][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.730509][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.743409][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.753386][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.761688][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.768778][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.777437][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.786178][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.795515][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.802795][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.810497][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.819905][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.828705][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.837500][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.846217][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.855433][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.864007][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.872739][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.880935][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.889431][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.898091][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.906714][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.934144][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.946131][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.973052][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.983098][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.011333][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.040867][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.056074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.066770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.095787][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.113112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.131043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.158200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.167730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.178385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.194574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.204342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.216346][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.225418][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.242902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.251694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.261088][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.268215][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.278719][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.308487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.318814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.334973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.349619][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.357067][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.383757][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.403402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.411024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.419889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.429055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.437295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.448043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.483853][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.521461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.531737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.541319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.555600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.564908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.574984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.583920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.592192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.600429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.609345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.626696][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.640728][ T4198] device veth0_vlan entered promiscuous mode [ 66.650708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.659354][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 66.665620][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 66.673447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.681114][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 66.681656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.701667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.701979][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 66.710771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.725964][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 66.730679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.741749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.757508][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.775815][ T4198] device veth1_vlan entered promiscuous mode [ 66.791655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.800110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.808761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.817086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.830559][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.858478][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.881190][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.890006][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.919218][ T4198] device veth0_macvtap entered promiscuous mode [ 66.928782][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.937636][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.947574][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.958033][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.967228][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.974374][ T4244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.985439][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.994500][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.004256][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.011543][ T4244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.019440][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.028600][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.037480][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.046119][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.055372][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.063778][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.072201][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.121704][ T4192] device veth0_vlan entered promiscuous mode [ 67.131420][ T4198] device veth1_macvtap entered promiscuous mode [ 67.149673][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.158846][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.168689][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.177723][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.189747][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.198436][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.207274][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.216286][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.250549][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.260824][ T4192] device veth1_vlan entered promiscuous mode [ 67.269222][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.277647][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.286044][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.295221][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.304138][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.313129][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.321700][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.330043][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.338385][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.347330][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.361740][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.375090][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.388108][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.398201][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.407304][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.416062][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.427479][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.437621][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.446179][ T4188] device veth0_vlan entered promiscuous mode [ 67.500719][ T4198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.510735][ T4198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.529298][ T4198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.540337][ T4198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.563613][ T4188] device veth1_vlan entered promiscuous mode [ 67.610645][ T4192] device veth0_macvtap entered promiscuous mode [ 67.627057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.651082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.662775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.682606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.699736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.727405][ T4192] device veth1_macvtap entered promiscuous mode [ 67.815157][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.830796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.839639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.847813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.856059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.865221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.885979][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.896911][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.909942][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.930659][ T4188] device veth0_macvtap entered promiscuous mode [ 67.959484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.968332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.977640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.987759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.996507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.007305][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.020647][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.033067][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.047989][ T4188] device veth1_macvtap entered promiscuous mode [ 68.063338][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.073551][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.085643][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.095204][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.103852][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.112448][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.113215][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.129052][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.153681][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.163669][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.172724][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.189807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.200797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.210165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.218448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.238064][ T4190] device veth0_vlan entered promiscuous mode [ 68.254823][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.268621][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.278918][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.289900][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.301664][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.338468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.348558][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.352487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.367547][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.369532][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.386397][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.396574][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.407370][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.418776][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.434647][ T4190] device veth1_vlan entered promiscuous mode [ 68.444671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.454839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.463298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.473037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.481647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.490341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.506419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.514605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.526150][ T4187] device veth0_vlan entered promiscuous mode [ 68.535850][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.547379][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.556589][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.565718][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.598855][ T4187] device veth1_vlan entered promiscuous mode [ 68.642479][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.650347][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.719461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.734356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.734405][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 68.747741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.753277][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 68.764087][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 68.767152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.771070][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 68.828222][ T4187] device veth0_macvtap entered promiscuous mode [ 68.835707][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 68.847877][ T4190] device veth0_macvtap entered promiscuous mode [ 68.865813][ T4190] device veth1_macvtap entered promiscuous mode [ 68.883575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.894898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.904388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.916674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.925921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.935353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.944016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.956206][ T4187] device veth1_macvtap entered promiscuous mode [ 68.985320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.997676][ T4212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.024250][ T4212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.041185][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.054461][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.065140][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.076676][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.086809][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.097704][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.110005][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.123044][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.135846][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.147590][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.158758][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.169353][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.180151][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.196847][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.208622][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.222777][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.230457][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.238576][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.247535][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.257684][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.267126][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.284777][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.296701][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.307098][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.318249][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.328396][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.339496][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.351637][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.355519][ T4273] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 69.375716][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.390308][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.393006][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.407665][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.408701][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.425950][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.436229][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.446932][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.457531][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.469337][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.481153][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.494457][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.504067][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.512882][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.521609][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.537826][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.548622][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.557566][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.566037][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.575102][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.590942][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.600774][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.617755][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.630081][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.647667][ T4278] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.658191][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.673186][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.708428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.832465][ T4273] usb 1-1: unable to get BOS descriptor or descriptor too short [ 69.869541][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.882178][ T4273] usb 1-1: not running at top speed; connect to a high speed hub [ 69.895113][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.967460][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.974124][ T4273] usb 1-1: config 3 has an invalid interface number: 233 but max is 0 [ 69.984966][ T304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.004197][ T304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.006018][ T4273] usb 1-1: config 3 has no interface number 0 [ 70.028518][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.290408][ T4273] usb 1-1: config 3 interface 233 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 70.305143][ T4273] usb 1-1: config 3 interface 233 has no altsetting 0 [ 70.493234][ T4273] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=2d.0d [ 70.524010][ T4273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.533310][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.552634][ T4273] usb 1-1: Product: syz [ 70.563218][ T4273] usb 1-1: Manufacturer: syz [ 70.593960][ T4273] usb 1-1: SerialNumber: syz [ 70.688907][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.705803][ T4289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.733798][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.755296][ T4289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.774453][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.813102][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 70.833597][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 70.900761][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 70.927721][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 71.051112][ T4273] usb 1-1: Cannot retrieve CPort count: -71 [ 71.065061][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 71.122002][ T4273] usb 1-1: Cannot retrieve CPort count: -71 [ 71.136856][ T4273] es2_ap_driver: probe of 1-1:3.233 failed with error -71 [ 71.999378][ T4293] syz.3.7 sent an empty control message without MSG_MORE. [ 72.020835][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.031017][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.304671][ T4273] usb 1-1: USB disconnect, device number 2 [ 72.570157][ T4231] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.886281][ T4231] usb 5-1: Using ep0 maxpacket: 32 [ 73.032151][ T4231] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 73.495997][ T4273] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 73.529473][ T4231] usb 5-1: config 0 has no interface number 0 [ 73.536328][ T4231] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.547255][ T4231] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.557922][ T4231] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 73.578323][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.601815][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 73.932614][ T4328] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by ""[4328] [ 73.988843][ T4231] usb 5-1: config 0 descriptor?? [ 74.762534][ T4231] usbhid 5-1:0.1: can't add hid device: -71 [ 74.771739][ T4231] usbhid: probe of 5-1:0.1 failed with error -71 [ 74.923226][ T4231] usb 5-1: USB disconnect, device number 2 [ 74.931835][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 74.951827][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 75.112496][ T4273] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.456646][ T4273] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 75.485671][ T4273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.496465][ T4273] usb 1-1: Product: syz [ 75.533517][ T4273] usb 1-1: config 0 descriptor?? [ 75.572823][ T4273] usb 1-1: can't set config #0, error -71 [ 75.760482][ T4273] usb 1-1: USB disconnect, device number 3 [ 75.764870][ T4339] ubi16: attaching mtd0 [ 75.862065][ T4339] ubi16: scanning is finished [ 75.867029][ T4339] ubi16: empty MTD device detected [ 76.277085][ T4339] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 76.332832][ T4339] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 76.340310][ T4339] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 76.352244][ T4339] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 76.366934][ T4339] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 76.379200][ T4339] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 76.383160][ T4343] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.413920][ T4339] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2085031195 [ 76.453505][ T4339] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 76.467105][ T4343] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.485553][ T4341] ubi16: background thread "ubi_bgt16d" started, PID 4341 [ 76.695950][ T4351] netlink: 68 bytes leftover after parsing attributes in process `syz.1.19'. [ 77.096977][ T4368] ======================================================= [ 77.096977][ T4368] WARNING: The mand mount option has been deprecated and [ 77.096977][ T4368] and is ignored by this kernel. Remove the mand [ 77.096977][ T4368] option from the mount to silence this warning. [ 77.096977][ T4368] ======================================================= [ 77.131865][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.132552][ T4331] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.661404][ T4374] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.996645][ T4370] overlayfs: overlapping lowerdir path [ 78.151966][ T4331] usb 2-1: Using ep0 maxpacket: 8 [ 78.305059][ T4389] netlink: 36 bytes leftover after parsing attributes in process `syz.2.33'. [ 79.647387][ T4331] usb 2-1: unable to get BOS descriptor or descriptor too short [ 80.001937][ T4331] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 80.030164][ T4331] usb 2-1: can't read configurations, error -71 [ 80.352540][ T4412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.41'. [ 80.741953][ T2236] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.824796][ T4421] netlink: 36 bytes leftover after parsing attributes in process `syz.0.44'. [ 81.182343][ T2236] usb 3-1: unable to get BOS descriptor or descriptor too short [ 81.377534][ T2236] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 81.489896][ T2236] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 81.523398][ T2236] usb 3-1: config 63 has no interface number 0 [ 81.560324][ T2236] usb 3-1: config 63 interface 66 has no altsetting 0 [ 81.762978][ T2236] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 81.783641][ T2236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.825145][ T2236] usb 3-1: Product: syz [ 81.849738][ T2236] usb 3-1: Manufacturer: syz [ 81.874075][ T2236] usb 3-1: SerialNumber: syz [ 82.401865][ T4442] UBIFS error (pid: 4442): cannot open "ubifs", error -22 [ 83.293541][ T2236] usb 3-1: USB disconnect, device number 2 [ 83.514611][ T4454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.57'. [ 83.721944][ T4232] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.871902][ T2236] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.083061][ T4230] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 84.102149][ T4232] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 84.159345][ T4232] usb 4-1: config 16 interface 0 has no altsetting 0 [ 84.222438][ T4232] usb 4-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 84.319504][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.351932][ T4230] usb 2-1: Using ep0 maxpacket: 16 [ 84.614164][ T4232] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 84.651416][ T4232] imon 4-1:16.0: unable to initialize intf0, err -19 [ 84.691926][ T4232] imon:imon_probe: failed to initialize context! [ 84.722057][ T4232] imon 4-1:16.0: unable to register, err -19 [ 84.792003][ T4230] usb 2-1: unable to get BOS descriptor or descriptor too short [ 84.800246][ T4230] usb 2-1: no configurations [ 84.811028][ T4230] usb 2-1: can't read configurations, error -22 [ 84.873477][ T4232] usb 4-1: USB disconnect, device number 2 [ 86.601814][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 86.621804][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 86.631796][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 87.199122][ T23] cfg80211: failed to load regulatory.db [ 87.649988][ T4485] netlink: 36 bytes leftover after parsing attributes in process `syz.3.68'. [ 87.721803][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 87.741795][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 87.751796][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 87.761795][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 89.522121][ T2236] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.582079][ T2236] usb 1-1: unable to get BOS descriptor or descriptor too short [ 90.662094][ T2236] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 90.670360][ T2236] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 90.711868][ T2236] usb 1-1: config 63 has no interface number 0 [ 90.718112][ T2236] usb 1-1: config 63 interface 66 has no altsetting 0 [ 90.972188][ T2236] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 91.001102][ T2236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.221979][ T2236] usb 1-1: can't set config #63, error -71 [ 91.231075][ T2236] usb 1-1: USB disconnect, device number 4 [ 91.422134][ T4234] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.731997][ T4234] usb 3-1: Using ep0 maxpacket: 16 [ 91.892115][ T4234] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.933247][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.007386][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 93.730786][ T4234] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 93.741050][ T4234] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.852299][ T4234] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 93.882774][ T4234] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 93.890942][ T4234] usb 3-1: Manufacturer: syz [ 93.960976][ T4234] usb 3-1: config 0 descriptor?? [ 94.613839][ T4234] usb 3-1: can't set config #0, error -71 [ 94.806866][ T4234] usb 3-1: USB disconnect, device number 4 [ 95.003955][ T4544] netlink: 36 bytes leftover after parsing attributes in process `syz.2.83'. [ 95.230706][ T304] Bluetooth: (null): Invalid header checksum [ 95.784411][ T4547] autofs4:pid:4547:autofs_fill_super: called with bogus options [ 97.715598][ T2236] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.834181][ T4566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 98.721907][ T2236] usb 5-1: device descriptor read/64, error -71 [ 99.371979][ T4232] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.681865][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 100.629321][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.640909][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 100.864073][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 100.873901][ T4232] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 100.883613][ T4232] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.972439][ T4232] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 101.004792][ T4232] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 101.031942][ T4232] usb 4-1: Manufacturer: syz [ 101.049024][ T4232] usb 4-1: config 0 descriptor?? [ 101.539952][ T4609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.105'. [ 103.132633][ T4232] rc_core: IR keymap rc-hauppauge not found [ 103.138581][ T4232] Registered IR keymap rc-empty [ 103.144861][ T4232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.182018][ T4232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.213735][ T4232] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 103.277932][ T4232] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 103.378035][ T4232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.412115][ T4232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.456001][ T4232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.002613][ T4633] process 'syz.2.111' launched './file0' with NULL argv: empty string added [ 104.887339][ T4232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.922829][ T4232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.962222][ T4232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 105.001929][ T4232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 105.032182][ T4234] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 105.042927][ T4232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 105.050794][ T4627] sctp: failed to load transform for md5: -2 [ 105.071999][ T4232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 105.105115][ T4232] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 105.153663][ T4232] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 105.172549][ T4232] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 105.204051][ T4232] usb 4-1: USB disconnect, device number 3 [ 105.256906][ T4234] usb 5-1: device descriptor read/64, error -71 [ 105.329428][ T4649] tipc: Started in network mode [ 105.358351][ T4649] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 105.392200][ T4231] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.400817][ T4649] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 105.482417][ T4649] tipc: Enabled bearer , priority 10 [ 105.641970][ T4231] usb 1-1: Using ep0 maxpacket: 16 [ 107.452193][ T4231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.483027][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.545153][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.592987][ T4231] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 107.629995][ T4231] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.667795][ T4331] tipc: Node number set to 1 [ 108.429605][ T4675] Zero length message leads to an empty skb [ 109.071960][ T4231] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 109.081064][ T4231] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 109.105266][ T4231] usb 1-1: config 0 descriptor?? [ 109.143199][ T4231] usb 1-1: can't set config #0, error -71 [ 109.749568][ T4231] usb 1-1: USB disconnect, device number 5 [ 110.979309][ T4711] netlink: 36 bytes leftover after parsing attributes in process `syz.3.132'. [ 112.797929][ T4744] autofs4:pid:4744:autofs_fill_super: called with bogus options [ 113.132937][ T4752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.482087][ T4275] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.702262][ T4275] usb 1-1: device descriptor read/64, error -71 [ 113.992089][ T4275] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.222058][ T4275] usb 1-1: device descriptor read/64, error -71 [ 114.352051][ T4275] usb usb1-port1: attempt power cycle [ 115.501906][ T4275] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 115.582197][ T4769] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 115.589059][ T4769] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.610742][ T4769] vhci_hcd vhci_hcd.0: Device attached [ 115.616755][ T4275] usb 1-1: device descriptor read/8, error -71 [ 115.731851][ T4230] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.850095][ T4770] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 115.866697][ T154] vhci_hcd: stop threads [ 115.871132][ T154] vhci_hcd: release socket [ 115.876456][ T4331] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 115.906564][ T154] vhci_hcd: disconnect device [ 115.911849][ T4275] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 116.036204][ T4275] usb 1-1: device descriptor read/8, error -71 [ 116.173066][ T4275] usb usb1-port1: unable to enumerate USB device [ 116.351988][ T4230] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 116.988719][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.988750][ T4230] usb 5-1: Product: syz [ 116.988766][ T4230] usb 5-1: Manufacturer: syz [ 116.988781][ T4230] usb 5-1: SerialNumber: syz [ 117.442057][ T4234] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.462173][ T4230] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 117.729339][ T4234] usb 3-1: Using ep0 maxpacket: 8 [ 117.892163][ T4234] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.972089][ T4234] usb 3-1: config 11 has an invalid interface number: 244 but max is 0 [ 117.980701][ T4234] usb 3-1: config 11 has no interface number 0 [ 117.987729][ T4234] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 117.998127][ T4234] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 118.008505][ T4234] usb 3-1: config 11 interface 244 has no altsetting 0 [ 118.012198][ T4814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.165'. [ 118.092810][ T4231] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.172096][ T4234] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 118.188908][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.197869][ T4234] usb 3-1: Product: syz [ 118.214094][ T4234] usb 3-1: Manufacturer: syz [ 118.219105][ T4234] usb 3-1: SerialNumber: syz [ 119.085532][ T4231] usb 4-1: device descriptor read/64, error -71 [ 119.151994][ T4234] peak_usb 3-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 119.189875][ T4234] peak_usb 3-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 119.252377][ T4234] peak_usb: probe of 3-1:11.244 failed with error -71 [ 119.330780][ T4825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'. [ 120.158698][ T4230] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 120.170611][ T4231] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.180880][ T4234] usb 3-1: USB disconnect, device number 5 [ 120.192759][ T4230] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 120.196421][ T4825] syz.2.168 (4825) used greatest stack depth: 17112 bytes left [ 120.290270][ T4230] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 120.306638][ T4230] lan78xx: probe of 5-1:1.0 failed with error -71 [ 120.317995][ T4230] usb 5-1: USB disconnect, device number 7 [ 120.401934][ T4231] usb 4-1: device descriptor read/64, error -71 [ 120.542037][ T4231] usb usb4-port1: attempt power cycle [ 120.687716][ T4842] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 120.973244][ T4331] vhci_hcd: vhci_device speed not set [ 121.266899][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 121.511864][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 122.596219][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.692112][ T21] usb 3-1: config 11 has an invalid interface number: 244 but max is 0 [ 122.700632][ T21] usb 3-1: config 11 has no interface number 0 [ 122.718937][ T21] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 122.731356][ T21] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 122.745438][ T21] usb 3-1: config 11 interface 244 has no altsetting 0 [ 122.924120][ T21] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 122.964228][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.971871][ T4232] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 122.985002][ T21] usb 3-1: Product: syz [ 122.989400][ T21] usb 3-1: Manufacturer: syz [ 122.998173][ T21] usb 3-1: SerialNumber: syz [ 123.192029][ T4232] usb 5-1: device descriptor read/64, error -71 [ 123.302277][ T21] peak_usb 3-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 123.359114][ T21] peak_usb 3-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 123.443964][ T21] peak_usb: probe of 3-1:11.244 failed with error -71 [ 123.471959][ T4232] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 123.480939][ T21] usb 3-1: USB disconnect, device number 6 [ 123.502488][ T4897] autofs4:pid:4897:autofs_fill_super: called with bogus options [ 124.449097][ T4900] syz.0.196 uses obsolete (PF_INET,SOCK_PACKET) [ 124.457183][ T4900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.196'. [ 124.612149][ T4232] usb 5-1: device descriptor read/64, error -71 [ 124.756798][ T4232] usb usb5-port1: attempt power cycle [ 124.801951][ T1107] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.932254][ T4234] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 125.051825][ T1107] usb 4-1: Using ep0 maxpacket: 8 [ 125.208996][ T4234] usb 3-1: Using ep0 maxpacket: 16 [ 125.209067][ T4232] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 125.224186][ T1107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.396855][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEE, skipping [ 125.432366][ T4232] usb 5-1: device descriptor read/8, error -71 [ 125.441892][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.532394][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 125.632020][ T1107] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 125.857459][ T4925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 126.479211][ T4234] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 127.090468][ T4232] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 127.754646][ T1107] usb 4-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 127.781993][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.790150][ T4234] usb 3-1: Product: syz [ 127.803055][ T1107] usb 4-1: Product: syz [ 127.821964][ T1107] usb 4-1: Manufacturer: syz [ 127.828197][ T4234] usb 3-1: Manufacturer: syz [ 127.834259][ T1107] usb 4-1: SerialNumber: syz [ 127.842499][ T4234] usb 3-1: SerialNumber: syz [ 127.857296][ T1107] usb 4-1: config 0 descriptor?? [ 127.868971][ T4234] usb 3-1: config 0 descriptor?? [ 127.987368][ T1107] usb 4-1: can't set config #0, error -71 [ 127.993340][ T4232] usb 5-1: device not accepting address 11, error -71 [ 128.001376][ T4234] usb 3-1: can't set config #0, error -71 [ 128.009083][ T4232] usb usb5-port1: unable to enumerate USB device [ 128.019617][ T1107] usb 4-1: USB disconnect, device number 7 [ 128.043796][ T4234] usb 3-1: USB disconnect, device number 7 [ 128.070977][ T4938] binder: 4937:4938 ioctl c018620c 200000000040 returned -1 [ 129.944144][ T4955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 129.956933][ T4955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.211'. [ 130.061998][ T4231] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.362078][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 130.472292][ T4234] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 130.682480][ T4231] usb 2-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 130.692499][ T4234] usb 5-1: device descriptor read/64, error -71 [ 130.762157][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.812704][ T4231] usb 2-1: Product: syz [ 130.816937][ T4231] usb 2-1: Manufacturer: syz [ 130.882490][ T4231] usb 2-1: SerialNumber: syz [ 131.062298][ T4234] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 131.457145][ T4231] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 131.471463][ T4231] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 131.482756][ T4231] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 131.609536][ T4231] usb 2-1: media controller created [ 131.642530][ T4234] usb 5-1: device descriptor read/64, error -71 [ 131.681665][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.710588][ T4231] usb 2-1: selecting invalid altsetting 2 [ 131.716666][ T4231] set interface failed [ 131.717106][ T4231] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 131.742299][ T4231] error writing reg: 0xff, val: 0x00 [ 131.767068][ T4234] usb usb5-port1: attempt power cycle [ 131.824146][ T4231] dvb_usb_mxl111sf: probe of 2-1:123.0 failed with error -22 [ 131.857017][ T4231] usb 2-1: USB disconnect, device number 6 [ 132.916083][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.922572][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.631871][ T4234] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 133.686583][ T4990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'. [ 133.891901][ T4234] usb 5-1: device not accepting address 14, error -71 [ 135.331881][ T4238] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 136.831866][ T4331] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 136.871826][ T4238] usb 3-1: Using ep0 maxpacket: 32 [ 137.160233][ T4238] usb 3-1: config 123 interface 0 has no altsetting 0 [ 137.168013][ T2236] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 138.062719][ T2236] usb 2-1: device descriptor read/64, error -71 [ 138.112145][ T4238] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 138.121687][ T4331] usb 1-1: unable to get BOS descriptor or descriptor too short [ 138.133379][ T4238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.141628][ T4238] usb 3-1: Product: syz [ 138.148215][ T5045] netlink: 36 bytes leftover after parsing attributes in process `syz.3.235'. [ 138.172028][ T4238] usb 3-1: can't set config #123, error -71 [ 138.179193][ T4331] usb 1-1: not running at top speed; connect to a high speed hub [ 138.188950][ T4238] usb 3-1: USB disconnect, device number 8 [ 138.271933][ T4331] usb 1-1: config 3 has an invalid interface number: 233 but max is 0 [ 138.280741][ T4331] usb 1-1: config 3 has no interface number 0 [ 138.292055][ T4331] usb 1-1: config 3 interface 233 has no altsetting 0 [ 138.331967][ T2236] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 138.351944][ T4331] usb 1-1: string descriptor 0 read error: -71 [ 138.364003][ T4331] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=2d.0d [ 138.374097][ T4331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.402519][ T4331] usb 1-1: can't set config #3, error -71 [ 138.419716][ T4331] usb 1-1: USB disconnect, device number 10 [ 138.521828][ T2236] usb 2-1: device descriptor read/64, error -71 [ 138.647051][ T2236] usb usb2-port1: attempt power cycle [ 138.691715][ T5057] input: syz0 as /devices/virtual/input/input7 [ 138.951843][ T4331] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 138.970386][ T4232] [ 138.972768][ T4232] ====================================================== [ 138.979963][ T4232] WARNING: possible circular locking dependency detected [ 138.987005][ T4232] syzkaller #0 Not tainted [ 138.991619][ T4232] ------------------------------------------------------ [ 138.998658][ T4232] kworker/0:5/4232 is trying to acquire lock: [ 139.004754][ T4232] ffff888026e88b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 139.015241][ T4232] [ 139.015241][ T4232] but task is already holding lock: [ 139.022615][ T4232] ffff888026e88ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 139.031935][ T4232] [ 139.031935][ T4232] which lock already depends on the new lock. [ 139.031935][ T4232] [ 139.042333][ T4232] [ 139.042333][ T4232] the existing dependency chain (in reverse order) is: [ 139.051345][ T4232] [ 139.051345][ T4232] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 139.058983][ T4232] __mutex_lock_common+0x1e3/0x2400 [ 139.064706][ T4232] mutex_lock_nested+0x17/0x20 [ 139.069988][ T4232] hci_dev_do_close+0x5f/0x1030 [ 139.075472][ T4232] hci_rfkill_set_block+0x10a/0x190 [ 139.081193][ T4232] rfkill_set_block+0x1c9/0x3d0 [ 139.086566][ T4232] rfkill_epo+0x75/0x170 [ 139.091328][ T4232] rfkill_op_handler+0x76/0x220 [ 139.096699][ T4232] process_one_work+0x85f/0x1010 [ 139.102158][ T4232] worker_thread+0xaa6/0x1290 [ 139.107354][ T4232] kthread+0x436/0x520 [ 139.111938][ T4232] ret_from_fork+0x1f/0x30 [ 139.116883][ T4232] [ 139.116883][ T4232] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 139.124871][ T4232] __mutex_lock_common+0x1e3/0x2400 [ 139.130594][ T4232] mutex_lock_nested+0x17/0x20 [ 139.135880][ T4232] rfkill_register+0x33/0x980 [ 139.141097][ T4232] hci_register_dev+0x452/0x970 [ 139.146499][ T4232] vhci_create_device+0x32c/0x5c0 [ 139.152047][ T4232] vhci_write+0x391/0x450 [ 139.157036][ T4232] vfs_write+0x745/0xd60 [ 139.161817][ T4232] ksys_write+0x152/0x260 [ 139.166717][ T4232] do_syscall_64+0x4c/0xa0 [ 139.171655][ T4232] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.178253][ T4232] [ 139.178253][ T4232] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 139.186079][ T4232] __mutex_lock_common+0x1e3/0x2400 [ 139.191806][ T4232] mutex_lock_nested+0x17/0x20 [ 139.197091][ T4232] vhci_send_frame+0x88/0x100 [ 139.202465][ T4232] hci_send_frame+0x1a9/0x2e0 [ 139.207670][ T4232] hci_tx_work+0x9f9/0x1710 [ 139.212693][ T4232] process_one_work+0x85f/0x1010 [ 139.218153][ T4232] worker_thread+0xaa6/0x1290 [ 139.223356][ T4232] kthread+0x436/0x520 [ 139.227970][ T4232] ret_from_fork+0x1f/0x30 [ 139.232925][ T4232] [ 139.232925][ T4232] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 139.242138][ T4232] __lock_acquire+0x2c42/0x7d10 [ 139.247513][ T4232] lock_acquire+0x19e/0x400 [ 139.252536][ T4232] __flush_work+0x116/0x210 [ 139.257627][ T4232] hci_dev_do_close+0x1e7/0x1030 [ 139.263087][ T4232] hci_rfkill_set_block+0x10a/0x190 [ 139.268809][ T4232] rfkill_set_block+0x1c9/0x3d0 [ 139.274178][ T4232] rfkill_epo+0x75/0x170 [ 139.278944][ T4232] rfkill_op_handler+0x76/0x220 [ 139.284318][ T4232] process_one_work+0x85f/0x1010 [ 139.289775][ T4232] worker_thread+0xaa6/0x1290 [ 139.294973][ T4232] kthread+0x436/0x520 [ 139.299568][ T4232] ret_from_fork+0x1f/0x30 [ 139.304513][ T4232] [ 139.304513][ T4232] other info that might help us debug this: [ 139.304513][ T4232] [ 139.314819][ T4232] Chain exists of: [ 139.314819][ T4232] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 139.314819][ T4232] [ 139.329757][ T4232] Possible unsafe locking scenario: [ 139.329757][ T4232] [ 139.337200][ T4232] CPU0 CPU1 [ 139.342559][ T4232] ---- ---- [ 139.347917][ T4232] lock(&hdev->req_lock); [ 139.352337][ T4232] lock(rfkill_global_mutex); [ 139.359617][ T4232] lock(&hdev->req_lock); [ 139.366636][ T4232] lock((work_completion)(&hdev->tx_work)); [ 139.372701][ T4232] [ 139.372701][ T4232] *** DEADLOCK *** [ 139.372701][ T4232] [ 139.380849][ T4232] 4 locks held by kworker/0:5/4232: [ 139.386124][ T4232] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 139.396716][ T4232] #1: ffffc9000318fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 139.407194][ T4232] #2: ffffffff8d6c65a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 139.416673][ T4232] #3: ffff888026e88ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 139.426424][ T4232] [ 139.426424][ T4232] stack backtrace: [ 139.432392][ T4232] CPU: 0 PID: 4232 Comm: kworker/0:5 Not tainted syzkaller #0 [ 139.439934][ T4232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.449989][ T4232] Workqueue: events rfkill_op_handler [ 139.455358][ T4232] Call Trace: [ 139.458723][ T4232] [ 139.461664][ T4232] dump_stack_lvl+0x188/0x250 [ 139.466345][ T4232] ? load_image+0x400/0x400 [ 139.470854][ T4232] ? show_regs_print_info+0x20/0x20 [ 139.476055][ T4232] ? print_circular_bug+0x12b/0x1a0 [ 139.481252][ T4232] check_noncircular+0x296/0x330 [ 139.486195][ T4232] ? look_up_lock_class+0x71/0x110 [ 139.491312][ T4232] ? add_chain_block+0x940/0x940 [ 139.496243][ T4232] ? lockdep_lock+0xf1/0x1f0 [ 139.500833][ T4232] ? mark_lock+0x94/0x320 [ 139.505162][ T4232] __lock_acquire+0x2c42/0x7d10 [ 139.510074][ T4232] ? lockdep_unlock+0x143/0x2e0 [ 139.515014][ T4232] ? mark_lock+0x94/0x320 [ 139.519339][ T4232] ? verify_lock_unused+0x140/0x140 [ 139.524535][ T4232] ? __lock_acquire+0x12e8/0x7d10 [ 139.529660][ T4232] lock_acquire+0x19e/0x400 [ 139.534172][ T4232] ? __flush_work+0xfa/0x210 [ 139.538776][ T4232] ? verify_lock_unused+0x140/0x140 [ 139.543977][ T4232] ? read_lock_is_recursive+0x10/0x10 [ 139.549355][ T4232] __flush_work+0x116/0x210 [ 139.553854][ T4232] ? __flush_work+0xfa/0x210 [ 139.558513][ T4232] ? flush_work+0x20/0x20 [ 139.562839][ T4232] ? rcu_lock_release+0x5/0x20 [ 139.567603][ T4232] ? __lock_acquire+0x7d10/0x7d10 [ 139.572633][ T4232] hci_dev_do_close+0x1e7/0x1030 [ 139.577794][ T4232] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 139.583687][ T4232] hci_rfkill_set_block+0x10a/0x190 [ 139.588885][ T4232] ? rcu_lock_release+0x20/0x20 [ 139.593734][ T4232] rfkill_set_block+0x1c9/0x3d0 [ 139.598583][ T4232] rfkill_epo+0x75/0x170 [ 139.603007][ T4232] rfkill_op_handler+0x76/0x220 [ 139.607863][ T4232] process_one_work+0x85f/0x1010 [ 139.612805][ T4232] ? worker_detach_from_pool+0x240/0x240 [ 139.618441][ T4232] ? lockdep_hardirqs_off+0x70/0x100 [ 139.624164][ T4232] ? _raw_spin_lock_irq+0xb7/0xf0 [ 139.629192][ T4232] ? _raw_spin_lock_irqsave+0x100/0x100 [ 139.634735][ T4232] ? wq_worker_running+0x97/0x170 [ 139.639869][ T4232] worker_thread+0xaa6/0x1290 [ 139.644551][ T4232] ? lockdep_hardirqs_on+0x94/0x140 [ 139.649753][ T4232] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 139.655648][ T4232] kthread+0x436/0x520 [ 139.659725][ T4232] ? rcu_lock_release+0x20/0x20 [ 139.664576][ T4232] ? kthread_blkcg+0xd0/0xd0 [ 139.669162][ T4232] ret_from_fork+0x1f/0x30 [ 139.673756][ T4232] [ 139.684867][ T2236] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 139.763576][ T4331] usb 1-1: device descriptor read/64, error -71 [ 139.814148][ T2236] usb 2-1: device descriptor read/8, error -71 [ 139.970307][ T5065] ubi: mtd0 is already attached to ubi16 [ 140.041929][ T4331] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 140.241973][ T4331] usb 1-1: device descriptor read/64, error -71 [ 140.361903][ T4331] usb usb1-port1: attempt power cycle [ 140.771875][ T4331] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 140.861875][ T4331] usb 1-1: device descriptor read/8, error -71 [ 141.131842][ T4331] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 141.221969][ T4331] usb 1-1: device descriptor read/8, error -71 [ 141.342273][ T4331] usb usb1-port1: unable to enumerate USB device