last executing test programs: 7.344084098s ago: executing program 1 (id=2): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709}) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) 6.690375334s ago: executing program 3 (id=7): syz_usb_connect(0x3, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x37, 0xd7, 0x81, 0x10, 0x9022, 0xd632, 0xd781, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xce, 0x9, 0x10, 0x2, "", [{{0x9, 0x4, 0x42, 0x7, 0x0, 0xd6, 0x5f, 0x3, 0xff}}]}}]}}, 0x0) syz_usb_connect$lan78xx(0x2, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) r3 = syz_io_uring_setup(0xffd, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000500)}], 0x7}}], 0x1, 0x4008c50) io_uring_enter(r3, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000380)=0xd, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000440)={0x1d, r10, 0x0, {0x2, 0x0, 0x4}}, 0x18) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r11, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x200480, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x1c, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x3) 6.683759844s ago: executing program 1 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd22, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0x3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x6}}]}}]}, 0x40}}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x1}], 0x1}, 0x8004) 6.290714844s ago: executing program 0 (id=9): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x1000000}}, 0x1c) 6.245063045s ago: executing program 0 (id=10): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffeffff}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r1, &(0x7f0000019680), 0x0, 0x20004855) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wg1\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x8000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r5, 0xb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r7 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffa000/0x3000)=nil) shmat(r7, &(0x7f0000001000/0x3000)=nil, 0x0) futex_waitv(&(0x7f0000002a00)=[{0x3, 0x0, 0x82}], 0x1, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(r7, 0xd, &(0x7f0000000100)=""/44) 5.747156068s ago: executing program 2 (id=13): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x401, 0x1, 0xffff1896, 0x8, 0xa6, 0x0, 0x6}, 0x9c) 5.473131754s ago: executing program 2 (id=14): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = getpgid(0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0xfe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x4, 0x3, 0x12, "c12400"}, 0x3, 0x2, {&(0x7f0000000040)}, 0x96000}) close_range(r4, 0xffffffffffffffff, 0x3f00000000000000) 5.336551848s ago: executing program 3 (id=15): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8183) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) close_range(r3, r5, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000007c0), 0x40, 0x0) preadv(r6, &(0x7f0000000900)=[{&(0x7f0000000800)=""/216, 0xd8}], 0x1, 0x1, 0x8) 4.995313026s ago: executing program 2 (id=16): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240112000a000201020904010000010200000904010101010200000905010910000206000725010c0040000904020001010200000904020101010200000905820900020303100725010c08ff03"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4c}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r3 = fsmount(r2, 0x1, 0xe) ioctl$BINDER_FREEZE(r3, 0x400c620e, 0x0) open_tree(r3, 0x0, 0x9000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) unshare(0x22000400) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x9c, 0x23b) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="b611", 0x2}, {0x0}], 0x2}, 0x20000010) sendto$inet6(r7, &(0x7f00000001c0)="2ae0e7", 0x3, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf250100000004"], 0x18}, 0x1, 0x0, 0x0, 0x4040854}, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)=""/150, 0x96}, {&(0x7f00000027c0)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000a40)=""/4081, 0xff1}, {&(0x7f0000000440)=""/65, 0x41}, {&(0x7f0000000200)=""/30, 0x1e}, {&(0x7f0000000000)=""/6, 0x6}], 0x8}, 0x2560}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}}], 0x4, 0x40000102, 0x0) 4.970634777s ago: executing program 0 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FICLONE(r2, 0x40049409, r2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregs(0xe, r3, 0x4, &(0x7f0000000000)=""/162) 3.951831372s ago: executing program 4 (id=18): socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f00000001c0)) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x1ff) write$UHID_CREATE2(r5, &(0x7f00000018c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x3, 0x2, 0x1, 0xb, 0x1}}, 0x118) 3.951383012s ago: executing program 0 (id=19): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.943629752s ago: executing program 3 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff000000070501024000000705020240000007050402400000070506024000"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0x0) 3.182890522s ago: executing program 3 (id=21): syz_usb_connect$uac2(0x4, 0xf4, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2019, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x3, 0x1, 0x4d, 0x0, 0x3, {0x8, 0xb, 0x0, 0x0, 0x1, 0x5, 0x20, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0xff, 0x42, 0xc}, [@sample_rate={0x9, 0x24, 0xd, 0x4, 0x0, 0x6, [0x1]}, @extension_unit={0x8, 0x24, 0x9, 0x1, 0x7ff, 0x9, ')'}, @source_unit={0x8, 0x24, 0xa, 0x7f, 0x0, 0x0, 0x4, 0x1}, @input_terminal={0x10, 0x24, 0x2, 0x3, 0x403, 0x3, 0xa0, 0x8, 0x4, 0xb1, 0x9, 0x2}, @effect_unit={0x9, 0x24, 0x7, 0x2, 0x2, 0x1, [0x0]}, @feature_unit={0x7, 0x24, 0x6, 0x1, 0xff, [0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0xfa, {0x8, 0x25, 0x1, 0x2, 0x3f, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x89, 0x8, "9b"}, @as_header={0x10, 0x24, 0x1, 0x5, 0xb2, 0x3, 0x1, 0x5, 0x6, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xffff, 0x8, 0x3, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x49, 0x9, 0x56, 0x3, 0x40}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x82dc, 0x0, 0xef}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x9, 0x9, "02", 'A'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x1, 0x8, {0x8, 0x25, 0x1, 0x81, 0x3f, 0xc, 0x8}}}}}}}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f"], 0x0) syz_usb_ep_read(r0, 0xf, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x2b, 0x51, 0x32, 0x40, 0x424, 0x9d00, 0x5327, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x7f, 0x0, 0x0, 0x1, 0x16, 0xdc, 0x2c}}]}}]}}, 0x0) syz_usb_connect(0x1, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000403215160100000000000109022400010000c0000904000001030002000921000000012205000905810300"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="0501"], 0x0) 3.157816342s ago: executing program 4 (id=22): syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="04040a000000000000b9816a64"], 0xd) 3.083733794s ago: executing program 4 (id=23): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd24, 0x25dfdbfb, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x1) openat$rfkill(0xffffffffffffff9c, 0x0, 0x500, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b02, 0x0) write$char_usb(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000015c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/198, 0xc6}], 0x2, &(0x7f0000001580)=""/15, 0xf}, 0xbe0}], 0x1, 0x120, &(0x7f0000001600)={0x0, 0x3938700}) syz_usb_disconnect(r2) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002f00090025bd7000000000020400"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 2.633877995s ago: executing program 2 (id=24): fanotify_init(0x200, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x820c, 0x2, 0x1, 0xffffffff}, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/clear_refs\x00', 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$inet6(0xa, 0x3, 0x7) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.590575426s ago: executing program 2 (id=25): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.02778426s ago: executing program 2 (id=26): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.575041862s ago: executing program 3 (id=27): syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.495440913s ago: executing program 0 (id=28): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.423754595s ago: executing program 0 (id=29): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x38, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.044093984s ago: executing program 3 (id=30): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') pread64(r0, &(0x7f0000000000)=""/190, 0xbe, 0xa0000000000000) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setns(0xc9, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = openat(r3, &(0x7f0000001040)='net/atm/vc\x00', 0x0, 0x0) read(r4, 0x0, 0x0) read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x2020) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r7, 0x40c, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x885}, 0x8040) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000240)={0x60, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x23c, 0x0, 0x0, 0xd0f, 0x8, 0x55, 0x50, 0x54}) write$nci(r1, &(0x7f0000000300)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14) write$nci(r1, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) write$nci(r1, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'syz_tun\x00', {0x1}}) syz_emit_ethernet(0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000021001122334455000a42420300010102"], 0x0) 97.187388ms ago: executing program 4 (id=31): mkdirat(0xffffffffffffff9c, 0x0, 0x180) clock_adjtime(0x0, 0x0) 23.05142ms ago: executing program 4 (id=32): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) 0s ago: executing program 4 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x40104d01, &(0x7f0000000a00)) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. [ 28.519318][ T4317] cgroup: Unknown subsys name 'net' [ 28.732876][ T4317] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.997076][ T4317] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.167499][ T4333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.170412][ T4336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.172009][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.178366][ T4339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.179739][ T4339] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.181284][ T4339] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.183960][ T4341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.185165][ T4341] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.186518][ T4344] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.186589][ T4341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.188275][ T4344] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.189420][ T4341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.190618][ T4344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.191925][ T4341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.192702][ T4344] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.193819][ T4341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.195437][ T4344] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.196711][ T4341] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.197538][ T4344] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.198607][ T4341] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.199528][ T4344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.201390][ T4341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.202435][ T4344] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.203272][ T4341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.204714][ T4344] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.205664][ T4341] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.236612][ T4345] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.238042][ T4345] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.239868][ T4345] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.241606][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.309313][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.334852][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 30.350092][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 30.368762][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.370063][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.372205][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.374985][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.376178][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.377736][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.388095][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.389409][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.391279][ T4335] device bridge_slave_0 entered promiscuous mode [ 30.393946][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.395294][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.396932][ T4335] device bridge_slave_1 entered promiscuous mode [ 30.402448][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.404864][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.419594][ T4329] team0: Port device team_slave_0 added [ 30.429848][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.434083][ T4329] team0: Port device team_slave_1 added [ 30.436700][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.438268][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.439467][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.441514][ T4334] device bridge_slave_0 entered promiscuous mode [ 30.452506][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.454159][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.455383][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.456876][ T4334] device bridge_slave_1 entered promiscuous mode [ 30.463925][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.465101][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.469817][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.479198][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.485643][ T4335] team0: Port device team_slave_0 added [ 30.487863][ T4335] team0: Port device team_slave_1 added [ 30.492756][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.494050][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.498260][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.500291][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.501921][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.506216][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.509041][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.513453][ T4340] chnl_net:caif_netlink_parms(): no params data found [ 30.519960][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.521821][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.525989][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.545185][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.546416][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.547930][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.552381][ T4334] team0: Port device team_slave_0 added [ 30.554106][ T4334] team0: Port device team_slave_1 added [ 30.601608][ T4329] device hsr_slave_0 entered promiscuous mode [ 30.640611][ T4329] device hsr_slave_1 entered promiscuous mode [ 30.690862][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.692455][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.693908][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.708020][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.714227][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.715480][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.719788][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.751404][ T4335] device hsr_slave_0 entered promiscuous mode [ 30.790617][ T4335] device hsr_slave_1 entered promiscuous mode [ 30.840534][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.841910][ T4335] Cannot create hsr debugfs directory [ 30.843575][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.849978][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.851507][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.856280][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.858388][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.859639][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.861291][ T4340] device bridge_slave_0 entered promiscuous mode [ 30.869350][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.870775][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.872407][ T4340] device bridge_slave_1 entered promiscuous mode [ 30.886233][ T4330] team0: Port device team_slave_0 added [ 30.892588][ T4330] team0: Port device team_slave_1 added [ 30.894403][ T4340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.900906][ T4340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.951541][ T4334] device hsr_slave_0 entered promiscuous mode [ 31.000609][ T4334] device hsr_slave_1 entered promiscuous mode [ 31.050532][ T4334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.051890][ T4334] Cannot create hsr debugfs directory [ 31.053159][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.054321][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.058585][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.061166][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.062242][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.066467][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.071691][ T4340] team0: Port device team_slave_0 added [ 31.076998][ T4340] team0: Port device team_slave_1 added [ 31.099086][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.100344][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.107156][ T4340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.115149][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.116379][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.121026][ T4340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.181440][ T4330] device hsr_slave_0 entered promiscuous mode [ 31.220626][ T4330] device hsr_slave_1 entered promiscuous mode [ 31.270521][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.271943][ T4330] Cannot create hsr debugfs directory [ 31.351977][ T4340] device hsr_slave_0 entered promiscuous mode [ 31.390646][ T4340] device hsr_slave_1 entered promiscuous mode [ 31.430506][ T4340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.431919][ T4340] Cannot create hsr debugfs directory [ 31.477227][ T4329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.514218][ T4329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.544455][ T4329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.585410][ T4329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.629393][ T4335] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.663117][ T4335] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.705079][ T4335] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.743041][ T4335] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.793366][ T4330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.832006][ T4330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.889635][ T4330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.938765][ T4330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.991408][ T4334] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.031462][ T4334] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.073846][ T4334] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.123591][ T4334] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.165233][ T4340] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.224479][ T4340] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.240689][ T4339] Bluetooth: hci3: command 0x0409 tx timeout [ 32.241839][ T4339] Bluetooth: hci0: command 0x0409 tx timeout [ 32.242905][ T4339] Bluetooth: hci1: command 0x0409 tx timeout [ 32.267328][ T4340] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.320633][ T4339] Bluetooth: hci2: command 0x0409 tx timeout [ 32.321826][ T4339] Bluetooth: hci4: command 0x0409 tx timeout [ 32.324600][ T4340] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.368874][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.371099][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.389605][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.391582][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.393093][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.394530][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.397180][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.408295][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.416017][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.417973][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.419808][ T1300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.421149][ T1300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.423431][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.425131][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.426848][ T1300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.427994][ T1300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.429424][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.431163][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.432884][ T1300] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.434156][ T1300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.436418][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.438002][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.448574][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.450626][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.452343][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.453969][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.455677][ T1300] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.456865][ T1300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.463660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.465463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.467148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.469039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.471983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.475177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.479467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.489579][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.491337][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.493329][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.495187][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.499692][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.507070][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.508872][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.511826][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.513507][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.516026][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.525609][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.527028][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.528746][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.539440][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.543389][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.545013][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.555693][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.558009][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.559690][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.561286][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.562787][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.564347][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.570102][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.574079][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.578191][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.579808][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.584314][ T1300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.585515][ T1300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.587508][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.593128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.594775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.596397][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.597611][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.599064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.606186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.607970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.609540][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.610782][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.615159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.621080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.623114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.625060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.627699][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.628945][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.632162][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.638654][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.640354][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.642815][ T1622] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.644043][ T1622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.646084][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.647813][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.649372][ T1622] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.650640][ T1622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.652609][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.654334][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.667004][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.668533][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.671037][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.672865][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.674586][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.676212][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.677841][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.679532][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.681970][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.683707][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.685105][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.686436][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.688130][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.693729][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.696376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.698187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.704531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.706197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.707907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.709889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.711881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.713538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.715143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.716777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.720363][ T4340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.724660][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.729194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.731988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.733776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.735862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.737531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.739097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.741448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.743434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.744818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.749431][ T4334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.751869][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.753842][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.755476][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.757086][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.758608][ T1300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.768492][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.775965][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.792293][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.794019][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.799785][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.801673][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.803435][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.805025][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.807165][ T4329] device veth0_vlan entered promiscuous mode [ 32.810040][ T4329] device veth1_vlan entered promiscuous mode [ 32.815763][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.817334][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.819013][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.835281][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.836897][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.838493][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.839951][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.844046][ T4335] device veth0_vlan entered promiscuous mode [ 32.864142][ T4335] device veth1_vlan entered promiscuous mode [ 32.866029][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.867667][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.869514][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.874173][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.882513][ T4329] device veth0_macvtap entered promiscuous mode [ 32.894078][ T4329] device veth1_macvtap entered promiscuous mode [ 32.902577][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.904165][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.905683][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.907104][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.908382][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.913257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.914871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.918560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.919808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.924084][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.928063][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.929502][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.936035][ T4335] device veth0_macvtap entered promiscuous mode [ 32.938924][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.945570][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.949077][ T4335] device veth1_macvtap entered promiscuous mode [ 32.958526][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.960181][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.962910][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.964604][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.970406][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.973587][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.975362][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.981463][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.983916][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.985608][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.987754][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.989293][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.992518][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.994113][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.998082][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.999634][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.002777][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.004270][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.007236][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.008825][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.013356][ T4330] device veth0_vlan entered promiscuous mode [ 33.018510][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.020315][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.023469][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.024698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.026332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.032328][ T4330] device veth1_vlan entered promiscuous mode [ 33.034421][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.036083][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.037761][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.045041][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.046698][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.057322][ T4334] device veth0_vlan entered promiscuous mode [ 33.064113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.065582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.067316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.076637][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.078418][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.081330][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.086935][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.088633][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.090265][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.092554][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.097757][ T4334] device veth1_vlan entered promiscuous mode [ 33.104355][ T4330] device veth0_macvtap entered promiscuous mode [ 33.104355][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.106592][ T4330] device veth1_macvtap entered promiscuous mode [ 33.106850][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.109797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.112083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.113571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.115050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.116555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.118386][ T4335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.120008][ T4335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.122835][ T4335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.124389][ T4335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.129842][ T4340] device veth0_vlan entered promiscuous mode [ 33.135042][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.136497][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.138213][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.139703][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.144367][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.146206][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.147869][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.149640][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.152466][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.158854][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.160645][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.166306][ T4340] device veth1_vlan entered promiscuous mode [ 33.169852][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.171643][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.173278][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.176378][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.176803][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.177703][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.179519][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.182927][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.184749][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.186857][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.190165][ T4334] device veth0_macvtap entered promiscuous mode [ 33.192978][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.194640][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.196183][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.197795][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.199458][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.214868][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.216637][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.219108][ T4340] device veth0_macvtap entered promiscuous mode [ 33.228919][ T4330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.230972][ T4330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.233064][ T4330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.234568][ T4330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.237177][ T4334] device veth1_macvtap entered promiscuous mode [ 33.246003][ T4340] device veth1_macvtap entered promiscuous mode [ 33.251818][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.253163][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.254535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.256120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.258439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.260236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.266855][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.268826][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.272389][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.274088][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.280476][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.282190][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.284859][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.287899][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.289591][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.307843][ T4410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.312357][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.313656][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.313907][ T4410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.316103][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.318216][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.320002][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.328015][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.329663][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.331690][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.334031][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.335539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.337052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.338728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.344676][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.346495][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.348075][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.349747][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.351700][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.353407][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.355124][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.356851][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.359065][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.363891][ T4334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.365359][ T4334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.366910][ T4334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.368432][ T4334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.372524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.374316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.379423][ T1622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.381029][ T1622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.382175][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.384036][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.385728][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.387432][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.389112][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.392397][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.394575][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.396318][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.398663][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.405048][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.406579][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.408292][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.415832][ T4340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.417253][ T4340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.418788][ T4340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.420271][ T4340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.422657][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.424166][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.431420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.469759][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.471442][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.473935][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.498903][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.500260][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.502553][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.508754][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.510272][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.514698][ T1622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.566069][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.567524][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.569343][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.895589][ T4424] Zero length message leads to an empty skb [ 33.975493][ T4428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.984454][ T4428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.320919][ T4345] Bluetooth: hci0: command 0x041b tx timeout [ 34.322191][ T4339] Bluetooth: hci3: command 0x041b tx timeout [ 34.323211][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 34.401488][ T4344] Bluetooth: hci4: command 0x041b tx timeout [ 34.403288][ T4345] Bluetooth: hci2: command 0x041b tx timeout [ 35.646877][ T4465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.648707][ T4465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.401885][ T4345] Bluetooth: hci1: command 0x040f tx timeout [ 36.402831][ T4344] Bluetooth: hci3: command 0x040f tx timeout [ 36.406000][ T4339] Bluetooth: hci0: command 0x040f tx timeout [ 36.669958][ T4344] Bluetooth: hci4: command 0x040f tx timeout [ 36.671837][ T4344] Bluetooth: hci2: command 0x040f tx timeout [ 36.685538][ T4480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.687118][ T4480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.761189][ T4481] process 'syz.4.18' launched './file2' with NULL argv: empty string added [ 37.310548][ T4460] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.486217][ T4339] Bluetooth: unknown link type 100 [ 37.496514][ T4488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.498182][ T4488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.518283][ T4488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.519865][ T4488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.570503][ T4460] usb 1-1: Using ep0 maxpacket: 16 [ 37.573082][ T4460] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 37.574574][ T4460] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 37.576039][ T4460] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 37.577593][ T4460] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 37.579219][ T4460] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 37.583238][ T4460] usb 1-1: config 0 has no interface number 0 [ 37.584402][ T4460] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 37.586265][ T4460] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 37.586516][ T4491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.587898][ T4460] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 37.591413][ T4460] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.593517][ T4460] usb 1-1: config 0 interface 125 has no altsetting 0 [ 37.593942][ T4491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.594646][ T4460] usb 1-1: config 0 interface 125 has no altsetting 2 [ 37.599209][ T4460] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 37.601354][ T4460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.602795][ T4460] usb 1-1: Product: syz [ 37.603453][ T4460] usb 1-1: Manufacturer: syz [ 37.604212][ T4460] usb 1-1: SerialNumber: syz [ 37.607258][ T4460] usb 1-1: config 0 descriptor?? [ 37.610707][ T4460] usb 1-1: selecting invalid altsetting 2 [ 37.728762][ T4488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.730615][ T4488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.001085][ T4491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23'. [ 38.003508][ T4493] syz.2.24 uses obsolete (PF_INET,SOCK_PACKET) [ 38.042573][ T4496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.044205][ T4496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.133816][ T4488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.135417][ T4488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.480748][ T4344] Bluetooth: hci3: command 0x0419 tx timeout [ 38.480763][ T4339] Bluetooth: hci0: command 0x0419 tx timeout [ 38.481886][ T4344] Bluetooth: hci1: command 0x0419 tx timeout [ 38.537800][ T4488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.539454][ T4488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.614004][ C1] usb 1-1: async_complete: urb error -71 [ 38.615113][ C1] usb 1-1: async_complete: urb error -71 [ 38.616458][ T4460] get_1284_register: usb error -71 [ 38.623838][ T4460] usb 1-1: USB disconnect, device number 2 [ 38.720759][ T4336] Bluetooth: hci2: command 0x0419 tx timeout [ 38.720877][ T4344] Bluetooth: hci4: command 0x0419 tx timeout [ 39.065763][ T4516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.067833][ T4516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.566305][ T4542] Illegal XDP return value 1895294336 on prog (id 2) dev N/A, expect packet loss! [ 40.834615][ T4344] Bluetooth: hci4: command 0x0409 tx timeout [ 42.590751][ T4536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 42.592379][ T4536] nci: nci_start_poll: failed to set local general bytes [ 42.594407][ T4531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 42.595913][ T4531] [ 42.596300][ T4531] ====================================================== [ 42.597483][ T4531] WARNING: possible circular locking dependency detected [ 42.598616][ T4531] syzkaller #0 Not tainted [ 42.599352][ T4531] ------------------------------------------------------ [ 42.600645][ T4531] syz.3.30/4531 is trying to acquire lock: [ 42.601694][ T4531] ffff800016a2a7a8 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_close+0x28/0x58 [ 42.603176][ T4531] [ 42.603176][ T4531] but task is already holding lock: [ 42.604440][ T4531] ffff0000d42c7350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0xe8/0x57c [ 42.606075][ T4531] [ 42.606075][ T4531] which lock already depends on the new lock. [ 42.606075][ T4531] [ 42.607956][ T4531] [ 42.607956][ T4531] the existing dependency chain (in reverse order) is: [ 42.609578][ T4531] [ 42.609578][ T4531] -> #3 (&ndev->req_lock){+.+.}-{3:3}: [ 42.611028][ T4531] __mutex_lock_common+0x1a0/0x1f3c [ 42.612070][ T4531] mutex_lock_nested+0x38/0x44 [ 42.613077][ T4531] nci_start_poll+0x424/0xaa0 [ 42.614097][ T4531] nfc_start_poll+0x124/0x284 [ 42.615106][ T4531] nfc_genl_start_poll+0x1b0/0x2f4 [ 42.616190][ T4531] genl_family_rcv_msg_doit+0x210/0x308 [ 42.617338][ T4531] genl_rcv_msg+0x424/0x600 [ 42.618283][ T4531] netlink_rcv_skb+0x220/0x3ec [ 42.619269][ T4531] genl_rcv+0x38/0x50 [ 42.620044][ T4531] netlink_unicast+0x5fc/0x80c [ 42.620943][ T4531] netlink_sendmsg+0x6f0/0x9d8 [ 42.621889][ T4531] ____sys_sendmsg+0x588/0x90c [ 42.622798][ T4531] __sys_sendmsg+0x288/0x374 [ 42.623707][ T4531] __arm64_sys_sendmsg+0x80/0x94 [ 42.624688][ T4531] invoke_syscall+0x98/0x290 [ 42.625581][ T4531] el0_svc_common+0x13c/0x258 [ 42.626502][ T4531] do_el0_svc+0x5c/0x134 [ 42.627350][ T4531] el0_svc+0x58/0x128 [ 42.628203][ T4531] el0t_64_sync_handler+0x84/0xf0 [ 42.629173][ T4531] el0t_64_sync+0x18c/0x190 [ 42.630042][ T4531] [ 42.630042][ T4531] -> #2 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 42.631581][ T4531] __mutex_lock_common+0x1a0/0x1f3c [ 42.632647][ T4531] mutex_lock_nested+0x38/0x44 [ 42.633623][ T4531] nfc_urelease_event_work+0x108/0x2b8 [ 42.634765][ T4531] process_one_work+0x7e4/0x13bc [ 42.635726][ T4531] worker_thread+0x8cc/0xfe8 [ 42.636589][ T4531] kthread+0x254/0x2e0 [ 42.637424][ T4531] ret_from_fork+0x10/0x20 [ 42.638283][ T4531] [ 42.638283][ T4531] -> #1 (nfc_devlist_mutex){+.+.}-{3:3}: [ 42.639659][ T4531] __mutex_lock_common+0x1a0/0x1f3c [ 42.640703][ T4531] mutex_lock_nested+0x38/0x44 [ 42.641613][ T4531] nfc_register_device+0x48/0x300 [ 42.642595][ T4531] nci_register_device+0x6b8/0x7e4 [ 42.643590][ T4531] virtual_ncidev_open+0x6c/0xd8 [ 42.644525][ T4531] misc_open+0x310/0x388 [ 42.645368][ T4531] chrdev_open+0x3d0/0x51c [ 42.646256][ T4531] do_dentry_open+0x738/0xf8c [ 42.647205][ T4531] vfs_open+0x7c/0x90 [ 42.648011][ T4531] path_openat+0x1fc0/0x27a0 [ 42.648940][ T4531] do_filp_open+0x198/0x38c [ 42.649838][ T4531] do_sys_openat2+0x134/0x3fc [ 42.650771][ T4531] __arm64_sys_openat+0x11c/0x150 [ 42.651750][ T4531] invoke_syscall+0x98/0x290 [ 42.652688][ T4531] el0_svc_common+0x13c/0x258 [ 42.653616][ T4531] do_el0_svc+0x5c/0x134 [ 42.654430][ T4531] el0_svc+0x58/0x128 [ 42.655214][ T4531] el0t_64_sync_handler+0x84/0xf0 [ 42.656193][ T4531] el0t_64_sync+0x18c/0x190 [ 42.657095][ T4531] [ 42.657095][ T4531] -> #0 (nci_mutex){+.+.}-{3:3}: [ 42.658354][ T4531] __lock_acquire+0x2808/0x6634 [ 42.659286][ T4531] lock_acquire+0x20c/0x638 [ 42.660170][ T4531] __mutex_lock_common+0x1a0/0x1f3c [ 42.661208][ T4531] mutex_lock_nested+0x38/0x44 [ 42.662108][ T4531] virtual_nci_close+0x28/0x58 [ 42.663022][ T4531] nci_close_device+0x2e4/0x57c [ 42.663996][ T4531] nci_unregister_device+0x78/0x258 [ 42.665019][ T4531] virtual_ncidev_close+0x70/0xb0 [ 42.665995][ T4531] __fput+0x1b4/0x7b0 [ 42.666774][ T4531] ____fput+0x20/0x30 [ 42.667505][ T4531] task_work_run+0x1f4/0x280 [ 42.668386][ T4531] do_notify_resume+0x20f8/0x2c84 [ 42.669359][ T4531] el0_svc+0x98/0x128 [ 42.670148][ T4531] el0t_64_sync_handler+0x84/0xf0 [ 42.671155][ T4531] el0t_64_sync+0x18c/0x190 [ 42.672066][ T4531] [ 42.672066][ T4531] other info that might help us debug this: [ 42.672066][ T4531] [ 42.673924][ T4531] Chain exists of: [ 42.673924][ T4531] nci_mutex --> &genl_data->genl_data_mutex --> &ndev->req_lock [ 42.673924][ T4531] [ 42.676362][ T4531] Possible unsafe locking scenario: [ 42.676362][ T4531] [ 42.677625][ T4531] CPU0 CPU1 [ 42.678535][ T4531] ---- ---- [ 42.679501][ T4531] lock(&ndev->req_lock); [ 42.680296][ T4531] lock(&genl_data->genl_data_mutex); [ 42.681696][ T4531] lock(&ndev->req_lock); [ 42.682920][ T4531] lock(nci_mutex); [ 42.683624][ T4531] [ 42.683624][ T4531] *** DEADLOCK *** [ 42.683624][ T4531] [ 42.685074][ T4531] 1 lock held by syz.3.30/4531: [ 42.685933][ T4531] #0: ffff0000d42c7350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0xe8/0x57c [ 42.687725][ T4531] [ 42.687725][ T4531] stack backtrace: [ 42.688787][ T4531] CPU: 0 PID: 4531 Comm: syz.3.30 Not tainted syzkaller #0 [ 42.690099][ T4531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 42.691812][ T4531] Call trace: [ 42.692408][ T4531] dump_backtrace+0x1c4/0x1f0 [ 42.693259][ T4531] show_stack+0x2c/0x3c [ 42.694004][ T4531] __dump_stack+0x30/0x40 [ 42.694766][ T4531] dump_stack_lvl+0xf4/0x15c [ 42.695608][ T4531] dump_stack+0x1c/0x5c [ 42.696347][ T4531] print_circular_bug+0x148/0x1b0 [ 42.697259][ T4531] check_noncircular+0x264/0x2f8 [ 42.698124][ T4531] __lock_acquire+0x2808/0x6634 [ 42.698959][ T4531] lock_acquire+0x20c/0x638 [ 42.699750][ T4531] __mutex_lock_common+0x1a0/0x1f3c [ 42.700673][ T4531] mutex_lock_nested+0x38/0x44 [ 42.701531][ T4531] virtual_nci_close+0x28/0x58 [ 42.702372][ T4531] nci_close_device+0x2e4/0x57c [ 42.703221][ T4531] nci_unregister_device+0x78/0x258 [ 42.704163][ T4531] virtual_ncidev_close+0x70/0xb0 [ 42.705083][ T4531] __fput+0x1b4/0x7b0 [ 42.705791][ T4531] ____fput+0x20/0x30 [ 42.706509][ T4531] task_work_run+0x1f4/0x280 [ 42.707341][ T4531] do_notify_resume+0x20f8/0x2c84 [ 42.708262][ T4531] el0_svc+0x98/0x128 [ 42.709000][ T4531] el0t_64_sync_handler+0x84/0xf0 [ 42.709903][ T4531] el0t_64_sync+0x18c/0x190 [ 47.826514][ T4547] netlink: 'syz.4.33': attribute type 4 has an invalid length.