last executing test programs: 2m57.673398778s ago: executing program 2 (id=3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x178}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x44000, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = io_uring_setup(0x28a6, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000002280)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}], &(0x7f0000001540)=[0x2]}, 0x20) write$hidraw(r4, &(0x7f0000000380)="96e8106040a2db8ca2c1bf4c6fe1f927610086c83f", 0x15) io_uring_enter(r5, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r5, 0x406, 0xffffffffffffffff) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x2e, 0x0, &(0x7f00000001c0)) read$hiddev(r6, &(0x7f0000000080)=""/134, 0x86) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000002c0)='bfs\x00', 0x800041, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00') 2m57.518370019s ago: executing program 4 (id=5): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0xfffffffc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r2, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_usb_connect$sierra_net(0x6, 0x0, 0x0, 0x0) syz_usb_disconnect(r6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 2m56.35773451s ago: executing program 2 (id=7): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019640)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010000000000fcffffff0e0000000800020009", @ANYRESOCT], 0x1c}}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000300)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x6d682db9, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000b46000"/20], 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 2m54.345683849s ago: executing program 2 (id=8): syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) readv(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) getpgrp(0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x80) r6 = socket(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xd, 0x3}, {0x0, 0xa}, {0x1, 0xfff1}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x1, 0xf}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x9, 0x0, 0x1}}]}}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @private=0xa010102}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x7}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0xffffff00, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0xff}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m39.947115975s ago: executing program 32 (id=5): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0xfffffffc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r2, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_usb_connect$sierra_net(0x6, 0x0, 0x0, 0x0) syz_usb_disconnect(r6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 2m39.174391538s ago: executing program 33 (id=8): syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) readv(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) getpgrp(0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x80) r6 = socket(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xd, 0x3}, {0x0, 0xa}, {0x1, 0xfff1}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x1, 0xf}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x9, 0x0, 0x1}}]}}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @private=0xa010102}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x7}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0xffffff00, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0xff}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m8.242048648s ago: executing program 0 (id=67): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001c80)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x5, @a={0x1, 0x0, 0x0, 0xd, {0x80, 0x3b, "4815af55ac963dfc821ffbc6960d5940db72a7b622132560d0e49a0a17fc3fea6fb552b8b5e28cebf8feb246c47baa4bf642491cde09a439b9790b", 0xe0, 0x1}}}, 0x47) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m7.762235411s ago: executing program 0 (id=70): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x8, 0x4) 2m7.619775951s ago: executing program 0 (id=71): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000cff07000c0000000300dbda834e0e474450e68cc422c7a45c0000080000000000001203000000003000ab9ded19cc1a0615ad119cfd71fa4ae537"], 0x0, 0x27, 0x0, 0x1, 0x3}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f00000000c0)=0x8, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 2m2.455295839s ago: executing program 0 (id=73): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket(0x23, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10000001}) r2 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{0x0}], 0x1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000170001", @ANYRES32=0x0, @ANYRES32=0x0], 0x34c}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000dc0)={@broadcast, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x8, 0x58, 0x67, 0x0, 0x53, 0x2f, 0x0, @multicast1, @multicast2}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x9, 0x1, 0x1, 0x1, 0x6, 0x3}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x8, 0x2, 0xb2, 0x3, 0x1, 0x3, 0x3, 0x2}, 0x2, {0x8, 0x81, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) 1m58.882332896s ago: executing program 0 (id=81): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000cff07000c0000000300dbda834e0e474450e68cc422c7a45c0000080000000000001203000000003000ab9ded19cc1a0615ad119cfd71fa4ae537"], 0x0, 0x27, 0x0, 0x1, 0x3}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f00000000c0)=0x8, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 1m58.136694567s ago: executing program 0 (id=82): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=0x0], 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc02d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) 1m42.315406932s ago: executing program 34 (id=82): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=0x0], 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc02d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) 27.422595613s ago: executing program 6 (id=255): syz_emit_ethernet(0x86, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x68, 0x0, 0x0, 0x88, 0x0, @rand_addr=0x64010101, @local}, {0xfffe, 0x4e24, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "b1657bcce0be361b17ff204c6c96ee7e58279827dbb5769a00ca9b43f5642882", "b6b509081290d9a829ba1cb7d3125408", {"7265d73c30533afd57f0facd20c37431", "8b31e9c1549d78b1f59c51391f84fce9"}}}}}}}, 0x0) 27.023491241s ago: executing program 6 (id=257): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4808}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket(0x14, 0x2, 0x4) syz_emit_ethernet(0x62, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00U\a', 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0xc001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x7ffe, {[@exp_smc={0xfe, 0x6}, @generic={0x13, 0xe, "0794306a6d418070abd95a87"}]}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r1, 0x0, 0x0, 0x20044881, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 25.404756243s ago: executing program 7 (id=262): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) socket$pptp(0x18, 0x1, 0x2) syz_io_uring_setup(0xa3, &(0x7f0000000300)={0x0, 0x14b6, 0x8, 0x1, 0x133}, &(0x7f00000001c0)=0x0, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB='\"\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r5, 0x0, 0x7}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 25.332818318s ago: executing program 5 (id=264): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000cff07000c0000000300dbda834e0e474450e68cc422c7a45c0000080000000000001203000000003000ab9ded19cc1a0615ad119cfd71fa4ae537"], 0x0, 0x27, 0x0, 0x1, 0x3}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f00000000c0)=0x8, 0x4) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 17.166826793s ago: executing program 5 (id=266): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, 0x0, 0x0, 0x102, 0x0, 0x0) 16.964553167s ago: executing program 7 (id=268): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000cff07000c0000000300dbda834e0e474450e68cc422c7a45c0000080000000000001203000000003000ab9ded19cc1a0615ad119cfd71fa4ae537"], 0x0, 0x27, 0x0, 0x1, 0x3}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f00000000c0)=0x8, 0x4) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 16.811268018s ago: executing program 5 (id=270): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000840)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xff, "1b1b740e0b5be8"}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) socket$key(0xf, 0x3, 0x2) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @empty}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, r9}}, 0x48) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000d097d0dcbccc77934500000000020020060400028063c6495c46b65ccafc9b47ccf67004475cdd2a540182fb85184e4540717e42"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000240)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_flash={0x33, 0x8, './file0\x00'}}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001840)={r2, 0x6}) 16.605473612s ago: executing program 1 (id=272): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0, 0x70}}, 0x20008800) 15.710795774s ago: executing program 7 (id=273): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x1c, 0xfffffffffffffffd, &(0x7f0000000000)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000180)=0x80000006, 0x4) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x7) fcntl$notify(r2, 0x402, 0x1000000) 15.455030512s ago: executing program 6 (id=274): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x24048050) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d}) sched_setaffinity(0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x1205, 0x2}, 0x18, 0x2) 15.000018973s ago: executing program 1 (id=275): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', 0x0) 14.731236231s ago: executing program 1 (id=277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socket(0x2a, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffefff) 13.864111852s ago: executing program 6 (id=279): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) socket$pptp(0x18, 0x1, 0x2) syz_io_uring_setup(0xa3, &(0x7f0000000300)={0x0, 0x14b6, 0x8, 0x1, 0x133}, &(0x7f00000001c0)=0x0, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB='\"\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r5, 0x0, 0x7}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12.910816407s ago: executing program 1 (id=280): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, 0x0, &(0x7f0000005b40)) 12.624629187s ago: executing program 1 (id=281): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port1\x00', 0x19f, 0x60004, 0xfffffffd, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x4000) 11.052138056s ago: executing program 6 (id=282): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102384, 0x18ff0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) 8.051880934s ago: executing program 3 (id=289): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x24048050) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d}) sched_setaffinity(0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x1205, 0x2}, 0x18, 0x2) 7.831523249s ago: executing program 1 (id=290): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x1000006, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f00000002c0), 0x5005) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000280)={0x34, r4, 0x1, 0x70bd22, 0x40, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x16}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x34}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e26483137190000", 0x17}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=@newqdisc={0x45c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_RTAB={0x25b, 0x2, [0x200, 0x9, 0x8, 0x40000000, 0x5, 0x4, 0x4, 0x4, 0x8805, 0x3, 0x1, 0x2, 0x4, 0xffffffff, 0x100, 0x3, 0x9, 0x1, 0x2, 0x442e, 0xfffffffa, 0x4, 0x6, 0x1, 0x9, 0x5cb, 0xfffffff7, 0x401, 0x8, 0x6, 0x7, 0xb, 0xb5, 0x80, 0x5, 0x4, 0xf7, 0x8, 0x4, 0x7, 0x0, 0x3, 0x3, 0xffff, 0x1ff, 0x101, 0x0, 0x2, 0x0, 0x6, 0x3, 0x1, 0x7, 0x10001, 0x40, 0x101, 0x8, 0xa, 0xfffffffa, 0xfffffff9, 0x6, 0xffffffff, 0x8, 0x4, 0x5, 0x9, 0xfffffff6, 0xfffffff7, 0x0, 0x4, 0x7, 0x1a6e, 0x3, 0x5, 0xd5d, 0x9, 0x3, 0x1e8, 0xf, 0x8f4, 0x4, 0xa2e4, 0x81, 0x9, 0x2, 0x8, 0x0, 0x9, 0x54a5, 0x6, 0x2, 0x800, 0xfff, 0xffffff7f, 0xf6, 0x4, 0x400, 0x7, 0xe9, 0x401, 0x6, 0x4, 0x3, 0x8, 0x0, 0x1, 0x1, 0x533, 0x0, 0x4, 0x68e, 0x0, 0x8, 0x7, 0x8, 0xfffffffc, 0x945d, 0x0, 0x1000, 0xffff, 0x6, 0x0, 0x6, 0x6, 0x3, 0xfffffffe, 0x2, 0x3, 0x0, 0x2cfc, 0x218, 0xb6, 0x9, 0x2, 0x7, 0x185f, 0x4, 0xf, 0x3, 0x9, 0x5, 0x0, 0xc487, 0x8, 0x57, 0xae, 0xff, 0x855a, 0x8, 0x0, 0x800, 0x11, 0x5, 0xd, 0x7, 0x7ff, 0xa96, 0xd, 0x6, 0x4, 0xea9, 0x9, 0x8, 0x6, 0x1, 0x4, 0x1, 0x7, 0x6, 0x0, 0x810, 0x0, 0x2, 0x8, 0xfe8, 0x3, 0x6, 0x9, 0xfffffffa, 0xd85, 0x0, 0x7f, 0x6d, 0x9, 0x2, 0x80000000, 0x9, 0x5607, 0x59, 0x36, 0x7, 0x0, 0xfffff7b1, 0x80000000, 0x9, 0x2, 0x7, 0xc78e, 0x6, 0x10001, 0x8, 0x0, 0x8, 0xe67f, 0x401, 0x8, 0xa, 0x7c, 0x4, 0x5, 0x1, 0x8000, 0x6, 0xffff, 0x20, 0x3, 0x4260, 0x4, 0x0, 0x80000001, 0x1, 0x9, 0x9, 0x7, 0x100, 0x3, 0x9, 0x314, 0x200, 0x3, 0x8, 0x6, 0x3, 0xc, 0x7fff, 0x0, 0x2, 0x7fffffff, 0x2, 0x5, 0xa, 0x1, 0x7, 0xc, 0xfb87, 0x6, 0x1, 0x18, 0x4, 0x8a, 0x1, 0x800, 0x1f85, 0xfb, 0xa, 0x23]}]}}]}, 0x45c}}, 0x44080) 7.395236859s ago: executing program 7 (id=291): inotify_add_watch(0xffffffffffffffff, 0x0, 0xd2000424) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r0, 0x0, 0x500) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac14140034"], 0x2c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000003c0)=""/162) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000140000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7, 0xc3072, 0xffffffffffffffff, 0x0) 6.913234122s ago: executing program 3 (id=292): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) socket$pptp(0x18, 0x1, 0x2) syz_io_uring_setup(0xa3, &(0x7f0000000300)={0x0, 0x14b6, 0x8, 0x1, 0x133}, &(0x7f00000001c0)=0x0, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB='\"\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r5, 0x0, 0x7}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.91559189s ago: executing program 5 (id=293): syz_open_dev$media(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x5, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x8, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x2}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.979229865s ago: executing program 7 (id=294): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000cff07000c0000000300dbda834e0e474450e68cc422c7a45c0000080000000000001203000000003000ab9ded19cc1a0615ad119cfd71fa4ae537"], 0x0, 0x27, 0x0, 0x1, 0x3}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f00000000c0)=0x8, 0x4) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 3.083173297s ago: executing program 3 (id=295): mount$overlay(0x0, 0x0, 0x0, 0x880, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) 2.975689695s ago: executing program 5 (id=296): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0, 0x70}}, 0x20008800) 2.842248904s ago: executing program 5 (id=297): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x1c, &(0x7f0000000240)=""/28, 0x41100, 0x33, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x10, 0x3, 0x473}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x10, 0x9}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580), 0x8) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x123200, 0x0) read$FUSE(r0, &(0x7f0000002a80)={0x2020}, 0xfffffffe) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000d0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x6080, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x647, &(0x7f0000000040)={0x0, 0x188d, 0xc000, 0x20000a, 0x35}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) landlock_restrict_self(r3, 0x9) syz_usb_connect$midi(0x0, 0x5a, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 2.776116318s ago: executing program 3 (id=298): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', 0x0) 2.539039954s ago: executing program 3 (id=299): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000cff07000c0000000300dbda834e0e474450e68cc422c7a45c0000080000000000001203000000003000ab9ded19cc1a0615ad119cfd71fa4ae537"], 0x0, 0x27, 0x0, 0x1, 0x3}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f00000000c0)=0x8, 0x4) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 318.855338ms ago: executing program 3 (id=300): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 318.548188ms ago: executing program 7 (id=301): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x1c, 0xfffffffffffffffd, &(0x7f0000000000)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000180)=0x80000006, 0x4) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x7) fcntl$notify(r2, 0x402, 0x1000000) 0s ago: executing program 6 (id=302): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x24048050) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d}) sched_setaffinity(0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x1205, 0x2}, 0x18, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.142' (ED25519) to the list of known hosts. [ 65.997275][ T4172] cgroup: Unknown subsys name 'net' [ 66.135707][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.661122][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.256428][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 69.304656][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 69.384205][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 69.427306][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 69.473506][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 69.503555][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.511698][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.520802][ T4184] device bridge_slave_0 entered promiscuous mode [ 69.536796][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.544604][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.554806][ T4184] device bridge_slave_1 entered promiscuous mode [ 69.586464][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.594012][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.602778][ T4187] device bridge_slave_0 entered promiscuous mode [ 69.634059][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.642104][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.650883][ T4187] device bridge_slave_1 entered promiscuous mode [ 69.696815][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.715303][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.757223][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.765794][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.774929][ T4185] device bridge_slave_0 entered promiscuous mode [ 69.785949][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.804702][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.814048][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.822118][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.831582][ T4188] device bridge_slave_0 entered promiscuous mode [ 69.846650][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.854139][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.863422][ T4186] device bridge_slave_0 entered promiscuous mode [ 69.871595][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.879242][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.888112][ T4185] device bridge_slave_1 entered promiscuous mode [ 69.902488][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.909773][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.918242][ T4188] device bridge_slave_1 entered promiscuous mode [ 69.928935][ T4184] team0: Port device team_slave_0 added [ 69.943158][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.950659][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.960203][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.990421][ T4184] team0: Port device team_slave_1 added [ 70.011715][ T4187] team0: Port device team_slave_0 added [ 70.027420][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.046023][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.057870][ T4187] team0: Port device team_slave_1 added [ 70.065756][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.077421][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.095725][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.108313][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.134828][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.143355][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.172641][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.222038][ T4188] team0: Port device team_slave_0 added [ 70.228889][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.236486][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.265289][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.287160][ T4186] team0: Port device team_slave_0 added [ 70.300539][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.308143][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.335987][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.351706][ T4188] team0: Port device team_slave_1 added [ 70.365013][ T4186] team0: Port device team_slave_1 added [ 70.374170][ T4185] team0: Port device team_slave_0 added [ 70.382156][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.391489][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.420893][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.452878][ T4185] team0: Port device team_slave_1 added [ 70.511463][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.519689][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.547880][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.566642][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.575292][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.603516][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.635538][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.643781][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.671782][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.688884][ T4184] device hsr_slave_0 entered promiscuous mode [ 70.697107][ T4184] device hsr_slave_1 entered promiscuous mode [ 70.709269][ T4187] device hsr_slave_0 entered promiscuous mode [ 70.716697][ T4187] device hsr_slave_1 entered promiscuous mode [ 70.725328][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.733716][ T4187] Cannot create hsr debugfs directory [ 70.741473][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.748837][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.775585][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.788019][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.795392][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.822323][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.856140][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.863584][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.891863][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.928768][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 70.936053][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 70.937740][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 70.967004][ T4188] device hsr_slave_0 entered promiscuous mode [ 70.974870][ T4188] device hsr_slave_1 entered promiscuous mode [ 70.982247][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.990501][ T4188] Cannot create hsr debugfs directory [ 71.017920][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 71.033164][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 71.044926][ T4185] device hsr_slave_0 entered promiscuous mode [ 71.053852][ T4185] device hsr_slave_1 entered promiscuous mode [ 71.061268][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.069625][ T4185] Cannot create hsr debugfs directory [ 71.098513][ T4186] device hsr_slave_0 entered promiscuous mode [ 71.105897][ T4186] device hsr_slave_1 entered promiscuous mode [ 71.113806][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.122322][ T4186] Cannot create hsr debugfs directory [ 71.482253][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.500525][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.518657][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.537494][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.575448][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.591340][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.603400][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.637160][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.663014][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.670418][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.706000][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.723028][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.734589][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.747205][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.826132][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.855259][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.881694][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.898862][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.909194][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.951712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.964318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.980831][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.000270][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.014778][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.030990][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.043002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.055779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.066256][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.074173][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.090114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.099161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.108834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.118695][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.126367][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.137140][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.189766][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.201278][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.211337][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.221760][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.231854][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.243217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.255220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.284471][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.299389][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.317105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.326993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.372029][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.381518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.395988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.406407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.415587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.424882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.433939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.445330][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.471331][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.513880][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.533285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.548296][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.555883][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.567800][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.577012][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.587187][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.594754][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.604306][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.615013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.624163][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.631849][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.656347][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.675650][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.684861][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.695694][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.706573][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.716156][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.723725][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.734373][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.744772][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.755834][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.774787][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.801958][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.821786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.831184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.845956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.856376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.871586][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.879181][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.887925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.897283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.906575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.916448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.926618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.936947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.945449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.971853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.984232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.993792][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.001566][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.012738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.019125][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 73.027259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.035759][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 73.035872][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 73.051091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.061409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.070395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.082369][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.092430][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.092780][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 73.113271][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 73.123461][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.139900][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.150250][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.161944][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.173007][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.181875][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.190603][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.223781][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.236606][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.247252][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.254555][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.265046][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.275085][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.284894][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.295531][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.304751][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.312334][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.321658][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.330994][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.340133][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.352065][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.362214][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.373377][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.386433][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.403191][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.419650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.463583][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.497916][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.534952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.545074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.562086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.576538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.586906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.596862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.606201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.615197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.624262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.632585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.717820][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.725221][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.742890][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.757060][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.795290][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.813513][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.822674][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.831192][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.868441][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.884280][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.914151][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.939368][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.975024][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.991290][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.048332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.069786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.079125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.086794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.118397][ T4186] device veth0_vlan entered promiscuous mode [ 74.144598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.154902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.166239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.174247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.185026][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.206940][ T4186] device veth1_vlan entered promiscuous mode [ 74.219034][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.227079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.238077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.246523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.288927][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.299206][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.308554][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.346867][ T4186] device veth0_macvtap entered promiscuous mode [ 74.369911][ T4186] device veth1_macvtap entered promiscuous mode [ 74.389502][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.400742][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.417864][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.427186][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.437131][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.446989][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.459037][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.479514][ T4184] device veth0_vlan entered promiscuous mode [ 74.511236][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.520411][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.529229][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.537836][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.546180][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.556210][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.567180][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.575444][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.583892][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.594001][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.614722][ T4184] device veth1_vlan entered promiscuous mode [ 74.624964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.635583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.649431][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.669505][ T4187] device veth0_vlan entered promiscuous mode [ 74.682093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.694597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.703006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.712632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.727792][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.739536][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.749101][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.758267][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.767347][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.784404][ T4187] device veth1_vlan entered promiscuous mode [ 74.848673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.860203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.871043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.881419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.890768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.901209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.912458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.922068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.931733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.940605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.953585][ T4188] device veth0_vlan entered promiscuous mode [ 74.966199][ T4184] device veth0_macvtap entered promiscuous mode [ 74.996886][ T4188] device veth1_vlan entered promiscuous mode [ 75.036967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.049802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.059621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.069456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.079938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.089665][ T1335] Bluetooth: hci3: command 0x040f tx timeout [ 75.096299][ T1335] Bluetooth: hci4: command 0x040f tx timeout [ 75.103488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.111671][ T1335] Bluetooth: hci2: command 0x040f tx timeout [ 75.118887][ T4184] device veth1_macvtap entered promiscuous mode [ 75.126259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.135257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.145809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.168213][ T1335] Bluetooth: hci0: command 0x040f tx timeout [ 75.174634][ T1335] Bluetooth: hci1: command 0x040f tx timeout [ 75.189678][ T4187] device veth0_macvtap entered promiscuous mode [ 75.209099][ T4185] device veth0_vlan entered promiscuous mode [ 75.230649][ T4187] device veth1_macvtap entered promiscuous mode [ 75.253090][ T4185] device veth1_vlan entered promiscuous mode [ 75.266336][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.276096][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.286232][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.303474][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.316527][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.344033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.352625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.366418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.375885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.388849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.398721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.408473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.429184][ T4188] device veth0_macvtap entered promiscuous mode [ 75.458756][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.468468][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.477230][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.488611][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.500561][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.513101][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.522669][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.534853][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.546265][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.559229][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.576536][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.587694][ T4188] device veth1_macvtap entered promiscuous mode [ 75.607526][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.615415][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.623365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.634180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.646939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.657004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.666493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.676219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.697735][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.706690][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.717317][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.728855][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.744786][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.755900][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.767476][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.778639][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.790894][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.804611][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.814955][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.826593][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.837110][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.854802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.864003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.915719][ T4185] device veth0_macvtap entered promiscuous mode [ 75.933324][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.946939][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.963980][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.979303][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.997147][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.009764][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.021391][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.043743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.073106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.082953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.093384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.105300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.119103][ T4185] device veth1_macvtap entered promiscuous mode [ 76.169571][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.198519][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.217259][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.235622][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.246372][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.266067][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.289687][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.389109][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.414464][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.455467][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.468843][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.483830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.493350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.503218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.513935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.522625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.306344][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.320820][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.333428][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.344587][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.365698][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.387264][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.407160][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.424338][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.437010][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.453572][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.465179][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.480348][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.491076][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 77.502195][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 77.508732][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 77.515012][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 77.517872][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.521385][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 77.564108][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.582510][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.595169][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.606414][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.618919][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.630258][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.640321][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.653676][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.664143][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.675361][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.688508][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.701620][ T3095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.716331][ T3095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.752409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.762723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.771962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.796234][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.807213][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.820876][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.830078][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.849272][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.865474][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.888587][ T1335] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.938995][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.321586][ T1335] usb 2-1: Using ep0 maxpacket: 16 [ 78.466825][ T4285] ======================================================= [ 78.466825][ T4285] WARNING: The mand mount option has been deprecated and [ 78.466825][ T4285] and is ignored by this kernel. Remove the mand [ 78.466825][ T4285] option from the mount to silence this warning. [ 78.466825][ T4285] ======================================================= [ 78.523422][ T4285] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 79.121541][ T4287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.130776][ T1335] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 79.141013][ T1335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.150356][ T4287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.158380][ T1335] usb 2-1: Product: syz [ 79.162888][ T1335] usb 2-1: Manufacturer: syz [ 79.170081][ T1335] usb 2-1: SerialNumber: syz [ 79.211162][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.258468][ T1335] usb 2-1: config 0 descriptor?? [ 79.334414][ T1335] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 79.349735][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.368082][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.393801][ T4246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.401252][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.422814][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.440945][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.457167][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.467252][ T4246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.567921][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.577938][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 79.587584][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 79.597527][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 79.607070][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 79.730711][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 79.888091][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.037900][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 80.607949][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.618357][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 81.133048][ T1335] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 81.217690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.276910][ T1335] usb 2-1: USB disconnect, device number 2 [ 81.288426][ T1335] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 81.298600][ T1335] visor 2-1:0.0: device disconnected [ 81.546421][ T4299] netlink: 'syz.1.9': attribute type 4 has an invalid length. [ 81.555738][ T4299] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9'. [ 82.030606][ T4299] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 82.598038][ T4232] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.151477][ T4308] sched: RT throttling activated [ 84.327572][ T4232] usb 1-1: Using ep0 maxpacket: 32 [ 85.818453][ T4232] usb 1-1: unable to read config index 0 descriptor/all [ 85.825710][ T4232] usb 1-1: can't read configurations, error -71 [ 86.368960][ T4316] smb3: Unknown parameter 'opcxÏ' [ 87.800167][ T7] cfg80211: failed to load regulatory.db [ 87.938400][ T4316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 98.657743][ T1335] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.767844][ T4232] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 98.947685][ T1335] usb 2-1: Using ep0 maxpacket: 32 [ 99.099503][ T1335] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 99.114516][ T1335] usb 2-1: config 0 has no interface number 0 [ 99.198440][ T26] audit: type=1326 audit(1775871745.514:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4364 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6392ce819 code=0x7ffc0000 [ 102.118955][ T26] audit: type=1326 audit(1775871745.514:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4364 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6392ce819 code=0x7ffc0000 [ 102.154701][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.418178][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 102.454086][ T26] audit: type=1326 audit(1775871745.534:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4364 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fa6392ce819 code=0x7ffc0000 [ 102.843778][ T1335] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.880293][ T1335] usb 2-1: config 0 interface 85 has no altsetting 0 [ 102.889853][ T1324] Bluetooth: hci3: command 0x0409 tx timeout [ 102.896341][ T1324] Bluetooth: hci5: command 0x0409 tx timeout [ 102.907259][ T26] audit: type=1326 audit(1775871745.534:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4364 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6392ce819 code=0x7ffc0000 [ 102.929902][ T1335] usb 2-1: string descriptor 0 read error: -71 [ 102.936231][ T1335] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 102.945638][ T4232] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 102.957708][ T26] audit: type=1326 audit(1775871745.534:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4364 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6392ce819 code=0x7ffc0000 [ 102.981600][ T4232] usb 4-1: can't read configurations, error -71 [ 102.988626][ T1335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.000417][ T1335] usb 2-1: config 0 descriptor?? [ 103.020455][ T1335] usb 2-1: can't set config #0, error -71 [ 103.938372][ T26] audit: type=1326 audit(1775871745.534:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4364 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa6392ce819 code=0x7ffc0000 [ 103.964184][ T26] audit: type=1326 audit(1775871745.534:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4364 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6392ce819 code=0x7ffc0000 [ 103.976056][ T1335] usb 2-1: USB disconnect, device number 3 [ 104.040526][ T4384] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.083614][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.141580][ T26] audit: type=1326 audit(1775871745.534:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4364 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6392ce819 code=0x7ffc0000 [ 104.258166][ T4382] ODEBUG: Out of memory. ODEBUG disabled [ 104.362509][ T26] audit: type=1326 audit(1775871745.534:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4364 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa6392ce819 code=0x7ffc0000 [ 104.411693][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.550059][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.308235][ T1335] Bluetooth: hci5: command 0x041b tx timeout [ 105.314894][ T1335] Bluetooth: hci3: command 0x041b tx timeout [ 105.695176][ T4360] chnl_net:caif_netlink_parms(): no params data found [ 106.573592][ T4362] chnl_net:caif_netlink_parms(): no params data found [ 108.168372][ T1335] Bluetooth: hci5: command 0x040f tx timeout [ 108.175143][ T1335] Bluetooth: hci3: command 0x040f tx timeout [ 108.975038][ T4421] program syz.3.32 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.391065][ T4433] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 109.519414][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.546174][ T4360] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.577006][ T4360] device bridge_slave_0 entered promiscuous mode [ 109.792141][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.807154][ T4360] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.616387][ T4229] Bluetooth: hci3: command 0x0419 tx timeout [ 110.667622][ T4360] device bridge_slave_1 entered promiscuous mode [ 110.675763][ T4362] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.690076][ T4229] Bluetooth: hci5: command 0x0419 tx timeout [ 110.699475][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.719752][ T4362] device bridge_slave_0 entered promiscuous mode [ 110.749066][ T4362] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.756644][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.802817][ T4362] device bridge_slave_1 entered promiscuous mode [ 110.942255][ T4362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.055533][ T4362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.083914][ T4360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.154758][ T4360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.251076][ T4362] team0: Port device team_slave_0 added [ 111.279539][ T4360] team0: Port device team_slave_0 added [ 111.418017][ T4362] team0: Port device team_slave_1 added [ 111.427273][ T4360] team0: Port device team_slave_1 added [ 111.550511][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.569330][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.598063][ T4362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.625798][ T4360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.641650][ T4360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.737493][ T4360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.760200][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.767390][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.797727][ T4362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.840056][ T4360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.858215][ T4360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.894800][ T4360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.305033][ T4362] device hsr_slave_0 entered promiscuous mode [ 113.728916][ T4362] device hsr_slave_1 entered promiscuous mode [ 113.766961][ T4362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.775233][ T4362] Cannot create hsr debugfs directory [ 114.881423][ T4360] device hsr_slave_0 entered promiscuous mode [ 114.913906][ T4360] device hsr_slave_1 entered promiscuous mode [ 114.947720][ T4360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.977760][ T4360] Cannot create hsr debugfs directory [ 115.148428][ T154] device hsr_slave_0 left promiscuous mode [ 115.161901][ T154] device hsr_slave_1 left promiscuous mode [ 115.228364][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.246475][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.354574][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.368721][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.402316][ T154] device bridge_slave_1 left promiscuous mode [ 115.420284][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.513076][ T154] device bridge_slave_0 left promiscuous mode [ 115.540224][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.008340][ T154] device veth1_macvtap left promiscuous mode [ 117.014853][ T154] device veth0_macvtap left promiscuous mode [ 117.030457][ T154] device veth1_vlan left promiscuous mode [ 117.047440][ T154] device veth0_vlan left promiscuous mode [ 117.542340][ T4228] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.622860][ T154] team0 (unregistering): Port device team_slave_1 removed [ 117.642245][ T154] team0 (unregistering): Port device team_slave_0 removed [ 117.661257][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.686991][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.815166][ T154] bond0 (unregistering): Released all slaves [ 117.960216][ T4228] usb 2-1: Using ep0 maxpacket: 16 [ 119.493828][ T4362] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 119.753704][ T4362] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 119.790597][ T4362] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 119.826105][ T4362] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 119.867607][ T4360] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 120.049998][ T4550] virtio-fs: tag <./cgroup> not found [ 120.793945][ T4360] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.821634][ T4360] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.896357][ T4360] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.019108][ T7] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 121.042708][ T7] Bluetooth: hci0: Injecting HCI hardware error event [ 121.098995][ T4197] Bluetooth: hci0: hardware error 0x00 [ 121.288115][ T4362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.349072][ T4360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.391094][ T4362] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.413010][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.438331][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.488114][ T4360] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.532336][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.561239][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.616979][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.647080][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.671583][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.680066][ T4287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.730359][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.765743][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.790412][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.797854][ T4287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.915900][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.955097][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.387268][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.407955][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.480290][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.487720][ T4287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.581026][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.620113][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.668903][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.706167][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.713818][ T4287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.824868][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.885046][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.938727][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.990725][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.039828][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.059081][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.108659][ T4228] usb 2-1: unable to get BOS descriptor or descriptor too short [ 123.135951][ T4362] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.187583][ T4228] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 123.195325][ T4228] usb 2-1: can't read configurations, error -71 [ 123.228718][ T4362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.350034][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.478646][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.615492][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.146273][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.619796][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.633569][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.653364][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.673101][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.869952][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.993192][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.025571][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.037261][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.073379][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.091220][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.246857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.089087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.679175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.687099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.762412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.776126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.803559][ T4360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.867734][ T4362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.257603][ T4487] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.443194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.468452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.617826][ T4487] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 133.638212][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.664980][ T4487] usb 1-1: config 1 has no interface number 0 [ 133.672963][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.707671][ T4487] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 133.755040][ T4362] device veth0_vlan entered promiscuous mode [ 133.803658][ T4360] device veth0_vlan entered promiscuous mode [ 133.811247][ T4487] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.825710][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.858347][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.905149][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.912034][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.923172][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.932227][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.945277][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.954838][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.963806][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.972431][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.989964][ T4360] device veth1_vlan entered promiscuous mode [ 134.035296][ T4362] device veth1_vlan entered promiscuous mode [ 134.097956][ T4487] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 134.449105][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.546046][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.636839][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.729535][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.808811][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.902200][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.011613][ T4487] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.020372][ T4487] usb 1-1: Product: syz [ 135.024699][ T4487] usb 1-1: Manufacturer: syz [ 135.030354][ T4487] usb 1-1: SerialNumber: syz [ 135.035921][ T4360] device veth0_macvtap entered promiscuous mode [ 135.078231][ T4660] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 135.092031][ T4360] device veth1_macvtap entered promiscuous mode [ 135.102194][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.139292][ T4487] usb 1-1: Expected 3 endpoints, found: 2 [ 135.148149][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.199014][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.231454][ T4362] device veth0_macvtap entered promiscuous mode [ 135.264478][ T4362] device veth1_macvtap entered promiscuous mode [ 135.293511][ T4360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.314763][ T4360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.362232][ T4360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.393642][ T4360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.426854][ T4360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.446038][ T4360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.456566][ T4360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.476609][ T4360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.496187][ T4360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.512548][ T4360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.524033][ T4360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.536318][ T4360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.565073][ T4360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.584615][ T4360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.596346][ T4360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.607186][ T4360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.621691][ T4360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.639851][ T4360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.662392][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.681710][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.705074][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.735961][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.754016][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.766720][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.795249][ T4360] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.818777][ T4360] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.846461][ T4360] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.868607][ T4360] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.936075][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.990458][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.051504][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.086165][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.104354][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.125723][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.160907][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.192477][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.222945][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.254774][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.275342][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.296254][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.329722][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.385309][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.399607][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.424608][ T1108] usb 1-1: USB disconnect, device number 4 [ 136.443537][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.481654][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.495036][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.526982][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.552770][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.581806][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.605404][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.631361][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.652390][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.672649][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.743459][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.932715][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.504163][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.532278][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.563070][ T4362] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.599437][ T4362] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.616394][ T4362] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.625943][ T4362] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.665363][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.512293][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.558331][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.613562][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 138.650345][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.688197][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.753490][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 138.804707][ T4246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.814546][ T4246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.885404][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.980896][ T4246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.031733][ T4246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.087251][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 139.177781][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.499300][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 139.847762][ T23] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 139.883162][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.911293][ T23] usb 2-1: Product: syz [ 139.951524][ T23] usb 2-1: Manufacturer: syz [ 139.956926][ T23] usb 2-1: SerialNumber: syz [ 139.998336][ T23] usb 2-1: config 0 descriptor?? [ 140.231973][ T154] device hsr_slave_0 left promiscuous mode [ 140.784440][ T154] device hsr_slave_1 left promiscuous mode [ 140.805202][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.815358][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.007370][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.127689][ T23] airspy 2-1:0.0: Board ID: 00 [ 141.132808][ T23] airspy 2-1:0.0: Firmware version: [ 141.197593][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.224929][ T154] device bridge_slave_1 left promiscuous mode [ 141.316411][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.810958][ T154] device bridge_slave_0 left promiscuous mode [ 141.954818][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.985992][ T154] device veth1_macvtap left promiscuous mode [ 142.015482][ T154] device veth0_macvtap left promiscuous mode [ 142.035778][ T154] device veth1_vlan left promiscuous mode [ 142.057616][ T154] device veth0_vlan left promiscuous mode [ 142.417559][ T23] airspy 2-1:0.0: usb_control_msg() failed -71 request 0f [ 142.462804][ T23] airspy 2-1:0.0: Registered as swradio24 [ 142.566838][ T23] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 142.662475][ T23] usb 2-1: USB disconnect, device number 6 [ 143.178622][ T154] team0 (unregistering): Port device team_slave_1 removed [ 143.250053][ T154] team0 (unregistering): Port device team_slave_0 removed [ 143.305207][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.373289][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.427553][ T4194] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 143.677676][ T4194] usb 2-1: Using ep0 maxpacket: 16 [ 143.741003][ T154] bond0 (unregistering): Released all slaves [ 143.817609][ T4194] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.923032][ T4194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.938516][ T4194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 143.955150][ T4194] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 143.966405][ T4194] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.011680][ T4752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.89'. [ 145.197723][ T4194] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 145.823182][ T4194] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 145.860091][ T4194] usb 2-1: Manufacturer: syz [ 145.895779][ T4194] usb 2-1: config 0 descriptor?? [ 149.067623][ T4194] rc_core: IR keymap rc-hauppauge not found [ 149.074040][ T4194] Registered IR keymap rc-empty [ 149.224461][ T4194] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 149.307736][ T4194] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 149.355422][ T4194] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 149.505899][ T4194] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 149.721527][ T4194] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 149.816012][ T4194] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 149.850534][ T4194] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 149.909917][ T4194] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 149.971768][ T4194] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 150.028051][ T4194] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 150.087800][ T4194] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 150.138197][ T4194] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 150.195020][ T4194] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 150.257881][ T4194] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 150.405989][ T4194] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 150.649149][ T4194] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 150.734616][ T4194] usb 2-1: USB disconnect, device number 7 [ 150.879553][ T4834] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 150.971769][ T4834] Dead loop on virtual device ip6_vti0, fix it urgently! [ 151.687536][ T4194] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 151.987648][ T4194] usb 2-1: Using ep0 maxpacket: 16 [ 152.318323][ T4194] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.454630][ T4194] usb 2-1: config 0 has no interfaces? [ 152.828712][ T4194] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 152.954401][ T4232] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 153.014060][ T4194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.069732][ T4194] usb 2-1: Product: syz [ 153.074078][ T4194] usb 2-1: Manufacturer: syz [ 153.128643][ T4194] usb 2-1: SerialNumber: syz [ 153.169396][ T4194] usb 2-1: config 0 descriptor?? [ 153.463044][ T4843] loop2: detected capacity change from 0 to 7 [ 153.477790][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 153.543670][ T4232] usb 4-1: not running at top speed; connect to a high speed hub [ 153.553112][ T4843] Dev loop2: unable to read RDB block 7 [ 153.627541][ T4843] loop2: AHDI p1 p2 [ 153.631617][ T4843] loop2: partition table partially beyond EOD, truncated [ 153.657790][ T4232] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.685215][ T4232] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 153.779436][ T4843] loop2: p1 start 1702000233 is beyond EOD, truncated [ 153.907842][ T4232] usb 4-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 153.946444][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.985913][ T4232] usb 4-1: Product: syz [ 154.006568][ T4232] usb 4-1: Manufacturer: syz [ 154.074437][ T4232] usb 4-1: SerialNumber: syz [ 155.197719][ T4375] usb 2-1: USB disconnect, device number 8 [ 156.757620][ T4229] Bluetooth: hci2: command 0x0409 tx timeout [ 158.729337][ T4194] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 160.692584][ T4232] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 160.714423][ T4232] usb 4-1: USB disconnect, device number 4 [ 160.740332][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 160.837684][ T4194] usb 7-1: device descriptor read/64, error -71 [ 161.127513][ T4194] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 161.168330][ T4411] udevd[4411]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.170584][ T4876] chnl_net:caif_netlink_parms(): no params data found [ 161.397959][ T4232] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 161.634442][ T4876] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.701314][ T4876] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.713972][ T4876] device bridge_slave_0 entered promiscuous mode [ 161.732903][ T4876] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.744741][ T4876] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.758221][ T4876] device bridge_slave_1 entered promiscuous mode [ 161.801756][ T4876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.819597][ T4876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.830536][ T4232] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 161.846125][ T4232] usb 6-1: config 0 has no interface number 0 [ 161.853566][ T4232] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 161.885572][ T4232] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 161.922274][ T4232] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 161.954673][ T4232] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 162.068465][ T4232] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 162.132248][ T4232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.192968][ T4232] usb 6-1: config 0 descriptor?? [ 162.257986][ T4925] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 162.266555][ T4925] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 162.309646][ T4232] ldusb 6-1:0.55: Interrupt in endpoint not found [ 162.428050][ T4876] team0: Port device team_slave_0 added [ 162.500078][ T4876] team0: Port device team_slave_1 added [ 162.584453][ T1108] usb 6-1: USB disconnect, device number 2 [ 162.787829][ T4876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.796859][ T4876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.885119][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 163.668871][ T4876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.824813][ T4876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.345723][ T4876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.468159][ T4876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.795159][ T4876] device hsr_slave_0 entered promiscuous mode [ 164.862800][ T4876] device hsr_slave_1 entered promiscuous mode [ 164.929118][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 165.588719][ T4876] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 165.660783][ T4876] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 165.935335][ T4876] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 166.684600][ T4876] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 171.335976][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.467368][ T4876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.558377][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.152952][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.458207][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.486168][ T5021] syz.5.150 uses obsolete (PF_INET,SOCK_PACKET) [ 172.506730][ T4876] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.540117][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.643882][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.716873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.739415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.896947][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.905126][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.944007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.959364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.979820][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.987479][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.016056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.033993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.047149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.067715][ T5021] device syzkaller1 entered promiscuous mode [ 173.112441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.129215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.139613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.214532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.295825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.731870][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.971677][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.606171][ T4876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.625843][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.582554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.610664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.908864][ T5068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 181.653742][ T5098] Zero length message leads to an empty skb [ 183.047724][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.175320][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.488074][ T4876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.727806][ T154] device hsr_slave_0 left promiscuous mode [ 186.160663][ T154] device hsr_slave_1 left promiscuous mode [ 186.254598][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.300958][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.390699][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.454110][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.672354][ T154] device bridge_slave_1 left promiscuous mode [ 186.765343][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.916818][ T154] device bridge_slave_0 left promiscuous mode [ 187.021669][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.166853][ T154] device veth1_macvtap left promiscuous mode [ 187.231953][ T154] device veth0_macvtap left promiscuous mode [ 187.264318][ T154] device veth1_vlan left promiscuous mode [ 187.348193][ T154] device veth0_vlan left promiscuous mode [ 188.619899][ T154] team0 (unregistering): Port device team_slave_1 removed [ 188.667949][ T154] team0 (unregistering): Port device team_slave_0 removed [ 188.704791][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.775179][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.958601][ T154] bond0 (unregistering): Released all slaves [ 189.383486][ T5153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 191.595279][ T4194] Bluetooth: hci1: command 0x0406 tx timeout [ 191.914507][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.970953][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.243154][ T5182] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 192.315427][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.344780][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.431438][ T5182] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 192.446828][ T4876] device veth0_vlan entered promiscuous mode [ 192.490681][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.501723][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.561435][ T4876] device veth1_vlan entered promiscuous mode [ 192.613084][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.645179][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 192.710378][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.799859][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.814761][ T4876] device veth0_macvtap entered promiscuous mode [ 192.854973][ T4876] device veth1_macvtap entered promiscuous mode [ 192.909610][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.958801][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.000601][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.042756][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.180264][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.270074][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.343141][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.424952][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.506786][ T4876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.517132][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.938172][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.998365][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.097771][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.632848][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.834947][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.856405][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.985827][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.023098][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.082434][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.177220][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.249529][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.286046][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.305041][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.336707][ T4876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.387203][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.458916][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.570182][ T4876] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.634831][ T4876] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.742025][ T4876] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.489209][ T4876] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.687024][ T5223] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 197.264226][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.316873][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.672575][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.708031][ T4376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.927807][ T4376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.035049][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 200.287140][ T4197] Bluetooth: hci2: link tx timeout [ 200.297205][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 202.367673][ T4263] Bluetooth: hci2: command 0x0406 tx timeout [ 207.517626][ T4487] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 207.947614][ T4487] usb 4-1: config 0 has no interfaces? [ 210.577638][ T4487] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 210.658629][ T4487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.707791][ T4487] usb 4-1: Product: syz [ 210.902743][ T4487] usb 4-1: config 0 descriptor?? [ 212.607587][ T4487] usb 4-1: can't set config #0, error -71 [ 212.638625][ T4487] usb 4-1: USB disconnect, device number 5 [ 216.198019][ T5362] netlink: 36 bytes leftover after parsing attributes in process `syz.3.228'. [ 217.848483][ T5375] overlayfs: './file0' not a directory [ 218.698047][ T1335] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 220.198236][ T1335] usb 4-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=67.7a [ 220.486436][ T1335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.328237][ T1335] usb 4-1: Product: syz [ 221.333139][ T1335] usb 4-1: Manufacturer: syz [ 221.339847][ T1335] usb 4-1: SerialNumber: syz [ 221.409270][ T1335] gspca_main: spca501-2.14.0 probing 0497:c001 [ 221.548262][ T1335] gspca_spca501: reg write: error -71 [ 221.559770][ T1335] spca501 4-1:68.0: Reg write failed for 0x02,0x07,0x05 [ 221.572250][ T1335] spca501: probe of 4-1:68.0 failed with error -22 [ 221.645325][ T1335] usb 4-1: USB disconnect, device number 6 [ 221.690212][ T5423] device wireguard0 entered promiscuous mode [ 222.178344][ T5428] libceph: resolve '0..' (ret=-3): failed [ 222.217707][ T4368] Bluetooth: hci3: command 0x0406 tx timeout [ 222.238144][ T4368] Bluetooth: hci5: command 0x0406 tx timeout [ 238.354705][ T5538] tmpfs: Unknown parameter 'grpquota' [ 238.619852][ T5547] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 238.790776][ T5552] netlink: 276 bytes leftover after parsing attributes in process `syz.3.269'. [ 244.802760][ T5612] netlink: 'syz.6.282': attribute type 83 has an invalid length. [ 255.872210][ T5685] [ 255.875430][ T5685] ====================================================== [ 255.884005][ T5685] WARNING: possible circular locking dependency detected [ 255.892939][ T5685] syzkaller #0 Not tainted [ 255.898217][ T5685] ------------------------------------------------------ [ 255.906788][ T5685] syz.5.297/5685 is trying to acquire lock: [ 255.914768][ T5685] ffff8880772bcc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 255.930272][ T5685] [ 255.930272][ T5685] but task is already holding lock: [ 255.939644][ T5685] ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 255.952078][ T5685] [ 255.952078][ T5685] which lock already depends on the new lock. [ 255.952078][ T5685] [ 255.965004][ T5685] [ 255.965004][ T5685] the existing dependency chain (in reverse order) is: [ 255.975339][ T5685] [ 255.975339][ T5685] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 255.985664][ T5685] __mutex_lock_common+0x1e3/0x2400 [ 255.992719][ T5685] mutex_lock_nested+0x17/0x20 [ 255.999721][ T5685] rfkill_register+0x33/0x8a0 [ 256.005828][ T5685] hci_register_dev+0x452/0x970 [ 256.011662][ T5685] vhci_create_device+0x32c/0x5c0 [ 256.018765][ T5685] vhci_write+0x391/0x450 [ 256.025137][ T5685] vfs_write+0x745/0xd60 [ 256.030206][ T5685] ksys_write+0x152/0x260 [ 256.035853][ T5685] do_syscall_64+0x4c/0xa0 [ 256.045383][ T5685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.057598][ T5685] [ 256.057598][ T5685] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 256.068341][ T5685] __mutex_lock_common+0x1e3/0x2400 [ 256.076598][ T5685] mutex_lock_nested+0x17/0x20 [ 256.082847][ T5685] vhci_send_frame+0x88/0x100 [ 256.088630][ T5685] hci_send_frame+0x1a9/0x2e0 [ 256.096120][ T5685] hci_tx_work+0x9f9/0x1710 [ 256.103486][ T5685] process_one_work+0x85f/0x1010 [ 256.111418][ T5685] worker_thread+0xaa6/0x1290 [ 256.118420][ T5685] kthread+0x436/0x520 [ 256.126326][ T5685] ret_from_fork+0x1f/0x30 [ 256.134317][ T5685] [ 256.134317][ T5685] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 256.145903][ T5685] __flush_work+0x116/0x210 [ 256.151705][ T5685] hci_dev_do_close+0x1e7/0x1030 [ 256.158177][ T5685] hci_unregister_dev+0x2d7/0x580 [ 256.164860][ T5685] vhci_release+0x73/0xc0 [ 256.170352][ T5685] __fput+0x234/0x930 [ 256.175391][ T5685] task_work_run+0x125/0x1a0 [ 256.181751][ T5685] do_exit+0x626/0x20c0 [ 256.187952][ T5685] do_group_exit+0x12e/0x300 [ 256.194031][ T5685] get_signal+0x6ca/0x12c0 [ 256.199380][ T5685] arch_do_signal_or_restart+0xe7/0x12c0 [ 256.206367][ T5685] exit_to_user_mode_loop+0x9e/0x130 [ 256.213923][ T5685] exit_to_user_mode_prepare+0xee/0x180 [ 256.220419][ T5685] syscall_exit_to_user_mode+0x16/0x40 [ 256.226987][ T5685] do_syscall_64+0x58/0xa0 [ 256.232677][ T5685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.241203][ T5685] [ 256.241203][ T5685] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 256.251815][ T5685] __mutex_lock_common+0x1e3/0x2400 [ 256.257822][ T5685] mutex_lock_nested+0x17/0x20 [ 256.263717][ T5685] bg_scan_update+0x44/0x3b0 [ 256.269436][ T5685] process_one_work+0x85f/0x1010 [ 256.275413][ T5685] worker_thread+0xaa6/0x1290 [ 256.281115][ T5685] kthread+0x436/0x520 [ 256.286334][ T5685] ret_from_fork+0x1f/0x30 [ 256.293068][ T5685] [ 256.293068][ T5685] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 256.305506][ T5685] __lock_acquire+0x2c42/0x7d10 [ 256.312437][ T5685] lock_acquire+0x19e/0x400 [ 256.318814][ T5685] __flush_work+0x116/0x210 [ 256.325115][ T5685] __cancel_work_timer+0x3f4/0x560 [ 256.333251][ T5685] hci_request_cancel_all+0xcc/0x300 [ 256.339755][ T5685] hci_dev_do_close+0x4e/0x1030 [ 256.347030][ T5685] hci_rfkill_set_block+0x10a/0x190 [ 256.353902][ T5685] rfkill_set_block+0x1c6/0x420 [ 256.360731][ T5685] rfkill_fop_write+0x452/0x560 [ 256.367535][ T5685] vfs_write+0x30b/0xd60 [ 256.373788][ T5685] ksys_write+0x152/0x260 [ 256.378975][ T5685] do_syscall_64+0x4c/0xa0 [ 256.385351][ T5685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.393070][ T5685] [ 256.393070][ T5685] other info that might help us debug this: [ 256.393070][ T5685] [ 256.403940][ T5685] Chain exists of: [ 256.403940][ T5685] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 256.403940][ T5685] [ 256.421025][ T5685] Possible unsafe locking scenario: [ 256.421025][ T5685] [ 256.429471][ T5685] CPU0 CPU1 [ 256.435103][ T5685] ---- ---- [ 256.440767][ T5685] lock(rfkill_global_mutex); [ 256.445985][ T5685] lock(&data->open_mutex); [ 256.453884][ T5685] lock(rfkill_global_mutex); [ 256.462378][ T5685] lock((work_completion)(&hdev->bg_scan_update)); [ 256.469698][ T5685] [ 256.469698][ T5685] *** DEADLOCK *** [ 256.469698][ T5685] [ 256.479027][ T5685] 1 lock held by syz.5.297/5685: [ 256.485486][ T5685] #0: ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 256.497087][ T5685] [ 256.497087][ T5685] stack backtrace: [ 256.505835][ T5685] CPU: 0 PID: 5685 Comm: syz.5.297 Not tainted syzkaller #0 [ 256.517804][ T5685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 256.532431][ T5685] Call Trace: [ 256.537201][ T5685] [ 256.541228][ T5685] dump_stack_lvl+0x188/0x250 [ 256.549618][ T5685] ? load_image+0x400/0x400 [ 256.559243][ T5685] ? show_regs_print_info+0x20/0x20 [ 256.568251][ T5685] ? print_circular_bug+0x12b/0x1a0 [ 256.578902][ T5685] check_noncircular+0x296/0x330 [ 256.587172][ T5685] ? look_up_lock_class+0x71/0x110 [ 256.594402][ T5685] ? add_chain_block+0x940/0x940 [ 256.601003][ T5685] ? lockdep_lock+0xf1/0x1f0 [ 256.606349][ T5685] ? __lock_acquire+0x12e8/0x7d10 [ 256.612222][ T5685] ? mark_lock+0x94/0x320 [ 256.616959][ T5685] __lock_acquire+0x2c42/0x7d10 [ 256.622069][ T5685] ? rcu_lock_release+0x5/0x20 [ 256.627541][ T5685] ? verify_lock_unused+0x140/0x140 [ 256.634062][ T5685] ? mark_lock+0x94/0x320 [ 256.639132][ T5685] lock_acquire+0x19e/0x400 [ 256.644172][ T5685] ? __flush_work+0xfa/0x210 [ 256.649023][ T5685] ? __lock_acquire+0x7d10/0x7d10 [ 256.654206][ T5685] ? read_lock_is_recursive+0x10/0x10 [ 256.660216][ T5685] ? start_flush_work+0x776/0x820 [ 256.665650][ T5685] __flush_work+0x116/0x210 [ 256.671832][ T5685] ? __flush_work+0xfa/0x210 [ 256.677269][ T5685] ? flush_work+0x20/0x20 [ 256.682334][ T5685] ? try_to_grab_pending+0xfa/0x7f0 [ 256.687613][ T5685] ? mark_lock+0x94/0x320 [ 256.692451][ T5685] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 256.699036][ T5685] ? lock_chain_count+0x20/0x20 [ 256.705478][ T5685] ? mark_lock+0x94/0x320 [ 256.710190][ T5685] ? __cancel_work_timer+0x36a/0x560 [ 256.716636][ T5685] __cancel_work_timer+0x3f4/0x560 [ 256.722784][ T5685] ? cancel_work_sync+0x20/0x20 [ 256.728921][ T5685] ? __cancel_work+0x1f9/0x2e0 [ 256.734677][ T5685] ? lockdep_hardirqs_on+0x94/0x140 [ 256.740885][ T5685] ? __cancel_work+0x27b/0x2e0 [ 256.746826][ T5685] ? cancel_work+0x20/0x20 [ 256.752335][ T5685] ? lock_chain_count+0x20/0x20 [ 256.759499][ T5685] hci_request_cancel_all+0xcc/0x300 [ 256.766017][ T5685] hci_dev_do_close+0x4e/0x1030 [ 256.771951][ T5685] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 256.779467][ T5685] ? _raw_spin_unlock+0x40/0x40 [ 256.785335][ T5685] hci_rfkill_set_block+0x10a/0x190 [ 256.795407][ T5685] ? rcu_lock_release+0x20/0x20 [ 256.802416][ T5685] rfkill_set_block+0x1c6/0x420 [ 256.809954][ T5685] rfkill_fop_write+0x452/0x560 [ 256.816330][ T5685] ? rfkill_fop_read+0x4d0/0x4d0 [ 256.822598][ T5685] ? common_file_perm+0x110/0x1c0 [ 256.829460][ T5685] ? fsnotify_perm+0x5d/0x560 [ 256.835679][ T5685] ? security_file_permission+0x75/0xa0 [ 256.842204][ T5685] ? rfkill_fop_read+0x4d0/0x4d0 [ 256.848171][ T5685] vfs_write+0x30b/0xd60 [ 256.853807][ T5685] ? file_end_write+0x250/0x250 [ 256.860332][ T5685] ? __fget_files+0x40f/0x480 [ 256.867259][ T5685] ? __fdget_pos+0x1e2/0x370 [ 256.874019][ T5685] ? ksys_write+0x71/0x260 [ 256.879347][ T5685] ksys_write+0x152/0x260 [ 256.884937][ T5685] ? __ia32_sys_read+0x80/0x80 [ 256.890523][ T5685] ? lockdep_hardirqs_on+0x94/0x140 [ 256.897006][ T5685] do_syscall_64+0x4c/0xa0 [ 256.902191][ T5685] ? clear_bhb_loop+0x30/0x80 [ 256.907265][ T5685] ? clear_bhb_loop+0x30/0x80 [ 256.912553][ T5685] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.918767][ T5685] RIP: 0033:0x7f27727e6819 [ 256.923590][ T5685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.953671][ T5685] RSP: 002b:00007f2770a1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 256.973400][ T5685] RAX: ffffffffffffffda RBX: 00007f2772a60090 RCX: 00007f27727e6819 [ 256.987418][ T5685] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 256.999515][ T5685] RBP: 00007f277287cc91 R08: 0000000000000000 R09: 0000000000000000 [ 257.012706][ T5685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.024518][ T5685] R13: 00007f2772a60128 R14: 00007f2772a60090 R15: 00007ffeddb87b48 [ 257.035922][ T5685] [ 257.053077][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.062066][ T1422] ieee802154 phy1 wpan1: encryption failed: -22