last executing test programs: 16.524682927s ago: executing program 4 (id=338): openat$rfkill(0xffffffffffffff9c, 0x0, 0xc2200, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f0000000840), &(0x7f0000004880)=@udp=r4}, 0x20) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x14f) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r6, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15.62868726s ago: executing program 4 (id=342): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000000)=0xfffffffe, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff058500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r7, 0x7, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001280)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eab556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) 15.624158081s ago: executing program 1 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$evdev(0x0, 0x1ff, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0x8a010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x1) r5 = socket$nl_crypto(0x10, 0x3, 0x15) connect$netlink(r5, &(0x7f0000000100), 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 14.884445192s ago: executing program 2 (id=344): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000a538ae464632080045"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000001c0)={0x3, 0xa07, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x50) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r5, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000025c0)=[@in={0x2, 0x4e23, @private=0xa010101}]}, &(0x7f0000000180)=0x10) 11.811301899s ago: executing program 1 (id=347): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) 11.594480252s ago: executing program 1 (id=349): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x1}, 0x8, 0x3, 0x0, 0x0, "8d47a0d99fe7c0c1"}, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040444}, 0x0) 11.594128442s ago: executing program 2 (id=350): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x24002800) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000300)={0x9, {0xd46, 0x0, 0x235}}) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 10.41486073s ago: executing program 2 (id=353): ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r1) munlock(&(0x7f00006cc000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'team_slave_0\x00', 0x7811}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x0, 0x0) setregid(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x10, &(0x7f00000006c0), 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) 10.41447382s ago: executing program 1 (id=355): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4f20, @loopback}, 0xffffffffffffff3b) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendmsg$alg(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000007cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="5b9204007000fcdbdf250a0000000800", @ANYRES32=r6, @ANYBLOB="050008000500"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x10) read$alg(r3, &(0x7f0000003780)=""/4077, 0xfed) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x40c0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="780000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88800200000140003006d6163736563300000000000000000000a000100aaaaaaaaaa2e000009002400729e"], 0x78}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10.41417417s ago: executing program 4 (id=356): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000000)=0xfffffffe, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff058500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r8, 0x7, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001280)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eab556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) 7.567452284s ago: executing program 2 (id=359): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x3, 0x38) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0)='@%$\x00', 0x0) writev(r5, &(0x7f00000000c0)=[{0x0}], 0x1) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x800) 7.282547968s ago: executing program 0 (id=361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000090601020000000000000000030000000900020073797a3100000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 6.451732701s ago: executing program 4 (id=363): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$kcm(0xa, 0x3, 0x3a) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f00000000c0)) 6.429374091s ago: executing program 0 (id=365): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x14, r1, 0x1}, 0x14}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) mq_notify(0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 6.319653373s ago: executing program 4 (id=367): io_uring_setup(0x6851, 0x0) r0 = syz_io_uring_setup(0xfc2, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r1, &(0x7f0000000700)=""/40, 0x28) socket$kcm(0xa, 0x2, 0x73) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f0000001740)={0x0, 0xfb, 0x15, 0x3, 0x7, "efa0d2977b4fa757cd1be35ca6ac7ef6"}, 0x15, 0x1) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001640)=@IORING_OP_FADVISE={0x18, 0x3c, 0x0, @fd_index=0xa, 0x9, 0x0, 0x5, 0x4, 0x1}) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x6) 6.063006017s ago: executing program 3 (id=369): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0x3, "71329f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.491745966s ago: executing program 0 (id=370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {}, {0xffe0, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x840) 5.435314767s ago: executing program 0 (id=371): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff00", 0x5, 0x0, 0x0, 0x2}]) 5.416143827s ago: executing program 3 (id=372): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000200000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) 5.311665889s ago: executing program 3 (id=373): syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010103, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x0, @loopback, @local}}}}}}, 0x0) 5.310608989s ago: executing program 4 (id=374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0xa, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000140)="13146000000370", 0x7}], 0x1) 5.231738319s ago: executing program 3 (id=375): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) clock_gettime(0x0, &(0x7f00000003c0)) syz_io_uring_setup(0x7952, &(0x7f0000000500)={0x0, 0x872f, 0x800, 0x0, 0xf2}, &(0x7f0000000480)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x9, 0x0, 0x0, 0x3, 0x0, 0x1, 0x40, 0x1}) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000400)={0x4, 0x80, 0xce, 0x80, 0x9c, "2bf56165f7c9a11a2b53b80b7f74a7f9ba7bc9", 0x9, 0x80000000}) r2 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) close(r2) r3 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2000a, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xe0e86d1789441435, 0xffffffffffffffff, 0x8000000) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0xfffffffc}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000340)={0x110000000, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100), {0x4}, &(0x7f0000000140)=""/219, 0xdb, &(0x7f00000002c0)=""/116, &(0x7f0000000240)=[r4, r4, r4, r4, r4, r4, r4, r4, r4, r4], 0xa}, 0x58) wait4(r5, 0x0, 0x4, 0x0) 5.126390281s ago: executing program 0 (id=376): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) 4.383754863s ago: executing program 3 (id=377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') read$FUSE(r3, &(0x7f0000001380)={0x2020}, 0x2020) 4.299594704s ago: executing program 2 (id=378): openat$rfkill(0xffffffffffffff9c, 0x0, 0xc2200, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f0000000840), &(0x7f0000004880)=@udp=r4}, 0x20) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x14f) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r6, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.259098804s ago: executing program 1 (id=379): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) socket(0x10, 0x3, 0x0) 2.61503776s ago: executing program 2 (id=380): r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x4, 0xfffffffb}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0xfffffff9, 0x0, &(0x7f0000000240), 0x0, 0x5a}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 895.818986ms ago: executing program 1 (id=381): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r1, &(0x7f0000000100)="f4", 0x1, 0x4040004, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3ff, 0x367d, 0x9, 0xb5, 0x47c, 0x7, 0x9}, 0x0, &(0x7f0000000340)={0x0}) socket$kcm(0xa, 0x922000000003, 0x11) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) 15.5449ms ago: executing program 0 (id=382): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0x3, "71329f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 0s ago: executing program 3 (id=383): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x4) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x1001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. [ 39.499903][ T4012] cgroup: Unknown subsys name 'net' [ 39.858317][ T4012] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 40.186088][ T4012] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 41.652692][ T4029] chnl_net:caif_netlink_parms(): no params data found [ 41.657262][ T4025] chnl_net:caif_netlink_parms(): no params data found [ 41.683983][ T4024] chnl_net:caif_netlink_parms(): no params data found [ 41.696575][ T4023] chnl_net:caif_netlink_parms(): no params data found [ 41.780061][ T4026] chnl_net:caif_netlink_parms(): no params data found [ 41.809598][ T4029] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.811778][ T4029] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.815784][ T4029] device bridge_slave_0 entered promiscuous mode [ 41.838684][ T4023] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.840781][ T4023] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.843803][ T4023] device bridge_slave_0 entered promiscuous mode [ 41.847207][ T4023] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.849204][ T4023] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.851874][ T4023] device bridge_slave_1 entered promiscuous mode [ 41.859733][ T4029] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.861830][ T4029] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.864868][ T4029] device bridge_slave_1 entered promiscuous mode [ 41.867269][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.869265][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.871952][ T4025] device bridge_slave_0 entered promiscuous mode [ 41.901032][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.909014][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.911767][ T4025] device bridge_slave_1 entered promiscuous mode [ 41.916826][ T4024] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.918844][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.921599][ T4024] device bridge_slave_0 entered promiscuous mode [ 41.925595][ T4024] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.927662][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.930458][ T4024] device bridge_slave_1 entered promiscuous mode [ 41.935766][ T4023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.946910][ T4029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.969286][ T4023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.974217][ T4024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.978289][ T4029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.000852][ T4024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.019736][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.024627][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.038494][ T4024] team0: Port device team_slave_0 added [ 42.050696][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.052854][ T4026] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.055616][ T4026] device bridge_slave_0 entered promiscuous mode [ 42.060297][ T4023] team0: Port device team_slave_0 added [ 42.063624][ T4024] team0: Port device team_slave_1 added [ 42.066424][ T4023] team0: Port device team_slave_1 added [ 42.070019][ T4029] team0: Port device team_slave_0 added [ 42.078255][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.081999][ T4026] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.085266][ T4026] device bridge_slave_1 entered promiscuous mode [ 42.108292][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.110285][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.118303][ T4023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.123856][ T4029] team0: Port device team_slave_1 added [ 42.127374][ T4025] team0: Port device team_slave_0 added [ 42.151719][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.153899][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.161221][ T4023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.167088][ T4025] team0: Port device team_slave_1 added [ 42.178624][ T4026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.181618][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.189658][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.197220][ T4024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.211720][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.214271][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.221426][ T4029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.233306][ T4026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.236356][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.238311][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.245888][ T4024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.256201][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.258356][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.272157][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.276181][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.278126][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.285420][ T4029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.308754][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.310812][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.318126][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.394617][ T4024] device hsr_slave_0 entered promiscuous mode [ 42.432472][ T4024] device hsr_slave_1 entered promiscuous mode [ 42.533957][ T4023] device hsr_slave_0 entered promiscuous mode [ 42.562406][ T4023] device hsr_slave_1 entered promiscuous mode [ 42.612349][ T4023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.614890][ T4023] Cannot create hsr debugfs directory [ 42.637510][ T4026] team0: Port device team_slave_0 added [ 42.641939][ T4026] team0: Port device team_slave_1 added [ 42.714227][ T4029] device hsr_slave_0 entered promiscuous mode [ 42.752555][ T4029] device hsr_slave_1 entered promiscuous mode [ 42.792263][ T4029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.794482][ T4029] Cannot create hsr debugfs directory [ 42.854165][ T4025] device hsr_slave_0 entered promiscuous mode [ 42.892679][ T4025] device hsr_slave_1 entered promiscuous mode [ 42.932253][ T4025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.934370][ T4025] Cannot create hsr debugfs directory [ 42.937021][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.939038][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.946490][ T4026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.967228][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.969328][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.977207][ T4026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.144058][ T4026] device hsr_slave_0 entered promiscuous mode [ 43.182987][ T4026] device hsr_slave_1 entered promiscuous mode [ 43.232253][ T4026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.234470][ T4026] Cannot create hsr debugfs directory [ 43.360170][ T4024] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 43.413060][ T25] Bluetooth: hci2: command 0x0409 tx timeout [ 43.413060][ T3603] Bluetooth: hci1: command 0x0409 tx timeout [ 43.416522][ T25] Bluetooth: hci3: command 0x0409 tx timeout [ 43.418282][ T25] Bluetooth: hci0: command 0x0409 tx timeout [ 43.419912][ T25] Bluetooth: hci4: command 0x0409 tx timeout [ 43.422427][ T4024] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 43.482008][ T4024] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 43.544104][ T4024] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 43.628372][ T4023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 43.674329][ T4023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 43.722360][ T4023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 43.764069][ T4023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 43.832386][ T4029] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 43.894559][ T4029] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 43.944990][ T4029] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 43.998930][ T4029] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.041487][ T4026] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 44.091868][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.108072][ T4026] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 44.164021][ T4026] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 44.204094][ T4026] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 44.291125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.295160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.298721][ T4025] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.315244][ T4025] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.383286][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.389567][ T4024] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.392009][ T4025] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.434094][ T4025] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.480135][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.483529][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.487339][ T1839] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.489505][ T1839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.508796][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.514256][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.517341][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.520029][ T1839] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.521994][ T1839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.540471][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.549514][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.560136][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.567049][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.574185][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.598349][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.601455][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.605488][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.608176][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.610126][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.613201][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.616079][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.618628][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.620566][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.623917][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.642623][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.645756][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.649096][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.653595][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.656239][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.658808][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.664739][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.682335][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.685358][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.695197][ T4029] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.704737][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.707608][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.710435][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.714139][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.720838][ T4026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.732872][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.736109][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.739640][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.745020][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.747957][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.750872][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.752945][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.755811][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.758821][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.761436][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.763451][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.770286][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.773467][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.776100][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.778623][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.795507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.798762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.801933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.809110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.812167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.815325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.818266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.830167][ T4026] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.836464][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.839508][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.845246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.848170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.860546][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.874725][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.877672][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.883656][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.886969][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.889666][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.891632][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.905445][ T4029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.909121][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.913488][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.916230][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.919141][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.937200][ T4023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.941409][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.945961][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.948818][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.951697][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.956577][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.959384][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.961424][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.964460][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.985101][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.988176][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.990728][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.000710][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.013304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.016411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.019301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.021527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.038908][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.055631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.058342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.061335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.069222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.073750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.092020][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.095371][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.098357][ T4085] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.100518][ T4085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.130361][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.133695][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.138352][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.141442][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.144818][ T4085] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.146835][ T4085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.149373][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.156053][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.160476][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.178756][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.181487][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.185752][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.187987][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.215163][ T4024] device veth0_vlan entered promiscuous mode [ 45.218618][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.220937][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.224635][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.227748][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.230479][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.239113][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.241283][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.244089][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.257931][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.261609][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.271806][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.282506][ T4024] device veth1_vlan entered promiscuous mode [ 45.286079][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.289295][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.295315][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.298511][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.309582][ T4025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.315703][ T4025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.323439][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.326415][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.329496][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.333262][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.336099][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.339079][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.346270][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.382390][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.385300][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.387684][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.395186][ T4026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.426215][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.429978][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.463631][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.466593][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.469589][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.473714][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.476850][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.479630][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.486399][ T4024] device veth0_macvtap entered promiscuous mode [ 45.493117][ T4074] Bluetooth: hci4: command 0x041b tx timeout [ 45.495132][ T4074] Bluetooth: hci0: command 0x041b tx timeout [ 45.496881][ T4074] Bluetooth: hci3: command 0x041b tx timeout [ 45.498627][ T4074] Bluetooth: hci2: command 0x041b tx timeout [ 45.500413][ T4074] Bluetooth: hci1: command 0x041b tx timeout [ 45.508273][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.511470][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.519952][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.528294][ T4023] device veth0_vlan entered promiscuous mode [ 45.536005][ T4024] device veth1_macvtap entered promiscuous mode [ 45.552951][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.556124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.559567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.566783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.571543][ T4023] device veth1_vlan entered promiscuous mode [ 45.591756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.595012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.597560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.603212][ T4029] device veth0_vlan entered promiscuous mode [ 45.628414][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.630940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.634090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.636912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.645417][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.648369][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.660541][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.669390][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.676087][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.679071][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.684256][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.690902][ T4024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.694505][ T4024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.697012][ T4024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.699427][ T4024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.705192][ T4029] device veth1_vlan entered promiscuous mode [ 45.730740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.734700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.737463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.740394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.746080][ T4023] device veth0_macvtap entered promiscuous mode [ 45.749363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.759468][ T4025] device veth0_vlan entered promiscuous mode [ 45.762347][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.765216][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.770319][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.774572][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.789073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.791809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.795709][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.798255][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.812349][ T4026] device veth0_vlan entered promiscuous mode [ 45.816782][ T4025] device veth1_vlan entered promiscuous mode [ 45.824339][ T4023] device veth1_macvtap entered promiscuous mode [ 45.863866][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.866709][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.869750][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.874897][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.888320][ T4029] device veth0_macvtap entered promiscuous mode [ 45.905737][ T4026] device veth1_vlan entered promiscuous mode [ 45.909869][ T341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.914495][ T341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.923971][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.926795][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.929404][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.933482][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.940057][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.943825][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.949363][ T4029] device veth1_macvtap entered promiscuous mode [ 45.967017][ T4025] device veth0_macvtap entered promiscuous mode [ 45.970923][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.975019][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.979143][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.984826][ T1839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.987071][ T1839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.989561][ T4025] device veth1_macvtap entered promiscuous mode [ 45.995774][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.998619][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.001364][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.005137][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.008001][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.010964][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.024796][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.027855][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.031929][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.039351][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.050539][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.073848][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.076984][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.094617][ T4023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.097217][ T4023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.099683][ T4023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.114709][ T4023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.132439][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.135556][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.138338][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.141192][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.151500][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.160234][ T4026] device veth0_macvtap entered promiscuous mode [ 46.166679][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.172633][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.175713][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.192802][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.196144][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.198815][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.201706][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.206150][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.209156][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.215488][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.220699][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.224270][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.227081][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.229987][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.236034][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.241632][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.245606][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.248561][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.251758][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.259114][ T4107] loop1: detected capacity change from 0 to 128 [ 46.268194][ T4029] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.270713][ T4029] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.274443][ T4029] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.276977][ T4029] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.281522][ T4026] device veth1_macvtap entered promiscuous mode [ 46.309498][ T4107] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.313609][ T4107] EXT4-fs (loop1): resizing filesystem from 64 to 2 blocks [ 46.315888][ T4107] EXT4-fs warning (device loop1): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 46.331923][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.341240][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.345812][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.349018][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.351647][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.355257][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.360806][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.415703][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.418529][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.421454][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.447758][ T4025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.450487][ T4025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.464595][ T4025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.467591][ T4025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.496387][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.499414][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.507881][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.510781][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.514808][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.517716][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.520338][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.523551][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.527728][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.574790][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.577790][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.601219][ T4121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 46.618535][ T4085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.620936][ T4085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.631562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.640687][ T341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.648439][ T341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.656095][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.682461][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.685441][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.688135][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.691040][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.692819][ T4125] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10'. [ 46.699398][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.703055][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.706024][ T4026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.708951][ T4026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.713943][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.724891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.727803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.747388][ T4026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.749958][ T4026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.757201][ T4026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.759795][ T4026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.769207][ T341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.771546][ T341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.785661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.794441][ T4127] device vlan0 entered promiscuous mode [ 46.893759][ T341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.896139][ T341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.898295][ T341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.900410][ T341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.924728][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.079310][ T1839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.771645][ T1533] Bluetooth: hci1: command 0x040f tx timeout [ 47.773758][ T1533] Bluetooth: hci2: command 0x040f tx timeout [ 47.775496][ T1533] Bluetooth: hci3: command 0x040f tx timeout [ 47.777211][ T1533] Bluetooth: hci0: command 0x040f tx timeout [ 47.783807][ T1533] Bluetooth: hci4: command 0x040f tx timeout [ 47.790986][ T4131] loop3: detected capacity change from 0 to 4096 [ 47.823377][ T4131] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 47.825993][ T4131] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 47.829630][ T4131] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 47.848105][ T4133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 47.853865][ T4133] device veth1_macvtap left promiscuous mode [ 47.882344][ T4131] ntfs: volume version 3.1. [ 47.936101][ T1839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.938430][ T1839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.971909][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.996259][ T4144] loop0: detected capacity change from 0 to 1024 [ 48.028625][ T4137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.031028][ T4137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.038894][ T1839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.043026][ T1839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.043357][ T4144] ======================================================= [ 48.043357][ T4144] WARNING: The mand mount option has been deprecated and [ 48.043357][ T4144] and is ignored by this kernel. Remove the mand [ 48.043357][ T4144] option from the mount to silence this warning. [ 48.043357][ T4144] ======================================================= [ 48.046181][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.072574][ T4029] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 48.108173][ T4148] lo speed is unknown, defaulting to 1000 [ 48.110377][ T4148] lo speed is unknown, defaulting to 1000 [ 48.138287][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.159340][ T4153] udc-core: couldn't find an available UDC or it's busy [ 48.163598][ T4153] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.164103][ T4144] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.185525][ T4148] lo speed is unknown, defaulting to 1000 [ 48.206573][ T4148] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 48.237880][ T4148] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 48.298014][ T4155] loop2: detected capacity change from 0 to 256 [ 48.304603][ T4155] FAT-fs (loop2): count of clusters too big (178174) [ 48.306671][ T4155] FAT-fs (loop2): Can't find a valid FAT filesystem [ 48.352417][ T4148] lo speed is unknown, defaulting to 1000 [ 48.361328][ T4148] lo speed is unknown, defaulting to 1000 [ 48.371583][ T4148] lo speed is unknown, defaulting to 1000 [ 48.381190][ T4148] lo speed is unknown, defaulting to 1000 [ 48.392942][ T4148] lo speed is unknown, defaulting to 1000 [ 48.397650][ T4148] lo speed is unknown, defaulting to 1000 [ 48.483986][ T4163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 48.486578][ T4163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17'. [ 48.506067][ T4166] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5'. [ 48.510427][ T4165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 48.855865][ T4175] overlayfs: missing 'lowerdir' [ 49.809432][ T4185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24'. [ 49.813093][ T4140] Bluetooth: hci4: command 0x0419 tx timeout [ 49.814908][ T4140] Bluetooth: hci0: command 0x0419 tx timeout [ 49.816818][ T4140] Bluetooth: hci3: command 0x0419 tx timeout [ 49.822642][ T4140] Bluetooth: hci2: command 0x0419 tx timeout [ 49.828256][ T4140] Bluetooth: hci1: command 0x0419 tx timeout [ 49.943129][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 50.466545][ T4191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24'. [ 50.522462][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.525835][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.528890][ T25] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 50.541671][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.601915][ T4155] loop2: detected capacity change from 0 to 32768 [ 50.601921][ T25] usb 1-1: config 0 descriptor?? [ 50.716127][ T4155] XFS (loop2): Mounting V5 Filesystem [ 51.551608][ T4217] udc-core: couldn't find an available UDC or it's busy [ 51.557086][ T4217] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.601480][ T4155] XFS (loop2): Ending clean mount [ 51.632682][ T4155] XFS (loop2): Quotacheck needed: Please wait. [ 51.722215][ T4155] XFS (loop2): Quotacheck: Done. [ 51.766182][ T4025] XFS (loop2): Unmounting Filesystem [ 51.785488][ T25] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 51.794245][ T25] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 52.662827][ T25] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 52.961013][ T4238] syz.3.38 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 53.739463][ T25] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 53.742467][ T25] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 53.744740][ T25] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 53.747794][ T25] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 53.750045][ T25] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 53.811177][ T25] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 53.846678][ T25] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 53.849086][ T25] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 53.851379][ T25] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 53.882589][ T25] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 53.899745][ T25] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 54.079725][ T4248] device batadv1 entered promiscuous mode [ 54.082340][ T4248] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 54.815788][ T25] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 54.817965][ T25] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 54.820036][ T25] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 54.892924][ T25] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 54.897882][ T4250] syz.0.42 uses obsolete (PF_INET,SOCK_PACKET) [ 54.941201][ T25] usb 1-1: USB disconnect, device number 2 [ 55.143966][ T4258] udc-core: couldn't find an available UDC or it's busy [ 55.582738][ T4258] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.646878][ T4266] MPTCP: kernel_bind error, err=-99 [ 58.966961][ T4259] fido_id[4259]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 59.949449][ T4294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'. [ 60.513448][ T4299] udc-core: couldn't find an available UDC or it's busy [ 60.515446][ T4299] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 63.145751][ T26] audit: type=1326 audit(63.070:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.0.64" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb87fe7a8 code=0x0 [ 66.385074][ T4367] udc-core: couldn't find an available UDC or it's busy [ 66.416806][ T4367] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 67.614909][ T4379] nvme_fabrics: missing parameter 'transport=%s' [ 67.617128][ T4379] nvme_fabrics: missing parameter 'nqn=%s' [ 67.753998][ T26] audit: type=1326 audit(67.690:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7527a8 code=0x7fc00000 [ 67.769356][ T26] audit: type=1326 audit(67.700:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffac7527a8 code=0x7fc00000 [ 67.775939][ T26] audit: type=1326 audit(67.700:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7527a8 code=0x7fc00000 [ 67.784343][ T26] audit: type=1326 audit(67.700:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7527a8 code=0x7fc00000 [ 67.790212][ T26] audit: type=1326 audit(67.700:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7527a8 code=0x7fc00000 [ 67.801776][ T26] audit: type=1326 audit(67.700:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7527a8 code=0x7fc00000 [ 67.808464][ T26] audit: type=1326 audit(67.700:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7527a8 code=0x7fc00000 [ 67.810285][ T4396] netlink: 48 bytes leftover after parsing attributes in process `syz.3.88'. [ 67.814852][ T26] audit: type=1326 audit(67.700:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7527a8 code=0x7fc00000 [ 67.823463][ T26] audit: type=1326 audit(67.700:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4385 comm="syz.1.83" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7527a8 code=0x7fc00000 [ 67.842284][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 68.632183][ T4405] capability: warning: `syz.4.87' uses deprecated v2 capabilities in a way that may be insecure [ 69.242266][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 70.042669][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.067134][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.071365][ T4014] Bluetooth: hci4: command 0x0406 tx timeout [ 70.097433][ T13] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 70.100391][ T13] usb 1-1: config 0 has no interface number 0 [ 70.102802][ T13] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.106788][ T13] usb 1-1: config 0 interface 85 has no altsetting 0 [ 70.123577][ T4412] hfsplus: unable to find HFS+ superblock [ 70.162686][ T4415] udc-core: couldn't find an available UDC or it's busy [ 70.164811][ T4415] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 70.262324][ T13] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 70.265136][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.267453][ T13] usb 1-1: Product: syz [ 70.268698][ T13] usb 1-1: Manufacturer: syz [ 70.269981][ T13] usb 1-1: SerialNumber: syz [ 70.286341][ T13] usb 1-1: config 0 descriptor?? [ 71.449239][ T4440] zonefs (nullb0) ERROR: Not a zoned block device [ 71.540890][ T4448] udc-core: couldn't find an available UDC or it's busy [ 71.553066][ T4448] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 71.625941][ T13] appletouch 1-1:0.85: Geyser mode initialized. [ 71.631076][ T13] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input3 [ 72.476657][ T13] usb 1-1: USB disconnect, device number 3 [ 72.567714][ T4462] udc-core: couldn't find an available UDC or it's busy [ 72.569790][ T4462] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 72.664761][ T13] appletouch 1-1:0.85: input: appletouch disconnected [ 74.843482][ T21] cfg80211: failed to load regulatory.db [ 76.113801][ T341] Bluetooth: hci5: Frame reassembly failed (-84) [ 76.118936][ T341] Bluetooth: hci5: Frame reassembly failed (-84) [ 76.668496][ T4511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.131'. [ 76.950243][ T26] kauditd_printk_skb: 87 callbacks suppressed [ 76.950256][ T26] audit: type=1326 audit(76.880:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa11297a8 code=0x7fc00000 [ 77.114365][ T4531] udc-core: couldn't find an available UDC or it's busy [ 77.123200][ T4531] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 77.340488][ T25] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 77.357863][ T25] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 77.668829][ T26] audit: type=1326 audit(77.590:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa11297a8 code=0x7fc00000 [ 77.682231][ T26] audit: type=1326 audit(77.590:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa11297a8 code=0x7fc00000 [ 77.736476][ T26] audit: type=1326 audit(77.600:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa11297a8 code=0x7fc00000 [ 77.759586][ T26] audit: type=1326 audit(77.600:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa11297a8 code=0x7fc00000 [ 77.784971][ T26] audit: type=1326 audit(77.600:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa11297a8 code=0x7fc00000 [ 77.815484][ T26] audit: type=1326 audit(77.600:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa11297a8 code=0x7fc00000 [ 77.821625][ T26] audit: type=1326 audit(77.600:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa11297a8 code=0x7fc00000 [ 77.862290][ T26] audit: type=1326 audit(77.600:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa11297a8 code=0x7fc00000 [ 77.895603][ T26] audit: type=1326 audit(77.600:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa11297a8 code=0x7fc00000 [ 78.132930][ T13] Bluetooth: hci5: command 0x1003 tx timeout [ 78.206020][ T4041] Bluetooth: hci5: sending frame failed (-49) [ 78.764720][ T4546] device geneve2 entered promiscuous mode [ 78.767576][ T4548] udc-core: couldn't find an available UDC or it's busy [ 78.769537][ T4548] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 80.632602][ T3603] Bluetooth: hci5: command 0x1001 tx timeout [ 80.635882][ T4041] Bluetooth: hci5: sending frame failed (-49) [ 80.811295][ T4576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.154'. [ 80.873101][ T4581] netlink: 45 bytes leftover after parsing attributes in process `syz.4.152'. [ 81.009196][ T4568] Process accounting resumed [ 82.692176][ T3603] Bluetooth: hci5: command 0x1009 tx timeout [ 85.082209][ T3603] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.097538][ T4629] udc-core: couldn't find an available UDC or it's busy [ 85.099823][ T4629] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 87.322419][ T3603] usb 1-1: device not accepting address 4, error -71 [ 88.820228][ T4647] ALSA: mixer_oss: invalid OSS volume 'ÿ18446744073709551615Q' [ 89.758804][ T4669] netlink: 56 bytes leftover after parsing attributes in process `syz.0.179'. [ 91.790645][ T4693] tmpfs: Unknown parameter 'quota' [ 92.115885][ T4695] udc-core: couldn't find an available UDC or it's busy [ 92.118066][ T4695] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 92.163639][ T4697] Zero length message leads to an empty skb [ 92.512945][ T4715] udc-core: couldn't find an available UDC or it's busy [ 92.512969][ T4715] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 92.523293][ T4717] udc-core: couldn't find an available UDC or it's busy [ 92.523315][ T4717] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 94.690894][ T4760] binder: 4750:4760 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 96.212508][ T4780] capability: warning: `syz.3.217' uses 32-bit capabilities (legacy support in use) [ 96.816430][ T4014] Bluetooth: hci3: command 0x2021 tx timeout [ 98.334431][ T4804] device bond0 entered promiscuous mode [ 98.336596][ T4804] device bond_slave_0 entered promiscuous mode [ 98.364328][ T4804] device bond_slave_1 entered promiscuous mode [ 102.440142][ T4842] MPTCP: kernel_bind error, err=-99 [ 102.458105][ T25] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 102.483731][ T25] Bluetooth: hci1: Injecting HCI hardware error event [ 102.499184][ T4041] Bluetooth: hci1: hardware error 0x00 [ 103.712736][ T4847] udc-core: couldn't find an available UDC or it's busy [ 103.714763][ T4847] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 106.503973][ T4883] block nbd1: shutting down sockets [ 106.551411][ T4896] mmap: syz.0.258 (4896) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 108.526898][ T4914] netlink: 256 bytes leftover after parsing attributes in process `syz.2.264'. [ 109.842042][ C0] sched: RT throttling activated [ 110.806182][ T4014] Bluetooth: hci2: command 0x0406 tx timeout [ 111.820831][ T4950] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.568398][ T4950] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.838277][ T4950] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.941837][ T4950] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.379111][ T4950] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.396532][ T4950] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.408916][ T4950] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.418842][ T4950] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.574684][ T5016] overlayfs: missing 'lowerdir' [ 117.196148][ T5042] udc-core: couldn't find an available UDC or it's busy [ 117.214197][ T5042] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 119.081865][ T5062] sp0: Synchronizing with TNC [ 119.086577][ T5061] [U] è [ 119.317673][ T5077] udc-core: couldn't find an available UDC or it's busy [ 119.330666][ T5077] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 120.185669][ T5083] udc-core: couldn't find an available UDC or it's busy [ 120.187903][ T5083] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 122.846220][ T5097] netlink: 56 bytes leftover after parsing attributes in process `syz.0.319'. [ 123.023148][ T5104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.323'. [ 126.492457][ T5144] netlink: 6 bytes leftover after parsing attributes in process `syz.2.334'. [ 126.495778][ T5144] netlink: 6 bytes leftover after parsing attributes in process `syz.2.334'. [ 127.334261][ T5141] netlink: 'syz.4.335': attribute type 10 has an invalid length. [ 127.337187][ T5141] device syz_tun entered promiscuous mode [ 127.362432][ T5141] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 130.539387][ T5172] ksmbd: Unknown IPC event: 6, ignore. [ 130.541836][ T5172] netlink: 'syz.4.342': attribute type 2 has an invalid length. [ 132.193611][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.198752][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.152159][ T5189] tc_dump_action: action bad kind [ 136.112207][ T5214] ksmbd: Unknown IPC event: 6, ignore. [ 136.212275][ T5214] netlink: 'syz.4.356': attribute type 2 has an invalid length. [ 137.221747][ T5225] udc-core: couldn't find an available UDC or it's busy [ 137.240415][ T5224] netlink: 188 bytes leftover after parsing attributes in process `syz.0.360'. [ 137.247698][ T5225] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 137.473568][ T5229] netlink: 36 bytes leftover after parsing attributes in process `syz.0.361'. [ 138.749203][ T5249] udc-core: couldn't find an available UDC or it's busy [ 138.760412][ T5249] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.673372][ T136] Bluetooth: (null): Invalid header checksum [ 140.675831][ T136] Bluetooth: (null): Invalid header checksum [ 140.677577][ T136] Bluetooth: (null): Invalid header checksum [ 144.832000][ T5266] [ 144.832799][ T5266] ====================================================== [ 144.834745][ T5266] WARNING: possible circular locking dependency detected [ 144.836736][ T5266] 5.15.185-syzkaller #0 Not tainted [ 144.838207][ T5266] ------------------------------------------------------ [ 144.840103][ T5266] syz.4.374/5266 is trying to acquire lock: [ 144.841752][ T5266] ffff0000c1940c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 144.844996][ T5266] [ 144.844996][ T5266] but task is already holding lock: [ 144.847033][ T5266] ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 144.849791][ T5266] [ 144.849791][ T5266] which lock already depends on the new lock. [ 144.849791][ T5266] [ 144.852680][ T5266] [ 144.852680][ T5266] the existing dependency chain (in reverse order) is: [ 144.855177][ T5266] [ 144.855177][ T5266] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 144.857437][ T5266] __mutex_lock_common+0x194/0x1edc [ 144.859046][ T5266] mutex_lock_nested+0xac/0x11c [ 144.860569][ T5266] rfkill_register+0x44/0x77c [ 144.861966][ T5266] hci_register_dev+0x3d8/0x854 [ 144.863423][ T5266] vhci_create_device+0x2bc/0x564 [ 144.864918][ T5266] vhci_write+0x30c/0x3ac [ 144.866353][ T5266] vfs_write+0x7c8/0xa2c [ 144.867686][ T5266] ksys_write+0x120/0x210 [ 144.869027][ T5266] __arm64_sys_write+0x7c/0x90 [ 144.870483][ T5266] invoke_syscall+0x98/0x2b8 [ 144.871860][ T5266] el0_svc_common+0x138/0x258 [ 144.873284][ T5266] do_el0_svc+0x58/0x14c [ 144.875445][ T5266] el0_svc+0x78/0x1e0 [ 144.877724][ T5266] el0t_64_sync_handler+0xcc/0xe4 [ 144.879269][ T5266] el0t_64_sync+0x1a0/0x1a4 [ 144.880613][ T5266] [ 144.880613][ T5266] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 144.882801][ T5266] __mutex_lock_common+0x194/0x1edc [ 144.884339][ T5266] mutex_lock_nested+0xac/0x11c [ 144.885764][ T5266] vhci_send_frame+0x88/0x118 [ 144.887170][ T5266] hci_send_frame+0x194/0x2f0 [ 144.888627][ T5266] hci_tx_work+0x7e4/0x1394 [ 144.890014][ T5266] process_one_work+0x79c/0x1140 [ 144.891582][ T5266] worker_thread+0x8f4/0x101c [ 144.892994][ T5266] kthread+0x374/0x454 [ 144.894262][ T5266] ret_from_fork+0x10/0x20 [ 144.895641][ T5266] [ 144.895641][ T5266] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 144.898197][ T5266] __flush_work+0xf4/0x1bc [ 144.899528][ T5266] flush_work+0x24/0x38 [ 144.900777][ T5266] hci_dev_do_open+0x980/0x1000 [ 144.902292][ T5266] hci_power_on+0x13c/0x650 [ 144.903717][ T5266] process_one_work+0x79c/0x1140 [ 144.905207][ T5266] worker_thread+0x8f4/0x101c [ 144.906619][ T5266] kthread+0x374/0x454 [ 144.907924][ T5266] ret_from_fork+0x10/0x20 [ 144.909288][ T5266] [ 144.909288][ T5266] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 144.911330][ T5266] __mutex_lock_common+0x194/0x1edc [ 144.912862][ T5266] mutex_lock_nested+0xac/0x11c [ 144.914391][ T5266] bg_scan_update+0x48/0x3d0 [ 144.915742][ T5266] process_one_work+0x79c/0x1140 [ 144.917247][ T5266] worker_thread+0x8f4/0x101c [ 144.918628][ T5266] kthread+0x374/0x454 [ 144.919871][ T5266] ret_from_fork+0x10/0x20 [ 144.921160][ T5266] [ 144.921160][ T5266] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 144.923863][ T5266] __lock_acquire+0x2928/0x651c [ 144.925284][ T5266] lock_acquire+0x1f4/0x620 [ 144.926642][ T5266] __flush_work+0xf4/0x1bc [ 144.927996][ T5266] __cancel_work_timer+0x2ec/0x448 [ 144.929520][ T5266] cancel_work_sync+0x24/0x38 [ 144.930937][ T5266] hci_request_cancel_all+0xbc/0x2d0 [ 144.932506][ T5266] hci_dev_do_close+0x54/0x105c [ 144.933993][ T5266] hci_rfkill_set_block+0xdc/0x1d0 [ 144.935507][ T5266] rfkill_set_block+0x18c/0x374 [ 144.936979][ T5266] rfkill_fop_write+0x4a4/0x5cc [ 144.938452][ T5266] do_iter_write+0x348/0x670 [ 144.939874][ T5266] do_writev+0x1e0/0x380 [ 144.941171][ T5266] __arm64_sys_writev+0x80/0x94 [ 144.942682][ T5266] invoke_syscall+0x98/0x2b8 [ 144.944154][ T5266] el0_svc_common+0x138/0x258 [ 144.945621][ T5266] do_el0_svc+0x58/0x14c [ 144.946917][ T5266] el0_svc+0x78/0x1e0 [ 144.948152][ T5266] el0t_64_sync_handler+0xcc/0xe4 [ 144.949649][ T5266] el0t_64_sync+0x1a0/0x1a4 [ 144.951065][ T5266] [ 144.951065][ T5266] other info that might help us debug this: [ 144.951065][ T5266] [ 144.953805][ T5266] Chain exists of: [ 144.953805][ T5266] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 144.953805][ T5266] [ 144.958313][ T5266] Possible unsafe locking scenario: [ 144.958313][ T5266] [ 144.960368][ T5266] CPU0 CPU1 [ 144.961805][ T5266] ---- ---- [ 144.963260][ T5266] lock(rfkill_global_mutex); [ 144.964534][ T5266] lock(&data->open_mutex); [ 144.966489][ T5266] lock(rfkill_global_mutex); [ 144.968511][ T5266] lock((work_completion)(&hdev->bg_scan_update)); [ 144.970313][ T5266] [ 144.970313][ T5266] *** DEADLOCK *** [ 144.970313][ T5266] [ 144.972560][ T5266] 1 lock held by syz.4.374/5266: [ 144.973880][ T5266] #0: ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 144.976633][ T5266] [ 144.976633][ T5266] stack backtrace: [ 144.978258][ T5266] CPU: 1 PID: 5266 Comm: syz.4.374 Not tainted 5.15.185-syzkaller #0 [ 144.980493][ T5266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.983238][ T5266] Call trace: [ 144.984112][ T5266] dump_backtrace+0x0/0x43c [ 144.985351][ T5266] show_stack+0x2c/0x3c [ 144.986527][ T5266] __dump_stack+0x30/0x40 [ 144.987721][ T5266] dump_stack_lvl+0xf8/0x160 [ 144.989015][ T5266] dump_stack+0x1c/0x5c [ 144.990166][ T5266] print_circular_bug+0x148/0x1b0 [ 144.991593][ T5266] check_noncircular+0x240/0x2d4 [ 144.992991][ T5266] __lock_acquire+0x2928/0x651c [ 144.994302][ T5266] lock_acquire+0x1f4/0x620 [ 144.995507][ T5266] __flush_work+0xf4/0x1bc [ 144.996748][ T5266] __cancel_work_timer+0x2ec/0x448 [ 144.998203][ T5266] cancel_work_sync+0x24/0x38 [ 144.999477][ T5266] hci_request_cancel_all+0xbc/0x2d0 [ 145.001003][ T5266] hci_dev_do_close+0x54/0x105c [ 145.002359][ T5266] hci_rfkill_set_block+0xdc/0x1d0 [ 145.003785][ T5266] rfkill_set_block+0x18c/0x374 [ 145.005114][ T5266] rfkill_fop_write+0x4a4/0x5cc [ 145.006441][ T5266] do_iter_write+0x348/0x670 [ 145.007700][ T5266] do_writev+0x1e0/0x380 [ 145.008850][ T5266] __arm64_sys_writev+0x80/0x94 [ 145.010216][ T5266] invoke_syscall+0x98/0x2b8 [ 145.011453][ T5266] el0_svc_common+0x138/0x258 [ 145.012744][ T5266] do_el0_svc+0x58/0x14c [ 145.013968][ T5266] el0_svc+0x78/0x1e0 [ 145.015113][ T5266] el0t_64_sync_handler+0xcc/0xe4 [ 145.016477][ T5266] el0t_64_sync+0x1a0/0x1a4 [ 145.057426][ T5304] udc-core: couldn't find an available UDC or it's busy [ 145.072325][ T5304] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 145.172193][ T4074] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 145.422136][ T4074] usb 1-1: Using ep0 maxpacket: 32 [ 145.542281][ T4074] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 145.545033][ T4074] usb 1-1: config 0 has no interface number 0 [ 145.702267][ T4074] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 145.709276][ T4074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.711673][ T4074] usb 1-1: Product: syz [ 145.713586][ T4074] usb 1-1: Manufacturer: syz [ 145.714984][ T4074] usb 1-1: SerialNumber: syz [ 145.727215][ T4074] usb 1-1: config 0 descriptor?? [ 145.764182][ T4074] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 145.766406][ T4074] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 145.982156][ T4074] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 146.202861][ T4074] radio-raremono 1-1:0.35: V4L2 device registered as radio2 [ 146.418392][ T4117] usb 1-1: USB disconnect, device number 6 [ 146.420608][ T4117] radio-raremono 1-1:0.35: Thanko's Raremono disconnected