last executing test programs: 21.012245121s ago: executing program 1 (id=125): socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) socket(0x10, 0x803, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x906, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x22, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) close(r2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x400005) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$proc_mixer(r3, 0x0, 0x4f) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) 17.114119675s ago: executing program 0 (id=133): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x13, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xf0, 0x3, [{{0x9, 0x4, 0x0, 0x60, 0x2, 0x3, 0x1, 0x0, 0x67, {0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0x3ec}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x40, 0x0, 0x8}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000002580)=@string={0x2}}, {0x44, &(0x7f0000000500)=@string={0x44, 0x3, "c71b94bee1e00df7c827a6fc558979ced281c11bff651eb7af6892ce79cdcb1621019619c622d2fc7117bf2c965c121bc3f80ae3c2322272a74d334bb1de72d8e19c"}}]}) 14.026953837s ago: executing program 1 (id=138): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000580)="581f7dcbfcfb42ecf2169d5f638794a0b1a44acc6e2583b7a7ad914c78f12935a346826da1fcf2f7a0eaab92168817d4690d16c58857d85dfc20164d2afcadc9d591972b3f90d21a6d96e6d0f690afbecf08772469ce4e2833dd3ce977344ef9c83c266fcb28d541f3c2f666d95c45b7057817ecb7cd46d177e5296988d6c8c903f604c6825511ab12df8ae64b01589992a443dbf01dddbe5c595bee437c2b5d411aac7f0ed9583ba67ed6bb90a3b84c8f2e663691eed37a4651a31f342c482a2717eb69", 0xc4}, {0x0}, {0x0}], 0x3, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}, 0x44881) socket(0x1d, 0x2, 0x6) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={0x0, 0xffffffffffffffff, 0x4000, r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe}}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 14.014324537s ago: executing program 0 (id=139): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_usbip_server_init(0x3) 10.716196203s ago: executing program 0 (id=146): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x7ff, 0x8bb, 0xb5, 0x4, 0x0, 0x8000000000000000, 0x500, 0x3b2, 0x1, 0x80000010000, 0x8, 0x1, 0x7, 0x3, 0x7, 0x200], 0xf000, 0x26000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000003c0)={0x2a6, 0x0, "2dd82129cb82327389c3b42ee17f84200e7484f2b06fa73f76c4a3bb89519ec7f4e86c283a065a0036d64b8068332387a7480dc9962a6d38d39bb67b895f9c3cd96f038080c2c62f9ec93860609c35ff0f48eacd242f9e6ec1d9d2bb1af2f280a03771ae387b444b02406eb2890dcd7c211bea667ba841721bc40864e4eee3399fe804fd89ec4fedfa7496b29e4fce1122d61f1bed350d2e7404962a8284739051bd22963a0f3ee06aedb7c6cb64a61f96647b5b310fd35dd3fd3708c980d14ba87f0becf8c6ee2052eb8fd243ed8bfc3ba48944721e6a5f6d921177e14a6d06492664929f04bf583fe592ed5946f1991bf2a27a2ffa9a2d856e298b54347906"}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x0, 0x7, 0x0, 0x3, 0x80, 0x1, 0x82, 0x0, 0x7, 0x3, 0x2, 0x0, 0x7, 0x1, 0x4, 0xf1, 0x8b, 0x81, '\x00', 0x3, 0x8}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 10.229836609s ago: executing program 1 (id=147): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469000c0002"], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), 0x0, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, 0x0, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x3) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8001}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4044}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r5, &(0x7f0000000040)="c6ce58e73ef29dabfb399754e0007e4c69ddd96bf5dfa4b0aae8e7c6c6b0c231d35cfe566f873eb9764e851e2ab2f6a51745159df98902d82aeac5fea2", 0x3d) 8.74415838s ago: executing program 2 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r8) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)={0x18, r9, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000007c0)={0x3, 0x40, 0xfa02, {{0x0, 0x4e24, 0x40003, @empty}, {0x2, 0x4e23, 0x6, @loopback, 0x5852}, r7, 0xe}}, 0x48) 8.73884219s ago: executing program 0 (id=153): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240)="87", 0x1, 0x0, 0x0, 0x0) 8.73835492s ago: executing program 3 (id=154): r0 = socket$can_j1939(0x1d, 0x2, 0x7) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000140), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) sendto(r3, &(0x7f00000003c0)="093cf13844b7b7e237e93841ed5d9b166ccaaa41a79c8033d0d73dc0455d7048936b2dd8809673eabc69193898958518a0764aa1b4e36fb118bcadfe3a7278713338a0b5883be324ab2ade3ce514abf90bb480f2a04574f883c5fc277d3d31cc8ba29d11af1132775e28001746db94b86978de4328f28ccb09e98a29d7f4a1ec", 0x80, 0x80, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x0, 0x4}}, 0x80) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r5, 0x110, 0x3) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = open$dir(&(0x7f0000000180)='./file0/../file0\x00', 0x40000, 0x120) move_mount(r6, &(0x7f00000001c0)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x10) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 8.639730951s ago: executing program 0 (id=155): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 8.03956725s ago: executing program 1 (id=157): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 8.0390309s ago: executing program 2 (id=158): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0x90e, 0x4) sendto$inet(r3, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r6, r5, 0x0, 0x5) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) 6.926455525s ago: executing program 0 (id=159): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) unshare(0x2c020400) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x3, 0xffffffff, @mcast2, 0x5}, 0x1c) close(r4) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) ioctl$TIOCSTI(r0, 0x5412, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x1) 6.895812975s ago: executing program 3 (id=160): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) 6.895175065s ago: executing program 2 (id=161): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 4.708106115s ago: executing program 3 (id=162): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40004001) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac14"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.695267686s ago: executing program 1 (id=163): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.695045676s ago: executing program 4 (id=164): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 4.602227867s ago: executing program 4 (id=165): r0 = io_uring_setup(0x41c3, &(0x7f0000000000)={0x0, 0xd1a8, 0x40, 0x0, 0x32e}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80c02, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(0x3) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000040)=0xf0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000040)=0xf0) close_range(r0, 0xffffffffffffffff, 0x0) 4.412172119s ago: executing program 4 (id=166): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000000c0)={0x4, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000180)=0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x80, 0x0, 0x1000}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4403, 0x8, 0xffffbfff}}) socket$inet(0x2, 0x800, 0x8) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'sit0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 4.41172875s ago: executing program 1 (id=167): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009102"]) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x74, 0x1, 0xfa, 0xe}, {0x6, 0x95, 0x2, 0x2}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00(\x00'/16], 0xe) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000e80)={0x2, 0x4, {0xfa, @struct={0x12, 0x40}, 0x0, 0x4dd5, 0x6ba, 0x7, 0x7, 0x0, 0x0, @struct={0x1, 0x7}, 0x7fffffff, 0xb3, [0x81, 0x3, 0x81, 0xfff, 0x1ff, 0x9]}, {0xb38a, @usage=0x5, 0x0, 0x3, 0x3, 0x7, 0x9, 0x7, 0x16, @struct={0xff, 0x3ff}, 0x58, 0x7ff, [0x8000000000000000, 0x2, 0xcb, 0x5, 0x5, 0x5af6]}, {0xe, @usage=0x3f, 0x0, 0x7991, 0x7, 0x5, 0x9, 0x3, 0x3, @struct={0x7, 0x5}, 0x4, 0x2, [0x40, 0x0, 0x80000001, 0x3, 0x401, 0x1000]}, {0x81, 0x8, 0x100000000}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000001280)={{r0}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000380)={0x0, 0x5, 0x3, 0xc, {0x2, 0x6, 0x5, 0x7ff, 0x4}, [0x2, 0x2, 0x2000000000000000, 0x2, 0xcc46]}}, @devid=r6}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = io_uring_setup(0xdac, &(0x7f0000000180)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) accept$inet6(r9, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) read$msr(r2, &(0x7f0000000000)=""/37, 0x25) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xc, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.095449603s ago: executing program 3 (id=168): r0 = openat$sw_sync(0xffffff9c, &(0x7f0000000080), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) 4.085650474s ago: executing program 2 (id=169): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000300)='./file0/../file0\x00') 2.646574614s ago: executing program 2 (id=170): r0 = socket$can_j1939(0x1d, 0x2, 0x7) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000140), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) sendto(r3, &(0x7f00000003c0)="093cf13844b7b7e237e93841ed5d9b166ccaaa41a79c8033d0d73dc0455d7048936b2dd8809673eabc69193898958518a0764aa1b4e36fb118bcadfe3a7278713338a0b5883be324ab2ade3ce514abf90bb480f2a04574f883c5fc277d3d31cc8ba29d11af1132775e28001746db94b86978de4328f28ccb09e98a29d7f4a1ec", 0x80, 0x80, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x0, 0x4}}, 0x80) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r5, 0x110, 0x3) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = open$dir(&(0x7f0000000180)='./file0/../file0\x00', 0x40000, 0x120) move_mount(r6, &(0x7f00000001c0)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x10) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.645979114s ago: executing program 4 (id=171): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0xa, 0x400) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.328215778s ago: executing program 3 (id=172): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 762.239759ms ago: executing program 3 (id=173): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 754.70231ms ago: executing program 2 (id=174): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket(0x2b, 0x1, 0x1) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f00000000c0)={0x3f, "a1f91ccd7c59ffddbed28ac6ce05b155bc15ef6c3f230294585caa6b911f9605cd2d0ae348595d1e75a118ae47d9a28c95dd0184cf4e1d4cebb7b63dd035ea272249d95bfed70d7d23dd1500db79271bf137612e89ae0c0bfb7a2c744f6ef3371a7dd74882428ea7cb0140ce073a8219f4ccdeb16ac94a9933adfbc73fe34c8a"}) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 595.451952ms ago: executing program 4 (id=175): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c020000190001000000400003000000e00000010000000000000000000000000000000000000000000000000000000000000002000000000a00000000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbffffffffffffff"], 0x25c}}, 0x4004) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24048001}, 0x4000004) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000040000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a0000070000006111750000000000850000001d00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='contention_end\x00', r3, 0x0, 0x4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000b40)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x20008880) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2000, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0xa, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000a40)={0x1f, 0xd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r6], 0x38}}, 0x10) 0s ago: executing program 4 (id=176): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts. [ 55.847677][ T4159] cgroup: Unknown subsys name 'net' [ 55.988996][ T4159] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.485412][ T4159] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.947745][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 59.001044][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 59.038816][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 59.114462][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 59.207844][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.215222][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.224530][ T4169] device bridge_slave_0 entered promiscuous mode [ 59.236654][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.243775][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.251888][ T4169] device bridge_slave_1 entered promiscuous mode [ 59.271835][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.279037][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.287470][ T4171] device bridge_slave_0 entered promiscuous mode [ 59.297432][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.304682][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.312554][ T4171] device bridge_slave_1 entered promiscuous mode [ 59.388229][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.406878][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.414356][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.422306][ T4170] device bridge_slave_0 entered promiscuous mode [ 59.431592][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.442357][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.451605][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.459335][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.467401][ T4172] device bridge_slave_0 entered promiscuous mode [ 59.475704][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 59.485571][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.493340][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.501172][ T4170] device bridge_slave_1 entered promiscuous mode [ 59.509989][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.527297][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.534481][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.542533][ T4172] device bridge_slave_1 entered promiscuous mode [ 59.616972][ T4171] team0: Port device team_slave_0 added [ 59.636576][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.648173][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.659728][ T4169] team0: Port device team_slave_0 added [ 59.666859][ T4171] team0: Port device team_slave_1 added [ 59.683103][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.705624][ T4169] team0: Port device team_slave_1 added [ 59.727224][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.737091][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.744312][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.770475][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.799800][ T4170] team0: Port device team_slave_0 added [ 59.812820][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.819796][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.845710][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.872172][ T4170] team0: Port device team_slave_1 added [ 59.898076][ T4172] team0: Port device team_slave_0 added [ 59.904394][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.911827][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.920622][ T4183] device bridge_slave_0 entered promiscuous mode [ 59.928623][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.935901][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.962112][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.991907][ T4172] team0: Port device team_slave_1 added [ 60.006669][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.014068][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.021989][ T4183] device bridge_slave_1 entered promiscuous mode [ 60.029922][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.037450][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.063666][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.075615][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.082684][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.109449][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.152574][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.159544][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.185936][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.206072][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.213214][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.239566][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.261291][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.282658][ T4171] device hsr_slave_0 entered promiscuous mode [ 60.290026][ T4171] device hsr_slave_1 entered promiscuous mode [ 60.307096][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.314377][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.341060][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.353777][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.436172][ T4183] team0: Port device team_slave_0 added [ 60.445049][ T4169] device hsr_slave_0 entered promiscuous mode [ 60.451835][ T4169] device hsr_slave_1 entered promiscuous mode [ 60.459363][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.467519][ T4169] Cannot create hsr debugfs directory [ 60.476476][ T4170] device hsr_slave_0 entered promiscuous mode [ 60.483624][ T4170] device hsr_slave_1 entered promiscuous mode [ 60.490216][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.497937][ T4170] Cannot create hsr debugfs directory [ 60.515027][ T4183] team0: Port device team_slave_1 added [ 60.536080][ T4172] device hsr_slave_0 entered promiscuous mode [ 60.546910][ T4172] device hsr_slave_1 entered promiscuous mode [ 60.554050][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.561640][ T4172] Cannot create hsr debugfs directory [ 60.593416][ T4173] Bluetooth: hci1: command 0x0409 tx timeout [ 60.632781][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.639753][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.666267][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.672567][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 60.677244][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 60.685164][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.696396][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.701785][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 60.723004][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.734728][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 60.892137][ T4183] device hsr_slave_0 entered promiscuous mode [ 60.899206][ T4183] device hsr_slave_1 entered promiscuous mode [ 60.906355][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.914255][ T4183] Cannot create hsr debugfs directory [ 61.039197][ T4171] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.064515][ T4171] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.077452][ T4171] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.090206][ T4171] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.139722][ T4169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.164354][ T4169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.173978][ T4169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.188388][ T4169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.240250][ T4170] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.251221][ T4170] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.280366][ T4170] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.298429][ T4170] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.352115][ T4172] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.373232][ T4172] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.394076][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.401102][ T4172] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.410866][ T4172] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.443926][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.455327][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.477734][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.486950][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.502107][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.535975][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.550396][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.569944][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.579216][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.588801][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.596187][ T1451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.605211][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.615595][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.624627][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.631680][ T1451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.639557][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.648789][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.661477][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.691149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.703271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.712196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.722918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.735722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.745166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.769565][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.785500][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.797890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.807766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.816796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.826231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.850318][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.859536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.868369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.877711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.887878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.899706][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.931588][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.944614][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.955040][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.963719][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.970839][ T1451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.979336][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.989973][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.999770][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.006899][ T1451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.017525][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.026688][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.035787][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.042901][ T1451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.052986][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.061086][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.083529][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.093879][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.103715][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.112225][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.119421][ T1451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.130499][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.151920][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.173743][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.184531][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.212085][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.228620][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.236989][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.245549][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.254234][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.263101][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.271991][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.282272][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.291150][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.300081][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.324618][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.333532][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.351299][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.359940][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.371307][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.380223][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.389586][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.398420][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.405510][ T1451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.413956][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.421582][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.429476][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.437872][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.462265][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.477017][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.488972][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.498201][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.507936][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.516905][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.525928][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.533096][ T1451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.541157][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.551360][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.560390][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.570482][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.578657][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.590448][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.599297][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.610925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.631525][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.657710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.671110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.673357][ T4216] Bluetooth: hci1: command 0x041b tx timeout [ 62.683551][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.692253][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.703356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.712359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.723170][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.730274][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.739972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.749443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.757884][ T4216] Bluetooth: hci2: command 0x041b tx timeout [ 62.759081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.764176][ T4216] Bluetooth: hci0: command 0x041b tx timeout [ 62.764267][ T4216] Bluetooth: hci4: command 0x041b tx timeout [ 62.787615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.796462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.805428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.814956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.825110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.833238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.833251][ T4216] Bluetooth: hci3: command 0x041b tx timeout [ 62.849781][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.860305][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.891428][ T4172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.910509][ T4172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.938918][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.950831][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.960481][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.985327][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.994516][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.010377][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.027456][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.036189][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.044836][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.052282][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.060698][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.073964][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.102878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.111376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.124058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.143221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.165060][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.195776][ T4171] device veth0_vlan entered promiscuous mode [ 63.220229][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.229623][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.253550][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.268394][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.287524][ T4171] device veth1_vlan entered promiscuous mode [ 63.354117][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.364933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.374151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.382024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.397869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.407157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.434824][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.455373][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.481663][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.492980][ T475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.526009][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.543437][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.561884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.570832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.608194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.617326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.625690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.636455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.648157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.656449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.667235][ T4171] device veth0_macvtap entered promiscuous mode [ 63.678330][ T4172] device veth0_vlan entered promiscuous mode [ 63.695493][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.703316][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.711502][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.721548][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.731533][ T4171] device veth1_macvtap entered promiscuous mode [ 63.740987][ T4170] device veth0_vlan entered promiscuous mode [ 63.759091][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.767741][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.775858][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.796627][ T4170] device veth1_vlan entered promiscuous mode [ 63.811377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.821154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.829514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.839302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.857326][ T4172] device veth1_vlan entered promiscuous mode [ 63.877966][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.895023][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.903984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.912170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.922324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.931514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.940256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.971031][ T4171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.980129][ T4171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.989731][ T4171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.998772][ T4171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.017401][ T4170] device veth0_macvtap entered promiscuous mode [ 64.027565][ T4169] device veth0_vlan entered promiscuous mode [ 64.038922][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.047341][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.059367][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.067867][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.077384][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.086601][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.095568][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.104440][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.112283][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.121424][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.153563][ T4170] device veth1_macvtap entered promiscuous mode [ 64.199486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.209122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.223902][ T4172] device veth0_macvtap entered promiscuous mode [ 64.241083][ T4183] device veth0_vlan entered promiscuous mode [ 64.272578][ T4169] device veth1_vlan entered promiscuous mode [ 64.281866][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.291530][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.300539][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.315228][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.326382][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.337701][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.362625][ T4172] device veth1_macvtap entered promiscuous mode [ 64.375365][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.383724][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.391715][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.403046][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.411736][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.428458][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.440093][ T1434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.447083][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.450942][ T1434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.463134][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.485257][ T4183] device veth1_vlan entered promiscuous mode [ 64.502759][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.511683][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.521626][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.531105][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.545045][ T4170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.554394][ T4170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.563968][ T4170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.572837][ T4170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.600037][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.609579][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.612554][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.620195][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.635308][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.651438][ T4169] device veth0_macvtap entered promiscuous mode [ 64.662153][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.673493][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.684109][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.695360][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.707628][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.728001][ T4169] device veth1_macvtap entered promiscuous mode [ 64.740685][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.751094][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.753117][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 64.761572][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.774234][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.783477][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.799512][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.819461][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.829649][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.832890][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 64.847590][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 64.847729][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.857654][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 64.868515][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.911913][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.918151][ T4217] Bluetooth: hci3: command 0x040f tx timeout [ 64.947646][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.970739][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.984073][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.996459][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.007076][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.016950][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.027701][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.040005][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.054104][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.069492][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.082299][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.096685][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.106946][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.117572][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.129294][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.137907][ T4172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.146918][ T4172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.158661][ T4172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.167713][ T4172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.183022][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.192301][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.201235][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.213737][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.222663][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.231451][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.242667][ T4217] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.254231][ T4169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.266937][ T1451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.270767][ T4169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.282270][ T1451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.284067][ T4169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.284097][ T4169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.287811][ T4183] device veth0_macvtap entered promiscuous mode [ 65.339586][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.347917][ T1451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.387442][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.387522][ T4183] device veth1_macvtap entered promiscuous mode [ 65.398175][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.436873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.525825][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.541830][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.578032][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.589076][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.601580][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.612695][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.623283][ T4217] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.634737][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.648907][ T4217] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 65.666744][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.679317][ T4217] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 65.700422][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.722120][ T475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.741766][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.756315][ T475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.771783][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.781829][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.800210][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.810838][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.821567][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.831718][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.842547][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.875472][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.657921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.666511][ T4217] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.718260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.721657][ T4217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.727973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.748974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.759216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.777355][ T4217] usb 2-1: Product: syz [ 66.781837][ T4217] usb 2-1: Manufacturer: syz [ 66.786545][ T4217] usb 2-1: SerialNumber: syz [ 66.832688][ T4248] Bluetooth: hci1: command 0x0419 tx timeout [ 66.850573][ T4217] cdc_ncm 2-1:1.0: skipping garbage [ 66.866332][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.882286][ T4217] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 66.901718][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.911669][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.926796][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.950919][ T1451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.968798][ T1451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.053822][ T4217] cdc_ncm 2-1:1.0: bind() failure [ 67.067095][ T4216] Bluetooth: hci2: command 0x0419 tx timeout [ 67.073293][ T4216] Bluetooth: hci0: command 0x0419 tx timeout [ 67.079401][ T4216] Bluetooth: hci4: command 0x0419 tx timeout [ 67.085684][ T4216] Bluetooth: hci3: command 0x0419 tx timeout [ 67.113365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.216920][ T4262] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 67.468915][ T1451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.600897][ T1451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.932595][ T4215] usb 2-1: USB disconnect, device number 2 [ 68.025696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.146398][ T1451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.155198][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.178443][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.214795][ T1451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.331878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.640620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.654947][ T1451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.667391][ T1451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.687650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.382987][ T4293] vivid-000: disconnect [ 70.389767][ T4293] vivid-000: reconnect [ 71.112996][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 71.122715][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 71.132024][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 71.141413][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 71.150867][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 71.160225][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 71.169692][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 71.178807][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 71.188646][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 71.197688][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 71.207261][ T4293] syz.1.9 (4293) used greatest stack depth: 19776 bytes left [ 71.235989][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.246636][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.682927][ T4302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12'. [ 75.761203][ T4318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11'. [ 76.991938][ T4335] Zero length message leads to an empty skb [ 78.304769][ T4336] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 78.313839][ T4336] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 78.323194][ T4336] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 78.332321][ T4336] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 78.455823][ T4336] device geneve2 entered promiscuous mode [ 79.211595][ T4342] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21'. [ 79.284618][ T4217] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.356824][ T1111] cfg80211: failed to load regulatory.db [ 79.629674][ T4350] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 79.693960][ T4350] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 86.505953][ T4399] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.641791][ T4217] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.764273][ T4406] batman_adv: batadv0: Adding interface: dummy0 [ 86.770646][ T4406] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.905816][ T4406] batman_adv: batadv0: Interface activated: dummy0 [ 86.912946][ T4217] usb 1-1: Using ep0 maxpacket: 8 [ 86.934410][ T4406] batadv0: mtu less than device minimum [ 86.942216][ T4406] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.955073][ T4406] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.967807][ T4406] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.980362][ T4406] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.992932][ T4406] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 87.005489][ T4406] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 87.018039][ T4406] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 87.030596][ T4406] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 87.032723][ T4217] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 87.043309][ T4406] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 87.084403][ T4217] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 87.832441][ T4217] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 88.593174][ T4217] usb 1-1: unable to read config index 1 descriptor/start: -71 [ 88.624029][ T4217] usb 1-1: can't read configurations, error -71 [ 92.345326][ T4461] process 'syz.4.58' launched './file0' with NULL argv: empty string added [ 92.456322][ T4461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.58'. [ 93.335477][ T4300] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.092846][ T4300] usb 2-1: Using ep0 maxpacket: 32 [ 95.006934][ T4300] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 95.029481][ T4300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.052793][ T4300] usb 2-1: Product: syz [ 95.058424][ T4300] usb 2-1: Manufacturer: syz [ 95.831763][ T4300] usb 2-1: SerialNumber: syz [ 95.889451][ T4300] usb 2-1: config 0 descriptor?? [ 95.932622][ T4300] usb 2-1: can't set config #0, error -71 [ 96.154682][ T4492] batman_adv: batadv0: Adding interface: dummy0 [ 96.160986][ T4492] batman_adv: batadv0: The MTU of interface dummy0 is too small (0) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.959795][ T4492] batman_adv: batadv0: Interface activated: dummy0 [ 96.980360][ T4300] usb 2-1: USB disconnect, device number 3 [ 96.999547][ T4492] net_ratelimit: 11 callbacks suppressed [ 96.999564][ T4492] batadv0: mtu less than device minimum [ 97.845998][ T4492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.858707][ T4492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.871350][ T4492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.883987][ T4492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.896645][ T4492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.909227][ T4492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.921809][ T4492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.934589][ T4492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 97.947174][ T4492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.426930][ T4509] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.814298][ T4516] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 98.872063][ T4516] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 98.901694][ T4529] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 98.913833][ T4529] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 98.926314][ T4509] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.784066][ T4541] kAFS: unparsable volume name [ 99.908014][ T4509] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.796230][ T4544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 100.832032][ T4544] device geneve1 entered promiscuous mode [ 100.839125][ T4549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 101.451229][ T4509] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.193598][ T4509] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.309766][ T4509] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.386673][ T4509] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.401814][ T4509] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.422680][ T4584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.92'. [ 103.526947][ T4581] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 103.567139][ T4581] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 106.721000][ T4612] batman_adv: batadv0: Interface deactivated: dummy0 [ 106.742676][ T4612] batman_adv: batadv0: Removing interface: dummy0 [ 106.750060][ T4615] netlink: 'syz.3.104': attribute type 21 has an invalid length. [ 107.129592][ T4621] netlink: 'syz.2.102': attribute type 9 has an invalid length. [ 108.163676][ T4629] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 109.797416][ T4640] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 110.572375][ C1] sched: RT throttling activated [ 112.196877][ T4663] capability: warning: `syz.0.119' uses deprecated v2 capabilities in a way that may be insecure [ 112.598233][ T4678] ubi31: attaching mtd0 [ 113.240892][ T4297] kernel write not supported for file /69/attr/exec (pid: 4297 comm: kworker/1:11) [ 113.265432][ T4678] ubi31: scanning is finished [ 113.270272][ T4678] ubi31: empty MTD device detected [ 113.323730][ T4678] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 113.486047][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 113.507553][ T4688] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.829536][ T4693] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 117.692718][ T4173] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 119.664903][ T150] block nbd4: Attempted send on invalid socket [ 119.672446][ T150] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.692820][ T4173] usb 1-1: unable to get BOS descriptor or descriptor too short [ 119.694353][ T150] block nbd4: Attempted send on invalid socket [ 119.782531][ T150] blk_update_request: I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.822589][ T4173] usb 1-1: not running at top speed; connect to a high speed hub [ 119.890525][ T4729] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 120.002822][ T150] block nbd4: Attempted send on invalid socket [ 120.009085][ T150] blk_update_request: I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.023062][ T4729] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 120.063733][ T150] block nbd4: Attempted send on invalid socket [ 120.069947][ T150] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.082272][ T150] block nbd4: Attempted send on invalid socket [ 120.089469][ T4173] usb 1-1: config 1 interface 0 altsetting 96 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 120.090401][ T150] blk_update_request: I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.163407][ T4173] usb 1-1: config 1 interface 0 altsetting 96 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.178069][ T4729] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 120.239738][ T150] block nbd4: Attempted send on invalid socket [ 120.247371][ T150] blk_update_request: I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.259365][ T4729] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 120.269739][ T150] block nbd4: Attempted send on invalid socket [ 120.275992][ T150] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.295204][ T4173] usb 1-1: config 1 interface 0 has no altsetting 0 [ 120.322977][ T263] block nbd4: Attempted send on invalid socket [ 120.329257][ T263] blk_update_request: I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.341840][ T4729] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 120.375002][ T4173] usb 1-1: language id specifier not provided by device, defaulting to English [ 120.416782][ T150] block nbd4: Attempted send on invalid socket [ 120.423149][ T150] blk_update_request: I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.434441][ T4729] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 120.445551][ T150] block nbd4: Attempted send on invalid socket [ 120.453188][ T150] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.465586][ T4729] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 120.554143][ T4729] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 120.602595][ T4729] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 120.622687][ T4173] usb 1-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.40 [ 120.642515][ T4173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.662742][ T4173] usb 1-1: can't set config #1, error -71 [ 121.721444][ T4173] usb 1-1: USB disconnect, device number 4 [ 122.852897][ T4173] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.263651][ T4173] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 123.754872][ T4764] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 123.765403][ T4764] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 123.782428][ T4764] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 123.792638][ T4764] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 123.803358][ T4764] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 123.814947][ T4764] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 123.825954][ T4764] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 123.836506][ T4764] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 123.846109][ T4764] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 123.854582][ T4173] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 123.854639][ T4173] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 124.364197][ T4173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.948265][ T4173] usb 1-1: can't set config #27, error -71 [ 124.987741][ T4173] usb 1-1: USB disconnect, device number 5 [ 130.059487][ T4835] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 130.072565][ T4835] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 130.317787][ T26] audit: type=1326 audit(1748566425.412:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.1.167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c13ca0969 code=0x0 [ 131.852536][ T4218] Bluetooth: hci5: command 0x1003 tx timeout [ 131.869681][ T4180] Bluetooth: hci5: sending frame failed (-49) [ 132.827259][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.838073][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.749528][ T4874] syz.4.171 uses obsolete (PF_INET,SOCK_PACKET) [ 133.962881][ T2355] Bluetooth: hci5: command 0x1001 tx timeout [ 133.983431][ T4180] Bluetooth: hci5: sending frame failed (-49) [ 134.274280][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 134.499227][ T4876] [ 134.501577][ T4876] ====================================================== [ 134.508622][ T4876] WARNING: possible circular locking dependency detected [ 134.515657][ T4876] 5.15.184-syzkaller #0 Not tainted [ 134.520871][ T4876] ------------------------------------------------------ [ 134.527896][ T4876] syz.2.174/4876 is trying to acquire lock: [ 134.533800][ T4876] ffff888067371450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 134.545238][ T4876] [ 134.545238][ T4876] but task is already holding lock: [ 134.552729][ T4876] ffff888067370120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 134.561730][ T4876] [ 134.561730][ T4876] which lock already depends on the new lock. [ 134.561730][ T4876] [ 134.572223][ T4876] [ 134.572223][ T4876] the existing dependency chain (in reverse order) is: [ 134.581247][ T4876] [ 134.581247][ T4876] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 134.589000][ T4876] lock_sock_nested+0x44/0x100 [ 134.594284][ T4876] smc_listen_out+0x109/0x3d0 [ 134.599476][ T4876] process_one_work+0x863/0x1000 [ 134.604932][ T4876] worker_thread+0xaa8/0x12a0 [ 134.610133][ T4876] kthread+0x436/0x520 [ 134.614847][ T4876] ret_from_fork+0x1f/0x30 [ 134.619793][ T4876] [ 134.619793][ T4876] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 134.629973][ T4876] __lock_acquire+0x2c33/0x7c60 [ 134.635340][ T4876] lock_acquire+0x197/0x3f0 [ 134.640442][ T4876] __flush_work+0xdd/0x1b0 [ 134.645369][ T4876] __cancel_work_timer+0x3ac/0x520 [ 134.651214][ T4876] smc_clcsock_release+0x5c/0xe0 [ 134.656684][ T4876] __smc_release+0x398/0x500 [ 134.662188][ T4876] smc_close_non_accepted+0xd1/0x1f0 [ 134.668025][ T4876] smc_close_active+0x9d3/0xd90 [ 134.673429][ T4876] __smc_release+0x9a/0x500 [ 134.678444][ T4876] smc_release+0x2ca/0x530 [ 134.683404][ T4876] sock_close+0xd5/0x240 [ 134.688160][ T4876] __fput+0x234/0x930 [ 134.692661][ T4876] task_work_run+0x125/0x1a0 [ 134.697767][ T4876] exit_to_user_mode_loop+0x10f/0x130 [ 134.703652][ T4876] exit_to_user_mode_prepare+0xb1/0x140 [ 134.709796][ T4876] syscall_exit_to_user_mode+0x16/0x40 [ 134.715957][ T4876] do_syscall_64+0x58/0xa0 [ 134.720978][ T4876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.727389][ T4876] [ 134.727389][ T4876] other info that might help us debug this: [ 134.727389][ T4876] [ 134.737628][ T4876] Possible unsafe locking scenario: [ 134.737628][ T4876] [ 134.745086][ T4876] CPU0 CPU1 [ 134.750453][ T4876] ---- ---- [ 134.755811][ T4876] lock(sk_lock-AF_SMC/1); [ 134.760310][ T4876] lock((work_completion)(&new_smc->smc_listen_work)); [ 134.769840][ T4876] lock(sk_lock-AF_SMC/1); [ 134.776861][ T4876] lock((work_completion)(&new_smc->smc_listen_work)); [ 134.783785][ T4876] [ 134.783785][ T4876] *** DEADLOCK *** [ 134.783785][ T4876] [ 134.792066][ T4876] 2 locks held by syz.2.174/4876: [ 134.797173][ T4876] #0: ffff8880605ee210 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 134.807350][ T4876] #1: ffff888067370120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 134.816740][ T4876] [ 134.816740][ T4876] stack backtrace: [ 134.822712][ T4876] CPU: 1 PID: 4876 Comm: syz.2.174 Not tainted 5.15.184-syzkaller #0 [ 134.830763][ T4876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.840831][ T4876] Call Trace: [ 134.844100][ T4876] [ 134.847020][ T4876] dump_stack_lvl+0x168/0x230 [ 134.851739][ T4876] ? load_image+0x3b0/0x3b0 [ 134.856239][ T4876] ? show_regs_print_info+0x20/0x20 [ 134.861432][ T4876] ? print_circular_bug+0x12b/0x1a0 [ 134.866755][ T4876] check_noncircular+0x274/0x310 [ 134.871934][ T4876] ? add_chain_block+0x940/0x940 [ 134.877047][ T4876] ? lockdep_lock+0xdc/0x1e0 [ 134.881911][ T4876] ? __kernel_text_address+0x9a/0x100 [ 134.887431][ T4876] ? mark_lock+0x94/0x320 [ 134.891792][ T4876] __lock_acquire+0x2c33/0x7c60 [ 134.896644][ T4876] ? hlock_conflict+0x59/0x1f0 [ 134.901410][ T4876] ? check_path+0x40/0x40 [ 134.905829][ T4876] ? verify_lock_unused+0x140/0x140 [ 134.911041][ T4876] ? mark_lock+0x94/0x320 [ 134.915398][ T4876] ? __lock_acquire+0x13ad/0x7c60 [ 134.920427][ T4876] ? add_chain_block+0x940/0x940 [ 134.925472][ T4876] lock_acquire+0x197/0x3f0 [ 134.929988][ T4876] ? __flush_work+0xc1/0x1b0 [ 134.934610][ T4876] ? read_lock_is_recursive+0x10/0x10 [ 134.940007][ T4876] __flush_work+0xdd/0x1b0 [ 134.944520][ T4876] ? __flush_work+0xc1/0x1b0 [ 134.949190][ T4876] ? flush_work+0x20/0x20 [ 134.953517][ T4876] ? try_to_grab_pending+0xf3/0x7e0 [ 134.958706][ T4876] ? lockdep_hardirqs_off+0x70/0x100 [ 134.963980][ T4876] ? mark_lock+0x94/0x320 [ 134.968341][ T4876] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 134.974321][ T4876] ? lock_chain_count+0x20/0x20 [ 134.979197][ T4876] ? print_unlock_imbalance_bug+0x160/0x160 [ 134.985100][ T4876] ? __cancel_work_timer+0x331/0x520 [ 134.990390][ T4876] __cancel_work_timer+0x3ac/0x520 [ 134.995632][ T4876] ? cancel_work_sync+0x20/0x20 [ 135.000690][ T4876] ? __local_bh_enable_ip+0x12a/0x1b0 [ 135.006079][ T4876] ? lockdep_hardirqs_on+0x94/0x140 [ 135.011276][ T4876] ? __local_bh_enable_ip+0x12a/0x1b0 [ 135.016640][ T4876] ? _local_bh_enable+0xa0/0xa0 [ 135.021483][ T4876] smc_clcsock_release+0x5c/0xe0 [ 135.026413][ T4876] __smc_release+0x398/0x500 [ 135.030993][ T4876] smc_close_non_accepted+0xd1/0x1f0 [ 135.036316][ T4876] smc_close_active+0x9d3/0xd90 [ 135.041161][ T4876] __smc_release+0x9a/0x500 [ 135.045788][ T4876] smc_release+0x2ca/0x530 [ 135.050211][ T4876] sock_close+0xd5/0x240 [ 135.054450][ T4876] ? sock_mmap+0x90/0x90 [ 135.058685][ T4876] __fput+0x234/0x930 [ 135.062669][ T4876] task_work_run+0x125/0x1a0 [ 135.067257][ T4876] exit_to_user_mode_loop+0x10f/0x130 [ 135.072673][ T4876] exit_to_user_mode_prepare+0xb1/0x140 [ 135.078299][ T4876] syscall_exit_to_user_mode+0x16/0x40 [ 135.083859][ T4876] do_syscall_64+0x58/0xa0 [ 135.088268][ T4876] ? clear_bhb_loop+0x30/0x80 [ 135.092932][ T4876] ? clear_bhb_loop+0x30/0x80 [ 135.097598][ T4876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.103488][ T4876] RIP: 0033:0x7f364708f969 [ 135.107913][ T4876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.127614][ T4876] RSP: 002b:00007ffc4399bf58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 135.136039][ T4876] RAX: 0000000000000000 RBX: 00007f36472b8ba0 RCX: 00007f364708f969 [ 135.144008][ T4876] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 135.151979][ T4876] RBP: 00007f36472b8ba0 R08: 00000000000001dc R09: 0000001b4399c24f [ 135.160060][ T4876] R10: 00000000003ffc00 R11: 0000000000000246 R12: 0000000000020dd8 [ 135.168024][ T4876] R13: 00007f36472b7160 R14: ffffffffffffffff R15: 00007ffc4399c070 [ 135.176005][ T4876] [ 135.242467][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 135.362670][ T13] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 135.371919][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.388896][ T13] usb 4-1: config 0 descriptor?? [ 135.434263][ T13] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 136.032510][ T2355] Bluetooth: hci5: command 0x1009 tx timeout [ 136.072495][ T13] gspca_vc032x: reg_w err -71 [ 136.077304][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.082722][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.088153][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.093546][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.098971][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.104404][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.109799][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.115153][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.120982][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.126346][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.131755][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.137104][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.142513][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.147916][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.153262][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.158674][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.164023][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.169500][ T13] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.174839][ T13] gspca_vc032x: Unknown sensor... [ 136.180024][ T13] vc032x: probe of 4-1:0.0 failed with error -22 [ 136.188125][ T13] usb 4-1: USB disconnect, device number 2