last executing test programs: 26.073271182s ago: executing program 4 (id=25): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x40, 0x15}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x8}, 0x0, 0x0, 0x0}) 23.00412638s ago: executing program 4 (id=37): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000600), 0x4) 22.826058664s ago: executing program 4 (id=39): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)='\x00', 0x1}, {&(0x7f0000000040)='Z;', 0x2}], 0x2) 22.592731978s ago: executing program 4 (id=42): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x380002, @dev={0xfe, 0x80, '\x00', 0x34}, 0x692}, 0x1c) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_u8={{0x11}}], 0x18}, 0x2000c054) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8103, 0x0) socket$packet(0x11, 0xa, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) syz_emit_ethernet(0x5a, &(0x7f00000006c0)=ANY=[], 0x0) 22.336225093s ago: executing program 4 (id=43): syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x89, 0x0, @dev, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) 21.710966375s ago: executing program 4 (id=45): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x8000, 0x1}) 20.933974671s ago: executing program 32 (id=45): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x8000, 0x1}) 17.368017349s ago: executing program 0 (id=60): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="ccbd7e62173a58c1000007"], 0xb) socket$pppoe(0x18, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000500), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x7, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r5 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r5, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r6, 0x0, 0x7ffff000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setregid(0xffffffffffffffff, 0xee00) socketpair$unix(0x1, 0x3, 0x0, 0x0) 15.441004926s ago: executing program 3 (id=65): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, 0x0, 0x20000895) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500000000f313000000000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0) 14.544250705s ago: executing program 3 (id=68): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010027ad7000fb2086ba33000000"], 0x1c}}, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) open_tree(r3, 0x0, 0x80900) sendfile(r7, r7, 0x0, 0x200000) ioctl$sock_proto_private(r2, 0x89e1, 0x0) socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r9, &(0x7f0000000640)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 14.456019307s ago: executing program 0 (id=69): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) socket(0x3, 0x80003, 0x0) open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x70) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES32=r6], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x410080) 12.899794338s ago: executing program 0 (id=70): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.703215112s ago: executing program 3 (id=71): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 11.84299782s ago: executing program 0 (id=74): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="28000000120001002cbd7000fddbdf250a010100000000000000000000000000ffffffffffffff"], 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 11.624107134s ago: executing program 0 (id=76): r0 = socket(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYBLOB="1400020076657468305f746f5f6873", @ANYRES32, @ANYBLOB="1400020070696d3672656700000000", @ANYBLOB, @ANYRES32, @ANYBLOB="140002006d6163767461703000000000000000001400020070696d726567300000000000000000001c00018008000100", @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="05000300040000003c00018008000300010000001400", @ANYRES32], 0x130}, 0x1, 0x0, 0x0, 0x80c5}, 0x40) timer_create(0x2, 0x0, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r6 = dup(r1) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x68e, &(0x7f0000000740)={0x0, 0x5531, 0x10100, 0x2, 0x1d4, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) timer_delete(0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000002}, 0x20004004) 10.404134839s ago: executing program 3 (id=77): syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './cgroup/../file0\x00'}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x8a84, 0x9, 0xffffff00, 0x7, 0x1b, "10000100aa516cb540000400"}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 9.811150471s ago: executing program 0 (id=78): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0xfffffffd, 0x1, 0xfffffffffffffff9, 0x3ffffffff, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x2}) write$P9_RVERSION(r2, 0x0, 0xfffffeb5) unshare(0x6a040000) unshare(0x40000000) mount(0x0, 0x0, 0x0, 0x100020, &(0x7f0000000100)='!&/}}s/#@\x00') shutdown(0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000000)=0x84) 9.716450513s ago: executing program 3 (id=79): socket(0xa, 0x3, 0x3a) pselect6(0x0, 0x0, &(0x7f0000000080)={0x2, 0x9, 0x8000000000000001, 0x3, 0x4, 0x3, 0x6, 0x4}, 0x0, &(0x7f0000000200)={0x77359400}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) 6.651825295s ago: executing program 1 (id=87): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc0046209, 0xfffffffffffffffe) 5.640272396s ago: executing program 1 (id=90): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) io_setup(0x8, &(0x7f0000000380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2, r1}]) 5.262546163s ago: executing program 2 (id=91): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x38, r1, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "babf2f0f08"}]}, 0x38}, 0x1, 0x0, 0x0, 0x40041}, 0x0) 5.235578454s ago: executing program 1 (id=92): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.055945848s ago: executing program 2 (id=94): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2c, 0x25dbdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) 2.919906141s ago: executing program 5 (id=46): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0x0, 0x2, 0x59c}) 2.919357281s ago: executing program 2 (id=104): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x3, 0x0, 0xfffffffd, 0x0, 0x1, 0x2}}) close_range(r1, 0xffffffffffffffff, 0x0) 2.797128934s ago: executing program 1 (id=95): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x10c) fcntl$setlease(r1, 0x400, 0x1) link(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='./bus\x00') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) 2.732205935s ago: executing program 5 (id=96): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2, 0x0, 0x2}}) 2.703211245s ago: executing program 2 (id=97): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0], 0x1718}, 0x1, 0x0, 0x0, 0xa6fdace091686b28}, 0xc000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) setsockopt(0xffffffffffffffff, 0x40, 0x6, &(0x7f00000004c0), 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x20040004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2400c000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, 0x0) 2.551974738s ago: executing program 5 (id=98): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x4) getpgrp(0xffffffffffffffff) syz_open_dev$vcsn(0x0, 0x6c90, 0x40000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x78dd, 0x4) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.4988647s ago: executing program 1 (id=99): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000001100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffff8000, 0x0) 1.072108358s ago: executing program 2 (id=100): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = io_uring_setup(0x2c93, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_uring_enter(r5, 0x0, 0xcb, 0xf, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0xa0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r6, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) 1.044464619s ago: executing program 1 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002580)={0x2020}, 0x2020) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0x81) connect$l2tp6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x6, 0x4}, 0x20) getpeername$l2tp6(r6, 0x0, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) 917.332162ms ago: executing program 3 (id=102): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, r3, 0x40099d}}, 0x48) writev(r2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x9, 0x7, {{0xc, 0x4, 0x1, 0x19, 0x30, 0x67, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast, {[@ssrr={0x89, 0xb, 0xbe, [@rand_addr=0x64010102, @remote]}, @generic={0x89, 0x11, "9083eb54037d8f88bad6d2c7f03109"}]}}}}}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000880)={'ip_vti0\x00', r4, 0x1, 0x8000, 0x3, 0x7, {{0x1b, 0x4, 0x0, 0x4, 0x6c, 0x66, 0x0, 0x6, 0x4, 0x0, @multicast2, @loopback, {[@lsrr={0x83, 0xf, 0xcc, [@loopback, @private=0xa010100, @multicast1]}, @noop, @end, @end, @timestamp={0x44, 0xc, 0xe9, 0x0, 0x4, [0x400, 0x9]}, @timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @timestamp_addr={0x44, 0x2c, 0x1e, 0x1, 0xd, [{@remote, 0x7}, {@multicast2, 0x8}, {@broadcast, 0x8}, {@private=0xa010102, 0x77f}, {@local, 0x11}]}]}}}}}) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20044000) write$rfkill(r5, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7) ioctl$TCFLSH(r8, 0x89f0, 0xffffffffffff7ffe) 0s ago: executing program 2 (id=103): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000140)=0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x4e, 0x6}, {0x5, 0x2}]}, 0x14, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x4008000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. [ 48.666995][ T4172] cgroup: Unknown subsys name 'net' [ 48.808487][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.993183][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.815873][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 51.833428][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 51.899222][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 51.947980][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 51.979835][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.008884][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.016071][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.024792][ T4191] device bridge_slave_0 entered promiscuous mode [ 52.056236][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.063597][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.071188][ T4191] device bridge_slave_1 entered promiscuous mode [ 52.102366][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.109535][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.117884][ T4185] device bridge_slave_0 entered promiscuous mode [ 52.150636][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.157894][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.165776][ T4185] device bridge_slave_1 entered promiscuous mode [ 52.193348][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.202496][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.209719][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.217526][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.232705][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.240365][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.248549][ T4183] device bridge_slave_0 entered promiscuous mode [ 52.272697][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.281942][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.289375][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.297561][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.310029][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.317314][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.325408][ T4183] device bridge_slave_1 entered promiscuous mode [ 52.332461][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.339581][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.347322][ T4186] device bridge_slave_0 entered promiscuous mode [ 52.356289][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.363399][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.371505][ T4186] device bridge_slave_1 entered promiscuous mode [ 52.394284][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.429702][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.455595][ T4191] team0: Port device team_slave_0 added [ 52.463140][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.475111][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.492486][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.503183][ T4191] team0: Port device team_slave_1 added [ 52.510974][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.521611][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.545741][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.582273][ T4185] team0: Port device team_slave_0 added [ 52.611902][ T4184] team0: Port device team_slave_0 added [ 52.619990][ T4186] team0: Port device team_slave_0 added [ 52.628265][ T4185] team0: Port device team_slave_1 added [ 52.636332][ T4183] team0: Port device team_slave_0 added [ 52.648662][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.655994][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.682563][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.695327][ T4184] team0: Port device team_slave_1 added [ 52.701568][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.708758][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.735290][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.747569][ T4186] team0: Port device team_slave_1 added [ 52.754664][ T4183] team0: Port device team_slave_1 added [ 52.803344][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.810301][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.836667][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.854429][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.861385][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.888129][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.907924][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.915023][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.941200][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.952649][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.960021][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.985967][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.997301][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.004408][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.030636][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.045755][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.052721][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.079166][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.090818][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.098251][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.124144][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.155113][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.162069][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.188381][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.214383][ T4191] device hsr_slave_0 entered promiscuous mode [ 53.221243][ T4191] device hsr_slave_1 entered promiscuous mode [ 53.272408][ T4185] device hsr_slave_0 entered promiscuous mode [ 53.279365][ T4185] device hsr_slave_1 entered promiscuous mode [ 53.286238][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.294982][ T4185] Cannot create hsr debugfs directory [ 53.319823][ T4184] device hsr_slave_0 entered promiscuous mode [ 53.327092][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.334484][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.342052][ T4184] Cannot create hsr debugfs directory [ 53.358020][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.364964][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.371434][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.379165][ T4183] Cannot create hsr debugfs directory [ 53.420594][ T4186] device hsr_slave_0 entered promiscuous mode [ 53.427268][ T4186] device hsr_slave_1 entered promiscuous mode [ 53.434118][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.441692][ T4186] Cannot create hsr debugfs directory [ 53.524213][ T1112] Bluetooth: hci0: command 0x0409 tx timeout [ 53.524918][ T4188] Bluetooth: hci4: command 0x0409 tx timeout [ 53.535764][ T1112] Bluetooth: hci1: command 0x0409 tx timeout [ 53.540398][ T4188] Bluetooth: hci3: command 0x0409 tx timeout [ 53.548500][ T4188] Bluetooth: hci2: command 0x0409 tx timeout [ 53.744910][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.758621][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.769451][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.778307][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.812326][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.823740][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.832273][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.841878][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.895552][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.904877][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.922387][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.939994][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.001077][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.027967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.037629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.061946][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.069217][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.078446][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.094977][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.106817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.115616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.124970][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.132122][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.143931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.152473][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.165252][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.184431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.193807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.202111][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.209194][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.245312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.257135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.265279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.272860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.284458][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.312116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.321105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.331562][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.338644][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.347420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.356291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.364934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.372887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.383446][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.410605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.420206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.428672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.439537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.447900][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.454972][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.462572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.471313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.479946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.489013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.497893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.507434][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.517905][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.527459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.537397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.548740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.557204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.566418][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.581026][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.594940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.603827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.618710][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.633009][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.642789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.651549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.664259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.672802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.680505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.689105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.701137][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.724286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.734367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.742774][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.749932][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.758893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.774929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.783657][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.791131][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.801905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.824685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.867542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.905701][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.925981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.941049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.970873][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.979582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.993725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.001675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.021887][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.031201][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.040173][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.047906][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.056303][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.065258][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.078670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.086413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.098629][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.114477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.123166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.134379][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.141411][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.149394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.158052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.170584][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.189817][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.200014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.238090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.247696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.257703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.266458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.274903][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.282111][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.290797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.305151][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.318332][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.326633][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.347236][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.366549][ T4191] device veth0_vlan entered promiscuous mode [ 55.373759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.381978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.392624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.407498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.418223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.434136][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.444925][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.470556][ T4191] device veth1_vlan entered promiscuous mode [ 55.482905][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.497859][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.509556][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.521834][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.533173][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.540270][ T4270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.554285][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.562873][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.572054][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.579125][ T4270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.587750][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.596830][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.605166][ T4240] Bluetooth: hci4: command 0x041b tx timeout [ 55.608529][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.619467][ T4192] Bluetooth: hci2: command 0x041b tx timeout [ 55.621885][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.625512][ T4192] Bluetooth: hci3: command 0x041b tx timeout [ 55.625539][ T4192] Bluetooth: hci1: command 0x041b tx timeout [ 55.625651][ T4192] Bluetooth: hci0: command 0x041b tx timeout [ 55.640001][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.664966][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.674739][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.683011][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.692046][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.715008][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.727592][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.736556][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.745382][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.753116][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.761818][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.790579][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.813025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.821739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.829626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.839131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.848452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.857427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.866643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.876216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.884982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.893180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.903400][ T4191] device veth0_macvtap entered promiscuous mode [ 55.913644][ T4191] device veth1_macvtap entered promiscuous mode [ 55.928529][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.937354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.945613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.954532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.978972][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.991667][ T4184] device veth0_vlan entered promiscuous mode [ 56.000801][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.010168][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.019629][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.029540][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.041698][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.051961][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.062816][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.071772][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.082157][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.095831][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.108475][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.117422][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.139986][ T4184] device veth1_vlan entered promiscuous mode [ 56.148868][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.158765][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.172016][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.186379][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.196848][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.262105][ T4186] device veth0_vlan entered promiscuous mode [ 56.283807][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.292919][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.307423][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.318225][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.327007][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.336553][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.345030][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.366897][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.390176][ T4184] device veth0_macvtap entered promiscuous mode [ 56.413699][ T4186] device veth1_vlan entered promiscuous mode [ 56.429021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.439109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.447668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.456814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.465616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.488424][ T4184] device veth1_macvtap entered promiscuous mode [ 56.495220][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.513623][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.522339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.530953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.539511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.548692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.571942][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.585312][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.588435][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.599552][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.624364][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.633177][ T4186] device veth0_macvtap entered promiscuous mode [ 56.646903][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.656212][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.664255][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.672679][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.681554][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.690557][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.699209][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.706795][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.715574][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.729363][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.740929][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.750738][ T4186] device veth1_macvtap entered promiscuous mode [ 56.773810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.781896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.792391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.806742][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.827639][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.841064][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.851294][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.866635][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.878232][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.893579][ T4185] device veth0_vlan entered promiscuous mode [ 56.900834][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.909888][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.919757][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.929112][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.961633][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.991096][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.009749][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.019798][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.035166][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.048055][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.060650][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.072224][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.094410][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.108674][ T4185] device veth1_vlan entered promiscuous mode [ 57.176626][ T4185] device veth0_macvtap entered promiscuous mode [ 57.203815][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.211514][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.219631][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.229309][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.242782][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.254406][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.336065][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.385622][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.436353][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.491514][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.684565][ T4253] Bluetooth: hci1: command 0x040f tx timeout [ 57.693152][ T4253] Bluetooth: hci3: command 0x040f tx timeout [ 57.729613][ T4253] Bluetooth: hci2: command 0x040f tx timeout [ 57.757501][ T4258] Bluetooth: hci0: command 0x040f tx timeout [ 57.782595][ T4253] Bluetooth: hci4: command 0x040f tx timeout [ 57.796409][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.805078][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.813041][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.815405][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.830080][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.842920][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.861759][ T4185] device veth1_macvtap entered promiscuous mode [ 57.889632][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.902606][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.918133][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.931371][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.950286][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.961243][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.972792][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.022017][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.034653][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.050905][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.062622][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.078046][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.089042][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.107670][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.127334][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.141397][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.157393][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.173805][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.182448][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.208957][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.217644][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.235781][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.278619][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.357638][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.411737][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.556322][ T4183] device veth0_vlan entered promiscuous mode [ 58.596127][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.642676][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.806570][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.815106][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.831080][ T4183] device veth1_vlan entered promiscuous mode [ 58.861678][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.880885][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.941341][ T4183] device veth0_macvtap entered promiscuous mode [ 58.983971][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.984427][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.992062][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.024107][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.032923][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.051471][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.069753][ T4183] device veth1_macvtap entered promiscuous mode [ 59.108240][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.132114][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.222943][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.233354][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.268096][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.283394][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.311486][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.325092][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.337729][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.359933][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.382986][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.416075][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.450888][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.476594][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.486478][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.508071][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.513578][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.523299][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 59.568263][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.577727][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.605129][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.621903][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.640713][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.651546][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.662857][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.674315][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.685081][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.696040][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.729997][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.750130][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.760496][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.764065][ T4248] Bluetooth: hci3: command 0x0419 tx timeout [ 59.789593][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.802547][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.804249][ T4248] Bluetooth: hci1: command 0x0419 tx timeout [ 59.834317][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.853787][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 59.864884][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 59.880140][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.889453][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.902922][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.923626][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.933286][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.943279][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 59.953268][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 59.962248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 59.971218][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 59.980089][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 59.988956][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 59.997821][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #188!!! [ 60.063046][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.775455][ T4313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.961091][ T4313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.016858][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.076227][ T376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.100069][ T376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.883209][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.560869][ T4339] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.563397][ T4241] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.619945][ T4354] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 65.803594][ T4358] netlink: 'syz.3.18': attribute type 12 has an invalid length. [ 65.848117][ T4358] netlink: 'syz.3.18': attribute type 29 has an invalid length. [ 65.906533][ T4358] netlink: 148 bytes leftover after parsing attributes in process `syz.3.18'. [ 65.923530][ T4241] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 66.026184][ T4358] Zero length message leads to an empty skb [ 66.042725][ T4241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.769088][ T4241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.827978][ T4241] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 68.703413][ T4241] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 68.721866][ T4241] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 68.935311][ T4241] usb 5-1: config 0 descriptor?? [ 68.963552][ T4241] usb 5-1: can't set config #0, error -71 [ 69.094152][ T4241] usb 5-1: USB disconnect, device number 2 [ 69.171216][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'. [ 69.186935][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'. [ 70.165233][ T4393] device bond0 entered promiscuous mode [ 70.204463][ T4393] device bond_slave_0 entered promiscuous mode [ 70.308916][ T4393] device bond_slave_1 entered promiscuous mode [ 71.103395][ T4241] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.206115][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.212905][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.395569][ T4241] usb 5-1: Using ep0 maxpacket: 8 [ 71.768449][ T4241] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 71.812407][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.873570][ T4241] usb 5-1: Product: syz [ 71.895002][ T4241] usb 5-1: Manufacturer: syz [ 71.939908][ T4241] usb 5-1: config 0 descriptor?? [ 71.993454][ T4241] usb 5-1: can't set config #0, error -71 [ 72.037352][ T4241] usb 5-1: USB disconnect, device number 3 [ 72.523402][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.044930][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.057836][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.067631][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 73.080543][ T21] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 73.090014][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.100672][ T21] usb 3-1: config 0 descriptor?? [ 73.908763][ T21] hid-generic 0003:057E:2019.0001: unknown main item tag 0x5 [ 74.071634][ T21] hid-generic 0003:057E:2019.0001: hidraw0: USB HID v80.00 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 74.749405][ T21] usb 3-1: USB disconnect, device number 2 [ 75.015632][ T4451] fido_id[4451]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 75.167211][ T4241] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.880777][ T4469] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.892224][ T4469] (syz.0.53,4469,1):ocfs2_get_sector:1774 ERROR: status = -5 [ 75.899847][ T4469] (syz.0.53,4469,1):ocfs2_sb_probe:750 ERROR: status = -5 [ 75.907502][ T4469] (syz.0.53,4469,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 75.915997][ T4469] (syz.0.53,4469,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 75.967224][ T4469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.53'. [ 76.455325][ T1109] cfg80211: failed to load regulatory.db [ 76.533621][ T4241] usb 2-1: Using ep0 maxpacket: 8 [ 76.854096][ T4241] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 76.920418][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.047533][ T4241] usb 2-1: Product: syz [ 77.074540][ T4457] chnl_net:caif_netlink_parms(): no params data found [ 77.093325][ T4241] usb 2-1: Manufacturer: syz [ 77.118976][ T4241] usb 2-1: SerialNumber: syz [ 77.137628][ T4248] Bluetooth: hci0: command 0x0409 tx timeout [ 77.226226][ T4241] usb 2-1: config 0 descriptor?? [ 77.244846][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.377027][ T4457] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.414688][ T4457] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.423048][ T4457] device bridge_slave_0 entered promiscuous mode [ 77.443566][ T1109] Bluetooth: hci3: command 0x0406 tx timeout [ 77.454899][ T4457] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.462010][ T4457] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.485365][ T4241] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 77.491777][ T4457] device bridge_slave_1 entered promiscuous mode [ 77.498367][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 77.561473][ T4457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.600844][ T4457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.709851][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 77.719362][ T4457] team0: Port device team_slave_0 added [ 78.193766][ T4241] gspca_sunplus: reg_w_riv err -71 [ 78.378282][ T4241] sunplus: probe of 2-1:0.0 failed with error -71 [ 78.399875][ T4241] usb 2-1: USB disconnect, device number 2 [ 78.424916][ T4457] team0: Port device team_slave_1 added [ 78.493572][ T23] usb 4-1: config 7 has an invalid interface number: 71 but max is 0 [ 78.515349][ T23] usb 4-1: config 7 has an invalid descriptor of length 135, skipping remainder of the config [ 78.536837][ T23] usb 4-1: config 7 has no interface number 0 [ 78.546364][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.550389][ T23] usb 4-1: config 7 interface 71 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 78.580634][ T23] usb 4-1: config 7 interface 71 has no altsetting 0 [ 78.612612][ T4457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.646822][ T4457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.703606][ T4457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.728832][ T4457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.745311][ T4457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.793706][ T23] usb 4-1: New USB device found, idVendor=07d1, idProduct=2f08, bcdDevice= 2.87 [ 78.797073][ T4457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.809326][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.003533][ T23] usb 4-1: Product: syz [ 79.015140][ T23] usb 4-1: Manufacturer: syz [ 79.019862][ T23] usb 4-1: SerialNumber: syz [ 79.330392][ T4241] Bluetooth: hci0: command 0x041b tx timeout [ 79.357304][ T4457] device hsr_slave_0 entered promiscuous mode [ 79.843755][ T23] usb 4-1: USB disconnect, device number 2 [ 79.920149][ T4457] device hsr_slave_1 entered promiscuous mode [ 79.945953][ T4457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.964516][ T4457] Cannot create hsr debugfs directory [ 80.020244][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.082030][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 80.162968][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.263642][ T4248] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 80.347302][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.703490][ T4524] netlink: set zone limit has 8 unknown bytes [ 81.663530][ T4248] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 81.672728][ T4248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.007519][ T4248] usb 2-1: Product: syz [ 82.011735][ T4248] usb 2-1: Manufacturer: syz [ 82.017542][ T4248] usb 2-1: SerialNumber: syz [ 82.024986][ T4248] usb 2-1: config 0 descriptor?? [ 82.030292][ T4188] Bluetooth: hci0: command 0x040f tx timeout [ 82.283540][ T4248] airspy 2-1:0.0: usb_control_msg() failed -71 request 09 [ 82.312094][ T4248] airspy 2-1:0.0: Could not detect board [ 82.356903][ T4248] airspy: probe of 2-1:0.0 failed with error -71 [ 82.395170][ T4248] usb 2-1: USB disconnect, device number 3 [ 82.503652][ T4457] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 82.550612][ T4457] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 82.669710][ T4457] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.691004][ T4457] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.137929][ T4457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.207068][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.228537][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.262973][ T4457] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.293191][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.338444][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.892503][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.892561][ T470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.918812][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.919801][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.920767][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.922136][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.922159][ T470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.922876][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.931951][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.959467][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.960606][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.010885][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.023464][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.024158][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.068605][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.069009][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.083419][ T4248] Bluetooth: hci0: command 0x0419 tx timeout [ 84.278811][ T4457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.279165][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.280434][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.280919][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.156797][ T9] device hsr_slave_0 left promiscuous mode [ 85.157195][ T9] device hsr_slave_1 left promiscuous mode [ 85.157690][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.157733][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.158461][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.158482][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.158813][ T9] device bridge_slave_1 left promiscuous mode [ 85.159719][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.172021][ T9] device bridge_slave_0 left promiscuous mode [ 85.172143][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.227277][ T9] device veth1_macvtap left promiscuous mode [ 85.227469][ T9] device veth0_macvtap left promiscuous mode [ 85.227551][ T9] device veth1_vlan left promiscuous mode [ 85.227713][ T9] device veth0_vlan left promiscuous mode [ 87.269566][ T9] team0 (unregistering): Port device team_slave_1 removed [ 87.302485][ T9] team0 (unregistering): Port device team_slave_0 removed [ 87.329400][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.361015][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.490635][ T4612] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 87.513985][ T4612] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 87.546533][ T9] bond0 (unregistering): Released all slaves [ 87.641453][ T4589] netlink: 'syz.0.78': attribute type 21 has an invalid length. [ 87.649745][ T4589] netlink: 128 bytes leftover after parsing attributes in process `syz.0.78'. [ 87.667534][ T4589] netlink: 'syz.0.78': attribute type 5 has an invalid length. [ 87.682518][ T4589] netlink: 'syz.0.78': attribute type 6 has an invalid length. [ 87.693515][ T4589] netlink: 3 bytes leftover after parsing attributes in process `syz.0.78'. [ 87.712786][ T26] audit: type=1800 audit(1758160423.888:2): pid=4610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.82" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 87.713188][ T4610] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 87.742091][ T4610] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 87.751782][ T4610] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 87.842052][ T4457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.946266][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.971256][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.368359][ T4635] binder: 4629:4635 ioctl c0046209 9999999999999999 returned -22 [ 89.666796][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.687142][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.743717][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.802756][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.873457][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.890469][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.903378][ T2397] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.928860][ T4457] device veth0_vlan entered promiscuous mode [ 89.984917][ T4457] device veth1_vlan entered promiscuous mode [ 90.077546][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.114000][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.152402][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.182998][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.209753][ T4457] device veth0_macvtap entered promiscuous mode [ 90.232785][ T4457] device veth1_macvtap entered promiscuous mode [ 90.274276][ T2397] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 90.289990][ T2397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.299072][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.331303][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.355221][ T2397] usb 2-1: config 0 descriptor?? [ 90.382290][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.400338][ T2397] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 90.423292][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.433116][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.473263][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.493318][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.533341][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.534689][ T4457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.575219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.596692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.627424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.646557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.685383][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.713357][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.814200][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.833464][ T2397] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 90.867203][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.893320][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.917816][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.988613][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.018948][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.048325][ T4457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.076045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.103675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.147061][ T4457] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.173508][ T4457] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.203428][ T4457] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.220986][ T4457] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.273438][ T2397] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 91.477221][ T2397] usb 2-1: USB disconnect, device number 4 [ 91.555743][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.593806][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.618291][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.659438][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.686975][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.729566][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.963547][ T4709] [ 94.965907][ T4709] ====================================================== [ 94.972917][ T4709] WARNING: possible circular locking dependency detected [ 94.979946][ T4709] syzkaller #0 Not tainted [ 94.984353][ T4709] ------------------------------------------------------ [ 94.991369][ T4709] syz.3.102/4709 is trying to acquire lock: [ 94.997254][ T4709] ffff888062060c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 95.008320][ T4709] [ 95.008320][ T4709] but task is already holding lock: [ 95.015672][ T4709] ffffffff8d4c0468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 95.025333][ T4709] [ 95.025333][ T4709] which lock already depends on the new lock. [ 95.025333][ T4709] [ 95.035727][ T4709] [ 95.035727][ T4709] the existing dependency chain (in reverse order) is: [ 95.044729][ T4709] [ 95.044729][ T4709] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 95.052715][ T4709] __mutex_lock_common+0x1eb/0x2390 [ 95.058425][ T4709] mutex_lock_nested+0x17/0x20 [ 95.063694][ T4709] rfkill_register+0x33/0x8a0 [ 95.068876][ T4709] hci_register_dev+0x452/0x970 [ 95.074227][ T4709] vhci_create_device+0x32c/0x5c0 [ 95.079750][ T4709] vhci_write+0x391/0x450 [ 95.084578][ T4709] vfs_write+0x712/0xd00 [ 95.089321][ T4709] ksys_write+0x14d/0x250 [ 95.094150][ T4709] do_syscall_64+0x4c/0xa0 [ 95.099064][ T4709] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.105456][ T4709] [ 95.105456][ T4709] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 95.113256][ T4709] __mutex_lock_common+0x1eb/0x2390 [ 95.118967][ T4709] mutex_lock_nested+0x17/0x20 [ 95.124234][ T4709] vhci_send_frame+0x88/0x100 [ 95.129419][ T4709] hci_send_frame+0x1a9/0x2e0 [ 95.134603][ T4709] hci_tx_work+0x9f9/0x1710 [ 95.139612][ T4709] process_one_work+0x863/0x1000 [ 95.145053][ T4709] worker_thread+0xaa8/0x12a0 [ 95.150315][ T4709] kthread+0x436/0x520 [ 95.154884][ T4709] ret_from_fork+0x1f/0x30 [ 95.159805][ T4709] [ 95.159805][ T4709] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 95.168989][ T4709] __flush_work+0xdd/0x1b0 [ 95.173903][ T4709] hci_dev_do_close+0x1e7/0x1030 [ 95.179341][ T4709] hci_unregister_dev+0x2d7/0x580 [ 95.184863][ T4709] vhci_release+0x73/0xc0 [ 95.189781][ T4709] __fput+0x234/0x930 [ 95.194265][ T4709] task_work_run+0x125/0x1a0 [ 95.199360][ T4709] do_exit+0x61e/0x20a0 [ 95.204030][ T4709] do_group_exit+0x12e/0x300 [ 95.209213][ T4709] __x64_sys_exit_group+0x3b/0x40 [ 95.214742][ T4709] do_syscall_64+0x4c/0xa0 [ 95.219656][ T4709] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.226048][ T4709] [ 95.226048][ T4709] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 95.233665][ T4709] __mutex_lock_common+0x1eb/0x2390 [ 95.239369][ T4709] mutex_lock_nested+0x17/0x20 [ 95.244647][ T4709] bg_scan_update+0x44/0x3b0 [ 95.249751][ T4709] process_one_work+0x863/0x1000 [ 95.255188][ T4709] worker_thread+0xaa8/0x12a0 [ 95.260361][ T4709] kthread+0x436/0x520 [ 95.264927][ T4709] ret_from_fork+0x1f/0x30 [ 95.269847][ T4709] [ 95.269847][ T4709] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 95.279631][ T4709] __lock_acquire+0x2c33/0x7c60 [ 95.284981][ T4709] lock_acquire+0x197/0x3f0 [ 95.289987][ T4709] __flush_work+0xdd/0x1b0 [ 95.294902][ T4709] __cancel_work_timer+0x3ac/0x520 [ 95.300636][ T4709] hci_request_cancel_all+0xcc/0x300 [ 95.306431][ T4709] hci_dev_do_close+0x4e/0x1030 [ 95.311781][ T4709] hci_rfkill_set_block+0x10a/0x190 [ 95.317536][ T4709] rfkill_set_block+0x1c6/0x420 [ 95.322893][ T4709] rfkill_fop_write+0x458/0x560 [ 95.328245][ T4709] vfs_write+0x300/0xd00 [ 95.332983][ T4709] ksys_write+0x14d/0x250 [ 95.337809][ T4709] do_syscall_64+0x4c/0xa0 [ 95.342723][ T4709] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.349113][ T4709] [ 95.349113][ T4709] other info that might help us debug this: [ 95.349113][ T4709] [ 95.359578][ T4709] Chain exists of: [ 95.359578][ T4709] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 95.359578][ T4709] [ 95.375272][ T4709] Possible unsafe locking scenario: [ 95.375272][ T4709] [ 95.382695][ T4709] CPU0 CPU1 [ 95.388031][ T4709] ---- ---- [ 95.393370][ T4709] lock(rfkill_global_mutex); [ 95.398112][ T4709] lock(&data->open_mutex); [ 95.405193][ T4709] lock(rfkill_global_mutex); [ 95.412449][ T4709] lock((work_completion)(&hdev->bg_scan_update)); [ 95.419008][ T4709] [ 95.419008][ T4709] *** DEADLOCK *** [ 95.419008][ T4709] [ 95.427125][ T4709] 1 lock held by syz.3.102/4709: [ 95.432121][ T4709] #0: ffffffff8d4c0468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 95.442183][ T4709] [ 95.442183][ T4709] stack backtrace: [ 95.448044][ T4709] CPU: 1 PID: 4709 Comm: syz.3.102 Not tainted syzkaller #0 [ 95.455305][ T4709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 95.465362][ T4709] Call Trace: [ 95.468627][ T4709] [ 95.471540][ T4709] dump_stack_lvl+0x168/0x230 [ 95.476199][ T4709] ? load_image+0x3b0/0x3b0 [ 95.480681][ T4709] ? show_regs_print_info+0x20/0x20 [ 95.485858][ T4709] ? print_circular_bug+0x12b/0x1a0 [ 95.491113][ T4709] check_noncircular+0x274/0x310 [ 95.496027][ T4709] ? add_chain_block+0x940/0x940 [ 95.500939][ T4709] ? lockdep_lock+0xdc/0x1e0 [ 95.505523][ T4709] ? __lock_acquire+0x12d9/0x7c60 [ 95.510525][ T4709] ? lockdep_lock+0x1e0/0x1e0 [ 95.515179][ T4709] ? mark_lock+0x94/0x320 [ 95.519528][ T4709] __lock_acquire+0x2c33/0x7c60 [ 95.524364][ T4709] ? verify_lock_unused+0x140/0x140 [ 95.529564][ T4709] ? verify_lock_unused+0x140/0x140 [ 95.534746][ T4709] lock_acquire+0x197/0x3f0 [ 95.539227][ T4709] ? __flush_work+0xc1/0x1b0 [ 95.543794][ T4709] ? __lock_acquire+0x7c60/0x7c60 [ 95.548810][ T4709] ? read_lock_is_recursive+0x10/0x10 [ 95.553218][ C0] sched: RT throttling activated [ 95.559236][ T4709] ? start_flush_work+0x776/0x820 [ 95.564242][ T4709] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 95.570117][ T4709] ? _raw_spin_unlock+0x40/0x40 [ 95.574947][ T4709] __flush_work+0xdd/0x1b0 [ 95.579342][ T4709] ? __flush_work+0xc1/0x1b0 [ 95.583930][ T4709] ? flush_work+0x20/0x20 [ 95.588238][ T4709] ? try_to_grab_pending+0xf3/0x7e0 [ 95.593447][ T4709] ? lockdep_hardirqs_off+0x70/0x100 [ 95.598713][ T4709] ? mark_lock+0x94/0x320 [ 95.603020][ T4709] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 95.608980][ T4709] ? lock_chain_count+0x20/0x20 [ 95.613808][ T4709] ? mark_lock+0x94/0x320 [ 95.618117][ T4709] ? __cancel_work_timer+0x331/0x520 [ 95.623389][ T4709] __cancel_work_timer+0x3ac/0x520 [ 95.628486][ T4709] ? cancel_work_sync+0x20/0x20 [ 95.633310][ T4709] ? __cancel_work+0x1f4/0x2d0 [ 95.638049][ T4709] ? lockdep_hardirqs_on+0x94/0x140 [ 95.643262][ T4709] ? __cancel_work+0x26f/0x2d0 [ 95.648005][ T4709] ? cancel_work+0x20/0x20 [ 95.652416][ T4709] ? lock_chain_count+0x20/0x20 [ 95.657244][ T4709] hci_request_cancel_all+0xcc/0x300 [ 95.662511][ T4709] hci_dev_do_close+0x4e/0x1030 [ 95.667342][ T4709] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 95.673220][ T4709] ? _raw_spin_unlock+0x40/0x40 [ 95.678051][ T4709] hci_rfkill_set_block+0x10a/0x190 [ 95.683231][ T4709] ? rcu_lock_release+0x20/0x20 [ 95.688058][ T4709] rfkill_set_block+0x1c6/0x420 [ 95.692887][ T4709] rfkill_fop_write+0x458/0x560 [ 95.697719][ T4709] ? rfkill_fop_read+0x4b0/0x4b0 [ 95.702634][ T4709] ? common_file_perm+0xc0/0x1c0 [ 95.707567][ T4709] ? fsnotify_perm+0x5d/0x560 [ 95.712224][ T4709] ? security_file_permission+0x75/0xa0 [ 95.717747][ T4709] ? rfkill_fop_read+0x4b0/0x4b0 [ 95.722660][ T4709] vfs_write+0x300/0xd00 [ 95.726883][ T4709] ? file_end_write+0x250/0x250 [ 95.731711][ T4709] ? __fget_files+0x40f/0x480 [ 95.736370][ T4709] ? __fdget_pos+0x1e2/0x370 [ 95.740934][ T4709] ? ksys_write+0x71/0x250 [ 95.745326][ T4709] ksys_write+0x14d/0x250 [ 95.749634][ T4709] ? __ia32_sys_read+0x80/0x80 [ 95.754390][ T4709] ? lockdep_hardirqs_on+0x94/0x140 [ 95.759573][ T4709] do_syscall_64+0x4c/0xa0 [ 95.763970][ T4709] ? clear_bhb_loop+0x30/0x80 [ 95.768628][ T4709] ? clear_bhb_loop+0x30/0x80 [ 95.773316][ T4709] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.779204][ T4709] RIP: 0033:0x7ffa15f91ba9 [ 95.783601][ T4709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.803183][ T4709] RSP: 002b:00007ffa141d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.811580][ T4709] RAX: ffffffffffffffda RBX: 00007ffa161d9090 RCX: 00007ffa15f91ba9 [ 95.819536][ T4709] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000008 [ 95.827493][ T4709] RBP: 00007ffa16014e19 R08: 0000000000000000 R09: 0000000000000000 [ 95.835442][ T4709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.843420][ T4709] R13: 00007ffa161d9128 R14: 00007ffa161d9090 R15: 00007fff148051f8 [ 95.851375][ T4709] [ 95.854394][ C1] vkms_vblank_simulate: vblank timer overrun