last executing test programs: 9.414312302s ago: executing program 1 (id=40): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x3, 0x10, 0x9, 0x40, 0xd3c25e1}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xa}, {0xd}, {0x1, 0x3d}}}, 0x24}}, 0x40) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff9}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) writev(r7, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) shutdown(r7, 0x1) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) socket(0x10, 0x3, 0x0) setresuid(0x0, 0x0, 0x0) 7.364672765s ago: executing program 1 (id=43): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x24}}, 0x800) 6.202725673s ago: executing program 2 (id=48): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ff]}}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000200)=@ethtool_regs={0x4, 0x0, 0xb, "64640aa6aecca42a4d7849"}}) 6.114981904s ago: executing program 2 (id=49): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x0, 0x12, 0x2, "8984"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.532866983s ago: executing program 2 (id=51): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.429733975s ago: executing program 4 (id=52): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, 0x0, 0x0) shutdown(r3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$mixer(0xffffffffffffff9c, 0x0, 0x1c1140, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x121) 5.018786241s ago: executing program 0 (id=53): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000600)=0x2) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="80fd"], 0x9) 4.174952294s ago: executing program 4 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x600000) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d0000008500000050000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r5}, 0x10) io_cancel(0x0, 0xffffffffffffffff, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r7, 0x0, 0xcf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x40}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}]}}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 4.130164155s ago: executing program 3 (id=55): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r3], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xa4, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x10, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffc0}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xe8}, 0x1, 0x0, 0x0, 0x2401c844}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.054903846s ago: executing program 2 (id=56): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 3.21186223s ago: executing program 4 (id=57): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 3.19414881s ago: executing program 1 (id=58): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r2, 0xa, 0x6, 0x3000}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) r4 = dup(r3) ioctl$PPPIOCCONNECT(r4, 0x40047435, &(0x7f00000002c0)=0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/234) ioctl$PPPIOCGFLAGS1(r5, 0x40047435, &(0x7f0000000280)) 3.118776661s ago: executing program 0 (id=59): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) close_range(r0, 0xffffffffffffffff, 0x0) 3.103359751s ago: executing program 3 (id=60): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf255e00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.021057702s ago: executing program 3 (id=61): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x228100) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x7e3c, 0x3, 0x9, 0xfffffff9, 0x4bb, 0xfffffffe, 0x7, 0x1, 0xfefffffd}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 2.906852515s ago: executing program 1 (id=62): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) 2.166214216s ago: executing program 3 (id=63): r0 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2.090528987s ago: executing program 0 (id=64): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x3d, 0x3, 0x2, 0xfffffffe}]}) 1.958848969s ago: executing program 2 (id=65): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'batadv_slave_0\x00', 0x8000}) 1.958610799s ago: executing program 4 (id=66): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24040895}, 0x40800) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) 1.958514279s ago: executing program 0 (id=67): unshare(0x6020400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 1.26370584s ago: executing program 1 (id=68): unshare(0x6020400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) 1.151220181s ago: executing program 0 (id=69): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40046f41, &(0x7f0000000440)=0x1f) 1.150196152s ago: executing program 3 (id=70): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfa, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.032305884s ago: executing program 4 (id=71): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x4000000) socket$inet_sctp(0x2, 0x1, 0x84) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) socket$tipc(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, r5, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 860.830956ms ago: executing program 1 (id=72): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fsync(0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r4, 0x112, 0x13, 0x0, 0x0) 245.790636ms ago: executing program 3 (id=73): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtaction={0x18, 0x30, 0x100, 0x870bd2d, 0x0, {0x9}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) openat(r3, &(0x7f0000000780)='./file0\x00', 0x0, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600"], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) write$rfkill(r6, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 26.75221ms ago: executing program 0 (id=74): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000004c0)='contention_end\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "408b7c"}) 16.0113ms ago: executing program 4 (id=75): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x710ce59bde3da96}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4010044) 0s ago: executing program 2 (id=76): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x2, 0x1, 0x1, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641}) close(0xffffffffffffffff) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) kernel console output (not intermixed with test programs): [ 19.472409][ T3696] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 19.512105][ T333] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 19.520113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. syzkaller login: [ 40.090623][ T4014] cgroup: Unknown subsys name 'net' [ 40.342117][ T4014] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 40.707651][ T4014] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 42.560859][ T4033] chnl_net:caif_netlink_parms(): no params data found [ 42.651272][ T4032] chnl_net:caif_netlink_parms(): no params data found [ 42.691411][ T4027] chnl_net:caif_netlink_parms(): no params data found [ 42.707962][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.709958][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.712575][ T4033] device bridge_slave_0 entered promiscuous mode [ 42.719763][ T4024] chnl_net:caif_netlink_parms(): no params data found [ 42.723412][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.725997][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.728745][ T4033] device bridge_slave_1 entered promiscuous mode [ 42.798791][ T4033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.815721][ T4033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.821113][ T4032] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.823141][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.826549][ T4032] device bridge_slave_0 entered promiscuous mode [ 42.864769][ T4032] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.866896][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.869589][ T4032] device bridge_slave_1 entered promiscuous mode [ 42.885041][ T4033] team0: Port device team_slave_0 added [ 42.892552][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.894521][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.897491][ T4027] device bridge_slave_0 entered promiscuous mode [ 42.913203][ T4024] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.915262][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.918436][ T4024] device bridge_slave_0 entered promiscuous mode [ 42.922674][ T4033] team0: Port device team_slave_1 added [ 42.924682][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.927068][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.929761][ T4027] device bridge_slave_1 entered promiscuous mode [ 42.932107][ T4037] chnl_net:caif_netlink_parms(): no params data found [ 42.941496][ T4024] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.943591][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.946568][ T4024] device bridge_slave_1 entered promiscuous mode [ 42.970551][ T4032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.985242][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.988648][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.000399][ T4033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.014430][ T4027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.018689][ T4032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.022577][ T4027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.031059][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.033132][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.045475][ T4033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.070440][ T4024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.091945][ T4027] team0: Port device team_slave_0 added [ 43.095754][ T4024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.115983][ T4032] team0: Port device team_slave_0 added [ 43.118910][ T4027] team0: Port device team_slave_1 added [ 43.128630][ T4024] team0: Port device team_slave_0 added [ 43.132644][ T4024] team0: Port device team_slave_1 added [ 43.144215][ T4032] team0: Port device team_slave_1 added [ 43.191806][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.193791][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.201500][ T4027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.211110][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.213029][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.220711][ T4024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.243646][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.251959][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.259597][ T4027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.297873][ T4033] device hsr_slave_0 entered promiscuous mode [ 43.335838][ T4033] device hsr_slave_1 entered promiscuous mode [ 43.396245][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.398227][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.405315][ T4024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.409112][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.411132][ T4037] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.413843][ T4037] device bridge_slave_0 entered promiscuous mode [ 43.417811][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.419699][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.433111][ T4032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.456728][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.459117][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.462011][ T4037] device bridge_slave_1 entered promiscuous mode [ 43.465139][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.467237][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.474192][ T4032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.557420][ T4024] device hsr_slave_0 entered promiscuous mode [ 43.595883][ T4024] device hsr_slave_1 entered promiscuous mode [ 43.646528][ T4024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.648923][ T4024] Cannot create hsr debugfs directory [ 43.727620][ T4027] device hsr_slave_0 entered promiscuous mode [ 43.765772][ T4027] device hsr_slave_1 entered promiscuous mode [ 43.805607][ T4027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.807861][ T4027] Cannot create hsr debugfs directory [ 43.811273][ T4037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.847430][ T4032] device hsr_slave_0 entered promiscuous mode [ 43.905783][ T4032] device hsr_slave_1 entered promiscuous mode [ 43.961486][ T4032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.963695][ T4032] Cannot create hsr debugfs directory [ 43.976746][ T4037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.034370][ T4037] team0: Port device team_slave_0 added [ 44.038727][ T4037] team0: Port device team_slave_1 added [ 44.114609][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.116779][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.123839][ T4037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.152715][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.154730][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.162289][ T4037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.277566][ T4037] device hsr_slave_0 entered promiscuous mode [ 44.315883][ T4037] device hsr_slave_1 entered promiscuous mode [ 44.366176][ T1534] Bluetooth: hci2: command 0x0409 tx timeout [ 44.368295][ T1534] Bluetooth: hci3: command 0x0409 tx timeout [ 44.370275][ T1534] Bluetooth: hci1: command 0x0409 tx timeout [ 44.372041][ T1534] Bluetooth: hci0: command 0x0409 tx timeout [ 44.375552][ T4037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.377722][ T4037] Cannot create hsr debugfs directory [ 44.429035][ T4033] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 44.445825][ T25] Bluetooth: hci4: command 0x0409 tx timeout [ 44.464085][ T4033] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 44.519987][ T4033] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 44.568832][ T4033] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 44.629860][ T4032] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.687525][ T4032] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.739975][ T4032] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.778031][ T4032] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.869753][ T4024] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.892002][ T4024] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.964337][ T4024] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.014096][ T4024] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.096516][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.113299][ T4027] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.128622][ T4027] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.183585][ T4027] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.237492][ T4027] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.287931][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.291434][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.297293][ T4033] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.316913][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.319977][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.322877][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.324915][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.330886][ T4037] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 45.377463][ T4037] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 45.429858][ T4032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.433058][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.436179][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.439845][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.443071][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.445008][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.450472][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.455195][ T4037] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 45.508703][ T4037] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 45.556495][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.559536][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.562631][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.577628][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.580266][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.583260][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.586714][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.589821][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.603820][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.608385][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.619226][ T4032] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.633575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.638166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.656734][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.660443][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.663082][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.665188][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.672200][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.674982][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.680301][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.682913][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.684861][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.694091][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.714740][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.718493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.721310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.724891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.730077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.733381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.751355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.754072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.774616][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.779702][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.784431][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.792356][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.799809][ T4027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.814428][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.831149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.833751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.839848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.842433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.867599][ T4024] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.871811][ T4037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.888246][ T4027] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.909663][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.912276][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.914889][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.925207][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.928369][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.930300][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.932856][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.936155][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.938713][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.940839][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.943261][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.949100][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.953235][ T4037] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.957496][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.960219][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.963027][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.965198][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.975682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.978097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.993488][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.001279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.004258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.009418][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.011345][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.013653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.017080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.038599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.041321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.044328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.047991][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.049941][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.053270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.057274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.060056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.062757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.065644][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.067478][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.074255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.079440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.082227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.101917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.104658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.109777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.112557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.118535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.140494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.142706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.144807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.148755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.151462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.154331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.157431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.160333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.163051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.170834][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.173882][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.186953][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.189804][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.192489][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.196919][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.206574][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.215013][ T4024] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.219434][ T4024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.231375][ T4027] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.234248][ T4027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.239806][ T4037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.243375][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.253660][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.257915][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.261144][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.266866][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.276112][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.278874][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.282563][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.294055][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.297767][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.300573][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.303285][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.308305][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.362196][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.366913][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.370857][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.373365][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.394507][ T4033] device veth0_vlan entered promiscuous mode [ 46.402325][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.405144][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.419942][ T4033] device veth1_vlan entered promiscuous mode [ 46.441508][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.444529][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.447769][ T4068] Bluetooth: hci0: command 0x041b tx timeout [ 46.449630][ T4068] Bluetooth: hci1: command 0x041b tx timeout [ 46.449838][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.451335][ T4068] Bluetooth: hci3: command 0x041b tx timeout [ 46.453436][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.465491][ T4068] Bluetooth: hci2: command 0x041b tx timeout [ 46.475208][ T4037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.495162][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.497975][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.508048][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.511279][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.526457][ T4068] Bluetooth: hci4: command 0x041b tx timeout [ 46.531211][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.533482][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.540095][ T4033] device veth0_macvtap entered promiscuous mode [ 46.554117][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.560686][ T4033] device veth1_macvtap entered promiscuous mode [ 46.564423][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.573925][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.577553][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.580739][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.586554][ T4032] device veth0_vlan entered promiscuous mode [ 46.592776][ T4027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.598290][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.601142][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.622038][ T4032] device veth1_vlan entered promiscuous mode [ 46.642778][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.651974][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.654843][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.658957][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.662100][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.664914][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.668902][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.674003][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.689550][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.692370][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.695169][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.698645][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.713155][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.716663][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.728142][ T4033] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.730634][ T4033] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.733005][ T4033] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.736918][ T4033] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.759353][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.762156][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.765033][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.769890][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.789130][ T4037] device veth0_vlan entered promiscuous mode [ 46.797743][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.800604][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.803389][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.806795][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.809528][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.812098][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.814770][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.818887][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.821493][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.824235][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.830716][ T4024] device veth0_vlan entered promiscuous mode [ 46.857552][ T4037] device veth1_vlan entered promiscuous mode [ 46.860619][ T4027] device veth0_vlan entered promiscuous mode [ 46.864705][ T4032] device veth0_macvtap entered promiscuous mode [ 46.876121][ T4024] device veth1_vlan entered promiscuous mode [ 46.913937][ T4032] device veth1_macvtap entered promiscuous mode [ 46.933990][ T4027] device veth1_vlan entered promiscuous mode [ 46.954069][ T333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.959633][ T333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.963206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.970428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.973142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.977668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.980318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.982917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.985843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.992814][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.998413][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.002295][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.010403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.013379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.050295][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.053082][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.056799][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.059479][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.062211][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.065012][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.073703][ T4037] device veth0_macvtap entered promiscuous mode [ 47.080038][ T4024] device veth0_macvtap entered promiscuous mode [ 47.083832][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.088106][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.091941][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.095218][ T4027] device veth0_macvtap entered promiscuous mode [ 47.107418][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.109753][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.110284][ T4027] device veth1_macvtap entered promiscuous mode [ 47.115069][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.119169][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.121963][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.124568][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.127787][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.130446][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.133247][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.143554][ T4037] device veth1_macvtap entered promiscuous mode [ 47.148166][ T4032] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.151181][ T4032] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.153615][ T4032] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.159293][ T4032] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.177749][ T4024] device veth1_macvtap entered promiscuous mode [ 47.243176][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.247401][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.250239][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.253432][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.258005][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.261996][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.264892][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.269314][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.272429][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.277225][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.290042][ T4037] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.292616][ T4037] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.294979][ T4037] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.298428][ T4037] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.312890][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.324585][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.336781][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.339828][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.342426][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.345112][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.349998][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.352328][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.355106][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.358562][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.361364][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.364208][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.367447][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.370101][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.372931][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.377088][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.379216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.381892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.384532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.388377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.391274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.395659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.400006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.403556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.408227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.411205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.454305][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.459689][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.462518][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.465750][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.468586][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.471608][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.476232][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.487037][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.489096][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.490696][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.494275][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.497716][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.500618][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.503455][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.506970][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.509719][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.512514][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.519736][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.524659][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.529815][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.533169][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.536709][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.539641][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.544726][ T4027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.548588][ T4027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.551069][ T4027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.553487][ T4027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.575021][ T4024] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.578264][ T4024] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.580643][ T4024] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.583113][ T4024] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.643371][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.650708][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.670698][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.702022][ T333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.704323][ T333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.718638][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.775020][ T4107] udc-core: couldn't find an available UDC or it's busy [ 47.779182][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.781569][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.784680][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.793535][ T4107] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.838188][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.840534][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.849123][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.858130][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.866710][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.889693][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.911422][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.914952][ T333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.920158][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.922597][ T333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.933803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.955302][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.889108][ T4071] Bluetooth: hci2: command 0x040f tx timeout [ 49.891264][ T4071] Bluetooth: hci3: command 0x040f tx timeout [ 49.893234][ T4071] Bluetooth: hci1: command 0x040f tx timeout [ 49.895569][ T4071] Bluetooth: hci0: command 0x040f tx timeout [ 49.897527][ T4071] Bluetooth: hci4: command 0x040f tx timeout [ 51.213462][ T4126] vhci_hcd: invalid port number 127 [ 51.215014][ T4126] vhci_hcd: invalid port number 127 [ 51.224166][ T4136] loop0: detected capacity change from 0 to 1024 [ 51.230239][ T4139] loop4: detected capacity change from 0 to 128 [ 51.262808][ T4133] loop3: detected capacity change from 0 to 2048 [ 51.280735][ T4138] loop1: detected capacity change from 0 to 128 [ 51.312818][ T4133] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 51.331844][ T4136] attempt to access beyond end of device [ 51.331844][ T4136] loop0: rw=0, want=201326594, limit=1024 [ 51.350743][ T4136] Buffer I/O error on dev loop0, logical block 100663296, async page read [ 51.353232][ T4136] hfsplus: unable to mark blocks free: error -5 [ 51.360847][ T4140] attempt to access beyond end of device [ 51.360847][ T4140] loop0: rw=0, want=201326594, limit=1024 [ 51.364696][ T4140] Buffer I/O error on dev loop0, logical block 100663296, async page read [ 51.369074][ T4136] hfsplus: can't free extent [ 51.370984][ T4140] attempt to access beyond end of device [ 51.370984][ T4140] loop0: rw=0, want=201326594, limit=1024 [ 51.374076][ T4140] Buffer I/O error on dev loop0, logical block 100663296, async page read [ 51.431687][ T4139] loop4: detected capacity change from 0 to 128 [ 51.507563][ T4139] vxfs: unsupported VxFS version (2066843062) [ 52.381058][ T4074] Bluetooth: hci4: command 0x0419 tx timeout [ 52.386843][ T4136] attempt to access beyond end of device [ 52.386843][ T4136] loop0: rw=0, want=201326594, limit=1024 [ 52.387519][ T4074] Bluetooth: hci0: command 0x0419 tx timeout [ 52.390154][ T4136] Buffer I/O error on dev loop0, logical block 100663296, async page read [ 52.394241][ T4136] attempt to access beyond end of device [ 52.394241][ T4136] loop0: rw=0, want=201326594, limit=1024 [ 52.395998][ T4074] Bluetooth: hci1: command 0x0419 tx timeout [ 52.400413][ T4074] Bluetooth: hci3: command 0x0419 tx timeout [ 52.404106][ T4074] Bluetooth: hci2: command 0x0419 tx timeout [ 52.424686][ T4143] loop1: detected capacity change from 0 to 4096 [ 52.437853][ T4136] Buffer I/O error on dev loop0, logical block 100663296, async page read [ 52.460950][ T4143] ntfs: (device loop1): ntfs_read_locked_inode(): Failed to load attribute list attribute. [ 52.463878][ T4143] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -22. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 52.560363][ T4143] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 52.584544][ T4143] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 52.632071][ T4143] ntfs: volume version 3.1. [ 52.633523][ T4143] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 52.653044][ T4143] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 52.673920][ T4143] ntfs: (device loop1): ntfs_check_logfile(): Error mapping $LogFile page (index 0). [ 52.699496][ T4143] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 52.709521][ T4143] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Actual VCN (0x0) of index buffer is different from expected VCN (0x900000000000000). Directory inode 0x5 is corrupt or driver bug. [ 52.714465][ T4143] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 53.022142][ T4139] loop4: detected capacity change from 0 to 32768 [ 53.083388][ T4153] loop1: detected capacity change from 0 to 4096 [ 53.102972][ T4139] XFS (loop4): Mounting V5 Filesystem [ 53.194760][ T4153] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 53.278245][ T4153] ntfs3: loop1: Failed to load $Extend. [ 53.308328][ T4139] XFS (loop4): Ending clean mount [ 53.325659][ T4139] XFS (loop4): Quotacheck needed: Please wait. [ 53.373544][ T4139] XFS (loop4): Quotacheck: Done. [ 53.541331][ T4037] XFS (loop4): Unmounting Filesystem [ 53.697749][ T4148] loop3: detected capacity change from 0 to 40427 [ 53.716084][ T4148] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 53.718480][ T4148] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 53.737762][ T4148] F2FS-fs (loop3): invalid crc value [ 53.763602][ T4160] loop0: detected capacity change from 0 to 40427 [ 53.783842][ T4148] F2FS-fs (loop3): Found nat_bits in checkpoint [ 53.839538][ T4160] F2FS-fs (loop0): invalid crc value [ 53.858308][ T4148] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 53.859892][ T4160] F2FS-fs (loop0): Found nat_bits in checkpoint [ 53.860474][ T4148] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 53.922558][ T4160] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 54.014272][ T4160] attempt to access beyond end of device [ 54.014272][ T4160] loop0: rw=2049, want=45104, limit=40427 [ 54.030535][ T4160] attempt to access beyond end of device [ 54.030535][ T4160] loop0: rw=2049, want=45144, limit=40427 [ 54.033852][ T4160] attempt to access beyond end of device [ 54.033852][ T4160] loop0: rw=2049, want=45104, limit=40427 [ 54.079455][ T4163] loop2: detected capacity change from 0 to 40427 [ 54.102132][ T136] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 54.104751][ T136] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 54.158823][ T4163] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 54.161194][ T4163] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 54.172549][ T4163] F2FS-fs (loop2): invalid crc value [ 54.227147][ T4163] F2FS-fs (loop2): Found nat_bits in checkpoint [ 54.246414][ T4024] attempt to access beyond end of device [ 54.246414][ T4024] loop0: rw=2049, want=45160, limit=40427 [ 54.278512][ T4163] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 54.280672][ T4163] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 54.337777][ T4176] loop4: detected capacity change from 0 to 8192 [ 54.395734][ T4176] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 54.398550][ T4176] REISERFS (device loop4): using ordered data mode [ 54.413982][ T4176] reiserfs: using flush barriers [ 54.457322][ T4176] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 54.466178][ T9] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 54.468819][ T9] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 54.497309][ T4176] REISERFS (device loop4): checking transaction log (loop4) [ 54.503970][ T4176] REISERFS (device loop4): Using tea hash to sort names [ 54.510849][ T4176] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 54.948031][ T4183] loop1: detected capacity change from 0 to 4096 [ 58.856398][ T4225] udc-core: couldn't find an available UDC or it's busy [ 58.858471][ T4225] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.865779][ T4235] [U] „ [ 62.777838][ T4269] wireguard: wg1: Could not create IPv4 socket [ 62.785855][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.025436][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 63.365586][ T7] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 63.368599][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.370899][ T7] usb 1-1: Product: syz [ 63.372046][ T7] usb 1-1: Manufacturer: syz [ 63.373287][ T7] usb 1-1: SerialNumber: syz [ 63.399491][ T7] usb 1-1: config 0 descriptor?? [ 63.485613][ T13] Bluetooth: hci4: command 0x0405 tx timeout [ 63.585069][ T4274] bridge0: port 3(syz_tun) entered blocking state [ 63.590742][ T4274] bridge0: port 3(syz_tun) entered disabled state [ 63.594495][ T4274] device syz_tun entered promiscuous mode [ 63.605984][ T4274] bridge0: port 3(syz_tun) entered blocking state [ 63.608225][ T4274] bridge0: port 3(syz_tun) entered forwarding state [ 63.690852][ T4276] udc-core: couldn't find an available UDC or it's busy [ 63.700475][ T4276] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 64.099216][ T7] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 64.177090][ T7] peak_usb: probe of 1-1:0.0 failed with error -71 [ 64.201675][ T7] usb 1-1: USB disconnect, device number 2 [ 66.511143][ T4305] udc-core: couldn't find an available UDC or it's busy [ 66.513140][ T4305] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.589818][ T4308] udc-core: couldn't find an available UDC or it's busy [ 66.592065][ T4308] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.846223][ T4319] syz.1.62 uses obsolete (PF_INET,SOCK_PACKET) [ 68.474243][ T4327] batman_adv: batadv0: Adding interface: dummy0 [ 68.493279][ T4327] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.553727][ T4327] batman_adv: batadv0: Interface activated: dummy0 [ 68.621855][ T4336] batadv0: mtu less than device minimum [ 68.628053][ T4336] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 68.635593][ T4336] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 68.642807][ T4336] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 68.650116][ T4336] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 68.657562][ T4336] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 68.664877][ T4336] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 68.672158][ T4336] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 68.679375][ T4336] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 68.686753][ T4336] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 68.801885][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.683321][ T21] cfg80211: failed to load regulatory.db [ 69.693764][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.695873][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.699988][ T4350] tipc: Started in network mode [ 69.702629][ T4350] tipc: Node identity 4, cluster identity 4711 [ 69.704475][ T4350] tipc: Node number set to 4 [ 69.775806][ T4355] [ 69.776613][ T4355] ====================================================== [ 69.778508][ T4355] WARNING: possible circular locking dependency detected [ 69.780481][ T4355] 5.15.185-syzkaller #0 Not tainted [ 69.781950][ T4355] ------------------------------------------------------ [ 69.784195][ T4355] syz.3.73/4355 is trying to acquire lock: [ 69.785830][ T4355] ffff0000d446cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 69.789004][ T4355] [ 69.789004][ T4355] but task is already holding lock: [ 69.790920][ T4355] ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 69.793769][ T4355] [ 69.793769][ T4355] which lock already depends on the new lock. [ 69.793769][ T4355] [ 69.796714][ T4355] [ 69.796714][ T4355] the existing dependency chain (in reverse order) is: [ 69.799189][ T4355] [ 69.799189][ T4355] -> #5 (rfkill_global_mutex){+.+.}-{3:3}: [ 69.801471][ T4355] __mutex_lock_common+0x194/0x1edc [ 69.803072][ T4355] mutex_lock_nested+0xac/0x11c [ 69.804680][ T4355] rfkill_register+0x44/0x77c [ 69.806118][ T4355] hci_register_dev+0x3d8/0x854 [ 69.807559][ T4355] vhci_create_device+0x2bc/0x564 [ 69.809283][ T4355] vhci_write+0x30c/0x3ac [ 69.810593][ T4355] vfs_write+0x7c8/0xa2c [ 69.811973][ T4355] ksys_write+0x120/0x210 [ 69.813357][ T4355] __arm64_sys_write+0x7c/0x90 [ 69.814912][ T4355] invoke_syscall+0x98/0x2b8 [ 69.816362][ T4355] el0_svc_common+0x138/0x258 [ 69.817863][ T4355] do_el0_svc+0x58/0x14c [ 69.819240][ T4355] el0_svc+0x78/0x1e0 [ 69.820559][ T4355] el0t_64_sync_handler+0xcc/0xe4 [ 69.822130][ T4355] el0t_64_sync+0x1a0/0x1a4 [ 69.823644][ T4355] [ 69.823644][ T4355] -> #4 (&data->open_mutex){+.+.}-{3:3}: [ 69.825888][ T4355] __mutex_lock_common+0x194/0x1edc [ 69.827467][ T4355] mutex_lock_nested+0xac/0x11c [ 69.829036][ T4355] vhci_send_frame+0x88/0x118 [ 69.830469][ T4355] hci_send_frame+0x194/0x2f0 [ 69.831950][ T4355] hci_cmd_work+0x174/0x330 [ 69.833310][ T4355] process_one_work+0x79c/0x1140 [ 69.834883][ T4355] worker_thread+0x8f4/0x101c [ 69.836392][ T4355] kthread+0x374/0x454 [ 69.837749][ T4355] ret_from_fork+0x10/0x20 [ 69.839145][ T4355] [ 69.839145][ T4355] -> #3 ((work_completion)(&hdev->cmd_work)){+.+.}-{0:0}: [ 69.841768][ T4355] process_one_work+0x6e0/0x1140 [ 69.843348][ T4355] worker_thread+0x8f4/0x101c [ 69.844806][ T4355] kthread+0x374/0x454 [ 69.846160][ T4355] ret_from_fork+0x10/0x20 [ 69.847554][ T4355] [ 69.847554][ T4355] -> #2 ((wq_completion)hci0#2){+.+.}-{0:0}: [ 69.849869][ T4355] flush_workqueue+0x11c/0x1024 [ 69.851386][ T4355] drain_workqueue+0xa4/0x310 [ 69.852861][ T4355] hci_dev_reset+0x118/0x508 [ 69.854341][ T4355] hci_sock_ioctl+0x5f0/0x94c [ 69.855789][ T4355] sock_do_ioctl+0xf8/0x240 [ 69.857204][ T4355] sock_ioctl+0x5c8/0x87c [ 69.858567][ T4355] __arm64_sys_ioctl+0x14c/0x1c8 [ 69.860114][ T4355] invoke_syscall+0x98/0x2b8 [ 69.861530][ T4355] el0_svc_common+0x138/0x258 [ 69.863051][ T4355] do_el0_svc+0x58/0x14c [ 69.864389][ T4355] el0_svc+0x78/0x1e0 [ 69.865783][ T4355] el0t_64_sync_handler+0xcc/0xe4 [ 69.867274][ T4355] el0t_64_sync+0x1a0/0x1a4 [ 69.868738][ T4355] [ 69.868738][ T4355] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 69.871027][ T4355] __mutex_lock_common+0x194/0x1edc [ 69.872695][ T4355] mutex_lock_nested+0xac/0x11c [ 69.874289][ T4355] bg_scan_update+0x48/0x3d0 [ 69.875749][ T4355] process_one_work+0x79c/0x1140 [ 69.877311][ T4355] worker_thread+0x8f4/0x101c [ 69.878884][ T4355] kthread+0x374/0x454 [ 69.880138][ T4355] ret_from_fork+0x10/0x20 [ 69.881479][ T4355] [ 69.881479][ T4355] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 69.884402][ T4355] __lock_acquire+0x2928/0x651c [ 69.886009][ T4355] lock_acquire+0x1f4/0x620 [ 69.887403][ T4355] __flush_work+0xf4/0x1bc [ 69.888734][ T4355] __cancel_work_timer+0x2ec/0x448 [ 69.890236][ T4355] cancel_work_sync+0x24/0x38 [ 69.891667][ T4355] hci_request_cancel_all+0xbc/0x2d0 [ 69.893316][ T4355] hci_dev_do_close+0x54/0x105c [ 69.894917][ T4355] hci_rfkill_set_block+0xdc/0x1d0 [ 69.896458][ T4355] rfkill_set_block+0x18c/0x374 [ 69.897938][ T4355] rfkill_fop_write+0x4a4/0x5cc [ 69.899498][ T4355] vfs_write+0x280/0xa2c [ 69.900816][ T4355] ksys_write+0x120/0x210 [ 69.902172][ T4355] __arm64_sys_write+0x7c/0x90 [ 69.903703][ T4355] invoke_syscall+0x98/0x2b8 [ 69.905142][ T4355] el0_svc_common+0x138/0x258 [ 69.906638][ T4355] do_el0_svc+0x58/0x14c [ 69.907998][ T4355] el0_svc+0x78/0x1e0 [ 69.909196][ T4355] el0t_64_sync_handler+0xcc/0xe4 [ 69.910755][ T4355] el0t_64_sync+0x1a0/0x1a4 [ 69.912127][ T4355] [ 69.912127][ T4355] other info that might help us debug this: [ 69.912127][ T4355] [ 69.914967][ T4355] Chain exists of: [ 69.914967][ T4355] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 69.914967][ T4355] [ 69.919285][ T4355] Possible unsafe locking scenario: [ 69.919285][ T4355] [ 69.921274][ T4355] CPU0 CPU1 [ 69.922743][ T4355] ---- ---- [ 69.924209][ T4355] lock(rfkill_global_mutex); [ 69.925528][ T4355] lock(&data->open_mutex); [ 69.927507][ T4355] lock(rfkill_global_mutex); [ 69.929571][ T4355] lock((work_completion)(&hdev->bg_scan_update)); [ 69.931370][ T4355] [ 69.931370][ T4355] *** DEADLOCK *** [ 69.931370][ T4355] [ 69.933616][ T4355] 1 lock held by syz.3.73/4355: [ 69.935021][ T4355] #0: ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 69.937894][ T4355] [ 69.937894][ T4355] stack backtrace: [ 69.939539][ T4355] CPU: 1 PID: 4355 Comm: syz.3.73 Not tainted 5.15.185-syzkaller #0 [ 69.941745][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.944498][ T4355] Call trace: [ 69.945430][ T4355] dump_backtrace+0x0/0x43c [ 69.946666][ T4355] show_stack+0x2c/0x3c [ 69.947814][ T4355] __dump_stack+0x30/0x40 [ 69.949031][ T4355] dump_stack_lvl+0xf8/0x160 [ 69.950367][ T4355] dump_stack+0x1c/0x5c [ 69.951571][ T4355] print_circular_bug+0x148/0x1b0 [ 69.952997][ T4355] check_noncircular+0x240/0x2d4 [ 69.954375][ T4355] __lock_acquire+0x2928/0x651c [ 69.955717][ T4355] lock_acquire+0x1f4/0x620 [ 69.957016][ T4355] __flush_work+0xf4/0x1bc [ 69.958179][ T4355] __cancel_work_timer+0x2ec/0x448 [ 69.959680][ T4355] cancel_work_sync+0x24/0x38 [ 69.960961][ T4355] hci_request_cancel_all+0xbc/0x2d0 [ 69.962400][ T4355] hci_dev_do_close+0x54/0x105c [ 69.963827][ T4355] hci_rfkill_set_block+0xdc/0x1d0 [ 69.965282][ T4355] rfkill_set_block+0x18c/0x374 [ 69.966604][ T4355] rfkill_fop_write+0x4a4/0x5cc [ 69.967921][ T4355] vfs_write+0x280/0xa2c [ 69.969091][ T4355] ksys_write+0x120/0x210 [ 69.970327][ T4355] __arm64_sys_write+0x7c/0x90 [ 69.971647][ T4355] invoke_syscall+0x98/0x2b8 [ 69.972882][ T4355] el0_svc_common+0x138/0x258 [ 69.974140][ T4355] do_el0_svc+0x58/0x14c [ 69.975338][ T4355] el0_svc+0x78/0x1e0 [ 69.976499][ T4355] el0t_64_sync_handler+0xcc/0xe4 [ 69.977927][ T4355] el0t_64_sync+0x1a0/0x1a4 [ 70.103783][ T144] block nbd0: Receive control failed (result -32)