last executing test programs: 20.718164628s ago: executing program 2 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(0x0, 0xa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r3 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030300a2030303030303030303030303030303030303030300a4f4741494e1357c17f9431f59b0a4449474954414c3320"], 0xb8) write$proc_mixer(r3, 0x0, 0xc6) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x9, 0x1) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)) ptrace$cont(0x9, r5, 0x10000, 0x0) 17.314358488s ago: executing program 2 (id=34): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x805, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r3, r4, 0x8, 0x0, 0x0, 0xa, 0x81, 0x46d, 0x8, 0x3, 0x0, 0xffffffff, 'syz0\x00'}) shutdown(r4, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x50) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x188, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'veth0_to_hsr\x00', 'macsec0\x00', {0xff}, {}, 0x29, 0x0, 0x20}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x3, 0x8, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffffff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x6, "02faea85e630c91d8aa58f67263587935c17ee73e3e6000789f0ebec8e9e"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) 12.190962348s ago: executing program 1 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000e6000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000070a000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68) mount(0x0, &(0x7f0000002580)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 10.17026879s ago: executing program 3 (id=38): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) inotify_init1(0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r7 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "679f672c00b69e65b0934066fc7c3406caf2c09e33bd50116312e2b00fee650af69b2150ccaa762a3db7ad752fe616e085e991c0436e7e7111238865d27b4e82dcc94700ddd1878b088736009d15f1fa"}, 0xd8) keyctl$describe(0x6, r7, &(0x7f0000000080)=""/72, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000004e40), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10.107762841s ago: executing program 1 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r3, 0x101, 0xc, &(0x7f0000000080)=0x10000, 0x4) 9.093677836s ago: executing program 3 (id=40): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000240)="d51159", 0x3}, {&(0x7f0000000fc0)="2319ea9edb29e1334c08754dedd7ab824c9d18e156662c901343bb384dbefafadd8620378ac017464a900679ecf07cda65fb05780e6a4ea6e4e0a8515be02a7e0953", 0x42}], 0x2, 0x2, 0x1) 8.987041047s ago: executing program 2 (id=41): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$KDSIGACCEPT(r0, 0x800455c9, 0x20000001d) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000500)={0x2, 0x0, @private=0xa010101}, 0x10) 8.965963747s ago: executing program 1 (id=42): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r6, 0xfbff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000440)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) r8 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x16) shmctl$SHM_LOCK(r8, 0xb) 8.852477148s ago: executing program 4 (id=44): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 8.841045128s ago: executing program 3 (id=45): sendmsg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x79, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf}}) socket$netlink(0x10, 0x3, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TCSETAF(r9, 0x5408, &(0x7f0000000000)={0xd51, 0x200, 0xfffb, 0xfff7, 0xf, "625b562886df9e48"}) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x2, 0x101, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1}}) 8.58110078s ago: executing program 2 (id=46): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) io_setup(0x4082, &(0x7f0000000380)) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x0, 0x10}, &(0x7f0000001480), &(0x7f00000014c0)) getresgid(0x0, &(0x7f0000000400), 0xffffffffffffffff) unshare(0x46060480) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e20, 0x1400, @private0, 0x3ff}, {0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x0, {[0x2, 0x3, 0x99, 0x6, 0x500, 0x7, 0x9, 0x7fff]}}, 0x5c) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4) 6.079348494s ago: executing program 4 (id=47): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = fsopen(&(0x7f00000000c0)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3.963639707s ago: executing program 1 (id=48): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x4c466994d56c53cd}, 0x14}}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32], 0x128}, 0x0) 3.888400527s ago: executing program 4 (id=49): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x1c, r1, 0x701, 0x70bd2b, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) 3.865051707s ago: executing program 0 (id=50): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="711f2abf2d0c383d5264df6f5dd336", 0xf}}, 0x0) recvmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x40000000000019e, 0x142, 0x0) 3.718044758s ago: executing program 3 (id=51): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 3.717874058s ago: executing program 4 (id=52): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x300, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.710099828s ago: executing program 2 (id=53): socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary) r4 = socket$key(0xf, 0x3, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x3}, {0x2000000000000000}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x3, 0x2, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x520, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 3.42310582s ago: executing program 0 (id=54): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8003, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x1, 0x101, 0x5, {0x6, 0xfffff4f8, 0x770d0365, 0xb9c5a9dd}}) 1.515643741s ago: executing program 4 (id=55): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f3", 0x64a, 0x800, &(0x7f0000000400)={0x11, 0x15, r2, 0x1, 0x0, 0x6, @local}, 0x14) 1.490432132s ago: executing program 3 (id=56): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) 1.382996062s ago: executing program 1 (id=57): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x5af1fa7526395e56, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x1a0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@delneigh={0x30, 0x1a, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x0, 0xc6}}]}, 0x78}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f00000003c0)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.382776152s ago: executing program 0 (id=58): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x4210, r0, 0x10000, 0x0) 1.326553642s ago: executing program 4 (id=59): write(0xffffffffffffffff, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/259], 0x119) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000020"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="97003c", 0x4000}, {&(0x7f0000000000)="987aa19a2e0c51e9ddefe01dba3369a8ecbbee78da6ebb008c", 0x19}], 0x2) 1.311886023s ago: executing program 3 (id=60): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYRES8], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.083177754s ago: executing program 0 (id=61): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000006e80), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 209.797389ms ago: executing program 2 (id=62): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000d00)={0x0, 'macvtap0\x00', {0x4}, 0xd}) 150.841999ms ago: executing program 0 (id=63): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000740)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001}) 246.8µs ago: executing program 1 (id=64): unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 0s ago: executing program 0 (id=65): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, r3, 0x3, 0x0, 0x0, 0x7, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0x4cab, 0x7, 0x1000, 0x0, 0x10, 0xf9, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. [ 44.409415][ T4010] cgroup: Unknown subsys name 'net' [ 44.669712][ T4010] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 45.081324][ T4010] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 46.971313][ T4021] chnl_net:caif_netlink_parms(): no params data found [ 47.016701][ T4022] chnl_net:caif_netlink_parms(): no params data found [ 47.038611][ T4030] chnl_net:caif_netlink_parms(): no params data found [ 47.084678][ T4027] chnl_net:caif_netlink_parms(): no params data found [ 47.136307][ T4031] chnl_net:caif_netlink_parms(): no params data found [ 47.169697][ T4021] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.171413][ T4021] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.174821][ T4021] device bridge_slave_0 entered promiscuous mode [ 47.181643][ T4021] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.183765][ T4021] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.186113][ T4021] device bridge_slave_1 entered promiscuous mode [ 47.226671][ T4022] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.228447][ T4022] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.230892][ T4022] device bridge_slave_0 entered promiscuous mode [ 47.234086][ T4030] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.235731][ T4030] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.237939][ T4030] device bridge_slave_0 entered promiscuous mode [ 47.262756][ T4022] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.264601][ T4022] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.267106][ T4022] device bridge_slave_1 entered promiscuous mode [ 47.269249][ T4030] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.270902][ T4030] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.275017][ T4030] device bridge_slave_1 entered promiscuous mode [ 47.281889][ T4021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.284993][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.286614][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.289154][ T4027] device bridge_slave_0 entered promiscuous mode [ 47.320617][ T4021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.323267][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.325167][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.327546][ T4027] device bridge_slave_1 entered promiscuous mode [ 47.366785][ T4022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.370597][ T4030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.373358][ T4031] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.375042][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.377454][ T4031] device bridge_slave_0 entered promiscuous mode [ 47.393708][ T4022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.397333][ T4030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.399574][ T4031] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.401262][ T4031] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.403903][ T4031] device bridge_slave_1 entered promiscuous mode [ 47.408118][ T4021] team0: Port device team_slave_0 added [ 47.411410][ T4027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.415693][ T4027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.448224][ T4021] team0: Port device team_slave_1 added [ 47.468508][ T4022] team0: Port device team_slave_0 added [ 47.482523][ T4031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.486596][ T4031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.496757][ T4022] team0: Port device team_slave_1 added [ 47.500552][ T4027] team0: Port device team_slave_0 added [ 47.505140][ T4027] team0: Port device team_slave_1 added [ 47.520520][ T4030] team0: Port device team_slave_0 added [ 47.538798][ T4021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.540486][ T4021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.547300][ T4021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.551383][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.559651][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.566174][ T4027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.569976][ T4030] team0: Port device team_slave_1 added [ 47.571978][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.573891][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.579843][ T4027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.585018][ T4031] team0: Port device team_slave_0 added [ 47.603380][ T4021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.604947][ T4021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.610787][ T4021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.621362][ T4022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.623642][ T4022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.629459][ T4022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.640900][ T4031] team0: Port device team_slave_1 added [ 47.645732][ T4022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.647445][ T4022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.653517][ T4022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.683551][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.685184][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.691173][ T4030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.694902][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.696910][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.703201][ T4031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.708843][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.710509][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.716717][ T4031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.728848][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.730453][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.736849][ T4030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.800692][ T4027] device hsr_slave_0 entered promiscuous mode [ 47.852582][ T4027] device hsr_slave_1 entered promiscuous mode [ 48.004337][ T4031] device hsr_slave_0 entered promiscuous mode [ 48.052578][ T4031] device hsr_slave_1 entered promiscuous mode [ 48.102407][ T4031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.104405][ T4031] Cannot create hsr debugfs directory [ 48.164368][ T4021] device hsr_slave_0 entered promiscuous mode [ 48.212543][ T4021] device hsr_slave_1 entered promiscuous mode [ 48.252196][ T4021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.253967][ T4021] Cannot create hsr debugfs directory [ 48.314199][ T4022] device hsr_slave_0 entered promiscuous mode [ 48.372516][ T4022] device hsr_slave_1 entered promiscuous mode [ 48.432209][ T4022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.434095][ T4022] Cannot create hsr debugfs directory [ 48.504498][ T4030] device hsr_slave_0 entered promiscuous mode [ 48.552600][ T4030] device hsr_slave_1 entered promiscuous mode [ 48.602221][ T4030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.604087][ T4030] Cannot create hsr debugfs directory [ 48.735669][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 48.737578][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 48.738995][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 48.740394][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 48.812402][ T1534] Bluetooth: hci4: command 0x0409 tx timeout [ 48.906103][ T4027] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.954620][ T4027] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.996194][ T4027] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.044199][ T4027] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.094101][ T4030] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.147357][ T4030] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.190428][ T4030] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.227852][ T4030] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.325475][ T4022] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.354307][ T4022] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.414444][ T4022] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.454217][ T4022] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.544460][ T4021] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.597632][ T4021] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.634398][ T4021] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.665086][ T4021] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.731844][ T4030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.743092][ T4031] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.779880][ T4031] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.817639][ T4027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.826008][ T4031] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 49.878958][ T4031] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.929092][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.932873][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.935488][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.937755][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.947598][ T4030] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.952749][ T4027] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.993663][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.996213][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.998845][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.000780][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.004127][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.007674][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.009817][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.011523][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.015481][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.018432][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.043765][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.046390][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.048801][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.050452][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.053203][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.056340][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.058684][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.060319][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.065138][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.068881][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.071626][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.075068][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.091356][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.096936][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.099447][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.102022][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.104999][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.107506][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.109959][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.113528][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.138580][ T4022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.140498][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.143698][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.146185][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.148625][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.155001][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.157539][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.176441][ T4030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.179991][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.196421][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.198822][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.201297][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.204746][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.220162][ T4022] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.224630][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.226893][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.235414][ T4021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.239020][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.250713][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.255643][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.257857][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.259619][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.266410][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.300292][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.302738][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.304885][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.307172][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.309296][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.311133][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.320301][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.325401][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.328347][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.331500][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.345382][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.348013][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.351033][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.357179][ T4021] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.383670][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.386188][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.388473][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.390939][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.400559][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.402364][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.406665][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.419845][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.426749][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.429214][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.448736][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.450737][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.453099][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.455736][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.458027][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.459704][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.461704][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.479652][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.486029][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.488552][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.490807][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.496093][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.498235][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.504497][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.514718][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.531769][ T4027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.534686][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.537221][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.539626][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.541246][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.553510][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.593390][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.596821][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.599389][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.601842][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.605734][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.607375][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.609581][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.613170][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.615954][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.618683][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.621025][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.631512][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.634471][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.658592][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.661153][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.665019][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.667802][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.669721][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.673960][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.676675][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.695071][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.697435][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.699940][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.703224][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.706564][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.710887][ T4022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.726764][ T4021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.730133][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.735154][ T4030] device veth0_vlan entered promiscuous mode [ 50.737748][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.740301][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.743992][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.777770][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.780496][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.792488][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.795318][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.797811][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.800254][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.806093][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.808414][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.812786][ T4012] Bluetooth: hci0: command 0x041b tx timeout [ 50.814979][ T4012] Bluetooth: hci1: command 0x041b tx timeout [ 50.814999][ T4027] device veth0_vlan entered promiscuous mode [ 50.816541][ T4012] Bluetooth: hci3: command 0x041b tx timeout [ 50.819335][ T4012] Bluetooth: hci2: command 0x041b tx timeout [ 50.834444][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.836987][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.839359][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.843247][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.848017][ T4030] device veth1_vlan entered promiscuous mode [ 50.860116][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.866145][ T4027] device veth1_vlan entered promiscuous mode [ 50.892934][ T4012] Bluetooth: hci4: command 0x041b tx timeout [ 50.921636][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.924198][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.927655][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.929958][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.933876][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.935837][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.937676][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.940118][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.947026][ T4021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.967620][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.969920][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.975212][ T4022] device veth0_vlan entered promiscuous mode [ 50.990928][ T4027] device veth0_macvtap entered promiscuous mode [ 51.007835][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.010900][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.014476][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.029559][ T4030] device veth0_macvtap entered promiscuous mode [ 51.034602][ T4027] device veth1_macvtap entered promiscuous mode [ 51.038527][ T4022] device veth1_vlan entered promiscuous mode [ 51.040678][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.043833][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.046431][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.049020][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.051567][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.056619][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.060403][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.096303][ T4030] device veth1_macvtap entered promiscuous mode [ 51.098888][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.101754][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.111027][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.114625][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.117254][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.119670][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.125176][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.127076][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.131393][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.136045][ T4021] device veth0_vlan entered promiscuous mode [ 51.146357][ T4021] device veth1_vlan entered promiscuous mode [ 51.148756][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.151632][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.155750][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.162024][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.170693][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.184238][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.186729][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.205187][ T4027] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.207432][ T4027] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.209387][ T4027] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.211365][ T4027] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.234760][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.237254][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.240820][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.260273][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.262819][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.265418][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.282805][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.285399][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.289481][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.291450][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.297330][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.299753][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.304150][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.308642][ T4022] device veth0_macvtap entered promiscuous mode [ 51.318828][ T4022] device veth1_macvtap entered promiscuous mode [ 51.348812][ T4030] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.350912][ T4030] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.368203][ T4030] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.370480][ T4030] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.378022][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.380618][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.388135][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.390726][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.407288][ T4021] device veth0_macvtap entered promiscuous mode [ 51.423826][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.426359][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.428619][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.431021][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.435290][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.445235][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.447637][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.450245][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.454955][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.457674][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.472619][ T4021] device veth1_macvtap entered promiscuous mode [ 51.505919][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.506618][ T377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.508437][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.510353][ T377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.515613][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.518024][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.524023][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.526814][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.529472][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.563608][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.567079][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.569630][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.573524][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.575935][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.578367][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.580798][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.584677][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.587331][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.590956][ T4021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.599855][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.604432][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.606823][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.609211][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.611514][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.614228][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.617890][ T4021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.623488][ T4022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.625744][ T4022] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.627881][ T4022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.630059][ T4022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.641707][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.644352][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.646872][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.650968][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.655258][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.657863][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.666636][ T4031] device veth0_vlan entered promiscuous mode [ 51.669618][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.671724][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.676821][ T4021] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.678955][ T4021] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.681090][ T4021] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.683253][ T4021] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.688793][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.732037][ T4031] device veth1_vlan entered promiscuous mode [ 51.872541][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.875068][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.877763][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.881200][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.910729][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.913375][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.917365][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.926687][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.928584][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.931488][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.011766][ T4031] device veth0_macvtap entered promiscuous mode [ 52.035334][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.037302][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.040222][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.044074][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.092096][ T4031] device veth1_macvtap entered promiscuous mode [ 52.110509][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.113866][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.116140][ T377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.118007][ T377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.864459][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.867621][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.871042][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.890429][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.898106][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.900451][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.905345][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 52.907169][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 52.908725][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 52.910183][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 52.913118][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.915698][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.918148][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.920511][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.923565][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.929651][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.944718][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.947216][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.949379][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.951860][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.954809][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.957231][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.959648][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.962655][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.966357][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.971459][ T4031] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.974284][ T4012] Bluetooth: hci4: command 0x040f tx timeout [ 52.978371][ T4031] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.980451][ T4031] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.983040][ T4031] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.038636][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.071644][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.078755][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.081411][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.221464][ T352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.224019][ T352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.240485][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.784897][ T4110] binder: 4107:4110 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 53.788245][ T4110] binder: 4110 RLIMIT_NICE not set [ 54.311272][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.317095][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.319929][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.341338][ T377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.355892][ T377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.358763][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.973216][ T4012] Bluetooth: hci0: command 0x0419 tx timeout [ 54.973981][ T4012] Bluetooth: hci1: command 0x0419 tx timeout [ 54.974314][ T4012] Bluetooth: hci3: command 0x0419 tx timeout [ 54.974587][ T4012] Bluetooth: hci2: command 0x0419 tx timeout [ 55.054377][ T4012] Bluetooth: hci4: command 0x0419 tx timeout [ 55.510001][ T4135] udc-core: couldn't find an available UDC or it's busy [ 55.511890][ T4135] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.518957][ T4135] input: syz1 as /devices/virtual/input/input2 [ 57.409689][ T4144] udc-core: couldn't find an available UDC or it's busy [ 57.411278][ T4144] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.151686][ T4173] cgroup: Need name or subsystem set [ 64.043317][ T4190] syz.4.26 uses obsolete (PF_INET,SOCK_PACKET) [ 64.310990][ T4198] netlink: 'syz.0.29': attribute type 27 has an invalid length. [ 64.339686][ T4198] device veth0_macvtap left promiscuous mode [ 66.902554][ T4204] sched: RT throttling activated [ 69.920207][ T1959] cfg80211: failed to load regulatory.db [ 70.380544][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.382411][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.199476][ T4256] udc-core: couldn't find an available UDC or it's busy [ 77.201071][ T4256] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 81.165248][ T4274] syz.0.43 (4274): drop_caches: 2 [ 81.169752][ T4281] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 81.242716][ T4274] syz.0.43 (4274): drop_caches: 2 [ 84.860988][ T4329] udc-core: couldn't find an available UDC or it's busy [ 84.876352][ T4329] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.034277][ T4333] netlink: 'syz.1.57': attribute type 3 has an invalid length. [ 86.067841][ T4331] [ 86.068460][ T4331] ====================================================== [ 86.070048][ T4331] WARNING: possible circular locking dependency detected [ 86.071667][ T4331] 5.15.173-syzkaller #0 Not tainted [ 86.072834][ T4331] ------------------------------------------------------ [ 86.074421][ T4331] syz.3.60/4331 is trying to acquire lock: [ 86.075748][ T4331] ffff0000d90c4b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 86.078335][ T4331] [ 86.078335][ T4331] but task is already holding lock: [ 86.080081][ T4331] ffff0000d90c4ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x64/0x1060 [ 86.082360][ T4331] [ 86.082360][ T4331] which lock already depends on the new lock. [ 86.082360][ T4331] [ 86.084899][ T4331] [ 86.084899][ T4331] the existing dependency chain (in reverse order) is: [ 86.087011][ T4331] [ 86.087011][ T4331] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 86.088700][ T4331] __mutex_lock_common+0x194/0x2154 [ 86.090047][ T4331] mutex_lock_nested+0xa4/0xf8 [ 86.091253][ T4331] hci_dev_do_close+0x64/0x1060 [ 86.092615][ T4331] hci_rfkill_set_block+0xdc/0x1d0 [ 86.093865][ T4331] rfkill_set_block+0x18c/0x37c [ 86.095087][ T4331] rfkill_fop_write+0x594/0x750 [ 86.096341][ T4331] vfs_write+0x280/0xb44 [ 86.097497][ T4331] ksys_write+0x15c/0x26c [ 86.098610][ T4331] __arm64_sys_write+0x7c/0x90 [ 86.099896][ T4331] invoke_syscall+0x98/0x2b8 [ 86.101191][ T4331] el0_svc_common+0x138/0x258 [ 86.102387][ T4331] do_el0_svc+0x58/0x14c [ 86.103551][ T4331] el0_svc+0x7c/0x1f0 [ 86.104542][ T4331] el0t_64_sync_handler+0x84/0xe4 [ 86.105748][ T4331] el0t_64_sync+0x1a0/0x1a4 [ 86.106948][ T4331] [ 86.106948][ T4331] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 86.108919][ T4331] __mutex_lock_common+0x194/0x2154 [ 86.110314][ T4331] mutex_lock_nested+0xa4/0xf8 [ 86.111560][ T4331] rfkill_register+0x44/0x7a4 [ 86.112740][ T4331] hci_register_dev+0x3e0/0x880 [ 86.114088][ T4331] vhci_create_device+0x2c4/0x568 [ 86.115375][ T4331] vhci_write+0x318/0x3b8 [ 86.116509][ T4331] vfs_write+0x884/0xb44 [ 86.117627][ T4331] ksys_write+0x15c/0x26c [ 86.118741][ T4331] __arm64_sys_write+0x7c/0x90 [ 86.119993][ T4331] invoke_syscall+0x98/0x2b8 [ 86.121179][ T4331] el0_svc_common+0x138/0x258 [ 86.122396][ T4331] do_el0_svc+0x58/0x14c [ 86.123477][ T4331] el0_svc+0x7c/0x1f0 [ 86.124503][ T4331] el0t_64_sync_handler+0x84/0xe4 [ 86.125775][ T4331] el0t_64_sync+0x1a0/0x1a4 [ 86.127007][ T4331] [ 86.127007][ T4331] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 86.128864][ T4331] __mutex_lock_common+0x194/0x2154 [ 86.130177][ T4331] mutex_lock_nested+0xa4/0xf8 [ 86.131485][ T4331] vhci_send_frame+0x8c/0x10c [ 86.132612][ T4331] hci_send_frame+0x194/0x2f0 [ 86.133869][ T4331] hci_tx_work+0x9ac/0x16cc [ 86.135062][ T4331] process_one_work+0x790/0x11b8 [ 86.136303][ T4331] worker_thread+0x910/0x1034 [ 86.137592][ T4331] kthread+0x37c/0x45c [ 86.138690][ T4331] ret_from_fork+0x10/0x20 [ 86.139839][ T4331] [ 86.139839][ T4331] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 86.142141][ T4331] __lock_acquire+0x32d4/0x7638 [ 86.143383][ T4331] lock_acquire+0x240/0x77c [ 86.144523][ T4331] __flush_work+0xf8/0x1c0 [ 86.145520][ T4331] flush_work+0x24/0x38 [ 86.146561][ T4331] hci_dev_do_close+0x16c/0x1060 [ 86.147884][ T4331] hci_rfkill_set_block+0xdc/0x1d0 [ 86.149151][ T4331] rfkill_set_block+0x18c/0x37c [ 86.150480][ T4331] rfkill_fop_write+0x594/0x750 [ 86.151969][ T4331] vfs_write+0x280/0xb44 [ 86.153104][ T4331] ksys_write+0x15c/0x26c [ 86.154226][ T4331] __arm64_sys_write+0x7c/0x90 [ 86.155495][ T4331] invoke_syscall+0x98/0x2b8 [ 86.156701][ T4331] el0_svc_common+0x138/0x258 [ 86.157945][ T4331] do_el0_svc+0x58/0x14c [ 86.159152][ T4331] el0_svc+0x7c/0x1f0 [ 86.160200][ T4331] el0t_64_sync_handler+0x84/0xe4 [ 86.161554][ T4331] el0t_64_sync+0x1a0/0x1a4 [ 86.162786][ T4331] [ 86.162786][ T4331] other info that might help us debug this: [ 86.162786][ T4331] [ 86.165252][ T4331] Chain exists of: [ 86.165252][ T4331] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 86.165252][ T4331] [ 86.168871][ T4331] Possible unsafe locking scenario: [ 86.168871][ T4331] [ 86.170570][ T4331] CPU0 CPU1 [ 86.171821][ T4331] ---- ---- [ 86.173244][ T4331] lock(&hdev->req_lock); [ 86.174259][ T4331] lock(rfkill_global_mutex); [ 86.175879][ T4331] lock(&hdev->req_lock); [ 86.177651][ T4331] lock((work_completion)(&hdev->tx_work)); [ 86.179058][ T4331] [ 86.179058][ T4331] *** DEADLOCK *** [ 86.179058][ T4331] [ 86.180911][ T4331] 2 locks held by syz.3.60/4331: [ 86.182113][ T4331] #0: ffff800016e77268 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 86.184487][ T4331] #1: ffff0000d90c4ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x64/0x1060 [ 86.186752][ T4331] [ 86.186752][ T4331] stack backtrace: [ 86.188087][ T4331] CPU: 1 PID: 4331 Comm: syz.3.60 Not tainted 5.15.173-syzkaller #0 [ 86.190045][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 86.192328][ T4331] Call trace: [ 86.193031][ T4331] dump_backtrace+0x0/0x530 [ 86.193971][ T4331] show_stack+0x2c/0x3c [ 86.194909][ T4331] dump_stack_lvl+0x108/0x170 [ 86.196002][ T4331] dump_stack+0x1c/0x58 [ 86.196968][ T4331] print_circular_bug+0x150/0x1b8 [ 86.198110][ T4331] check_noncircular+0x2cc/0x378 [ 86.199253][ T4331] __lock_acquire+0x32d4/0x7638 [ 86.200344][ T4331] lock_acquire+0x240/0x77c [ 86.201395][ T4331] __flush_work+0xf8/0x1c0 [ 86.202378][ T4331] flush_work+0x24/0x38 [ 86.203389][ T4331] hci_dev_do_close+0x16c/0x1060 [ 86.204507][ T4331] hci_rfkill_set_block+0xdc/0x1d0 [ 86.205697][ T4331] rfkill_set_block+0x18c/0x37c [ 86.206873][ T4331] rfkill_fop_write+0x594/0x750 [ 86.207955][ T4331] vfs_write+0x280/0xb44 [ 86.208913][ T4331] ksys_write+0x15c/0x26c [ 86.209851][ T4331] __arm64_sys_write+0x7c/0x90 [ 86.210911][ T4331] invoke_syscall+0x98/0x2b8 [ 86.211995][ T4331] el0_svc_common+0x138/0x258 [ 86.213001][ T4331] do_el0_svc+0x58/0x14c [ 86.214093][ T4331] el0_svc+0x7c/0x1f0 [ 86.215010][ T4331] el0t_64_sync_handler+0x84/0xe4 [ 86.216188][ T4331] el0t_64_sync+0x1a0/0x1a4 [ 86.217294][ C1] vkms_vblank_simulate: vblank timer overrun