last executing test programs: 19.902933618s ago: executing program 1 (id=231): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x40004) 19.656951297s ago: executing program 4 (id=233): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000033922d2fd04dd3e77e3e6a94a8dd96e2dbb7f618e59e870000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000ffffffff00"/24], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_expedited', 0x48a82, 0x9) write$P9_RGETLOCK(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="2d000000370100000700000000000000090000000069630097c1289a111e8e46680826462755cf3df4de39ef9fc049f1e90de94ac3041f27307c8260f46787", @ANYRES32=0x0, @ANYBLOB="0f006e65746c696e6b5f65787461636b00"], 0x2d) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = fanotify_init(0x200, 0x40000) fanotify_mark(r3, 0x1, 0x48000003, r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000e0332faa000000000095000000000000001bdca6340087dd5471a9e2c8203225d6a756496706c611b521552839ca5bec1510972611b7c70b4182fa8f7cef81b3b1dde5a61cc1eebfe05ccffa25bc714031c160a1a7e631f4a625a926ca3d5b7885bcb1bd20a7d6aa726619865cc2ccf624572dde4206f10912aa0e759eeb4791a95fdd01ef522a25ca24936a1597"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[], 0x118) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) 16.76621769s ago: executing program 4 (id=235): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000005c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb80xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000007f721185d1bd3a0ddc9b4f4fb93aedd0a03ab11a8cb57ca3b63a1566d7b8c329386274571eb19f"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r6, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000003c0)=[0x0], 0x0, 0xa7, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xe1, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) sendfile(r2, r0, &(0x7f0000000000)=0x9, 0x3fffff) 16.762686601s ago: executing program 1 (id=237): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4662, 0x400, 0x0, 0x284}, &(0x7f00000004c0), &(0x7f0000000280)) io_uring_enter(r5, 0x40f5, 0x1f18, 0xa5, 0x0, 0x0) r6 = fsmount(r0, 0x1, 0x4) openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) 14.665800539s ago: executing program 2 (id=242): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f00000002c0)=@qipcrtr={0x2a, 0x2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x10, 0x1, 0x25, 0x5}}], 0x10}, 0x204c012) 14.484639934s ago: executing program 2 (id=243): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 11.487538895s ago: executing program 2 (id=247): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000033922d2fd04dd3e77e3e6a94a8dd96e2dbb7f618e59e870000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000ffffffff00"/24], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_expedited', 0x48a82, 0x9) write$P9_RGETLOCK(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="2d000000370100000700000000000000090000000069630097c1289a111e8e46680826462755cf3df4de39ef9fc049f1e90de94ac3041f27307c8260f46787", @ANYRES32=0x0, @ANYBLOB="0f006e65746c696e6b5f65787461636b00"], 0x2d) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = fanotify_init(0x200, 0x40000) fanotify_mark(r3, 0x1, 0x48000003, r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000e0332faa000000000095000000000000001bdca6340087dd5471a9e2c8203225d6a756496706c611b521552839ca5bec1510972611b7c70b4182fa8f7cef81b3b1dde5a61cc1eebfe05ccffa25bc714031c160a1a7e631f4a625a926ca3d5b7885bcb1bd20a7d6aa726619865cc2ccf624572dde4206f10912aa0e759eeb4791a95fdd01ef522a25ca24936a1597"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[], 0x118) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) 11.487147855s ago: executing program 4 (id=248): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x2c, 0x0, 0x0, 0xa78, &(0x7f00000004c0)=[r0, r0, r0], 0x3, 0x0, 0x0, {0x0, r3}}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180)=0x7, 0x0, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d63, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000e400)={0x2020}, 0x2b0e413b) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(0xffffffffffffffff, 0xda90) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 11.486933005s ago: executing program 1 (id=255): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 10.116770846s ago: executing program 3 (id=249): close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019540)=""/102392, 0x18ff8) rt_sigprocmask(0x1, &(0x7f00000000c0)={[0x7]}, 0x0, 0x8) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x10, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) io_uring_enter(r2, 0x47f6, 0xb277, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x0) 9.881305565s ago: executing program 0 (id=250): r0 = socket(0x11, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001b40)=[{{&(0x7f00000003c0)=@caif=@dgm={0x25, 0x5, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000000)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="ddc7", 0x2}, {&(0x7f0000000ec0)="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", 0x512}], 0x2}}], 0x2, 0x20044005) 9.269755004s ago: executing program 4 (id=251): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x6000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 9.18784678s ago: executing program 1 (id=252): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) recvmmsg$unix(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) 9.149019254s ago: executing program 2 (id=253): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0xffffffffffffffff, 0x3, 0x5003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) landlock_create_ruleset(0x0, 0x0, 0x4) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[], 0x2c}}, 0x64000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20302, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) 7.321728691s ago: executing program 2 (id=254): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r0, 0x8948, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002840)={0x1, &(0x7f0000000100)=[{0x7, 0x0, 0x0, 0x4}]}, 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40044149, &(0x7f0000000040)=0x7f) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.309258882s ago: executing program 0 (id=256): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, 0x0, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) 7.135045365s ago: executing program 4 (id=257): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000005c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb80xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000007f721185d1bd3a0ddc9b4f4fb93aedd0a03ab11a8cb57ca3b63a1566d7b8c329386274571eb19f"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r6, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000003c0)=[0x0], 0x0, 0xa7, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xe1, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) sendfile(r2, r0, &(0x7f0000000000)=0x9, 0x3fffff) 6.721613519s ago: executing program 2 (id=258): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f00000005c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb80xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) 4.59809996s ago: executing program 0 (id=259): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65756c9620757365723a73797a20"], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002840)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x0, 0x4}]}, 0x8) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000300)={0xf5, ""/245}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="400f217566b8bf008ee066baa100ed460f01f866b829018ec8dc91d9000000c744240000080000c744240200000000c7442406000000000f011c24740065f3a566baf80cb8969d0b82ef66bafc0c66ed", 0x50}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.440478683s ago: executing program 3 (id=260): r0 = socket$inet6(0xa, 0x3, 0x3c) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x39, 0x2c, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d}], "d5"}}}}}}, 0x6f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c0002800800014000000001"], 0x98}}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xfdef}], 0x1) 4.093805411s ago: executing program 3 (id=261): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) 3.996606678s ago: executing program 0 (id=262): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x2c, 0x0, 0x0, 0xa78, &(0x7f00000004c0)=[r0, r0, r0], 0x3, 0x0, 0x0, {0x0, r3}}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180)=0x7, 0x0, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d63, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000e400)={0x2020}, 0x2b0e413b) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(0xffffffffffffffff, 0xda90) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.820286562s ago: executing program 3 (id=263): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 3.577581942s ago: executing program 3 (id=264): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 330.609433ms ago: executing program 0 (id=265): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000033922d2fd04dd3e77e3e6a94a8dd96e2dbb7f618e59e870000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000ffffffff00"/24], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_expedited', 0x48a82, 0x9) write$P9_RGETLOCK(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="2d000000370100000700000000000000090000000069630097c1289a111e8e46680826462755cf3df4de39ef9fc049f1e90de94ac3041f27307c8260f46787", @ANYRES32=0x0, @ANYBLOB="0f006e65746c696e6b5f65787461636b00"], 0x2d) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = fanotify_init(0x200, 0x40000) fanotify_mark(r3, 0x1, 0x48000003, r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000e0332faa000000000095000000000000001bdca6340087dd5471a9e2c8203225d6a756496706c611b521552839ca5bec1510972611b7c70b4182fa8f7cef81b3b1dde5a61cc1eebfe05ccffa25bc714031c160a1a7e631f4a625a926ca3d5b7885bcb1bd20a7d6aa726619865cc2ccf624572dde4206f10912aa0e759eeb4791a95fdd01ef522a25ca24936a1597"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[], 0x118) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) 330.287213ms ago: executing program 1 (id=266): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c00058005001940"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) 327.182904ms ago: executing program 3 (id=267): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x6000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 158.736147ms ago: executing program 1 (id=268): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000200)=[{0x0, 0x0, 0x1, &(0x7f0000000540)="82"}], 0x1}) 76.137884ms ago: executing program 0 (id=269): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, 0x0, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) 0s ago: executing program 4 (id=270): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)=@can_delroute={0x13, 0x19, 0x9e375f50053bd037, 0x70bd28, 0x25dfdbfe, {0x1d, 0x1, 0x2}, [@CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, "c0bc6bbcf086168b"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8045}, 0x40000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) syz_open_procfs(r2, &(0x7f0000000040)='net/connector\x00') r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x1, 0x0, 0x0, 'syz0\x00', 0x1}, 0x6, 0x100, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = gettid() r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r5, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000003000/0x3000)=nil) write$rfkill(r5, &(0x7f0000000080)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000480)="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", 0x15c}], 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0xc000680) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') syz_clone(0xb41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x21}, 0x94) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000001c0)={0x3, &(0x7f0000000100)=[{0x40, 0x8, 0x7, 0x59}, {0x800, 0xff, 0x6, 0x400}, {0x8000, 0x1f, 0xba, 0x5}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.137' (ED25519) to the list of known hosts. syzkaller login: [ 71.749796][ T4175] cgroup: Unknown subsys name 'net' [ 71.904184][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.748882][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.520535][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 75.682799][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 75.715275][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.724519][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.740357][ T4189] device bridge_slave_0 entered promiscuous mode [ 75.761155][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.770772][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.782333][ T4189] device bridge_slave_1 entered promiscuous mode [ 75.883805][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.934571][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.981214][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.995180][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.004813][ T4195] device bridge_slave_0 entered promiscuous mode [ 76.037075][ T4189] team0: Port device team_slave_0 added [ 76.064803][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.076381][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.086776][ T4195] device bridge_slave_1 entered promiscuous mode [ 76.099961][ T4189] team0: Port device team_slave_1 added [ 76.118834][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 76.202933][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 76.227983][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.241729][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.290085][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.307355][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.340409][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.352036][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.399775][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.415236][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 76.435536][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.551482][ T4195] team0: Port device team_slave_0 added [ 76.563642][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.578084][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.592878][ T4194] device bridge_slave_0 entered promiscuous mode [ 76.624470][ T4195] team0: Port device team_slave_1 added [ 76.637682][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.648554][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.661095][ T4194] device bridge_slave_1 entered promiscuous mode [ 76.743951][ T4189] device hsr_slave_0 entered promiscuous mode [ 76.755558][ T4189] device hsr_slave_1 entered promiscuous mode [ 76.780253][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.794781][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.804718][ T4199] device bridge_slave_0 entered promiscuous mode [ 76.820388][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.839399][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.859678][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.870817][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.908256][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.925496][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.936934][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.948627][ T4199] device bridge_slave_1 entered promiscuous mode [ 76.985306][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.996481][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.042381][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.060468][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 77.103846][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.115368][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.129166][ T4198] device bridge_slave_0 entered promiscuous mode [ 77.136159][ T4190] Bluetooth: hci2: command 0x0409 tx timeout [ 77.138733][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 77.165833][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.194760][ T4194] team0: Port device team_slave_0 added [ 77.215070][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.229124][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.243690][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 77.244975][ T4198] device bridge_slave_1 entered promiscuous mode [ 77.256210][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 77.286974][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.332147][ T4194] team0: Port device team_slave_1 added [ 77.373747][ T4195] device hsr_slave_0 entered promiscuous mode [ 77.391600][ T4195] device hsr_slave_1 entered promiscuous mode [ 77.403149][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.417563][ T4195] Cannot create hsr debugfs directory [ 77.477737][ T4199] team0: Port device team_slave_0 added [ 77.506888][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.522635][ T4199] team0: Port device team_slave_1 added [ 77.561809][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.576438][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.635145][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.656189][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.700203][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.713043][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.752762][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.781891][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.792356][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.838639][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.883161][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.894500][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.934766][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.975786][ T4198] team0: Port device team_slave_0 added [ 78.018065][ T4198] team0: Port device team_slave_1 added [ 78.030163][ T4194] device hsr_slave_0 entered promiscuous mode [ 78.041114][ T4194] device hsr_slave_1 entered promiscuous mode [ 78.056424][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.071419][ T4194] Cannot create hsr debugfs directory [ 78.142315][ T4199] device hsr_slave_0 entered promiscuous mode [ 78.151253][ T4199] device hsr_slave_1 entered promiscuous mode [ 78.163198][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.178443][ T4199] Cannot create hsr debugfs directory [ 78.190877][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.203878][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.245253][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.297584][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.308364][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.357983][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.540826][ T4198] device hsr_slave_0 entered promiscuous mode [ 78.553953][ T4198] device hsr_slave_1 entered promiscuous mode [ 78.569390][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.585442][ T4198] Cannot create hsr debugfs directory [ 78.738962][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.757806][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.798777][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.835898][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.967748][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.985423][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.006515][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.020735][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.081913][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.107433][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.136426][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 79.153913][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.180543][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.216524][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 79.241597][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.253807][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 79.296856][ T1111] Bluetooth: hci3: command 0x041b tx timeout [ 79.303850][ T1111] Bluetooth: hci4: command 0x041b tx timeout [ 79.317709][ T4199] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.343271][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.367474][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.400847][ T4199] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.425029][ T4199] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.454092][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.468409][ T4199] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.488023][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.501721][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.522091][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.534341][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.562463][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.578943][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.598298][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.625189][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.640511][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.659619][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.698724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.782454][ T4198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.818447][ T4198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.840199][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.865050][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.893732][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.931319][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.943304][ T4198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.988195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.014876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.032711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.045357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.095365][ T4198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.121250][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.146110][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.187379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.202948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.222384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.238559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.297385][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.317141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.347845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.369927][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.383584][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.407559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.457336][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.481606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.515438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.536720][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.552085][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.629980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.647578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.663324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.691385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.718937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.741042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.776779][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.813351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.853133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.870792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.920369][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.938661][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.963862][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.991058][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.018153][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.034998][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.055868][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.077638][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.096039][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.106260][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.122653][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.148547][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.174793][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.204380][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.216781][ T4252] Bluetooth: hci0: command 0x040f tx timeout [ 81.290446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.315577][ T4212] Bluetooth: hci2: command 0x040f tx timeout [ 81.323854][ T4212] Bluetooth: hci1: command 0x040f tx timeout [ 81.331634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.378886][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.397942][ T1111] Bluetooth: hci4: command 0x040f tx timeout [ 81.436277][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 81.437486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.475567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.524805][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.562286][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.648502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.677132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.698319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.715541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.729983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.760295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.797384][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.817356][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.836521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.855803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.878997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.896039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.912124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.923433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.959793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.013756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.035527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.063584][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.118424][ T4189] device veth0_vlan entered promiscuous mode [ 82.137657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.157829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.177075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.196545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.216490][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.232809][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.243121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.264352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.282802][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.297833][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.313827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.337353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.360178][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.376638][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.397090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.416665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.477038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.491648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.512449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.534938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.554168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.579135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.598064][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.615198][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.634790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.659605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.678426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.695710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.720405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.761897][ T4189] device veth1_vlan entered promiscuous mode [ 82.804624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.855719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.901083][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.938831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.967341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.983704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.020243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.050598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.079531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.101379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.119961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.139034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.163219][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.220949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.274211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.316763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.336147][ T4252] Bluetooth: hci0: command 0x0419 tx timeout [ 83.354021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.414589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.416169][ T4252] Bluetooth: hci1: command 0x0419 tx timeout [ 83.443765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.468348][ T4252] Bluetooth: hci2: command 0x0419 tx timeout [ 83.477858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.512970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.516130][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 83.543355][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.629261][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 83.648414][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.649303][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.704204][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.733457][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.762490][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.775699][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.803591][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.831470][ T4195] device veth0_vlan entered promiscuous mode [ 83.871334][ T4189] device veth0_macvtap entered promiscuous mode [ 83.914958][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.942252][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.975854][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.992185][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.019230][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.060784][ T4195] device veth1_vlan entered promiscuous mode [ 84.079193][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.095434][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.107148][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.142901][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.178539][ T4189] device veth1_macvtap entered promiscuous mode [ 84.202835][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.232212][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.248627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.269711][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.301192][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.363702][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.398387][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.437046][ T4194] device veth0_vlan entered promiscuous mode [ 84.485004][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.518642][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.614192][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.637214][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.659161][ T4195] device veth0_macvtap entered promiscuous mode [ 84.681150][ T4194] device veth1_vlan entered promiscuous mode [ 84.721579][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.742236][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.761247][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.782977][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.804344][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.834595][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.867031][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.898396][ T4195] device veth1_macvtap entered promiscuous mode [ 84.935020][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.993723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.023319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.041588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.062302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.081716][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.096973][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.119218][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.140650][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.219384][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.243502][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.264659][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.285481][ T4194] device veth0_macvtap entered promiscuous mode [ 85.303531][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.323586][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.348092][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.364494][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.398455][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.418382][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.437104][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.455888][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.477564][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.495347][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.507871][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.554080][ T4199] device veth0_vlan entered promiscuous mode [ 85.580001][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.598306][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.638148][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.663545][ T4194] device veth1_macvtap entered promiscuous mode [ 85.700105][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.730289][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.761230][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.782600][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.807738][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.824283][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.877264][ T4199] device veth1_vlan entered promiscuous mode [ 85.943381][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.978729][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.997778][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.019170][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.048779][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.078739][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.100884][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.120648][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.152600][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.199275][ T4198] device veth0_vlan entered promiscuous mode [ 86.230199][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.263241][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.283676][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.314893][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.344197][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.372134][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.389600][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.416451][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.438083][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.535424][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.556963][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.576759][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.609478][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.677863][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.704412][ T4198] device veth1_vlan entered promiscuous mode [ 86.733850][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.742442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.780091][ T7] cfg80211: failed to load regulatory.db [ 86.799865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.823234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.844168][ T4199] device veth0_macvtap entered promiscuous mode [ 86.974113][ T4199] device veth1_macvtap entered promiscuous mode [ 87.077061][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.101760][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.114985][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.140627][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.176951][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.197321][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.227999][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.271917][ T4198] device veth0_macvtap entered promiscuous mode [ 87.338843][ T4198] device veth1_macvtap entered promiscuous mode [ 87.357087][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.416269][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.443226][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.480615][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.482440][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.554631][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.582406][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.632095][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.662849][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.685554][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.718882][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.741992][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.760562][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.780641][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.817120][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.839963][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.866707][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.903071][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.940522][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.966360][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.043565][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.075430][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.100854][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.183968][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.274448][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.317920][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.360015][ T4199] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.380335][ T4199] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.404534][ T4199] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.431206][ T4199] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.483228][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.552537][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.581655][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.618572][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.638899][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.661798][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.697937][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.720205][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.758113][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.800597][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.848453][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.856342][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.899553][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.922235][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.944249][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.975361][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.989630][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.015702][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.039084][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.061456][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.081877][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.099155][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.121194][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.164796][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.184824][ T3342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.200606][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.277117][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.280744][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.314613][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.328451][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.343021][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.399777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.715515][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.739533][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.876596][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 89.897355][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 89.926038][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 89.942845][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 89.956368][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 89.969618][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 89.984187][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 89.997260][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 90.014694][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 90.029781][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 90.139555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.255408][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.323805][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.376983][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.437048][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.474783][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.523846][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.615093][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.631270][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.653147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.311872][ T4342] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 94.477139][ T4347] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8'. [ 95.564777][ T4354] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9'. [ 95.921462][ T4362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 96.211792][ T4366] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.060760][ T4371] sched: RT throttling activated [ 98.397795][ T4373] sctp: failed to load transform for md5: -2 [ 104.789350][ T4467] netlink: 3 bytes leftover after parsing attributes in process `syz.3.47'. [ 105.491091][ T4476] binder: 4475:4476 unknown command 1074553619 [ 105.597054][ T4476] binder: 4475:4476 ioctl c0306201 200000000040 returned -22 [ 105.738474][ T4479] binder: 4475:4479 unknown command 1074553620 [ 105.797878][ T4479] binder: 4475:4479 ioctl c0306201 200000000640 returned -22 [ 107.128225][ T4346] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.436205][ T4346] usb 3-1: Using ep0 maxpacket: 16 [ 107.588977][ T4346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 107.808075][ T4346] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.658105][ T4346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.741292][ T4346] usb 3-1: Product: syz [ 108.770408][ T4346] usb 3-1: Manufacturer: syz [ 108.824585][ T4346] usb 3-1: SerialNumber: syz [ 108.908473][ T4524] device syzkaller0 entered promiscuous mode [ 108.986847][ T4346] usb 3-1: config 0 descriptor?? [ 109.095035][ T4346] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 109.147957][ T4346] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 109.788768][ T4346] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 110.726437][ T4346] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 110.779653][ T4346] em28xx 3-1:0.0: board has no eeprom [ 111.039808][ T4346] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 111.136288][ T4346] em28xx 3-1:0.0: dvb set to bulk mode. [ 111.403920][ T4346] usb 3-1: USB disconnect, device number 2 [ 111.570945][ T4346] em28xx 3-1:0.0: Disconnecting em28xx [ 111.628723][ T4269] em28xx 3-1:0.0: Binding DVB extension [ 111.842651][ T4269] em28xx 3-1:0.0: Registering input extension [ 111.920986][ T4346] em28xx 3-1:0.0: Closing input extension [ 112.991913][ T4346] em28xx 3-1:0.0: Freeing device [ 113.544848][ T4571] netlink: 3 bytes leftover after parsing attributes in process `syz.4.78'. [ 117.463050][ T4599] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 119.541547][ T4619] netlink: 3 bytes leftover after parsing attributes in process `syz.2.103'. [ 122.448427][ T4641] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 123.678712][ T4310] Bluetooth: hci1: command 0x2016 tx timeout [ 125.096094][ T4212] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.548707][ T4212] usb 1-1: config 0 has no interfaces? [ 125.936397][ T4212] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 125.987909][ T4212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.061742][ T4212] usb 1-1: Product: syz [ 126.116090][ T4212] usb 1-1: Manufacturer: syz [ 126.154443][ T4212] usb 1-1: SerialNumber: syz [ 126.216488][ T4212] usb 1-1: config 0 descriptor?? [ 126.946860][ T4269] usb 1-1: USB disconnect, device number 2 [ 127.929313][ T4690] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 129.082370][ T4701] netlink: 3 bytes leftover after parsing attributes in process `syz.1.121'. [ 130.642981][ T4709] capability: warning: `syz.4.127' uses deprecated v2 capabilities in a way that may be insecure [ 131.801051][ T4730] hugetlbfs: syz.4.134 (4730): Using mlock ulimits for SHM_HUGETLB is deprecated [ 132.130348][ T4714] mkiss: ax0: crc mode is auto. [ 132.329103][ T4736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.395317][ T4738] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 132.620489][ T4734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.819556][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.836248][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.496173][ T4309] Bluetooth: hci4: command 0x0405 tx timeout [ 135.486260][ T4758] netlink: 3 bytes leftover after parsing attributes in process `syz.2.150'. [ 136.583292][ T4761] block nbd3: shutting down sockets [ 140.116717][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 140.386236][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 140.548208][ T13] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.631182][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.688689][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.728907][ T4800] netlink: 'syz.4.155': attribute type 4 has an invalid length. [ 140.736561][ T13] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.806511][ T13] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.821954][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.834917][ T4800] netlink: 17 bytes leftover after parsing attributes in process `syz.4.155'. [ 141.306273][ T13] usb 2-1: usb_control_msg returned -32 [ 141.342228][ T13] usbtmc 2-1:16.0: can't read capabilities [ 142.301882][ T13] usb 2-1: USB disconnect, device number 2 [ 147.879648][ T4269] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 149.046864][ T4269] usb 3-1: Using ep0 maxpacket: 8 [ 149.176281][ T4269] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.676229][ T4269] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.751419][ T4269] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.833800][ T4269] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.023425][ T4269] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 150.163048][ T4269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.526281][ T4269] usb 3-1: usb_control_msg returned -32 [ 150.593552][ T4269] usbtmc 3-1:16.0: can't read capabilities [ 153.172691][ T13] usb 3-1: USB disconnect, device number 3 [ 153.446691][ T4904] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 153.454885][ T4904] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 153.462753][ T4904] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 153.476237][ T4904] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 153.484612][ T4904] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 153.496342][ T4904] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 153.504278][ T4904] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 153.518227][ T4904] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 153.527382][ T4904] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 153.540335][ T4904] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 153.550231][ T4904] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 153.559206][ T4904] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 153.567658][ T4904] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 153.581042][ T4904] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 154.317608][ T4901] netlink: 3 bytes leftover after parsing attributes in process `syz.3.183'. [ 159.800201][ T4945] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 159.811478][ T4945] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 159.823475][ T4945] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 159.837808][ T4945] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 159.848526][ T4945] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 159.861904][ T4945] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 159.878299][ T4945] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 159.896177][ T4945] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 159.908332][ T4945] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 159.922881][ T4945] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 159.937220][ T4945] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 159.946408][ T4945] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 159.957323][ T4945] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 159.968563][ T4945] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 163.276500][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 164.176127][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 165.646330][ T21] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.715035][ T21] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.786266][ T21] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.005479][ T21] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.571219][ T21] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.583954][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.676777][ T21] usb 5-1: can't set config #16, error -71 [ 166.700565][ T21] usb 5-1: USB disconnect, device number 2 [ 168.166110][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 168.467323][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 168.646376][ T1108] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 168.680983][ T1108] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 168.785639][ T1108] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.840659][ T1108] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.904060][ T1108] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.996300][ T4994] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 169.006585][ T4994] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 169.017202][ T4994] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 169.025524][ T4994] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 169.039092][ T4994] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 169.047986][ T4994] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 169.056079][ T4994] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 169.063246][ T4994] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 169.072482][ T4994] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 169.082119][ T4994] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 169.092203][ T4994] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 169.101299][ T4994] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 169.110329][ T4994] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 169.131027][ T4994] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 169.955323][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.196376][ T1108] usb 1-1: can't set config #16, error -71 [ 170.253187][ T1108] usb 1-1: USB disconnect, device number 3 [ 173.006151][ T4269] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 173.316198][ T4269] usb 4-1: Using ep0 maxpacket: 8 [ 173.478042][ T4269] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.523557][ T4269] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.567123][ T4269] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.602466][ T4269] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.701809][ T4269] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.756060][ T4269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.776199][ T4269] usb 4-1: usb_control_msg returned -32 [ 175.431498][ T4269] usbtmc 4-1:16.0: can't read capabilities [ 175.987001][ T13] usb 4-1: USB disconnect, device number 2 [ 176.667244][ T5054] netlink: 3 bytes leftover after parsing attributes in process `syz.1.228'. [ 176.797068][ T5057] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 176.808928][ T5057] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 176.819634][ T5057] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 176.828953][ T5057] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 176.840657][ T5057] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 176.853075][ T5057] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 176.863343][ T5057] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 176.872947][ T5057] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 176.881227][ T5057] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 176.891119][ T5057] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 176.901435][ T5057] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 176.913808][ T5057] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 176.928623][ T5057] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 176.946345][ T5057] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 183.983959][ T5098] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 184.435441][ T5104] netlink: 3 bytes leftover after parsing attributes in process `syz.2.243'. [ 188.516124][ T5114] netlink: 3 bytes leftover after parsing attributes in process `syz.1.255'. [ 194.243176][ T5160] trusted_key: encrypted_key: keyword 'neul–' not recognized [ 194.263675][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.276315][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.626682][ T5170] netlink: 3 bytes leftover after parsing attributes in process `syz.3.264'. [ 198.938676][ T5188] [ 198.941808][ T5188] ====================================================== [ 198.950523][ T5188] WARNING: possible circular locking dependency detected [ 198.961629][ T5188] syzkaller #0 Not tainted [ 198.970895][ T5188] ------------------------------------------------------ [ 198.982414][ T5188] syz.4.270/5188 is trying to acquire lock: [ 198.995586][ T5188] ffff88807a4e8b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 198.996490][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 199.011093][ T5188] [ 199.011093][ T5188] but task is already holding lock: [ 199.011105][ T5188] ffff88807a4e8ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 199.011159][ T5188] [ 199.011159][ T5188] which lock already depends on the new lock. [ 199.011159][ T5188] [ 199.011166][ T5188] [ 199.011166][ T5188] the existing dependency chain (in reverse order) is: [ 199.011172][ T5188] [ 199.011172][ T5188] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 199.111710][ T5188] __mutex_lock_common+0x1eb/0x2390 [ 199.121461][ T5188] mutex_lock_nested+0x17/0x20 [ 199.134733][ T5188] hci_dev_do_close+0x5f/0x1030 [ 199.143095][ T5188] hci_rfkill_set_block+0x10a/0x190 [ 199.157099][ T5188] rfkill_set_block+0x1c6/0x420 [ 199.171131][ T5188] rfkill_fop_write+0x458/0x560 [ 199.181224][ T5188] vfs_write+0x300/0xd00 [ 199.194294][ T5188] ksys_write+0x14d/0x250 [ 199.200040][ T5188] do_syscall_64+0x4c/0xa0 [ 199.207611][ T5188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.218973][ T5188] [ 199.218973][ T5188] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 199.228627][ T5188] __mutex_lock_common+0x1eb/0x2390 [ 199.237701][ T5188] mutex_lock_nested+0x17/0x20 [ 199.245823][ T5188] rfkill_register+0x33/0x8a0 [ 199.255151][ T5188] hci_register_dev+0x452/0x970 [ 199.267682][ T5188] vhci_create_device+0x32c/0x5c0 [ 199.279173][ T5188] vhci_write+0x391/0x450 [ 199.286043][ T5188] vfs_write+0x712/0xd00 [ 199.297891][ T5188] ksys_write+0x14d/0x250 [ 199.303480][ T5188] do_syscall_64+0x4c/0xa0 [ 199.314283][ T5188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.323001][ T5188] [ 199.323001][ T5188] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 199.332957][ T5188] __mutex_lock_common+0x1eb/0x2390 [ 199.339962][ T5188] mutex_lock_nested+0x17/0x20 [ 199.349150][ T5188] vhci_send_frame+0x88/0x100 [ 199.360233][ T5188] hci_send_frame+0x1a9/0x2e0 [ 199.366851][ T5188] hci_tx_work+0x9f9/0x1710 [ 199.375336][ T5188] process_one_work+0x863/0x1000 [ 199.382502][ T5188] worker_thread+0xaa8/0x12a0 [ 199.389226][ T5188] kthread+0x436/0x520 [ 199.395537][ T5188] ret_from_fork+0x1f/0x30 [ 199.401118][ T5188] [ 199.401118][ T5188] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 199.413522][ T5188] __lock_acquire+0x2c33/0x7c60 [ 199.419592][ T5188] lock_acquire+0x197/0x3f0 [ 199.424639][ T5188] __flush_work+0xdd/0x1b0 [ 199.430196][ T5188] hci_dev_do_close+0x1e7/0x1030 [ 199.437091][ T5188] hci_rfkill_set_block+0x10a/0x190 [ 199.443329][ T5188] rfkill_set_block+0x1c6/0x420 [ 199.449795][ T5188] rfkill_fop_write+0x458/0x560 [ 199.459411][ T5188] vfs_write+0x300/0xd00 [ 199.465842][ T5188] ksys_write+0x14d/0x250 [ 199.472597][ T5188] do_syscall_64+0x4c/0xa0 [ 199.478796][ T5188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 199.486275][ T5188] [ 199.486275][ T5188] other info that might help us debug this: [ 199.486275][ T5188] [ 199.499514][ T5188] Chain exists of: [ 199.499514][ T5188] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 199.499514][ T5188] [ 199.516070][ T5188] Possible unsafe locking scenario: [ 199.516070][ T5188] [ 199.524045][ T5188] CPU0 CPU1 [ 199.529581][ T5188] ---- ---- [ 199.537309][ T5188] lock(&hdev->req_lock); [ 199.542433][ T5188] lock(rfkill_global_mutex); [ 199.552519][ T5188] lock(&hdev->req_lock); [ 199.560222][ T5188] lock((work_completion)(&hdev->tx_work)); [ 199.568274][ T5188] [ 199.568274][ T5188] *** DEADLOCK *** [ 199.568274][ T5188] [ 199.579649][ T5188] 2 locks held by syz.4.270/5188: [ 199.586284][ T5188] #0: ffffffff8d4bff28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 199.606016][ T5188] #1: ffff88807a4e8ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 199.618215][ T5188] [ 199.618215][ T5188] stack backtrace: [ 199.627300][ T5188] CPU: 1 PID: 5188 Comm: syz.4.270 Not tainted syzkaller #0 [ 199.640196][ T5188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.657839][ T5188] Call Trace: [ 199.662001][ T5188] [ 199.668809][ T5188] dump_stack_lvl+0x168/0x230 [ 199.679177][ T5188] ? load_image+0x3b0/0x3b0 [ 199.683984][ T5188] ? show_regs_print_info+0x20/0x20 [ 199.692274][ T5188] ? print_circular_bug+0x12b/0x1a0 [ 199.699455][ T5188] check_noncircular+0x274/0x310 [ 199.704695][ T5188] ? add_chain_block+0x940/0x940 [ 199.711353][ T5188] ? lockdep_lock+0xdc/0x1e0 [ 199.717551][ T5188] ? mark_lock+0x94/0x320 [ 199.722588][ T5188] __lock_acquire+0x2c33/0x7c60 [ 199.731424][ T5188] ? lockdep_unlock+0x134/0x2d0 [ 199.739360][ T5188] ? lockdep_lock+0x1e0/0x1e0 [ 199.746026][ T5188] ? mark_lock+0x94/0x320 [ 199.752387][ T5188] ? verify_lock_unused+0x140/0x140 [ 199.758270][ T5188] ? __lock_acquire+0x12d9/0x7c60 [ 199.767452][ T5188] lock_acquire+0x197/0x3f0 [ 199.777292][ T5188] ? __flush_work+0xc1/0x1b0 [ 199.785081][ T5188] ? __mutex_trylock_common+0x14f/0x250 [ 199.796308][ T5188] ? read_lock_is_recursive+0x10/0x10 [ 199.803829][ T5188] ? lock_chain_count+0x20/0x20 [ 199.813976][ T5188] ? mark_lock+0x94/0x320 [ 199.819883][ T5188] __flush_work+0xdd/0x1b0 [ 199.826296][ T5188] ? __flush_work+0xc1/0x1b0 [ 199.833293][ T5188] ? flush_work+0x20/0x20 [ 199.838038][ T5188] ? hci_leds_update_powered+0x148/0x160 [ 199.845389][ T5188] ? rcu_lock_release+0x5/0x20 [ 199.853874][ T5188] ? __lock_acquire+0x7c60/0x7c60 [ 199.859081][ T5188] hci_dev_do_close+0x1e7/0x1030 [ 199.865069][ T5188] ? _raw_spin_unlock+0x40/0x40 [ 199.871346][ T5188] hci_rfkill_set_block+0x10a/0x190 [ 199.880176][ T5188] ? rcu_lock_release+0x20/0x20 [ 199.886821][ T5188] rfkill_set_block+0x1c6/0x420 [ 199.893181][ T5188] rfkill_fop_write+0x458/0x560 [ 199.898828][ T5188] ? rfkill_fop_read+0x4b0/0x4b0 [ 199.904502][ T5188] ? common_file_perm+0xd0/0x1c0 [ 199.915237][ T5188] ? fsnotify_perm+0x5d/0x560 [ 199.920816][ T5188] ? security_file_permission+0x75/0xa0 [ 199.928990][ T5188] ? rfkill_fop_read+0x4b0/0x4b0 [ 199.939270][ T5188] vfs_write+0x300/0xd00 [ 199.944548][ T5188] ? file_end_write+0x250/0x250 [ 199.954321][ T5188] ? __fget_files+0x40f/0x480 [ 199.959936][ T5188] ? __fdget_pos+0x1e2/0x370 [ 199.966925][ T5188] ? ksys_write+0x71/0x250 [ 199.976913][ T5188] ksys_write+0x14d/0x250 [ 199.981876][ T5188] ? __ia32_sys_read+0x80/0x80 [ 199.991850][ T5188] ? lockdep_hardirqs_on+0x94/0x140 [ 199.999658][ T5188] do_syscall_64+0x4c/0xa0 [ 200.009767][ T5188] ? clear_bhb_loop+0x30/0x80 [ 200.016942][ T5188] ? clear_bhb_loop+0x30/0x80 [ 200.022263][ T5188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.035654][ T5188] RIP: 0033:0x7f8a48f1bbe9 [ 200.040902][ T5188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.072149][ T5188] RSP: 002b:00007f8a47183038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 200.084261][ T5188] RAX: ffffffffffffffda RBX: 00007f8a49152fa0 RCX: 00007f8a48f1bbe9 [ 200.099378][ T5188] RDX: 0000000000000008 RSI: 0000200000000300 RDI: 0000000000000006 [ 200.113673][ T5188] RBP: 00007f8a48f9ee19 R08: 0000000000000000 R09: 0000000000000000 [ 200.124114][ T5188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.138774][ T5188] R13: 00007f8a49153038 R14: 00007f8a49152fa0 R15: 00007ffde908b158 [ 200.155533][ T5188] [ 201.016029][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 201.167340][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 201.346175][ T13] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 201.360535][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.373182][ T13] usb 2-1: Product: syz [ 201.381413][ T13] usb 2-1: Manufacturer: syz [ 201.387537][ T13] usb 2-1: SerialNumber: syz [ 201.408351][ T13] usb 2-1: config 0 descriptor?? [ 201.459865][ T13] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 201.476186][ T13] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 201.726214][ T13] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 201.886226][ T13] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 201.898652][ T13] em28xx 2-1:0.0: board has no eeprom [ 202.036114][ T13] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 202.045154][ T13] em28xx 2-1:0.0: dvb set to bulk mode. [ 202.054294][ T4346] em28xx 2-1:0.0: Binding DVB extension [ 202.066872][ T13] usb 2-1: USB disconnect, device number 3 [ 202.080130][ T13] em28xx 2-1:0.0: Disconnecting em28xx [ 202.098310][ T4346] em28xx 2-1:0.0: Registering input extension [ 202.110461][ T13] em28xx 2-1:0.0: Closing input extension [ 202.122716][ T13] em28xx 2-1:0.0: Freeing device