last executing test programs: 5.926072336s ago: executing program 3 (id=457): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000001c0)={0x21, 0x34, 0x17, 0x17, 0xa, 0x5, 0x6, 0xc2}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.827568812s ago: executing program 0 (id=466): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x20000}, 0x18) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r2, 0x265a4e37}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 4.597264734s ago: executing program 1 (id=470): r0 = fanotify_init(0x4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x101, 0x20, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x0) 4.583557954s ago: executing program 0 (id=471): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 4.509072234s ago: executing program 0 (id=474): r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000140), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000009c0)="c2", 0x1, r0) r2 = add_key$user(&(0x7f0000000380), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000000)='\x00\x00', 0x2, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r1}, 0x0, 0x0, 0x0) 4.504151374s ago: executing program 1 (id=475): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="120100004107f540f30c75934664000000010902"], 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) 4.413017105s ago: executing program 0 (id=478): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000280)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000300)=@udp6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000003080)={'a', ' *:* ', 'r\x00'}, 0x17) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x16) shmctl$SHM_LOCK(r1, 0xb) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) 4.261180005s ago: executing program 2 (id=481): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 4.094199066s ago: executing program 2 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 3.094189652s ago: executing program 2 (id=484): unshare(0x8000400) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 2.731915024s ago: executing program 0 (id=490): unshare(0x60400) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x9, 0x0, 0x0) 2.573235705s ago: executing program 0 (id=491): syz_open_dev$sndctrl(&(0x7f00000003c0), 0x0, 0x20100) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f03e, 0x1}) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xf2, 0x61, 0x87, 0x40, 0x403, 0xeeef, 0x1858, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x8, 0x10, 0x1b, [{{0x9, 0x4, 0xf0, 0x6f, 0x0, 0xdf, 0x9e, 0x79, 0x3f}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 2.433253266s ago: executing program 2 (id=495): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)={0x24, r0, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x24}}, 0x0) 2.399377276s ago: executing program 2 (id=496): socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f6", @ANYRES32, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.534309851s ago: executing program 4 (id=497): unshare(0x2a020400) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, 0x0, 0x0) 1.413199521s ago: executing program 4 (id=498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x2000, 0x88fb}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x47, 0x0, @wg=@data={0x4, 0x9, 0xf59, "85b8e6665d890582126b83824ec5eabb03a01fcf153a3646ecf39707b92f780837084c4cc8a19acf27b70180327f6a"}}}}}}}, 0x6d) 1.357861652s ago: executing program 2 (id=499): r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x89101) fchdir(r0) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x7bb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x2) recvmmsg(r3, 0x0, 0x0, 0x102, 0x0) socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xb) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0xa) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, &(0x7f0000006000)) r5 = socket(0x1d, 0x2, 0x6) accept4$unix(r5, 0x0, 0x0, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.285596902s ago: executing program 3 (id=500): r0 = io_uring_setup(0x1a01, &(0x7f0000000340)={0x0, 0x5b33, 0x400}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000080)=[0x3, 0x4fb3af3f], 0x2) 1.205235922s ago: executing program 4 (id=501): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={r1, 0x1}, 0x8) 1.205106793s ago: executing program 3 (id=502): add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000002f80)="01000000020000000000006bb500000000000000604cd977b216e951ae21e3a9b0ccfa24cf38a23081657c44a2f31730eafa60df03d80dc26b20d55867a1fed438a7b7abd5b2ff9ca80938f85f9b46ba447cc0f7d4277e4548140dadaccec94ae9c02ede6164a374b9031fe035526c495f916bb0926d1df87748b05fc2a57d47d3a53e22f873cab1fce1c49a1a5e8c04520f415ec2acecf00491b025185fbdf9db9f7b3b6248176e0ee9b07b", 0xac, 0xffffffffffffffff) 1.184233203s ago: executing program 3 (id=503): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x0) 1.175545463s ago: executing program 4 (id=504): socket$kcm(0x11, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x0) unshare(0x2c060000) 1.061273624s ago: executing program 1 (id=505): r0 = syz_open_dev$vivid(&(0x7f0000001a80), 0x2, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000001b00)=@userptr={0x3, 0x8, 0x4, 0x10, 0x2, {0x77359400}, {0x4, 0x1, 0x65, 0x8, 0x5, 0x9, "0c6350b2"}, 0x80000001, 0x2, {0x0}, 0x1}) 1.061074044s ago: executing program 3 (id=506): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) 983.873924ms ago: executing program 1 (id=507): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 957.882704ms ago: executing program 3 (id=508): socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400012000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 61.090549ms ago: executing program 1 (id=509): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140c, 0x301, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 60.728719ms ago: executing program 1 (id=510): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x20}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x0) recvmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, 0x0, 0x0) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @dev}, 0x10) r5 = fsopen(&(0x7f0000000300)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) mkdirat(r6, &(0x7f0000000200)='./file0\x00', 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x7ff, 0x4) sendmmsg$inet_sctp(r0, &(0x7f0000006c40)=[{&(0x7f0000004200)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000006480)=[{&(0x7f0000004240)="91", 0x1}], 0x1}], 0x1, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x5, {0x5, 0x78a84334, 0x0, 0x0, 0x8, 0x1}}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000080)=0x3ff, 0x4) recvmmsg(r7, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/4091, 0xffb}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000004800)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000004dc0)=ANY=[@ANYBLOB="2c0000008400000001000000000000000400"/40, @ANYRES32=0x0, @ANYBLOB="14"], 0x40}], 0x1, 0x0) 23.63214ms ago: executing program 4 (id=511): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x14, r1, 0xe701ac47a3d23ecd}, 0x14}}, 0x20000000) 0s ago: executing program 4 (id=512): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x20002007}) kernel console output (not intermixed with test programs): [ 19.197792][ T3692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 19.201420][ T3692] eql: remember to turn off Van-Jacobson compression on your slave devices [ 19.249867][ T9] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 19.256367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. syzkaller login: [ 41.849152][ T4010] cgroup: Unknown subsys name 'net' [ 42.109086][ T4010] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.418161][ T4010] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 43.856177][ T4022] chnl_net:caif_netlink_parms(): no params data found [ 43.904479][ T4025] chnl_net:caif_netlink_parms(): no params data found [ 43.941932][ T4028] chnl_net:caif_netlink_parms(): no params data found [ 43.969934][ T4022] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.971698][ T4022] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.976490][ T4022] device bridge_slave_0 entered promiscuous mode [ 43.999290][ T4022] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.000770][ T4022] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.004765][ T4022] device bridge_slave_1 entered promiscuous mode [ 44.034543][ T4030] chnl_net:caif_netlink_parms(): no params data found [ 44.046829][ T4022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.062357][ T4022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.121486][ T4022] team0: Port device team_slave_0 added [ 44.128224][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.129761][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.132431][ T4025] device bridge_slave_0 entered promiscuous mode [ 44.141044][ T4028] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.142857][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.145056][ T4028] device bridge_slave_0 entered promiscuous mode [ 44.152160][ T4022] team0: Port device team_slave_1 added [ 44.159992][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.161678][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.163996][ T4025] device bridge_slave_1 entered promiscuous mode [ 44.166419][ T4028] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.168012][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.170240][ T4028] device bridge_slave_1 entered promiscuous mode [ 44.212797][ T4022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.214366][ T4022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.219811][ T4022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.232590][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.242352][ T4028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.251354][ T4022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.252975][ T4022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.258571][ T4022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.261397][ T4032] chnl_net:caif_netlink_parms(): no params data found [ 44.272826][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.276263][ T4028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.278324][ T4030] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.279802][ T4030] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.282055][ T4030] device bridge_slave_0 entered promiscuous mode [ 44.285737][ T4030] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.287289][ T4030] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.289450][ T4030] device bridge_slave_1 entered promiscuous mode [ 44.331367][ T4030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.338337][ T4028] team0: Port device team_slave_0 added [ 44.350764][ T4030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.353832][ T4028] team0: Port device team_slave_1 added [ 44.376842][ T4025] team0: Port device team_slave_0 added [ 44.434970][ T4022] device hsr_slave_0 entered promiscuous mode [ 44.473155][ T4022] device hsr_slave_1 entered promiscuous mode [ 44.514478][ T4025] team0: Port device team_slave_1 added [ 44.529754][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.531338][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.537054][ T4028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.565048][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.566525][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.571877][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.576842][ T4030] team0: Port device team_slave_0 added [ 44.578701][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.580183][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.586006][ T4028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.591517][ T4032] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.593319][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.595493][ T4032] device bridge_slave_0 entered promiscuous mode [ 44.604258][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.605784][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.611069][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.615690][ T4030] team0: Port device team_slave_1 added [ 44.617827][ T4032] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.619442][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.621627][ T4032] device bridge_slave_1 entered promiscuous mode [ 44.653800][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.655336][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.660542][ T4030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.689499][ T4032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.691687][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.694347][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.699550][ T4030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.721812][ T4032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.774629][ T4025] device hsr_slave_0 entered promiscuous mode [ 44.823091][ T4025] device hsr_slave_1 entered promiscuous mode [ 44.862836][ T4025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.864560][ T4025] Cannot create hsr debugfs directory [ 44.904513][ T4028] device hsr_slave_0 entered promiscuous mode [ 44.943112][ T4028] device hsr_slave_1 entered promiscuous mode [ 44.982862][ T4028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.984584][ T4028] Cannot create hsr debugfs directory [ 45.000962][ T4032] team0: Port device team_slave_0 added [ 45.027985][ T4032] team0: Port device team_slave_1 added [ 45.154663][ T4030] device hsr_slave_0 entered promiscuous mode [ 45.193188][ T4030] device hsr_slave_1 entered promiscuous mode [ 45.232846][ T4030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.234448][ T4030] Cannot create hsr debugfs directory [ 45.247838][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.249393][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.255434][ T4032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.262057][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.264066][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.269548][ T4032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.364713][ T4032] device hsr_slave_0 entered promiscuous mode [ 45.403202][ T4032] device hsr_slave_1 entered promiscuous mode [ 45.442721][ T4032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.444369][ T4032] Cannot create hsr debugfs directory [ 45.552420][ T4022] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.584097][ T4022] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.643160][ T3604] Bluetooth: hci3: command 0x0409 tx timeout [ 45.645085][ T3604] Bluetooth: hci2: command 0x0409 tx timeout [ 45.645333][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 45.646446][ T3604] Bluetooth: hci0: command 0x0409 tx timeout [ 45.647593][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 45.658211][ T4022] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.696251][ T4022] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.789945][ T4025] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.851332][ T4025] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.894561][ T4025] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.940162][ T4025] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.047802][ T4028] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.090747][ T4028] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.147568][ T4028] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.205078][ T4028] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.276675][ T4022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.295218][ T4030] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.327282][ T4030] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.385396][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.387225][ T4030] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.415547][ T4030] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.485133][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.488144][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.492301][ T4022] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.500235][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.503475][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.508407][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.510708][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.514451][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.516121][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.521810][ T4032] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 46.584656][ T4032] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 46.638887][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.644090][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.647110][ T4032] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 46.686025][ T4032] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 46.727256][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.729593][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.731593][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.733110][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.745602][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.761880][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.764330][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.766403][ T1702] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.767992][ T1702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.769918][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.786105][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.788454][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.790702][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.793461][ T1702] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.795000][ T1702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.797019][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.819956][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.822384][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.825872][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.828231][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.845381][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.848326][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.850614][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.854284][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.856535][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.859082][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.861462][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.866448][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.868739][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.881822][ T4028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.891323][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.893735][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.895746][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.897802][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.911994][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.914270][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.929544][ T4022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.936926][ T4028] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.939276][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.946117][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.948214][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.975099][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.977253][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.979230][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.980692][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.987883][ T4030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.003849][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.005959][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.008140][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.010256][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.011703][ T393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.023148][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.043715][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.046217][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.048187][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.071589][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.074113][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.076249][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.078408][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.080623][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.091195][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.094123][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.104982][ T4030] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.108708][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.110857][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.118879][ T4032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.136633][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.141380][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.146296][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.158789][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.161027][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.164418][ T1702] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.165869][ T1702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.167812][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.170168][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.172197][ T1702] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.173687][ T1702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.179687][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.184909][ T4022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.187862][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.189545][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.199831][ T4032] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.201567][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.203875][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.205904][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.210595][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.222295][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.237774][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.240132][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.242236][ T272] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.243872][ T272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.246925][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.251597][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.257276][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.267668][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.269847][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.272154][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.281340][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.283003][ T393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.285542][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.302200][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.305111][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.320518][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.324658][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.327551][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.329982][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.332078][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.335978][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.338816][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.341010][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.345306][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.361884][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.364483][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.366675][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.368883][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.370979][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.373941][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.375916][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.385969][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.393895][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.396130][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.419257][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.429305][ T4028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.431388][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.433814][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.436166][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.437846][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.440800][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.444780][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.458155][ T4022] device veth0_vlan entered promiscuous mode [ 47.478223][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.480539][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.488449][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.491275][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.506583][ T4022] device veth1_vlan entered promiscuous mode [ 47.509944][ T4025] device veth0_vlan entered promiscuous mode [ 47.521903][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.524514][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.526639][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.555300][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.557500][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.560054][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.561675][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.566856][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.573742][ T4025] device veth1_vlan entered promiscuous mode [ 47.588423][ T4022] device veth0_macvtap entered promiscuous mode [ 47.599906][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.619175][ T4022] device veth1_macvtap entered promiscuous mode [ 47.639872][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.645759][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.647999][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.650113][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.655376][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.657491][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.659668][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.661984][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.666205][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.683165][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.685297][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.687957][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.689586][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.692216][ T4028] device veth0_vlan entered promiscuous mode [ 47.697820][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.706614][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.708870][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.711172][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.716850][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.719117][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.721451][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.723666][ T4071] Bluetooth: hci1: command 0x041b tx timeout [ 47.725114][ T4071] Bluetooth: hci0: command 0x041b tx timeout [ 47.726471][ T4071] Bluetooth: hci4: command 0x041b tx timeout [ 47.727857][ T4071] Bluetooth: hci2: command 0x041b tx timeout [ 47.729226][ T4071] Bluetooth: hci3: command 0x041b tx timeout [ 47.731980][ T4022] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.735142][ T4022] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.737027][ T4022] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.738739][ T4022] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.745555][ T4025] device veth0_macvtap entered promiscuous mode [ 47.753740][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.771175][ T4028] device veth1_vlan entered promiscuous mode [ 47.777705][ T4025] device veth1_macvtap entered promiscuous mode [ 47.811508][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.814192][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.817297][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.819227][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.821244][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.826149][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.828762][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.830917][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.834171][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.836579][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.838928][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.841316][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.844895][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.849238][ T4030] device veth0_vlan entered promiscuous mode [ 47.856573][ T4030] device veth1_vlan entered promiscuous mode [ 47.879904][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.882029][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.898052][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.906223][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.908527][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.910792][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.913771][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.929766][ T4025] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.931700][ T4025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.936371][ T4025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.938186][ T4025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.949869][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.952235][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.956608][ T4028] device veth0_macvtap entered promiscuous mode [ 47.975566][ T4028] device veth1_macvtap entered promiscuous mode [ 47.990976][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.994176][ T272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.994722][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.995794][ T272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.997945][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.002321][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.007133][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.018799][ T4030] device veth0_macvtap entered promiscuous mode [ 48.035753][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.037867][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.041511][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.046266][ T4030] device veth1_macvtap entered promiscuous mode [ 48.081882][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.084596][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.086797][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.090547][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.093898][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.096051][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.098111][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.101419][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.120176][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.122168][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.126007][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.128254][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.130514][ T4032] device veth0_vlan entered promiscuous mode [ 48.142054][ T272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.144111][ T272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.146824][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.156125][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.158233][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.160203][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.162379][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.166570][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.175953][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.178490][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.180554][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.183916][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.186006][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.188119][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.191323][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.194177][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.196625][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.198786][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.200892][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.212135][ T4032] device veth1_vlan entered promiscuous mode [ 48.225159][ T4028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.226972][ T4028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.228824][ T4028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.230627][ T4028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.236981][ T1702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.238655][ T1702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.243741][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.247652][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.249907][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.252531][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.261721][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.267261][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.269373][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.272553][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.278074][ T4030] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.279905][ T4030] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.281629][ T4030] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.284555][ T4030] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.306922][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.309232][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.357985][ T4032] device veth0_macvtap entered promiscuous mode [ 48.387374][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.389909][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.423371][ T1702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.427306][ T4032] device veth1_macvtap entered promiscuous mode [ 48.469194][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.471375][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.501270][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.504294][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.514670][ T272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.516319][ T272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.519306][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.521529][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.570361][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.582363][ T4106] netlink: 'syz.0.7': attribute type 8 has an invalid length. [ 48.590223][ T4106] Zero length message leads to an empty skb [ 48.649102][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.849938][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.964277][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.033197][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.178932][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.304816][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.323513][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.325632][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.354688][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.387513][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.389250][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.474682][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.519463][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.521709][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.524290][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.526461][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.528323][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.530423][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.532451][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.541819][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.547420][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.559808][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.562050][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.612502][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.622869][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.649280][ T4032] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.651061][ T4032] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.673012][ T4032] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.674872][ T4032] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.687057][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.708929][ T4118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 49.710784][ T4118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 49.735313][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.737084][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.739992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.805760][ T4072] Bluetooth: hci3: command 0x040f tx timeout [ 49.807259][ T4072] Bluetooth: hci2: command 0x040f tx timeout [ 49.812855][ T13] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 49.822803][ T4072] Bluetooth: hci4: command 0x040f tx timeout [ 49.824217][ T4072] Bluetooth: hci0: command 0x040f tx timeout [ 49.825587][ T4072] Bluetooth: hci1: command 0x040f tx timeout [ 50.792476][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.794376][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.796930][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.917788][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.919568][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.922177][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.888134][ T4111] Bluetooth: hci1: command 0x0419 tx timeout [ 51.890113][ T4111] Bluetooth: hci0: command 0x0419 tx timeout [ 51.891803][ T4111] Bluetooth: hci4: command 0x0419 tx timeout [ 51.905878][ T4111] Bluetooth: hci2: command 0x0419 tx timeout [ 51.907840][ T4111] Bluetooth: hci3: command 0x0419 tx timeout [ 51.942841][ T13] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 51.944619][ T13] usb 1-1: config 0 has no interface number 0 [ 51.945855][ T13] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 51.986800][ T4148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16'. [ 52.113013][ T13] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 52.115023][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.121133][ T13] usb 1-1: Product: syz [ 52.122043][ T13] usb 1-1: Manufacturer: syz [ 52.125109][ T13] usb 1-1: SerialNumber: syz [ 52.141012][ T13] usb 1-1: config 0 descriptor?? [ 52.193666][ T4114] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 52.325426][ T13] usb-storage 1-1:0.20: USB Mass Storage device detected [ 52.335500][ T13] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 53.312307][ T13] scsi host0: usb-storage 1-1:0.20 [ 54.821936][ T3604] usb 1-1: USB disconnect, device number 2 [ 57.092968][ T26] audit: type=1326 audit(57.040:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4215 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eada2a8 code=0x7ffc0000 [ 57.102237][ T26] audit: type=1326 audit(57.040:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4215 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=284 compat=0 ip=0xffff8eada2a8 code=0x7ffc0000 [ 57.122543][ T26] audit: type=1326 audit(57.040:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4215 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eada2a8 code=0x7ffc0000 [ 61.062580][ T4251] xt_connbytes: Forcing CT accounting to be enabled [ 61.064509][ T4251] Cannot find set identified by id 0 to match [ 62.432651][ C0] sched: RT throttling activated [ 62.444229][ T4274] syz.2.55 uses obsolete (PF_INET,SOCK_PACKET) [ 63.682436][ T4287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.63'. [ 63.755111][ T4289] netlink: 134656 bytes leftover after parsing attributes in process `syz.1.64'. [ 63.757166][ T4289] netlink: zone id is out of range [ 63.758319][ T4289] netlink: zone id is out of range [ 63.759417][ T4289] netlink: zone id is out of range [ 63.760466][ T4289] netlink: zone id is out of range [ 63.761500][ T4289] netlink: get zone limit has 4 unknown bytes [ 66.489192][ T4322] capability: warning: `syz.0.77' uses deprecated v2 capabilities in a way that may be insecure [ 66.772142][ T4330] sctp: [Deprecated]: syz.1.79 (pid 4330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 66.772142][ T4330] Use struct sctp_sack_info instead [ 71.660076][ T2053] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.661688][ T2053] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.713927][ T25] cfg80211: failed to load regulatory.db [ 71.773158][ T4363] netlink: 'syz.1.89': attribute type 3 has an invalid length. [ 71.879286][ T4370] Process accounting resumed [ 71.956886][ T4374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.91'. [ 71.959021][ T4374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'. [ 72.015854][ T4378] ipt_rpfilter: unknown options [ 74.133778][ T4421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.112'. [ 75.253188][ T4429] afs: Unknown parameter 'dy' [ 77.181171][ T4452] 9pnet: p9_errstr2errno: server reported unknown error @hQI [ 77.998781][ T4474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.128'. [ 78.085015][ T4478] binder: 4477:4478 tried to acquire reference to desc 0, got 1 instead [ 78.096000][ T4478] binder: 4477:4478 got reply transaction with bad transaction stack, transaction 5 has target 4477:0 [ 78.098440][ T4478] binder: 4477:4478 transaction failed 29201/-71, size 0-0 line 2837 [ 78.100196][ T4478] binder: 4477:4478 ioctl c0306201 200002c0 returned -14 [ 78.124398][ T4071] binder: release 4477:4478 transaction 5 out, still active [ 78.126216][ T4071] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.147274][ T4071] binder: send failed reply for transaction 5, target dead [ 79.316130][ T4504] udc-core: couldn't find an available UDC or it's busy [ 79.317538][ T4504] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 79.322440][ T4506] netlink: 'syz.1.142': attribute type 4 has an invalid length. [ 79.429936][ T4510] netlink: 252 bytes leftover after parsing attributes in process `syz.0.144'. [ 79.695011][ T4517] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.626236][ T4517] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.727581][ T4517] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.805496][ T4517] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.018262][ T4517] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.028978][ T4558] netlink: 'syz.0.162': attribute type 1 has an invalid length. [ 81.030829][ T4558] netlink: 'syz.0.162': attribute type 2 has an invalid length. [ 81.047502][ T4517] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.066504][ T4517] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.084812][ T4517] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.091792][ T4533] netlink: 'syz.4.152': attribute type 1 has an invalid length. [ 81.093666][ T4533] netlink: 9352 bytes leftover after parsing attributes in process `syz.4.152'. [ 81.376165][ T4569] bridge0: port 3(vlan2) entered blocking state [ 82.023486][ T4569] bridge0: port 3(vlan2) entered disabled state [ 82.025817][ T4569] device vlan2 entered promiscuous mode [ 82.027067][ T4569] device dummy0 entered promiscuous mode [ 82.053724][ T4569] bridge0: port 3(vlan2) entered blocking state [ 82.055272][ T4569] bridge0: port 3(vlan2) entered forwarding state [ 82.177432][ T4581] vhci_hcd: default hub control req: 4008 v0007 i0000 l0 [ 86.897751][ T4629] team0: Device wg2 is of different type [ 87.720248][ T4656] ieee802154 phy0 wpan0: encryption failed: -22 [ 89.875304][ T4674] device syzkaller0 entered promiscuous mode [ 94.307193][ T4754] ODEBUG: Out of memory. ODEBUG disabled [ 94.448105][ T4754] syz.1.228 (4754): drop_caches: 2 [ 97.471428][ T4786] device sit0 entered promiscuous mode [ 97.644542][ T3604] Bluetooth: hci5: command 0x1003 tx timeout [ 97.648537][ T4026] Bluetooth: hci5: sending frame failed (-49) [ 97.865226][ T4801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 97.916486][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 101.114670][ T3604] Bluetooth: hci5: command 0x1001 tx timeout [ 101.116027][ T4026] Bluetooth: hci5: sending frame failed (-49) [ 101.213101][ T4834] netlink: 'syz.1.257': attribute type 1 has an invalid length. [ 102.489789][ T4846] udc-core: couldn't find an available UDC or it's busy [ 102.491341][ T4846] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 102.523186][ T4839] udc-core: couldn't find an available UDC or it's busy [ 102.524792][ T4839] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 103.148515][ T4861] netlink: 52 bytes leftover after parsing attributes in process `syz.3.266'. [ 103.163342][ T25] Bluetooth: hci5: command 0x1009 tx timeout [ 103.339851][ T4867] netlink: 188 bytes leftover after parsing attributes in process `syz.2.269'. [ 103.355418][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 104.349984][ T4884] netlink: 'syz.1.274': attribute type 29 has an invalid length. [ 104.351968][ T4884] netlink: 'syz.1.274': attribute type 29 has an invalid length. [ 104.365282][ T4884] netlink: 'syz.1.274': attribute type 29 has an invalid length. [ 104.418848][ T26] audit: type=1326 audit(104.370:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e6a92a8 code=0x7ffc0000 [ 104.438003][ T26] audit: type=1326 audit(104.390:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff8e6a92a8 code=0x7ffc0000 [ 104.444912][ T26] audit: type=1326 audit(104.390:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e6a92a8 code=0x7ffc0000 [ 104.463922][ T26] audit: type=1326 audit(104.390:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e6a92a8 code=0x7ffc0000 [ 104.468852][ T26] audit: type=1326 audit(104.390:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8e6a92a8 code=0x7ffc0000 [ 104.502817][ T26] audit: type=1326 audit(104.390:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e6a92a8 code=0x7ffc0000 [ 104.534364][ T26] audit: type=1326 audit(104.390:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e6a92a8 code=0x7ffc0000 [ 105.448178][ T4907] netlink: 256 bytes leftover after parsing attributes in process `syz.2.286'. [ 106.397897][ T4947] bridge0: port 3(vlan2) entered blocking state [ 106.409212][ T4947] bridge0: port 3(vlan2) entered disabled state [ 106.411478][ T4947] device vlan2 entered promiscuous mode [ 106.413248][ T4947] device netdevsim0 entered promiscuous mode [ 106.415136][ T4947] bridge0: port 3(vlan2) entered blocking state [ 106.416517][ T4947] bridge0: port 3(vlan2) entered forwarding state [ 106.500679][ T4960] process 'syz.4.306' launched './file1' with NULL argv: empty string added [ 107.257374][ T226] block nbd2: Attempted send on invalid socket [ 107.259156][ T226] blk_update_request: I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.262522][ T4991] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 107.835250][ T5006] netlink: 14 bytes leftover after parsing attributes in process `syz.2.324'. [ 108.297796][ T5013] sctp: failed to load transform for md5: -4 [ 108.486278][ T5042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.336'. [ 108.659013][ T5050] binder: 5039:5050 ioctl c018937e 20000040 returned -22 [ 109.347856][ T5051] netlink: 'syz.0.340': attribute type 1 has an invalid length. [ 109.422886][ T5057] device bridge_slave_1 left promiscuous mode [ 109.424922][ T5057] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.467398][ T5057] device bridge_slave_0 left promiscuous mode [ 109.468806][ T5057] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.913742][ T5098] netlink: 'syz.2.356': attribute type 1 has an invalid length. [ 112.964663][ T5100] usb usb8: usbfs: process 5100 (syz.0.357) did not claim interface 0 before use [ 113.983757][ T5132] input: syz1 as /devices/virtual/input/input2 [ 115.352732][ T4183] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.442756][ T4183] usb 1-1: Using ep0 maxpacket: 32 [ 116.494451][ T5163] autofs4:pid:5163:autofs_fill_super: called with bogus options [ 116.692888][ T4183] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.695100][ T4183] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.697451][ T4183] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.699490][ T4183] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 116.702125][ T4183] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 116.717577][ T4183] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.896494][ T4183] usb 1-1: config 0 descriptor?? [ 117.122840][ T4183] usbhid 1-1:0.0: can't add hid device: -71 [ 117.124238][ T4183] usbhid: probe of 1-1:0.0 failed with error -71 [ 117.128606][ T4183] usb 1-1: USB disconnect, device number 3 [ 117.140969][ T5180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 119.571463][ T5210] udc-core: couldn't find an available UDC or it's busy [ 119.582741][ T5210] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 119.648086][ T5212] sock: sock_set_timeout: `syz.1.399' (pid 5212) tries to set negative timeout [ 119.953971][ T4072] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.256618][ T4072] usb 1-1: Using ep0 maxpacket: 8 [ 122.022945][ T4072] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 122.025409][ T4072] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.027526][ T4072] usb 1-1: config 0 has no interface number 0 [ 122.028790][ T4072] usb 1-1: config 0 interface 52 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 122.028825][ T4072] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.028846][ T4072] usb 1-1: config 0 interface 52 has no altsetting 0 [ 122.054907][ T5242] netlink: 68 bytes leftover after parsing attributes in process `syz.4.411'. [ 122.102930][ T4072] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 122.105590][ T4072] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 122.107261][ T4072] usb 1-1: Manufacturer: syz [ 122.110351][ T4072] usb 1-1: config 0 descriptor?? [ 122.963169][ T4072] usb 1-1: Can not set alternate setting to 1, error: -71 [ 122.964726][ T4072] synaptics_usb: probe of 1-1:0.52 failed with error -71 [ 122.969194][ T4072] usb 1-1: USB disconnect, device number 4 [ 123.048675][ T5253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 123.105689][ T5259] netlink: 20 bytes leftover after parsing attributes in process `syz.0.417'. [ 123.107676][ T5259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 123.109503][ T5259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 123.111646][ T5259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 124.105170][ T5297] udc-core: couldn't find an available UDC or it's busy [ 124.106686][ T5297] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 129.433784][ T5376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 129.476971][ T26] audit: type=1326 audit(129.430:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.4.467" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9570e2a8 code=0x0 [ 129.885234][ T5414] udc-core: couldn't find an available UDC or it's busy [ 129.889122][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 129.959066][ T5414] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 131.543297][ T26] audit: type=1326 audit(131.500:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9570e2a8 code=0x7ffc0000 [ 131.560580][ T26] audit: type=1326 audit(131.510:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9570e2a8 code=0x7ffc0000 [ 131.568659][ T26] audit: type=1326 audit(131.520:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9570e2a8 code=0x7ffc0000 [ 131.594965][ T26] audit: type=1326 audit(131.520:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9570e2a8 code=0x7ffc0000 [ 131.615186][ T26] audit: type=1326 audit(131.520:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9570e2a8 code=0x7ffc0000 [ 131.638373][ T26] audit: type=1326 audit(131.520:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffff9570e2a8 code=0x7ffc0000 [ 131.660462][ T26] audit: type=1326 audit(131.520:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9570e2a8 code=0x7ffc0000 [ 131.676164][ T26] audit: type=1326 audit(131.520:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffff9570e2a8 code=0x7ffc0000 [ 131.690877][ T26] audit: type=1326 audit(131.530:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5451 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9570e2a8 code=0x7ffc0000 [ 132.671056][ T4066] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 132.913373][ T5481] udc-core: couldn't find an available UDC or it's busy [ 132.930604][ T5481] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 133.212420][ T4066] usb 1-1: unable to get BOS descriptor or descriptor too short [ 133.238181][ T5502] netlink: 68 bytes leftover after parsing attributes in process `syz.1.507'. [ 134.090436][ T5506] udc-core: couldn't find an available UDC or it's busy [ 134.091912][ T5506] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 134.113097][ T4066] usb 1-1: config 16 has an invalid interface number: 240 but max is 0 [ 134.114875][ T4066] usb 1-1: config 16 has no interface number 0 [ 134.116138][ T4066] usb 1-1: config 16 interface 240 has no altsetting 0 [ 134.259330][ T5515] input: syz0 as /devices/virtual/input/input3 [ 134.313015][ T4066] usb 1-1: New USB device found, idVendor=0403, idProduct=eeef, bcdDevice=18.58 [ 134.321503][ T5505] [ 134.322002][ T5505] ====================================================== [ 134.323512][ T5505] WARNING: possible circular locking dependency detected [ 134.324904][ T5505] 5.15.172-syzkaller #0 Not tainted [ 134.325993][ T5505] ------------------------------------------------------ [ 134.327469][ T5505] kworker/1:8/5505 is trying to acquire lock: [ 134.328727][ T5505] ffff0000c1544c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 134.331053][ T5505] [ 134.331053][ T5505] but task is already holding lock: [ 134.332673][ T5505] ffff800016e77228 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x58/0x158 [ 134.334686][ T5505] [ 134.334686][ T5505] which lock already depends on the new lock. [ 134.334686][ T5505] [ 134.336827][ T5505] [ 134.336827][ T5505] the existing dependency chain (in reverse order) is: [ 134.338707][ T5505] [ 134.338707][ T5505] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 134.340448][ T5505] __mutex_lock_common+0x194/0x2154 [ 134.341611][ T5505] mutex_lock_nested+0xa4/0xf8 [ 134.342624][ T5505] rfkill_register+0x44/0x7a4 [ 134.343669][ T5505] hci_register_dev+0x3e0/0x880 [ 134.344772][ T5505] vhci_create_device+0x2c4/0x568 [ 134.345826][ T5505] vhci_write+0x318/0x3b8 [ 134.346817][ T5505] vfs_write+0x884/0xb44 [ 134.347780][ T5505] ksys_write+0x15c/0x26c [ 134.348836][ T5505] __arm64_sys_write+0x7c/0x90 [ 134.349881][ T5505] invoke_syscall+0x98/0x2b8 [ 134.351002][ T5505] el0_svc_common+0x138/0x258 [ 134.352150][ T5505] do_el0_svc+0x58/0x14c [ 134.353251][ T5505] el0_svc+0x7c/0x1f0 [ 134.354246][ T5505] el0t_64_sync_handler+0x84/0xe4 [ 134.355382][ T5505] el0t_64_sync+0x1a0/0x1a4 [ 134.356456][ T5505] [ 134.356456][ T5505] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 134.358169][ T5505] __mutex_lock_common+0x194/0x2154 [ 134.359338][ T5505] mutex_lock_nested+0xa4/0xf8 [ 134.360451][ T5505] vhci_send_frame+0x8c/0x10c [ 134.361576][ T5505] hci_send_frame+0x194/0x2f0 [ 134.362763][ T5505] hci_tx_work+0x9ac/0x16cc [ 134.363833][ T5505] process_one_work+0x790/0x11b8 [ 134.364943][ T5505] worker_thread+0x910/0x1034 [ 134.366116][ T5505] kthread+0x37c/0x45c [ 134.367100][ T5505] ret_from_fork+0x10/0x20 [ 134.368155][ T5505] [ 134.368155][ T5505] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 134.370048][ T5505] __flush_work+0xf8/0x1c0 [ 134.371181][ T5505] flush_work+0x24/0x38 [ 134.372109][ T5505] hci_dev_do_open+0x9c4/0x104c [ 134.373319][ T5505] hci_power_on+0x13c/0x65c [ 134.374368][ T5505] process_one_work+0x790/0x11b8 [ 134.375386][ T5505] worker_thread+0x910/0x1034 [ 134.376566][ T5505] kthread+0x37c/0x45c [ 134.377485][ T5505] ret_from_fork+0x10/0x20 [ 134.378548][ T5505] [ 134.378548][ T5505] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 134.380171][ T5505] __mutex_lock_common+0x194/0x2154 [ 134.381427][ T5505] mutex_lock_nested+0xa4/0xf8 [ 134.382539][ T5505] bg_scan_update+0x9c/0x470 [ 134.383603][ T5505] process_one_work+0x790/0x11b8 [ 134.384770][ T5505] worker_thread+0x910/0x1034 [ 134.385948][ T5505] kthread+0x37c/0x45c [ 134.386844][ T5505] ret_from_fork+0x10/0x20 [ 134.387863][ T5505] [ 134.387863][ T5505] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 134.390038][ T5505] __lock_acquire+0x32d4/0x7638 [ 134.391213][ T5505] lock_acquire+0x240/0x77c [ 134.392292][ T5505] __flush_work+0xf8/0x1c0 [ 134.393386][ T5505] __cancel_work_timer+0x3ec/0x548 [ 134.394768][ T5505] cancel_work_sync+0x24/0x38 [ 134.395894][ T5505] hci_request_cancel_all+0xcc/0x2d0 [ 134.397204][ T5505] hci_dev_do_close+0x54/0x1060 [ 134.398335][ T5505] hci_rfkill_set_block+0xdc/0x1d0 [ 134.399550][ T5505] rfkill_set_block+0x18c/0x37c [ 134.400594][ T5505] rfkill_epo+0x8c/0x158 [ 134.401733][ T5505] rfkill_op_handler+0x170/0x288 [ 134.402887][ T5505] process_one_work+0x790/0x11b8 [ 134.404082][ T5505] worker_thread+0x910/0x1034 [ 134.405218][ T5505] kthread+0x37c/0x45c [ 134.406159][ T5505] ret_from_fork+0x10/0x20 [ 134.407202][ T5505] [ 134.407202][ T5505] other info that might help us debug this: [ 134.407202][ T5505] [ 134.409467][ T5505] Chain exists of: [ 134.409467][ T5505] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 134.409467][ T5505] [ 134.412770][ T5505] Possible unsafe locking scenario: [ 134.412770][ T5505] [ 134.414472][ T5505] CPU0 CPU1 [ 134.415568][ T5505] ---- ---- [ 134.416756][ T5505] lock(rfkill_global_mutex); [ 134.417864][ T5505] lock(&data->open_mutex); [ 134.419275][ T5505] lock(rfkill_global_mutex); [ 134.420777][ T5505] lock((work_completion)(&hdev->bg_scan_update)); [ 134.422185][ T5505] [ 134.422185][ T5505] *** DEADLOCK *** [ 134.422185][ T5505] [ 134.424050][ T5505] 3 locks held by kworker/1:8/5505: [ 134.425200][ T5505] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 134.427542][ T5505] #1: ffff800020367c00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 134.429712][ T5505] #2: ffff800016e77228 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x58/0x158 [ 134.431735][ T5505] [ 134.431735][ T5505] stack backtrace: [ 134.433000][ T5505] CPU: 1 PID: 5505 Comm: kworker/1:8 Not tainted 5.15.172-syzkaller #0 [ 134.434772][ T5505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 134.436858][ T5505] Workqueue: events rfkill_op_handler [ 134.437948][ T5505] Call trace: [ 134.438592][ T5505] dump_backtrace+0x0/0x530 [ 134.439493][ T5505] show_stack+0x2c/0x3c [ 134.440335][ T5505] dump_stack_lvl+0x108/0x170 [ 134.441441][ T5505] dump_stack+0x1c/0x58 [ 134.442332][ T5505] print_circular_bug+0x150/0x1b8 [ 134.443409][ T5505] check_noncircular+0x2cc/0x378 [ 134.444485][ T5505] __lock_acquire+0x32d4/0x7638 [ 134.445534][ T5505] lock_acquire+0x240/0x77c [ 134.446564][ T5505] __flush_work+0xf8/0x1c0 [ 134.447458][ T5505] __cancel_work_timer+0x3ec/0x548 [ 134.448577][ T5505] cancel_work_sync+0x24/0x38 [ 134.449536][ T5505] hci_request_cancel_all+0xcc/0x2d0 [ 134.450633][ T5505] hci_dev_do_close+0x54/0x1060 [ 134.451684][ T5505] hci_rfkill_set_block+0xdc/0x1d0 [ 134.452754][ T5505] rfkill_set_block+0x18c/0x37c [ 134.453810][ T5505] rfkill_epo+0x8c/0x158 [ 134.454789][ T5505] rfkill_op_handler+0x170/0x288 [ 134.455876][ T5505] process_one_work+0x790/0x11b8 [ 134.456940][ T5505] worker_thread+0x910/0x1034 [ 134.457863][ T5505] kthread+0x37c/0x45c [ 134.458718][ T5505] ret_from_fork+0x10/0x20 [ 134.464963][ T4066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.466620][ T4066] usb 1-1: Product: syz [ 134.467593][ T4066] usb 1-1: Manufacturer: syz [ 134.468578][ T4066] usb 1-1: SerialNumber: syz [ 134.683598][ T4066] ftdi_sio 1-1:16.240: FTDI USB Serial Device converter detected [ 134.685638][ T4066] usb 1-1: Detected FT-X [ 134.702834][ T4066] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 134.722907][ T4066] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 134.742741][ T4066] ftdi_sio 1-1:16.240: GPIO initialisation failed: -71 [ 134.744838][ T4066] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 134.748936][ T4066] usb 1-1: USB disconnect, device number 5 [ 134.760208][ T4066] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 134.763679][ T4066] ftdi_sio 1-1:16.240: device disconnected [ 136.203596][ T2053] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.204979][ T2053] ieee802154 phy1 wpan1: encryption failed: -22