last executing test programs: 6.703742008s ago: executing program 0 (id=104): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000079c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$binfmt_format(r0, &(0x7f00000002c0)='0\x00', 0x1) 6.67733782s ago: executing program 0 (id=105): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0x20bf22, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) rt_sigqueueinfo(r4, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xfffffffb}) 5.00802331s ago: executing program 0 (id=112): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.975134468s ago: executing program 3 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) close(r4) 4.094852932s ago: executing program 0 (id=118): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x441) pipe2$9p(&(0x7f0000001900), 0x0) dup(r0) r1 = syz_io_uring_setup(0x4e5e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 4.031443932s ago: executing program 3 (id=120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [], {0x14}}, 0x28}}, 0x4000040) 3.974356246s ago: executing program 3 (id=122): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) fdatasync(0xffffffffffffffff) fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) ioctl$AUTOFS_IOC_READY(r0, 0xc1086201, 0x20000000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x20000000009) ioctl$TCGETS2(r5, 0x400455cb, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 3.767993083s ago: executing program 0 (id=123): mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000240)=0xffffffffffffffff, 0x9, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000100)={0x0, "743fedd3add15c65712ea4c5a112f60f8377ba5089b34f08204569381985d16e9cfd3974fb09fa9fa4ff42a688e0302b715f37ed8ab4cc1e5f75db3bb5cfb510"}) write$UHID_DESTROY(r0, &(0x7f0000000740)={0xa}, 0x4) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, 0x0) 3.060033291s ago: executing program 4 (id=126): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000004280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000042c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r1, 0x0, 0x0) 3.034890847s ago: executing program 2 (id=127): socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsa(0x0, 0x8, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYRESHEX=r0], 0xfc}}, 0x0) 3.034654671s ago: executing program 4 (id=128): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0'}, 0x74) 2.163931788s ago: executing program 1 (id=130): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) 2.113204516s ago: executing program 2 (id=131): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r3, 0x12}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x23b) 2.085722309s ago: executing program 2 (id=132): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x4, 0x405, 0x0}) 2.015946919s ago: executing program 2 (id=133): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x6}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0xfff1, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff1}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.997591919s ago: executing program 2 (id=134): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000) r1 = dup(r0) read$dsp(r1, &(0x7f0000000100)=""/167, 0xa7) 1.807711288s ago: executing program 1 (id=135): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x21) 1.771352125s ago: executing program 1 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x3e}, 0x800, 0x0, 0x2, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26, 0x0, 0x0, @void, @value}, 0x10) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close(r6) 1.527687353s ago: executing program 3 (id=137): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) recvmmsg(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f00000016c0)=""/82, 0x52}, {&(0x7f0000000200)=""/191, 0xbf}, {&(0x7f0000001940)=""/59, 0x3b}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000002980)=""/215, 0xd7}, {&(0x7f0000002a80)=""/22, 0x16}, {&(0x7f0000002ac0)=""/214, 0xd6}, {&(0x7f00000002c0)=""/83}, {&(0x7f0000000440)=""/163}, {&(0x7f0000000500)=""/125}, {&(0x7f00000005c0)=""/150}], 0x8}, 0x4}], 0x800000000000242, 0x40000002, 0x0) 971.02061ms ago: executing program 2 (id=138): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 959.764439ms ago: executing program 0 (id=139): r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="18", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10) sendto$inet(r0, &(0x7f0000000100)='h', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r0, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) recvmmsg(r1, &(0x7f00000071c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000340)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e20590000a2bc5603ca", 0x24}], 0x1) 924.792038ms ago: executing program 4 (id=140): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000002640)={0x2, 0x0, 0x0}) 819.970167ms ago: executing program 1 (id=141): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000440), 0x500, 0x0) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)={0xe0, 0x10, 0x50b, 0x0, 0x200, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff5f5f2829882fbd9423debbb86f9dba4a2dba4dbe076c02262600c43443efd6f5091dfbd56183a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9e4606d2e4cc898739222c5d3a83c00341c5ae846a60cf93ab48d68e8e9467d1ccadc42"}]}, 0xe0}], 0x1}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 819.818397ms ago: executing program 3 (id=142): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0x2, 0x0}, 0x0, 0x0, 0x1, 0x3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000ac0)=""/100, 0x64}], 0x1, 0x9d9, 0x40c) 819.613912ms ago: executing program 3 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 783.48354ms ago: executing program 4 (id=144): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x6}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0xfff1, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff1}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 107.127398ms ago: executing program 4 (id=145): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 99.776902ms ago: executing program 1 (id=146): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010014000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010076657468305f746f5f68737200000000080007"], 0xd8}}, 0x0) 45.879842ms ago: executing program 4 (id=147): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 0s ago: executing program 1 (id=148): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000) r1 = dup(r0) read$dsp(r1, &(0x7f0000000100)=""/167, 0xa7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. [ 33.550348][ T6405] cgroup: Unknown subsys name 'net' [ 33.756755][ T6405] cgroup: Unknown subsys name 'cpuset' [ 33.760735][ T6405] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.063894][ T6405] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 35.368515][ T6421] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.371131][ T6421] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.395796][ T6429] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.398357][ T6430] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.400359][ T6430] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 35.402548][ T6430] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.404671][ T6429] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.407107][ T6429] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.407863][ T6430] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.409844][ T6431] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 35.411876][ T6430] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.412896][ T6429] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.415272][ T6430] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.416583][ T6429] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 35.418028][ T6430] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.418864][ T6431] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.420833][ T6430] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.423174][ T6429] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.424023][ T6430] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.425257][ T6429] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.427194][ T6430] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.429910][ T5984] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.432166][ T5984] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 35.436027][ T5984] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.437729][ T5984] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 35.440167][ T5984] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 35.442089][ T5984] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 35.445489][ T5984] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 35.447342][ T5984] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 35.449657][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 35.674661][ T6422] chnl_net:caif_netlink_parms(): no params data found [ 35.679969][ T6416] chnl_net:caif_netlink_parms(): no params data found [ 35.687057][ T6424] chnl_net:caif_netlink_parms(): no params data found [ 35.771913][ T6423] chnl_net:caif_netlink_parms(): no params data found [ 35.823464][ T6416] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.826090][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.827753][ T6416] bridge_slave_0: entered allmulticast mode [ 35.829575][ T6416] bridge_slave_0: entered promiscuous mode [ 35.837000][ T6422] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.838940][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.840786][ T6422] bridge_slave_0: entered allmulticast mode [ 35.842673][ T6422] bridge_slave_0: entered promiscuous mode [ 35.845116][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.846809][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.848406][ T6424] bridge_slave_0: entered allmulticast mode [ 35.850406][ T6424] bridge_slave_0: entered promiscuous mode [ 35.854056][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.856579][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.858407][ T6424] bridge_slave_1: entered allmulticast mode [ 35.860396][ T6424] bridge_slave_1: entered promiscuous mode [ 35.865296][ T6416] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.866857][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.868618][ T6416] bridge_slave_1: entered allmulticast mode [ 35.870441][ T6416] bridge_slave_1: entered promiscuous mode [ 35.876959][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.878790][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.880508][ T6422] bridge_slave_1: entered allmulticast mode [ 35.882475][ T6422] bridge_slave_1: entered promiscuous mode [ 35.933601][ T6416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.943113][ T6422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.946980][ T6422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.950437][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.961058][ T6416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.970868][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.979244][ T6422] team0: Port device team_slave_0 added [ 35.981778][ T6422] team0: Port device team_slave_1 added [ 35.990677][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.992534][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.994118][ T6423] bridge_slave_0: entered allmulticast mode [ 35.996094][ T6423] bridge_slave_0: entered promiscuous mode [ 36.016580][ T6423] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.018195][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.019819][ T6423] bridge_slave_1: entered allmulticast mode [ 36.021668][ T6423] bridge_slave_1: entered promiscuous mode [ 36.025929][ T6418] chnl_net:caif_netlink_parms(): no params data found [ 36.029754][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.031297][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.037511][ T6422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.042155][ T6424] team0: Port device team_slave_0 added [ 36.043936][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.045835][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.051602][ T6422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.056129][ T6416] team0: Port device team_slave_0 added [ 36.070178][ T6416] team0: Port device team_slave_1 added [ 36.091438][ T6424] team0: Port device team_slave_1 added [ 36.108882][ T6423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.128187][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.129914][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.135942][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.139938][ T6423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.142445][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.144083][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.150723][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.157613][ T6416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.159318][ T6416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.165558][ T6416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.193207][ T6416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.195143][ T6416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.200923][ T6416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.208357][ T6418] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.210117][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.211874][ T6418] bridge_slave_0: entered allmulticast mode [ 36.213950][ T6418] bridge_slave_0: entered promiscuous mode [ 36.246266][ T6422] hsr_slave_0: entered promiscuous mode [ 36.284741][ T6422] hsr_slave_1: entered promiscuous mode [ 36.327158][ T6423] team0: Port device team_slave_0 added [ 36.340038][ T6418] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.341694][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.343328][ T6418] bridge_slave_1: entered allmulticast mode [ 36.345255][ T6418] bridge_slave_1: entered promiscuous mode [ 36.353524][ T6423] team0: Port device team_slave_1 added [ 36.363529][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.365376][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.371131][ T6423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.393190][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.398724][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.404689][ T6423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.435835][ T6424] hsr_slave_0: entered promiscuous mode [ 36.494565][ T6424] hsr_slave_1: entered promiscuous mode [ 36.554393][ T6424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.556289][ T6424] Cannot create hsr debugfs directory [ 36.560362][ T6418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.563745][ T6418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.616379][ T6416] hsr_slave_0: entered promiscuous mode [ 36.654725][ T6416] hsr_slave_1: entered promiscuous mode [ 36.694438][ T6416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.696276][ T6416] Cannot create hsr debugfs directory [ 36.712865][ T6418] team0: Port device team_slave_0 added [ 36.715586][ T6418] team0: Port device team_slave_1 added [ 36.786763][ T6423] hsr_slave_0: entered promiscuous mode [ 36.824633][ T6423] hsr_slave_1: entered promiscuous mode [ 36.864395][ T6423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.866104][ T6423] Cannot create hsr debugfs directory [ 36.871681][ T6418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.873341][ T6418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.880347][ T6418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.899641][ T6418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.901358][ T6418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.907490][ T6418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.056031][ T6418] hsr_slave_0: entered promiscuous mode [ 37.094489][ T6418] hsr_slave_1: entered promiscuous mode [ 37.154404][ T6418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.156375][ T6418] Cannot create hsr debugfs directory [ 37.240157][ T6422] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.249398][ T6422] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.260600][ T6422] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.265412][ T6422] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.269122][ T6424] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.274761][ T6424] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.279155][ T6424] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.283254][ T6424] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.306060][ T6416] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.313728][ T6416] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.329095][ T6416] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.345523][ T6416] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.370447][ T6418] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.386755][ T6418] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.395162][ T6418] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.398940][ T6423] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.403574][ T6423] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.427392][ T6418] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.433961][ T6423] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.438645][ T6423] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.445996][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.473067][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.475282][ T6420] Bluetooth: hci3: command tx timeout [ 37.476739][ T6420] Bluetooth: hci4: command tx timeout [ 37.478281][ T6420] Bluetooth: hci0: command tx timeout [ 37.479609][ T6420] Bluetooth: hci2: command tx timeout [ 37.480982][ T6420] Bluetooth: hci1: command tx timeout [ 37.487983][ T6416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.495829][ T6416] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.511610][ T6422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.532659][ T6423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.540299][ T6423] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.559188][ T256] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.560930][ T256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.566778][ T256] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.568450][ T256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.571889][ T256] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.573387][ T256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.578996][ T256] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.580600][ T256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.584912][ T256] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.586752][ T256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.594286][ T6424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.611386][ T6422] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.622897][ T256] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.624672][ T256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.651428][ T6416] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.653937][ T6416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.663660][ T6423] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.667620][ T6423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.675154][ T256] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.676905][ T256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.679378][ T256] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.681040][ T256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.701215][ T6418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.703703][ T6422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.715666][ T6418] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.733122][ T256] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.734975][ T256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.761076][ T256] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.762825][ T256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.799648][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.843673][ T6424] veth0_vlan: entered promiscuous mode [ 37.850489][ T6418] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.853220][ T6418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.873784][ T6423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.889821][ T6424] veth1_vlan: entered promiscuous mode [ 37.902994][ T6422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.933927][ T6423] veth0_vlan: entered promiscuous mode [ 37.955913][ T6423] veth1_vlan: entered promiscuous mode [ 37.979784][ T6424] veth0_macvtap: entered promiscuous mode [ 37.983529][ T6424] veth1_macvtap: entered promiscuous mode [ 37.993067][ T6423] veth0_macvtap: entered promiscuous mode [ 37.996915][ T6423] veth1_macvtap: entered promiscuous mode [ 38.007900][ T6423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.011877][ T6418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.018998][ T6416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.022736][ T6423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.036653][ T6422] veth0_vlan: entered promiscuous mode [ 38.040868][ T6422] veth1_vlan: entered promiscuous mode [ 38.046981][ T6423] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.048909][ T6423] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.050794][ T6423] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.052779][ T6423] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.058925][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.061606][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.066887][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.102599][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.111110][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.114009][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.130499][ T6424] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.132621][ T6424] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.136639][ T6424] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.138745][ T6424] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.157759][ T6422] veth0_macvtap: entered promiscuous mode [ 38.163917][ T6422] veth1_macvtap: entered promiscuous mode [ 38.184063][ T6416] veth0_vlan: entered promiscuous mode [ 38.186830][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.189393][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.191630][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.195582][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.198628][ T6422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.208110][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.224287][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.232901][ T6418] veth0_vlan: entered promiscuous mode [ 38.239098][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.239642][ T6418] veth1_vlan: entered promiscuous mode [ 38.240872][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.252174][ T6418] veth0_macvtap: entered promiscuous mode [ 38.255345][ T6418] veth1_macvtap: entered promiscuous mode [ 38.260897][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.263221][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.265829][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.268115][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.274949][ T6422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.277512][ T6416] veth1_vlan: entered promiscuous mode [ 38.290959][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.293609][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.297513][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.299989][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.302214][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.306966][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.310413][ T6418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.314283][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.316642][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.319013][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.321717][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.324024][ T6418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.326481][ T6418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.329616][ T6418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.333400][ T6418] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.335568][ T6418] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.337751][ T6418] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.339649][ T6418] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.344053][ T6422] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.348870][ T6422] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.351028][ T6422] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.353139][ T6422] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.361210][ T6423] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.384616][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.386443][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.422395][ T6500] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 38.434501][ T6416] veth0_macvtap: entered promiscuous mode [ 38.438113][ T6416] veth1_macvtap: entered promiscuous mode [ 38.485926][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.487926][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.487980][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.489724][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.493967][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.496951][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.499363][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.501607][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.507042][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.509371][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.511569][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.513996][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.522031][ T6416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.535490][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.538476][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.540693][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.552131][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.555022][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.557558][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.559713][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.562131][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.565389][ T6416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.571028][ T6416] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.573072][ T6416] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.575293][ T6416] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.577267][ T6416] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.623701][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.627630][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.658446][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.660353][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.678968][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.681044][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.687335][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.689188][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.751897][ T4258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.753793][ T4258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.817354][ T6517] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.836750][ T6519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.896188][ T6519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.904016][ T6519] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.554555][ T6420] Bluetooth: hci0: command tx timeout [ 39.556350][ T6420] Bluetooth: hci4: command tx timeout [ 39.558054][ T6420] Bluetooth: hci3: command tx timeout [ 39.561669][ T5984] Bluetooth: hci1: command tx timeout [ 40.742694][ T6569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.745004][ T6535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.759455][ T6570] netlink: 'syz.1.28': attribute type 10 has an invalid length. [ 40.771901][ T6570] syz_tun: entered promiscuous mode [ 40.778143][ T6570] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 40.848364][ T6426] Bluetooth: hci2: command tx timeout [ 40.882937][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.887674][ T6569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.925533][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.979607][ T6582] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 40.983817][ T6582] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 41.798397][ T6426] Bluetooth: hci1: command tx timeout [ 41.800064][ T6426] Bluetooth: hci3: command tx timeout [ 41.801467][ T6426] Bluetooth: hci4: command tx timeout [ 41.803010][ T6426] Bluetooth: hci0: command tx timeout [ 41.923540][ T6608] tmpfs: Bad value for 'mpol' [ 42.249095][ T6619] Bluetooth: MGMT ver 1.23 [ 43.076367][ T5984] Bluetooth: hci2: command tx timeout [ 43.128787][ T6624] hub 6-0:1.0: USB hub found [ 43.130480][ T6624] hub 6-0:1.0: 8 ports detected [ 43.593440][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 43.878701][ T5984] Bluetooth: hci0: command tx timeout [ 43.879995][ T5984] Bluetooth: hci4: command tx timeout [ 43.881284][ T5984] Bluetooth: hci3: command tx timeout [ 43.882614][ T5984] Bluetooth: hci1: command tx timeout [ 43.914932][ T6640] overlayfs: failed to resolve './file1': -2 [ 43.930545][ T6653] Zero length message leads to an empty skb [ 44.906410][ T6639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 45.240161][ T6674] bridge0: port 3(dummy0) entered blocking state [ 45.242022][ T6674] bridge0: port 3(dummy0) entered disabled state [ 45.245268][ T6674] dummy0: entered allmulticast mode [ 45.252677][ T6674] dummy0: entered promiscuous mode [ 45.255754][ T6674] bridge0: port 3(dummy0) entered blocking state [ 45.257204][ T6674] bridge0: port 3(dummy0) entered forwarding state [ 45.800726][ T6687] warning: `syz.2.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 48.691305][ T6733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.797472][ T6733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.459459][ T30] audit: type=1326 audit(53.402:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6820 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7f4a9a8 code=0x7ffc0000 [ 53.491033][ T30] audit: type=1326 audit(53.402:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6820 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7f4a9a8 code=0x7ffc0000 [ 53.574311][ T633] Bluetooth: hci5: Frame reassembly failed (-84) [ 54.294996][ T2248] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 54.504975][ T2248] usb 1-1: config 0 has no interfaces? [ 54.508187][ T2248] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 54.610816][ T2248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.837266][ T2248] usb 1-1: config 0 descriptor?? [ 55.117854][ T10] usb 1-1: USB disconnect, device number 2 [ 55.476776][ T5984] Bluetooth: hci5: command 0xfc11 tx timeout [ 55.494420][ T6426] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 57.129071][ T6896] [ 57.129842][ T6896] ====================================================== [ 57.131537][ T6896] WARNING: possible circular locking dependency detected [ 57.133212][ T6896] 6.12.0-rc1-syzkaller-g2d8bce6e34be #0 Not tainted [ 57.134666][ T6896] ------------------------------------------------------ [ 57.136213][ T6896] syz.4.147/6896 is trying to acquire lock: [ 57.137398][ T6896] ffff8000928827e8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_exists+0xb0/0x32c [ 57.139420][ T6896] [ 57.139420][ T6896] but task is already holding lock: [ 57.141005][ T6896] ffff8000928861a8 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x25c/0x231c [ 57.143203][ T6896] [ 57.143203][ T6896] which lock already depends on the new lock. [ 57.143203][ T6896] [ 57.145677][ T6896] [ 57.145677][ T6896] the existing dependency chain (in reverse order) is: [ 57.147806][ T6896] [ 57.147806][ T6896] -> #3 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 57.149659][ T6896] __mutex_lock_common+0x190/0x21a0 [ 57.150893][ T6896] mutex_lock_nested+0x2c/0x38 [ 57.152036][ T6896] rfcomm_dev_ioctl+0x18c/0x231c [ 57.153304][ T6896] rfcomm_sock_ioctl+0x98/0xf0 [ 57.154587][ T6896] sock_do_ioctl+0x134/0x2d0 [ 57.155727][ T6896] sock_ioctl+0x4ec/0x838 [ 57.156858][ T6896] __arm64_sys_ioctl+0x14c/0x1c8 [ 57.158011][ T6896] invoke_syscall+0x98/0x2b8 [ 57.159159][ T6896] el0_svc_common+0x130/0x23c [ 57.160384][ T6896] do_el0_svc+0x48/0x58 [ 57.161469][ T6896] el0_svc+0x54/0x168 [ 57.162570][ T6896] el0t_64_sync_handler+0x84/0x108 [ 57.163843][ T6896] el0t_64_sync+0x190/0x194 [ 57.164922][ T6896] [ 57.164922][ T6896] -> #2 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 57.167371][ T6896] lock_sock_nested+0x5c/0x11c [ 57.168698][ T6896] rfcomm_sk_state_change+0x60/0x2c8 [ 57.169996][ T6896] __rfcomm_dlc_close+0x234/0x608 [ 57.171193][ T6896] rfcomm_dlc_close+0x100/0x194 [ 57.172465][ T6896] __rfcomm_sock_close+0x138/0x258 [ 57.173864][ T6896] rfcomm_sock_shutdown+0xa8/0x214 [ 57.175173][ T6896] rfcomm_sock_release+0x58/0x114 [ 57.176501][ T6896] sock_close+0xa4/0x1e8 [ 57.177539][ T6896] __fput+0x1bc/0x75c [ 57.178615][ T6896] ____fput+0x20/0x30 [ 57.179633][ T6896] task_work_run+0x230/0x2e0 [ 57.180808][ T6896] get_signal+0x1350/0x152c [ 57.182025][ T6896] do_signal+0x26c/0x4c44 [ 57.183108][ T6896] do_notify_resume+0x74/0x1f4 [ 57.184344][ T6896] el0_svc+0xac/0x168 [ 57.185458][ T6896] el0t_64_sync_handler+0x84/0x108 [ 57.186679][ T6896] el0t_64_sync+0x190/0x194 [ 57.187761][ T6896] [ 57.187761][ T6896] -> #1 (&d->lock){+.+.}-{3:3}: [ 57.189519][ T6896] __mutex_lock_common+0x190/0x21a0 [ 57.190851][ T6896] mutex_lock_nested+0x2c/0x38 [ 57.192030][ T6896] __rfcomm_dlc_close+0x1f8/0x608 [ 57.193336][ T6896] rfcomm_dlc_close+0x100/0x194 [ 57.194620][ T6896] __rfcomm_sock_close+0x138/0x258 [ 57.195887][ T6896] rfcomm_sock_shutdown+0xa8/0x214 [ 57.197339][ T6896] rfcomm_sock_release+0x58/0x114 [ 57.198651][ T6896] sock_close+0xa4/0x1e8 [ 57.199781][ T6896] __fput+0x1bc/0x75c [ 57.200870][ T6896] ____fput+0x20/0x30 [ 57.201895][ T6896] task_work_run+0x230/0x2e0 [ 57.203148][ T6896] get_signal+0x1350/0x152c [ 57.204332][ T6896] do_signal+0x26c/0x4c44 [ 57.205495][ T6896] do_notify_resume+0x74/0x1f4 [ 57.206733][ T6896] el0_svc+0xac/0x168 [ 57.207741][ T6896] el0t_64_sync_handler+0x84/0x108 [ 57.209033][ T6896] el0t_64_sync+0x190/0x194 [ 57.210256][ T6896] [ 57.210256][ T6896] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 57.211993][ T6896] __lock_acquire+0x33f8/0x77c8 [ 57.213237][ T6896] lock_acquire+0x240/0x728 [ 57.214440][ T6896] __mutex_lock_common+0x190/0x21a0 [ 57.215895][ T6896] mutex_lock_nested+0x2c/0x38 [ 57.217207][ T6896] rfcomm_dlc_exists+0xb0/0x32c [ 57.218518][ T6896] rfcomm_dev_ioctl+0xd64/0x231c [ 57.219856][ T6896] rfcomm_sock_ioctl+0x98/0xf0 [ 57.221140][ T6896] sock_do_ioctl+0x134/0x2d0 [ 57.222473][ T6896] sock_ioctl+0x4ec/0x838 [ 57.223578][ T6896] __arm64_sys_ioctl+0x14c/0x1c8 [ 57.224855][ T6896] invoke_syscall+0x98/0x2b8 [ 57.226710][ T6896] el0_svc_common+0x130/0x23c [ 57.227883][ T6896] do_el0_svc+0x48/0x58 [ 57.228967][ T6896] el0_svc+0x54/0x168 [ 57.230027][ T6896] el0t_64_sync_handler+0x84/0x108 [ 57.231344][ T6896] el0t_64_sync+0x190/0x194 [ 57.232635][ T6896] [ 57.232635][ T6896] other info that might help us debug this: [ 57.232635][ T6896] [ 57.235124][ T6896] Chain exists of: [ 57.235124][ T6896] rfcomm_mutex --> sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_ioctl_mutex [ 57.235124][ T6896] [ 57.238479][ T6896] Possible unsafe locking scenario: [ 57.238479][ T6896] [ 57.240145][ T6896] CPU0 CPU1 [ 57.241319][ T6896] ---- ---- [ 57.242721][ T6896] lock(rfcomm_ioctl_mutex); [ 57.243757][ T6896] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 57.245789][ T6896] lock(rfcomm_ioctl_mutex); [ 57.247521][ T6896] lock(rfcomm_mutex); [ 57.248560][ T6896] [ 57.248560][ T6896] *** DEADLOCK *** [ 57.248560][ T6896] [ 57.250525][ T6896] 2 locks held by syz.4.147/6896: [ 57.251757][ T6896] #0: ffff0000dc836258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sock_ioctl+0x88/0xf0 [ 57.254514][ T6896] #1: ffff8000928861a8 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x25c/0x231c [ 57.256826][ T6896] [ 57.256826][ T6896] stack backtrace: [ 57.258220][ T6896] CPU: 1 UID: 0 PID: 6896 Comm: syz.4.147 Not tainted 6.12.0-rc1-syzkaller-g2d8bce6e34be #0 [ 57.260511][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 57.262835][ T6896] Call trace: [ 57.263559][ T6896] dump_backtrace+0x1b8/0x1e4 [ 57.264629][ T6896] show_stack+0x2c/0x3c [ 57.265694][ T6896] dump_stack_lvl+0xe4/0x150 [ 57.266694][ T6896] dump_stack+0x1c/0x28 [ 57.267728][ T6896] print_circular_bug+0x154/0x1c0 [ 57.268944][ T6896] check_noncircular+0x310/0x404 [ 57.270238][ T6896] __lock_acquire+0x33f8/0x77c8 [ 57.271457][ T6896] lock_acquire+0x240/0x728 [ 57.272599][ T6896] __mutex_lock_common+0x190/0x21a0 [ 57.273855][ T6896] mutex_lock_nested+0x2c/0x38 [ 57.275003][ T6896] rfcomm_dlc_exists+0xb0/0x32c [ 57.276152][ T6896] rfcomm_dev_ioctl+0xd64/0x231c [ 57.277306][ T6896] rfcomm_sock_ioctl+0x98/0xf0 [ 57.278427][ T6896] sock_do_ioctl+0x134/0x2d0 [ 57.279543][ T6896] sock_ioctl+0x4ec/0x838 [ 57.280507][ T6896] __arm64_sys_ioctl+0x14c/0x1c8 [ 57.281567][ T6896] invoke_syscall+0x98/0x2b8 [ 57.282616][ T6896] el0_svc_common+0x130/0x23c [ 57.283711][ T6896] do_el0_svc+0x48/0x58 [ 57.284736][ T6896] el0_svc+0x54/0x168 [ 57.285638][ T6896] el0t_64_sync_handler+0x84/0x108 [ 57.286716][ T6896] el0t_64_sync+0x190/0x194 [ 64.525251][ T2341] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.526872][ T2341] ieee802154 phy1 wpan1: encryption failed: -22