last executing test programs: 13.1771265s ago: executing program 0 (id=864): syz_open_dev$I2C(0x0, 0xfffffffffffffffe, 0x86100) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1, 0x8}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40488c1}, 0x4008810) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11.043198958s ago: executing program 0 (id=872): r0 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) fadvise64(r0, 0xf, 0x6, 0x1) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000080)='./file0\x00', 0x44000004) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r6, @ANYBLOB, @ANYBLOB="665e8233f7be40d7a6c213b49cf05cce277a24818bfc673195fbf19f7d992bcacb99c2455965e08b64beddb327b1904fd986e61fb2df87e6b20d941ed70e5a339588704f54a0df9b81bfb025ad3f488bff6a56644b640fb04c02f36cb4e7175108af639732855bb03cf7862d5b22ad6cf87449ffc4a78815", @ANYRESDEC=r3]) read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, &(0x7f0000000140), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xff5b) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2004}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0xe5b9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) 9.839643516s ago: executing program 4 (id=875): socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x9, 0x102001d, 0xfffffffb, 0xffffffff}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x543ddcb2c1ce9a4c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4c, 0x0}, 0xe07e872420dfefca) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r2, 0x0, 0x0, 0x61, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)) connect$pptp(r3, &(0x7f0000000280)={0x18, 0x2, {0x4, @remote}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000300)=0xc7) write(r5, &(0x7f00000003c0)="0000f289c3848dfe23eb3eca82d185b6ac515d6fd43b7d44c66176d761a646d62ef34e39ed0fe777918c9f05d7fcaa922ffdeabfe81001911c95c213f6a8543cea2d7e5acbf69022931a1ad0153f9944b2f07696f3da8c436c128bea55b4f21bbdbe71ad56821155ed518c677d48766be5eab0a72d567433febcfa86ffbf0f8b776b84384d85cd77b1d903c02a69eb5686c348d1861455eabb4c16984ee9bc87c69df90998858f336251fd4ceb", 0xad) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) poll(&(0x7f0000000440), 0x0, 0x101) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x8, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x6, 0xf, 0x80000006}, 0x0, 0x0) 9.766155188s ago: executing program 0 (id=876): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f0000001e40)=""/232, 0xe8}], 0x2}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000000240)=""/172, 0xac}, {&(0x7f0000000300)=""/176, 0xb0}, {&(0x7f0000001b00)=""/227, 0xe3}, {&(0x7f0000001440)=""/251, 0xfb}, {&(0x7f0000001f40)=""/260, 0x104}, {&(0x7f0000001d40)=""/249, 0xf9}, {&(0x7f0000001680)=""/107, 0x6b}, {&(0x7f0000001600)=""/105, 0x69}, {&(0x7f0000001a80)=""/85, 0x55}], 0xa}, 0x7f}], 0x4, 0x0, 0x0) 7.453954722s ago: executing program 0 (id=880): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) 7.289543738s ago: executing program 2 (id=883): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x5, 0x0, 0x8], 0x8000000, 0x385310}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0xa2442, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004002) 7.273101587s ago: executing program 0 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x8d, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 6.8827189s ago: executing program 1 (id=886): r0 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) fadvise64(r0, 0xf, 0x6, 0x1) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000080)='./file0\x00', 0x44000004) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r6, @ANYBLOB, @ANYBLOB="665e8233f7be40d7a6c213b49cf05cce277a24818bfc673195fbf19f7d992bcacb99c2455965e08b64beddb327b1904fd986e61fb2df87e6b20d941ed70e5a339588704f54a0df9b81bfb025ad3f488bff6a56644b640fb04c02f36cb4e7175108af639732855bb03cf7862d5b22ad6cf87449ffc4a78815", @ANYRESDEC=r3]) read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, &(0x7f0000000140), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xff5b) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2004}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0xe5b9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) 5.766055206s ago: executing program 1 (id=888): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r4, 0x80000}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000240)={r3, 0xc89, 0xa, 0xfffffffa, 0x3, [0x0], [0x5, 0x5, 0xfffffffd, 0x2], [0xe, 0x7, 0xffffffff, 0x8000], [0xfffffffffffffff8, 0xa679, 0x1, 0x7f]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5}) 5.557922162s ago: executing program 2 (id=890): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 5.535854463s ago: executing program 1 (id=891): unshare(0x2c020400) r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xce, 0x0, 0xfefc) 5.195318234s ago: executing program 4 (id=892): modify_ldt$write2(0x11, &(0x7f0000000040)={0x0, 0x20000000, 0xffffffffffffffff}, 0x10) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000a80), 0x1007, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={r1, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x101601) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f00000003c0)={0x39bd, 0x7, 0x769, {0x5, 0x8}, 0xd4c6, 0x80000000}) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000001480)=""/4096) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r5, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400)={0x1, 0x0, [{0xb000, 0x0, 0x0}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 5.138305976s ago: executing program 2 (id=893): socket(0x2b, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 5.137859196s ago: executing program 1 (id=894): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @local}, {0x2, 0x4e23, @private=0xa010101}, 0x2, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='hsr0\x00', 0x7ffe, 0x8, 0x100}) setsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa8242) r2 = fanotify_init(0x200, 0x0) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r1, 0x406, r1) fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2b, 0x80, 0x9, 0x3, 0x62, @dev={0xfe, 0x80, '\x00', 0x42}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7, 0x700, 0xfff, 0x7}}) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000b40)={0x7, 0x7806, @value=0xffffffffffff0000}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000700)=@nat={'nat\x00', 0x1b, 0x5, 0x3e0, 0x27c, 0x27c, 0xffffffff, 0x0, 0x1e4, 0x34c, 0x34c, 0xffffffff, 0x34c, 0x34c, 0x5, &(0x7f0000000680), {[{{@ip={@remote, @broadcast, 0xffffff00, 0xff, 'wlan0\x00', 'veth0_to_hsr\x00', {}, {}, 0x5e, 0x2}, 0x0, 0xc0, 0xf4, 0x0, {}, [@common=@ah={{0x2c}, {[0x8000, 0x5]}}, @common=@icmp={{0x24}, {0xf, "16ca", 0x1}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @port=0x4e23, @icmp_id=0x64}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x0, 0xffffffff, 'pim6reg\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x33, 0x1, 0x60}, 0x0, 0xbc, 0xf0, 0x0, {}, [@common=@icmp={{0x24}, {0x5, "36f9", 0x1}}, @common=@unspec=@pkttype={{0x28}, {0x4, 0x4}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1, @empty, @local, @port=0x4e20, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x0, 0x4}, {0x4, 0x5, 0x1}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x0, 0xff, 'pim6reg1\x00', 'veth1_macvtap\x00', {0xff}, {}, 0x73, 0x3, 0x18}, 0x0, 0x9c, 0xd0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x7, 0x5f05}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x14, @multicast2, @remote, @icmp_id=0x65, @gre_key=0xd98}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x43c) r5 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xdf, &(0x7f0000000300)=""/223, 0x40e00, 0x10, '\x00', r4, @fallback=0x26, r3, 0x8, &(0x7f0000000b80)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xb, 0x10000, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000540)=[r3, r3, r3, 0xffffffffffffffff, r5], &(0x7f0000000580)=[{0x4, 0x1, 0xf, 0xc}], 0x10, 0xc}, 0x94) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) openat$nullb(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5.134065806s ago: executing program 3 (id=895): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) 2.768649131s ago: executing program 3 (id=896): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0xc0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x73, 0x3, 0x6, 0x0, 0xfffffffffffffffd], 0x5000, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.755053792s ago: executing program 0 (id=897): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') lseek(r4, 0x100000008, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f00000002c0)={0xa, @sliced={0x8001, [0x6, 0x6, 0x6, 0x8, 0x8, 0x1ff, 0x3, 0x0, 0x79a, 0x5, 0x150a, 0x7fff, 0x7, 0x8, 0x6, 0x2, 0xfffb, 0x7, 0xfffd, 0x7, 0x80, 0x8000, 0x2, 0x4297, 0x4, 0x5, 0xeb95, 0x1, 0x8, 0x4, 0x5, 0x7, 0x1000, 0x7f, 0xa62c, 0x7, 0xfffd, 0x8, 0xb, 0x9, 0x6, 0x6, 0xf, 0x8, 0x193, 0x9, 0x7, 0xfce4], 0x6}}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x40400, 0x8) fcntl$notify(r7, 0x402, 0x8000003b) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) accept4$alg(r1, 0x0, 0x0, 0x0) 2.749017022s ago: executing program 4 (id=898): r0 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) fadvise64(r0, 0xf, 0x6, 0x1) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000080)='./file0\x00', 0x44000004) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYRESOCT=r5, @ANYRESHEX=r6, @ANYBLOB, @ANYBLOB="665e8233f7be40d7a6c213b49cf05cce277a24818bfc673195fbf19f7d992bcacb99c2455965e08b64beddb327b1904fd986e61fb2df87e6b20d941ed70e5a339588704f54a0df9b81bfb025ad3f488bff6a56644b640fb04c02f36cb4e7175108af639732855bb03cf7862d5b22ad6cf87449ffc4a78815", @ANYRESDEC=r3]) read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, &(0x7f0000000140), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xff5b) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2004}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0xe5b9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) 2.729019353s ago: executing program 2 (id=899): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x8040) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000009, 0x10, r0, 0xb1f6000) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x38}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = creat(0x0, 0xecf86c37d5304974) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a8"], 0x44}, 0x1, 0x0, 0x0, 0x20008802}, 0x30) 2.17024467s ago: executing program 3 (id=900): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000000)={0xdb, 0x9fa, 0x9, 0xff}) bind$inet(r0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0xf0f003}) 1.487349052s ago: executing program 2 (id=901): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r4, 0x80000}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000240)={r3, 0xc89, 0xa, 0xfffffffa, 0x3, [0x0], [0x5, 0x5, 0xfffffffd, 0x2], [0xe, 0x7, 0xffffffff, 0x8000], [0xfffffffffffffff8, 0xa679, 0x1, 0x7f]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5}) 1.427921504s ago: executing program 2 (id=902): socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x9, 0x102001d, 0xfffffffb, 0xffffffff}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x543ddcb2c1ce9a4c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4c, 0x0}, 0xe07e872420dfefca) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r2, 0x0, 0x0, 0x61, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)) connect$pptp(r3, &(0x7f0000000280)={0x18, 0x2, {0x4, @remote}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000300)=0xc7) write(r5, &(0x7f00000003c0)="0000f289c3848dfe23eb3eca82d185b6ac515d6fd43b7d44c66176d761a646d62ef34e39ed0fe777918c9f05d7fcaa922ffdeabfe81001911c95c213f6a8543cea2d7e5acbf69022931a1ad0153f9944b2f07696f3da8c436c128bea55b4f21bbdbe71ad56821155ed518c677d48766be5eab0a72d567433febcfa86ffbf0f8b776b84384d85cd77b1d903c02a69eb5686c348d1861455eabb4c16984ee9bc87c69df90998858f336251fd4ceb", 0xad) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) poll(&(0x7f0000000440), 0x0, 0x101) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x8, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x6, 0xf, 0x80000006}, 0x0, 0x0) 1.385372265s ago: executing program 1 (id=903): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0x0, 0x9}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) 1.384901165s ago: executing program 4 (id=904): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x3}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x5, 0xef, 0x8d, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0xfc, 0x2, '\x00', 0x5}, {0x0, 0x3, 0x2, '\x00', 0x3}, {0xf, 0x0, 0x8, '\x00', 0x5}, {0x9, 0xdb, 0x1, '\x00', 0xff}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0xb, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x3, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcd}, {0x6c, 0x3f, 0x0, '\x00', 0x3}, {0x6e, 0x4, 0x1, '\x00', 0xb}, {0x7, 0x2, 0x8, '\x00', 0xf9}, {0x5f, 0x7}, {0x1, 0x6, 0x9, '\x00', 0x2}, {0x8, 0x6, 0x1, '\x00', 0x49}, {0xae, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc7}, {0xbd, 0x9, 0x54, '\x00', 0x9}]}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)="42f7a85b"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040001) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) 1.344187587s ago: executing program 3 (id=905): socket$inet6(0xa, 0x2, 0x0) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 1.165495762s ago: executing program 3 (id=906): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000380)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x24, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x30, 0x4, 0x66, 0x80, 0x4, 0x32, 0xaf, @private=0xa010100, @local}, "50040124c5aee3f3"}}}, 0x46) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r2 = fsopen(0x0, 0x1) fsmount(r2, 0x0, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x7ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004084) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) 1.012533707s ago: executing program 1 (id=907): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) pipe(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0xa20, 0x8000c64) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) r3 = signalfd4(r1, &(0x7f0000000180)={[0x7]}, 0x8, 0x80800) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000480)="9586a26e2862", 0x6}], 0x1) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 945.51204ms ago: executing program 4 (id=908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000080)={0x1, 0x8, '\x00', 0x0, &(0x7f0000000040)=[0x0]}) r3 = socket$l2tp6(0xa, 0x2, 0x73) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='clear_refs\x00') bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x4}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) 408.808466ms ago: executing program 3 (id=909): socket$packet(0x11, 0x3, 0x300) r0 = openat$full(0xffffff9c, 0x0, 0x8002, 0x0) membarrier(0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30ab, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r0}) r1 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x2b, '\x00', @buffer={"010d1de90c6171360aaf4716308a633fda925d1085c6b9f70f72ad6cc5f48537", 0x20}, 0xfffffff9}, {0x26, '\x00', @st={0x4, [{0x3, @svalue=0x4}, {0x2, @svalue=0x775a}, {0x3, @svalue=0xd2}, {0x1, @svalue=0xfffffffffffffff8}]}, 0x7fe}]}) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8, 0x0, r1}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r5, &(0x7f0000000180)=0xfe5f, 0x12) 0s ago: executing program 4 (id=910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000600)=0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x4840) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts. [ 66.595936][ T4177] cgroup: Unknown subsys name 'net' [ 66.708167][ T4177] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.278282][ T4177] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.721829][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 69.746931][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 69.789975][ T4202] chnl_net:caif_netlink_parms(): no params data found [ 69.899231][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 69.923060][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 69.993672][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.000872][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.009547][ T4194] device bridge_slave_0 entered promiscuous mode [ 70.018656][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.025854][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.034038][ T4190] device bridge_slave_0 entered promiscuous mode [ 70.060521][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.068246][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.076515][ T4202] device bridge_slave_0 entered promiscuous mode [ 70.084556][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.092185][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.100482][ T4194] device bridge_slave_1 entered promiscuous mode [ 70.108958][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.116722][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.125895][ T4190] device bridge_slave_1 entered promiscuous mode [ 70.139771][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.147122][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.155498][ T4202] device bridge_slave_1 entered promiscuous mode [ 70.211004][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.219291][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.227960][ T4200] device bridge_slave_0 entered promiscuous mode [ 70.246271][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.264634][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.280796][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.288356][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.297083][ T4200] device bridge_slave_1 entered promiscuous mode [ 70.306478][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.323619][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.330715][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.339155][ T4195] device bridge_slave_0 entered promiscuous mode [ 70.348794][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.367472][ T4202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.386646][ T4202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.410015][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.417416][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.425592][ T4195] device bridge_slave_1 entered promiscuous mode [ 70.460707][ T4190] team0: Port device team_slave_0 added [ 70.471078][ T4194] team0: Port device team_slave_0 added [ 70.479543][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.490818][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.509829][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.520747][ T4190] team0: Port device team_slave_1 added [ 70.529222][ T4194] team0: Port device team_slave_1 added [ 70.537048][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.549330][ T4202] team0: Port device team_slave_0 added [ 70.588614][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.595683][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.622005][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.635612][ T4202] team0: Port device team_slave_1 added [ 70.663434][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.670446][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.697682][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.710626][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.717804][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.744079][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.770061][ T4195] team0: Port device team_slave_0 added [ 70.778504][ T4200] team0: Port device team_slave_0 added [ 70.794220][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.801232][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.828449][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.848549][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.855786][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.887450][ T4202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.900203][ T4195] team0: Port device team_slave_1 added [ 70.907410][ T4200] team0: Port device team_slave_1 added [ 70.932127][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.939674][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.966248][ T4202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.985631][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.993015][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.019695][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.069756][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.077685][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.104445][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.121234][ T4190] device hsr_slave_0 entered promiscuous mode [ 71.128651][ T4190] device hsr_slave_1 entered promiscuous mode [ 71.148585][ T4194] device hsr_slave_0 entered promiscuous mode [ 71.155660][ T4194] device hsr_slave_1 entered promiscuous mode [ 71.163008][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.171132][ T4194] Cannot create hsr debugfs directory [ 71.177286][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.184612][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.211111][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.241721][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.248721][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.275729][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.307672][ T4202] device hsr_slave_0 entered promiscuous mode [ 71.315059][ T4202] device hsr_slave_1 entered promiscuous mode [ 71.322143][ T4202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.329731][ T4202] Cannot create hsr debugfs directory [ 71.342720][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 71.393283][ T4200] device hsr_slave_0 entered promiscuous mode [ 71.400315][ T4200] device hsr_slave_1 entered promiscuous mode [ 71.411274][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.418995][ T4200] Cannot create hsr debugfs directory [ 71.421771][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 71.430699][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 71.437681][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.444710][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.451971][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 71.458181][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 71.485559][ T4195] device hsr_slave_0 entered promiscuous mode [ 71.492436][ T4195] device hsr_slave_1 entered promiscuous mode [ 71.499948][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.508141][ T4195] Cannot create hsr debugfs directory [ 71.813803][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.832777][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.842765][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.852124][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.911041][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.927860][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.939033][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.950575][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.024744][ T4202] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.053061][ T4202] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.069849][ T4202] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.087663][ T4202] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.118125][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.134810][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.148543][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.179542][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.187590][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.199309][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.223172][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.234180][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.268298][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.281226][ T4200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.294449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.304344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.314508][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.321874][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.330847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.342347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.350856][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.358269][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.366773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.379570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.387782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.403711][ T4200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.415702][ T4200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.427085][ T4200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.475473][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.486537][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.496273][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.504368][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.512968][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.522167][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.530730][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.554548][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.575885][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.586262][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.595741][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.604612][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.615927][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.667434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.677513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.693405][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.700528][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.715557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.758050][ T4202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.773603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.783777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.793436][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.800592][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.809370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.820038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.861216][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.876230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.886281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.896719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.906174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.919600][ T4202] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.938686][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.956620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.966263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.975420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.985260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.994170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.003479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.011197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.019799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.027965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.038350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.047370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.069774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.078866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.087997][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.095197][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.104918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.114452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.124181][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.131241][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.139463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.148923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.158352][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.165533][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.173828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.183464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.191975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.204260][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.214788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.225542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.235873][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.243046][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.255190][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.265289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.282275][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.326080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.340671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.359896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.371522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.380722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.396110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.408488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.421635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.422542][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 73.438366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.449734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.458859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.467606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.477137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.485197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.494264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.501892][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 73.509066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.513995][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 73.528683][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.544009][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.545112][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 73.571003][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.572348][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 73.584643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.602375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.611936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.620470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.635498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.666641][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.682605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.696369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.713911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.728132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.739577][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.746853][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.763402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.776132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.785003][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.793005][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.809401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.818403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.851055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.875298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.885281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.919996][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.937617][ T4190] device veth0_vlan entered promiscuous mode [ 73.968446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.980321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.990358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.998265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.007300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.017246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.026018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.035190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.046868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.055569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.066888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.083445][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.095104][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.114438][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.123191][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.145472][ T4190] device veth1_vlan entered promiscuous mode [ 74.177440][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.186066][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.201182][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.210399][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.245856][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.294377][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.312273][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.340152][ T4190] device veth0_macvtap entered promiscuous mode [ 74.371267][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.388826][ T4190] device veth1_macvtap entered promiscuous mode [ 74.402319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.416438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.432106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.439828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.465743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.476314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.494466][ T4194] device veth0_vlan entered promiscuous mode [ 74.515095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.529725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.544135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.559191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.574857][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.593182][ T4194] device veth1_vlan entered promiscuous mode [ 74.610633][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.618686][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.634709][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.644394][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.655798][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.665724][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.679233][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.698938][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.709291][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.720037][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.768146][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.779806][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.790867][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.800357][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.823146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.839066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.873836][ T4195] device veth0_vlan entered promiscuous mode [ 74.882914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.893725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.903992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.913226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.922648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.930789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.938948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.948023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.958737][ T4200] device veth0_vlan entered promiscuous mode [ 74.977486][ T4195] device veth1_vlan entered promiscuous mode [ 74.994072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.003698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.021735][ T4200] device veth1_vlan entered promiscuous mode [ 75.033385][ T4194] device veth0_macvtap entered promiscuous mode [ 75.079495][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.088184][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.105822][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.117546][ T4194] device veth1_macvtap entered promiscuous mode [ 75.157973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.170034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.179554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.208447][ T4202] device veth0_vlan entered promiscuous mode [ 75.220859][ T4195] device veth0_macvtap entered promiscuous mode [ 75.237204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.246175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.255074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.267103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.275517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.290964][ T4200] device veth0_macvtap entered promiscuous mode [ 75.303729][ T4195] device veth1_macvtap entered promiscuous mode [ 75.332152][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.340173][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.355492][ T4202] device veth1_vlan entered promiscuous mode [ 75.364910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.373532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.382161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.391021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.401045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.409308][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.420539][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.432915][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.441069][ T4200] device veth1_macvtap entered promiscuous mode [ 75.479674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.490151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.500917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.504356][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 75.516504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.526035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.537621][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.548936][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.560318][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.581823][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 75.587961][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 75.594682][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 75.605355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.615000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.625597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.636705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.647273][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.657270][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.666877][ T2305] Bluetooth: hci4: command 0x040f tx timeout [ 75.669216][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.682996][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.714583][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.725382][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.739113][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.750326][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.764881][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.776142][ T4202] device veth0_macvtap entered promiscuous mode [ 75.786651][ T4202] device veth1_macvtap entered promiscuous mode [ 75.800198][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.811107][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.822608][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.833661][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.844986][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.855902][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.867512][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.876498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.885677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.893998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.903883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.912879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.921927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.933126][ T3078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.935998][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.941237][ T3078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.963702][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.973963][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.985814][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.998010][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.016109][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.027836][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.039278][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.054310][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.065639][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.078864][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.090366][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.101107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.109639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.118987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.128147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.137351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.161446][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.170207][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.181594][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.190351][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.206621][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.221104][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.235787][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.244610][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.278954][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.299586][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.313842][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.329845][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.341259][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.357102][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.367580][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.378294][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.391034][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.438836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.449869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.495989][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.519502][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.530440][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.544737][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.556605][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.567416][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.577757][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.588803][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.606642][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.624368][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.656234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.666951][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.679432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.690354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.761862][ T4202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.770636][ T4202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.781617][ T4202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.790367][ T4202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.823498][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.827018][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.850069][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.857629][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.930206][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.943213][ T3078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.973197][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.006896][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.046194][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.048261][ T3078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.076082][ T3078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.106716][ T3078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.133225][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.142216][ T3078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.163837][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.190287][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.226516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.267879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.295409][ T4276] process 'syz.0.1' launched '/dev/fd/4' with NULL argv: empty string added [ 77.327998][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.351987][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.390667][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.584459][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 77.662759][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 77.681455][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 77.699566][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 77.753830][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 78.000974][ T4298] input: syz0 as /devices/virtual/input/input5 [ 78.038798][ T4294] binder_alloc: 4293: pid 4293 spamming oneway? 2 buffers allocated for a total size of 5120 [ 78.087328][ T4290] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 78.122640][ T4299] binder_alloc: 4293: pid 4293 spamming oneway? 3 buffers allocated for a total size of 5128 [ 78.230908][ T4294] binder: 4293:4294 ioctl c0186e86 200000000140 returned -22 [ 78.280315][ T4294] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.781775][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.031516][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 79.201688][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 79.291998][ T13] usb 1-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 79.332299][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 79.369964][ T13] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.571588][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.617184][ T13] usb 1-1: New USB device strings: Mfr=1, Product=232, SerialNumber=3 [ 79.636525][ T13] usb 1-1: Product: syz [ 79.646662][ T13] usb 1-1: Manufacturer: syz [ 79.672650][ T13] usb 1-1: SerialNumber: syz [ 79.958512][ T4303] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.373726][ T13] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 80.383236][ T13] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 80.400952][ T13] cdc_ncm 1-1:1.0: bind() failure [ 80.475356][ T13] usb 1-1: USB disconnect, device number 2 [ 80.593414][ T4336] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.801545][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.074189][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 81.188224][ T4358] netlink: 136 bytes leftover after parsing attributes in process `syz.2.25'. [ 81.219808][ T4358] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 81.401847][ T21] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 81.420294][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.436725][ T21] usb 4-1: Product: syz [ 81.452152][ T21] usb 4-1: Manufacturer: syz [ 81.460527][ T21] usb 4-1: SerialNumber: syz [ 81.512395][ T21] usb 4-1: config 0 descriptor?? [ 81.567049][ T4363] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 81.587080][ T4363] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 81.774888][ T4371] batman_adv: batadv0: Adding interface: dummy0 [ 81.792978][ T4371] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.821904][ T21] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 81.896289][ T4371] batman_adv: batadv0: Interface activated: dummy0 [ 81.937924][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 81.960370][ T4373] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.971903][ T4375] batman_adv: batadv0: Interface deactivated: dummy0 [ 82.001881][ T4375] batman_adv: batadv0: Removing interface: dummy0 [ 82.018885][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.052040][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.071648][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.092861][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.361605][ T21] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 82.384664][ T21] usb 4-1: USB disconnect, device number 2 [ 82.714442][ T4396] device ip6gretap1 entered promiscuous mode [ 83.132914][ T4414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.44'. [ 84.816585][ T4434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.50'. [ 85.148015][ T4453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.58'. [ 86.359554][ T4477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.65'. [ 86.392691][ T4477] netlink: 108 bytes leftover after parsing attributes in process `syz.4.65'. [ 86.471647][ T4477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.65'. [ 86.480584][ T4477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.65'. [ 86.554783][ T4479] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 86.594349][ T4479] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 86.787201][ T1108] cfg80211: failed to load regulatory.db [ 87.071580][ T7] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 87.232158][ T4493] Zero length message leads to an empty skb [ 88.207106][ T7] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.221511][ T7] usb 5-1: config 0 has no interface number 0 [ 88.345947][ T4505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.73'. [ 88.381555][ T7] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 88.390817][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.077966][ T7] usb 5-1: Product: syz [ 89.083191][ T7] usb 5-1: Manufacturer: syz [ 89.087875][ T7] usb 5-1: SerialNumber: syz [ 89.094792][ T7] usb 5-1: config 0 descriptor?? [ 89.133642][ T7] usb 5-1: selecting invalid altsetting 1 [ 89.140504][ T7] dvb_ttusb_budget: ttusb_init_controller: error [ 89.157716][ T7] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 89.270750][ T7] DVB: Unable to find symbol stv0299_attach() [ 89.456009][ T7] DVB: Unable to find symbol tda8083_attach() [ 89.468897][ T7] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 89.510616][ T7] usb 5-1: USB disconnect, device number 2 [ 89.621548][ T26] audit: type=1107 audit(1779123198.205:2): pid=4521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='C]Ţxxp@}3SVVؖa' [ 89.687306][ T26] audit: type=1326 audit(1779123198.275:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.2.81" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f230066ee59 code=0x0 [ 91.668889][ T4542] block device autoloading is deprecated and will be removed. [ 92.953962][ T4575] tipc: Started in network mode [ 92.967443][ T4575] tipc: Node identity b2b84f6dd807, cluster identity 4711 [ 92.985286][ T4575] tipc: Enabled bearer , priority 0 [ 92.997335][ T4575] device syzkaller0 entered promiscuous mode [ 93.016092][ T26] audit: type=1107 audit(1779123201.605:4): pid=4572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='C]Ţxxp@}3SVVؖa' [ 93.079383][ T4575] tipc: Resetting bearer [ 93.097375][ T4574] tipc: Resetting bearer [ 93.122197][ T4574] tipc: Disabling bearer [ 93.405609][ T26] audit: type=1326 audit(1779123201.995:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.1.103" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41baafce59 code=0x7ffc0000 [ 93.511789][ T26] audit: type=1326 audit(1779123201.995:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.1.103" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f41baafce59 code=0x7ffc0000 [ 94.370391][ T26] audit: type=1326 audit(1779123202.025:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.1.103" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41baafce59 code=0x7ffc0000 [ 94.395475][ T26] audit: type=1326 audit(1779123202.025:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.1.103" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f41baafce59 code=0x7ffc0000 [ 94.419435][ T26] audit: type=1326 audit(1779123202.025:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.1.103" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41baafce59 code=0x7ffc0000 [ 94.528881][ T4594] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 94.535885][ T4594] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.566560][ T26] audit: type=1326 audit(1779123202.025:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.1.103" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f41baafce59 code=0x7ffc0000 [ 94.583169][ T4598] vhci_hcd: connection closed [ 94.623342][ T4594] vhci_hcd vhci_hcd.0: Device attached [ 94.633320][ T26] audit: type=1326 audit(1779123202.025:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.1.103" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41baafce59 code=0x7ffc0000 [ 94.752645][ T26] audit: type=1326 audit(1779123202.035:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.1.103" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f41baafce59 code=0x7ffc0000 [ 94.834157][ T26] audit: type=1326 audit(1779123202.035:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.1.103" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41baafce59 code=0x7ffc0000 [ 94.861273][ T3078] vhci_hcd: stop threads [ 94.862077][ T13] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 94.881274][ T3078] vhci_hcd: release socket [ 94.909898][ T3078] vhci_hcd: disconnect device [ 94.947931][ T26] audit: type=1326 audit(1779123202.055:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4586 comm="syz.1.103" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f41baafce59 code=0x7ffc0000 [ 95.580986][ T4624] device syzkaller1 entered promiscuous mode [ 95.833546][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880616aa800: rx timeout, send abort [ 96.318119][ T4634] device syzkaller0 entered promiscuous mode [ 96.332103][ T4636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'. [ 96.335807][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880616a8800: rx timeout, send abort [ 96.350011][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880616aa800: abort rx timeout. Force session deactivation [ 96.371338][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 96.849943][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880616a8800: abort rx timeout. Force session deactivation [ 96.891948][ T4231] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.985442][ T4655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.125'. [ 97.013005][ T26] audit: type=1107 audit(1779123205.605:15): pid=4652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='C]Ţxxp@}3SVVؖa' [ 97.171565][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 97.294348][ T4231] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 97.309196][ T4231] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.335938][ T4231] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.367364][ T4231] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.386933][ T4231] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.405253][ T4231] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.415065][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.761595][ T4231] usb 1-1: GET_CAPABILITIES returned 0 [ 98.386971][ T4231] usbtmc 1-1:16.0: can't read capabilities [ 98.414172][ T4231] usb 1-1: USB disconnect, device number 3 [ 98.560040][ T4685] netlink: 'syz.3.135': attribute type 8 has an invalid length. [ 98.888329][ T4701] netlink: 'syz.4.142': attribute type 39 has an invalid length. [ 99.981512][ T13] vhci_hcd: vhci_device speed not set [ 101.518866][ T4751] tc action pedit 'at' offset 6 out of bounds [ 101.777207][ T4758] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 103.062772][ T4781] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.130049][ T26] audit: type=1107 audit(1779123211.715:16): pid=4774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='C]Ţxxp@}3SVVؖa' [ 103.916943][ T4806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.178'. [ 108.235993][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 108.281958][ T4830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.401426][ T13] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 108.801577][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.949374][ T13] usb 1-1: not running at top speed; connect to a high speed hub [ 109.072187][ T13] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 109.139999][ T13] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 109.531727][ T13] usb 1-1: string descriptor 0 read error: -22 [ 109.635174][ T13] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 110.636386][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.511578][ T13] usb 1-1: can't set config #1, error -71 [ 111.551582][ T13] usb 1-1: USB disconnect, device number 4 [ 113.085950][ T26] audit: type=1107 audit(1779123221.675:17): pid=4884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='C]Ţxxp@}3SVVؖa' [ 113.411308][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 113.881353][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 113.891340][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 113.901338][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 113.911347][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 113.921338][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 113.931339][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 113.941340][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 113.951333][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 116.193016][ T4921] netlink: 'syz.2.211': attribute type 26 has an invalid length. [ 116.201085][ T4921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.211'. [ 116.242287][ T4917] bond0: option miimon: invalid value (18446744073705408328) [ 117.175777][ T4917] bond0: option miimon: allowed values 0 - 2147483647 [ 121.506884][ T4968] netlink: 'syz.0.223': attribute type 1 has an invalid length. [ 121.585876][ T4968] device bond1 entered promiscuous mode [ 121.631884][ T4971] netlink: 596 bytes leftover after parsing attributes in process `syz.3.224'. [ 121.652892][ T4968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.737071][ T4978] netlink: 'syz.1.225': attribute type 26 has an invalid length. [ 121.761563][ T4978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 121.909070][ T4968] bond1: (slave bridge1): making interface the new active one [ 121.997636][ T4968] device bridge1 entered promiscuous mode [ 122.001100][ T26] audit: type=1326 audit(1779123230.585:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.0.223" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2fc8c8e59 code=0x0 [ 122.582405][ T26] audit: type=1326 audit(1779123231.105:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4983 comm="syz.1.228" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41baafce59 code=0x7ffc0000 [ 122.729164][ T4968] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 122.739810][ T26] audit: type=1326 audit(1779123231.145:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4983 comm="syz.1.228" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41baafce59 code=0x7ffc0000 [ 122.763890][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.862159][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 122.949025][ T4992] netlink: 'syz.3.229': attribute type 1 has an invalid length. [ 122.979781][ T4992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.987586][ T4992] IPv6: NLM_F_CREATE should be set when creating new route [ 123.278514][ T4998] fuse: root generation should be zero [ 127.936859][ T5022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 127.976169][ T5024] netlink: 'syz.0.237': attribute type 29 has an invalid length. [ 128.059672][ T5024] netlink: 'syz.0.237': attribute type 29 has an invalid length. [ 128.095345][ T5026] netlink: 'syz.0.237': attribute type 29 has an invalid length. [ 128.197244][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 129.270485][ T26] audit: type=1326 audit(1779123237.855:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.1.242" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41baafce59 code=0x7ffc0000 [ 129.375837][ T5045] IPVS: lc: FWM 3 0x00000003 - no destination available [ 129.384119][ T26] audit: type=1326 audit(1779123237.915:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.1.242" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41baafce59 code=0x7ffc0000 [ 129.774598][ T5059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.249'. [ 131.081393][ T4859] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.161475][ T5073] netlink: 'syz.2.253': attribute type 29 has an invalid length. [ 131.219041][ T5073] netlink: 'syz.2.253': attribute type 29 has an invalid length. [ 131.321470][ T4859] usb 5-1: Using ep0 maxpacket: 32 [ 131.741609][ T4859] usb 5-1: unable to get BOS descriptor or descriptor too short [ 132.131122][ T5076] netlink: 'syz.2.253': attribute type 29 has an invalid length. [ 132.331678][ T5084] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 132.371619][ T4859] usb 5-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 132.401144][ T4859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.436509][ T5084] IPVS: lc: FWM 3 0x00000003 - no destination available [ 132.448940][ T4859] usb 5-1: Product: syz [ 132.459487][ T5087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 132.478882][ T4859] usb 5-1: Manufacturer: syz [ 132.489005][ T4859] usb 5-1: SerialNumber: syz [ 132.498565][ T26] audit: type=1326 audit(1779123241.085:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5086 comm="syz.2.259" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230066ee59 code=0x7ffc0000 [ 132.550292][ T26] audit: type=1326 audit(1779123241.085:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5086 comm="syz.2.259" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230066ee59 code=0x7ffc0000 [ 132.700159][ T5094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.261'. [ 132.875570][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.882139][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.992796][ T4859] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 133.081102][ T4859] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 133.566406][ T4859] usb 5-1: USB disconnect, device number 3 [ 133.876837][ T5114] device syzkaller0 entered promiscuous mode [ 133.991156][ T4871] udevd[4871]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.117598][ T26] audit: type=1326 audit(1779123243.705:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.2.273" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230066ee59 code=0x7ffc0000 [ 135.240176][ T5131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.275'. [ 135.285000][ T5134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 135.718628][ T5148] netlink: 44 bytes leftover after parsing attributes in process `syz.3.283'. [ 136.048423][ T26] audit: type=1326 audit(1779123244.635:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.286" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5ff41e59 code=0x7ffc0000 [ 136.104005][ T5163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.287'. [ 136.225206][ T5166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.288'. [ 136.765843][ T5189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.299'. [ 136.854506][ T26] audit: type=1326 audit(1779123245.445:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.0.301" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2fc8c8e59 code=0x7ffc0000 [ 137.029296][ T5203] netlink: 52 bytes leftover after parsing attributes in process `syz.1.303'. [ 137.170260][ T5212] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 137.385498][ T5225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.312'. [ 138.041466][ T5012] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 139.541447][ T5012] usb 5-1: Using ep0 maxpacket: 32 [ 139.701607][ T5012] usb 5-1: unable to get BOS descriptor or descriptor too short [ 139.826473][ T5012] usb 5-1: config 16 has an invalid interface number: 119 but max is 0 [ 139.846361][ T5012] usb 5-1: config 16 has no interface number 0 [ 139.860729][ T5012] usb 5-1: config 16 interface 119 has no altsetting 0 [ 140.051641][ T5012] usb 5-1: New USB device found, idVendor=12d1, idProduct=1c23, bcdDevice=2b.c7 [ 140.077801][ T5012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.093408][ T5012] usb 5-1: Product: syz [ 140.097904][ T5012] usb 5-1: Manufacturer: syz [ 140.107611][ T5012] usb 5-1: SerialNumber: syz [ 140.881513][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 141.096676][ T5283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.335'. [ 141.401728][ T7] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 141.425356][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.459190][ T7] usb 2-1: Product: syz [ 141.478482][ T7] usb 2-1: Manufacturer: syz [ 141.494816][ T7] usb 2-1: SerialNumber: syz [ 141.782464][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 141.871570][ T5012] usb 5-1: bad CDC descriptors [ 141.885298][ T5012] usb 5-1: bad CDC descriptors [ 141.891025][ T5012] option 5-1:16.119: GSM modem (1-port) converter detected [ 141.924539][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 141.931976][ T5012] usb 5-1: USB disconnect, device number 4 [ 141.954070][ T5012] option 5-1:16.119: device disconnected [ 142.886695][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 143.865006][ T5306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.342'. [ 144.741725][ T5012] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 145.041651][ T5012] usb 5-1: Using ep0 maxpacket: 32 [ 145.181804][ T5012] usb 5-1: config 0 has no interfaces? [ 145.342059][ T5012] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 145.394775][ T5012] usb 5-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 145.456547][ T5313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.344'. [ 145.517124][ T5012] usb 5-1: Product: syz [ 145.568253][ T5012] usb 5-1: Manufacturer: syz [ 145.636014][ T5012] usb 5-1: SerialNumber: syz [ 145.764392][ T5012] usb 5-1: config 0 descriptor?? [ 145.776337][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 145.838576][ T7] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 145.848055][ T7] lan78xx: probe of 2-1:1.0 failed with error -71 [ 145.861202][ T7] usb 2-1: USB disconnect, device number 2 [ 146.100816][ T4233] usb 5-1: USB disconnect, device number 5 [ 146.116506][ T5322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.349'. [ 148.131028][ T5335] device syzkaller0 entered promiscuous mode [ 148.181522][ T1111] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 148.409839][ T5343] netlink: set zone limit has 8 unknown bytes [ 150.575259][ T5361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.361'. [ 151.291525][ T5012] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 151.561460][ T5012] usb 4-1: Using ep0 maxpacket: 32 [ 151.681959][ T5012] usb 4-1: config 0 has no interfaces? [ 151.841997][ T5012] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 151.872217][ T5012] usb 4-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 151.930803][ T5012] usb 4-1: Product: syz [ 151.954989][ T5012] usb 4-1: Manufacturer: syz [ 151.981599][ T5012] usb 4-1: SerialNumber: syz [ 152.086641][ T5012] usb 4-1: config 0 descriptor?? [ 152.440255][ T5012] usb 4-1: USB disconnect, device number 3 [ 152.461467][ T1111] usb 3-1: unable to read config index 0 descriptor/all [ 152.477372][ T1111] usb 3-1: can't read configurations, error -71 [ 152.606390][ T5374] device syzkaller0 entered promiscuous mode [ 157.515677][ T5419] autofs4:pid:5419:autofs_fill_super: called with bogus options [ 158.941588][ T5012] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 159.241424][ T1111] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 159.486449][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 159.555998][ T5012] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 159.681344][ T5012] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.696618][ T5012] usb 3-1: Product: syz [ 159.715998][ T5012] usb 3-1: Manufacturer: syz [ 159.720703][ T5012] usb 3-1: SerialNumber: syz [ 159.762911][ T1111] usb 4-1: config 253 has an invalid interface number: 184 but max is 0 [ 159.771421][ T1111] usb 4-1: config 253 has no interface number 0 [ 159.777903][ T1111] usb 4-1: config 253 interface 184 has no altsetting 0 [ 159.955189][ T1111] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 160.282279][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.426412][ T1111] usb 4-1: Product: syz [ 160.430734][ T1111] usb 4-1: Manufacturer: syz [ 160.541363][ T1111] usb 4-1: SerialNumber: syz [ 160.594001][ T1111] go7007: probe of 4-1:253.184 failed with error -12 [ 160.862777][ T1111] usb 4-1: USB disconnect, device number 4 [ 161.011451][ T5012] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 161.175059][ T5457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.394'. [ 161.191479][ T5012] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 161.223360][ T5012] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 161.237938][ T5012] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 161.248661][ T5012] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 161.261708][ T5012] lan78xx: probe of 3-1:1.0 failed with error -71 [ 161.268250][ T5464] autofs4:pid:5464:autofs_fill_super: called with bogus options [ 161.294796][ T5012] usb 3-1: USB disconnect, device number 4 [ 162.251583][ T4859] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 162.534604][ T4859] usb 5-1: Using ep0 maxpacket: 16 [ 164.306859][ T5498] batman_adv: batadv0: Adding interface: macvtap1 [ 164.350076][ T5498] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.375576][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.382127][ T5498] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 164.463246][ T4859] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 164.486814][ T4859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.551795][ T4859] usb 5-1: Product: syz [ 164.556048][ T4859] usb 5-1: Manufacturer: syz [ 164.651532][ T4859] usb 5-1: SerialNumber: syz [ 164.667558][ T4859] r8152-cfgselector 5-1: config 0 descriptor?? [ 164.798925][ T5504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.409'. [ 164.931748][ T4859] r8152-cfgselector 5-1: Unknown version 0x0000 [ 164.949609][ T5502] batman_adv: batadv0: Removing interface: macvtap1 [ 165.001531][ T4859] r8152-cfgselector 5-1: Unknown version 0x0000 [ 165.024744][ T4859] r8152-cfgselector 5-1: USB disconnect, device number 6 [ 165.412820][ T5513] autofs4:pid:5513:autofs_fill_super: called with bogus options [ 166.768100][ T5533] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 166.800995][ T5533] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 167.226124][ T5541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.422'. [ 167.395698][ T5551] xt_ecn: cannot match TCP bits for non-tcp packets [ 167.529718][ T5556] autofs4:pid:5556:autofs_fill_super: called with bogus options [ 170.124159][ T5572] autofs4:pid:5572:autofs_fill_super: called with bogus options [ 170.830548][ T5581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.437'. [ 172.269339][ T5609] autofs4:pid:5609:autofs_fill_super: called with bogus options [ 173.916498][ T26] audit: type=1326 audit(1779123282.505:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5631 comm="syz.4.456" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e5ff41e59 code=0x0 [ 175.270937][ T5651] tipc: Started in network mode [ 175.355225][ T5654] autofs4:pid:5654:autofs_fill_super: called with bogus options [ 176.009296][ T5651] tipc: Node identity 4e8ac008f904, cluster identity 4711 [ 176.018027][ T5651] tipc: Enabled bearer , priority 0 [ 176.053480][ T5656] device syzkaller0 entered promiscuous mode [ 176.199921][ T5660] netlink: 'syz.4.464': attribute type 8 has an invalid length. [ 176.271664][ T5659] tipc: Resetting bearer [ 176.358548][ T5659] tipc: Disabling bearer [ 177.590609][ T5688] autofs4:pid:5688:autofs_fill_super: called with bogus options [ 178.861189][ T5696] netlink: 16 bytes leftover after parsing attributes in process `syz.4.477'. [ 179.001242][ T5712] tc action pedit 'at' offset 6 out of bounds [ 179.255346][ T5718] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 179.388678][ T5724] autofs4:pid:5724:autofs_fill_super: called with bogus options [ 180.178757][ T5725] xt_ecn: cannot match TCP bits for non-tcp packets [ 180.567534][ T5740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.179588][ T5752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.498'. [ 181.517322][ T5763] device syzkaller0 entered promiscuous mode [ 181.662613][ T5771] tipc: Enabling of bearer rejected, failed to enable media [ 181.977038][ T5780] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 182.866100][ T5793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.514'. [ 183.011406][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 183.271537][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 184.831712][ T23] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 184.882388][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.993156][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.197686][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.348637][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.557373][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 185.699843][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.956250][ T23] usb 4-1: can't set config #16, error -71 [ 186.096316][ T23] usb 4-1: USB disconnect, device number 5 [ 187.479405][ T5828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.527'. [ 192.675668][ T5870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.542'. [ 193.234330][ T5888] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 194.409810][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.416289][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.813486][ T5907] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.126355][ T5917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.558'. [ 196.351457][ T5012] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 196.451387][ T1108] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 196.461773][ T4233] Bluetooth: hci4: command 0x0406 tx timeout [ 196.479622][ T4233] Bluetooth: hci0: command 0x0406 tx timeout [ 196.500619][ T4233] Bluetooth: hci1: command 0x0406 tx timeout [ 196.527534][ T4233] Bluetooth: hci2: command 0x0406 tx timeout [ 196.540663][ T4233] Bluetooth: hci3: command 0x0406 tx timeout [ 196.691497][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 196.721976][ T5012] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 196.756292][ T5012] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 196.901661][ T5012] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 196.910740][ T5012] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 196.921779][ T1108] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.929814][ T1108] usb 5-1: config 0 has no interface number 0 [ 197.801803][ T5012] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 197.811090][ T5012] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 197.851502][ T1108] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 197.860650][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.871476][ T5012] usb 4-1: Product: syz [ 197.875696][ T5012] usb 4-1: Manufacturer: syz [ 197.946199][ T1108] usb 5-1: Product: syz [ 197.950433][ T1108] usb 5-1: Manufacturer: syz [ 197.971673][ T5922] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 197.992556][ T5012] cdc_wdm 4-1:1.0: skipping garbage [ 197.997822][ T5012] cdc_wdm 4-1:1.0: skipping garbage [ 198.004640][ T1108] usb 5-1: SerialNumber: syz [ 198.033073][ T1108] usb 5-1: config 0 descriptor?? [ 198.038288][ T5012] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 198.083569][ T1108] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 198.220759][ T4859] usb 4-1: USB disconnect, device number 6 [ 198.558117][ T5951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.572'. [ 199.641565][ T1108] gspca_spca1528: reg_w err -71 [ 199.647777][ T1108] spca1528: probe of 5-1:0.1 failed with error -71 [ 199.748562][ T1108] usb 5-1: USB disconnect, device number 7 [ 199.783205][ T5958] batman_adv: batadv0: Adding interface: macvtap1 [ 199.812088][ T5958] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.881647][ T5958] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 201.921652][ T5991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.584'. [ 202.825610][ T6026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.599'. [ 204.394687][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.602'. [ 204.414354][ T6034] netlink: 24 bytes leftover after parsing attributes in process `syz.4.602'. [ 204.438831][ T6034] device geneve2 entered promiscuous mode [ 204.591531][ T4233] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 205.131528][ T4233] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 205.667538][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.675728][ T4233] usb 3-1: Product: syz [ 205.681424][ T4233] usb 3-1: Manufacturer: syz [ 205.686561][ T4233] usb 3-1: SerialNumber: syz [ 206.002876][ T6066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.612'. [ 206.171488][ T4233] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 206.873536][ T6071] udc-core: couldn't find an available UDC or it's busy [ 206.919074][ T6071] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 207.961496][ T4233] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 207.983655][ T4233] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 207.999953][ T4233] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 208.024826][ T4233] lan78xx: probe of 3-1:1.0 failed with error -71 [ 208.065516][ T4233] usb 3-1: USB disconnect, device number 5 [ 210.716385][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'. [ 210.782763][ T6110] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.792474][ T6110] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.801297][ T6110] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.810245][ T6110] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.021374][ T1111] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 214.983797][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.644'. [ 215.124557][ T1111] usb 3-1: Using ep0 maxpacket: 8 [ 215.264118][ T1111] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.303213][ T1111] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 215.378748][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.410702][ T1111] usb 3-1: config 0 descriptor?? [ 218.166305][ T1111] usb 3-1: can't set config #0, error -71 [ 218.173444][ T1111] usb 3-1: USB disconnect, device number 6 [ 218.964712][ T6210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'. [ 220.258882][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'. [ 224.414673][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'. [ 227.924955][ T4234] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 228.981652][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.407235][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.450182][ T4234] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 229.495644][ T4234] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.524802][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.577228][ T4234] usb 2-1: config 0 descriptor?? [ 229.733865][ T6308] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 229.912161][ T26] audit: type=1107 audit(1779123338.415:29): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='C]Ţxxp@}3SVVؖa' [ 230.706665][ T4234] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 230.760038][ T4234] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 230.995807][ T4234] usb 2-1: USB disconnect, device number 3 [ 231.244526][ T4232] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 231.510727][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.519624][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.842142][ T4232] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 231.884757][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.967527][ T4232] usb 5-1: Product: syz [ 232.011156][ T4232] usb 5-1: Manufacturer: syz [ 232.054206][ T4232] usb 5-1: SerialNumber: syz [ 233.133613][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.174125][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.187942][ T6354] input: syz0 as /devices/virtual/input/input7 [ 233.234742][ T6354] input: syz1 as /devices/virtual/input/input8 [ 233.898414][ T6316] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.907934][ T6316] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.916898][ T6316] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.925858][ T6316] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.993229][ T6316] syz.4.679 (6316) used greatest stack depth: 20336 bytes left [ 234.113210][ T4232] usb 5-1: unit 8 not found! [ 234.118828][ T4232] usb 5-1: unit 6 not found! [ 234.133406][ T4232] usb 5-1: unit 199 not found! [ 234.138263][ T4232] usb 5-1: unit 208 not found! [ 234.225413][ T4232] usb 5-1: USB disconnect, device number 8 [ 234.240052][ T6365] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 234.255310][ T6365] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 234.364571][ T26] audit: type=1107 audit(1779123342.945:30): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='C]Ţxxp@}3SVVؖa' [ 235.230552][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.705'. [ 235.739878][ T6403] netlink: 32 bytes leftover after parsing attributes in process `syz.0.713'. [ 237.147769][ T6433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.720'. [ 237.751478][ T4232] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 238.022094][ T4232] usb 2-1: Using ep0 maxpacket: 32 [ 240.890339][ T6473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.732'. [ 242.133859][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.738'. [ 242.411460][ T4232] usb 2-1: device descriptor read/all, error -71 [ 242.519268][ T6494] kernel profiling enabled (shift: 63) [ 242.532390][ T6494] profiling shift: 63 too large [ 242.536786][ T6500] binder: BINDER_SET_CONTEXT_MGR already set [ 242.561365][ T6500] binder: 6499:6500 ioctl 4018620d 200000000040 returned -16 [ 243.933905][ T6516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.746'. [ 244.131998][ T6527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.751'. [ 247.411825][ T6560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.761'. [ 247.657349][ T6573] batman_adv: batadv0: Adding interface: macvtap1 [ 247.718088][ T6573] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.810889][ T6573] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 247.891404][ T6578] tipc: Failed to obtain node identity [ 247.897435][ T6578] tipc: Enabling of bearer rejected, failed to enable media [ 249.847225][ T6585] sched: RT throttling activated [ 250.321799][ T6600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.775'. [ 253.884575][ T23] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 253.966730][ T6639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.789'. [ 254.286987][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 254.332925][ T23] usb 5-1: device not accepting address 9, error -71 [ 254.522382][ T4233] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 254.597749][ T4233] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 255.821882][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.828405][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.198340][ T6675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.802'. [ 256.661382][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 257.263172][ T6694] tipc: Started in network mode [ 257.268160][ T6694] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 257.314191][ T6694] tipc: Enabled bearer , priority 27 [ 257.391396][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.811'. [ 257.431376][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 257.581503][ T23] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 257.611381][ T23] usb 5-1: config 0 has no interface number 0 [ 257.661387][ T23] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 257.691959][ T23] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 258.071291][ T23] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 258.090796][ T23] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 258.101151][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.946759][ T23] usb 5-1: config 0 descriptor?? [ 259.010197][ T6722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.819'. [ 259.027456][ T4230] tipc: Node number set to 8432298 [ 259.033686][ T23] usb 5-1: can't set config #0, error -71 [ 259.091795][ T23] usb 5-1: USB disconnect, device number 11 [ 260.250090][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.825'. [ 260.770403][ T6755] netlink: 16 bytes leftover after parsing attributes in process `syz.1.831'. [ 265.430228][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.840'. [ 265.711580][ T6806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.844'. [ 265.734205][ T6800] binder_alloc: 6799: pid 6799 spamming oneway? 2 buffers allocated for a total size of 5120 [ 265.933921][ T6800] binder_alloc: 6799: pid 6799 spamming oneway? 3 buffers allocated for a total size of 5128 [ 268.734014][ T6828] fuse: Bad value for 'fd' [ 268.929864][ T26] audit: type=1107 audit(1779123377.515:31): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='C]Ţxxp' [ 269.822727][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.853'. [ 270.014825][ T6846] loop5: detected capacity change from 0 to 4095 [ 270.054898][ T6847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.856'. [ 270.116300][ C0] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 270.143463][ C0] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.154944][ C0] Buffer I/O error on dev loop5, logical block 480, async page read [ 270.163103][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 270.174587][ C0] blk_update_request: I/O error, dev loop5, sector 1056 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 270.186457][ C0] blk_update_request: I/O error, dev loop5, sector 2080 op 0x0:(READ) flags 0x80700 phys_seg 60 prio class 0 [ 270.304611][ C0] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.315641][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 271.165369][ C0] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.176646][ C0] Buffer I/O error on dev loop5, logical block 480, async page read [ 271.810696][ T6867] tipc: Started in network mode [ 271.899242][ T6867] tipc: Node identity bea07b1df3c9, cluster identity 4711 [ 271.942939][ T6867] tipc: Enabled bearer , priority 0 [ 271.972337][ T6869] device syzkaller0 entered promiscuous mode [ 272.069603][ T26] audit: type=1107 audit(1779123380.655:32): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='C]Ţxxp' [ 272.900247][ T6866] tipc: Resetting bearer [ 272.940709][ T6866] tipc: Disabling bearer [ 274.999270][ T6916] netlink: 'syz.2.877': attribute type 4 has an invalid length. [ 275.159702][ T6919] netlink: 'syz.2.877': attribute type 4 has an invalid length. [ 275.327105][ T6922] binder: BINDER_SET_CONTEXT_MGR already set [ 275.343542][ T6922] binder: 6921:6922 ioctl 4018620d 200000000040 returned -16 [ 277.615431][ T6942] kvm: pic: non byte read [ 277.619932][ T6942] kvm: pic: non byte read [ 277.685636][ T6942] kvm: pic: non byte read [ 277.707391][ T6942] kvm: pic: non byte read [ 277.741637][ T6942] kvm: pic: non byte read [ 277.746285][ T6942] kvm: pic: non byte read [ 277.819126][ T6942] kvm: pic: non byte read [ 277.984451][ T6942] kvm: pic: non byte read [ 278.003032][ T6942] kvm: pic: non byte read [ 278.021631][ T6942] kvm: pic: non byte read [ 279.410217][ T6968] binder: BINDER_SET_CONTEXT_MGR already set [ 279.416569][ T6968] binder: 6961:6968 ioctl 4018620d 200000000040 returned -16 [ 281.987093][ T6986] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 283.364127][ T7009] binder_alloc: 7008: pid 7008 spamming oneway? 2 buffers allocated for a total size of 5120 [ 283.375734][ T7009] binder_alloc: 7008: pid 7008 spamming oneway? 3 buffers allocated for a total size of 5128 [ 283.638275][ T7018] device syzkaller1 entered promiscuous mode [ 284.564218][ T7029] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 284.677619][ T7023] [ 284.680039][ T7023] ====================================================== [ 284.687081][ T7023] WARNING: possible circular locking dependency detected [ 284.694132][ T7023] syzkaller #0 Not tainted [ 284.698558][ T7023] ------------------------------------------------------ [ 284.705588][ T7023] syz.1.907/7023 is trying to acquire lock: [ 284.711487][ T7023] ffff88807a19cb98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 284.721991][ T7023] [ 284.721991][ T7023] but task is already holding lock: [ 284.729513][ T7023] ffff88807a19cff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 284.738859][ T7023] [ 284.738859][ T7023] which lock already depends on the new lock. [ 284.738859][ T7023] [ 284.749297][ T7023] [ 284.749297][ T7023] the existing dependency chain (in reverse order) is: [ 284.758325][ T7023] [ 284.758325][ T7023] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 284.765989][ T7023] __mutex_lock_common+0x1e3/0x2400 [ 284.771908][ T7023] mutex_lock_nested+0x17/0x20 [ 284.777212][ T7023] hci_dev_do_close+0x5f/0x1030 [ 284.782605][ T7023] hci_rfkill_set_block+0x10a/0x190 [ 284.788352][ T7023] rfkill_set_block+0x1c9/0x3d0 [ 284.793735][ T7023] rfkill_fop_write+0x452/0x560 [ 284.799122][ T7023] vfs_write+0x30b/0xd60 [ 284.803902][ T7023] ksys_write+0x152/0x260 [ 284.808764][ T7023] do_syscall_64+0x4c/0xa0 [ 284.813715][ T7023] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.820144][ T7023] [ 284.820144][ T7023] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 284.828642][ T7023] __mutex_lock_common+0x1e3/0x2400 [ 284.834393][ T7023] mutex_lock_nested+0x17/0x20 [ 284.839871][ T7023] rfkill_register+0x33/0x980 [ 284.845086][ T7023] hci_register_dev+0x452/0x970 [ 284.850475][ T7023] vhci_create_device+0x32c/0x5c0 [ 284.856383][ T7023] vhci_write+0x391/0x450 [ 284.861254][ T7023] vfs_write+0x745/0xd60 [ 284.866034][ T7023] ksys_write+0x152/0x260 [ 284.870897][ T7023] do_syscall_64+0x4c/0xa0 [ 284.875854][ T7023] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.882281][ T7023] [ 284.882281][ T7023] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 284.890123][ T7023] __mutex_lock_common+0x1e3/0x2400 [ 284.895874][ T7023] mutex_lock_nested+0x17/0x20 [ 284.901172][ T7023] vhci_send_frame+0x88/0x100 [ 284.906473][ T7023] hci_send_frame+0x1a9/0x2e0 [ 284.911688][ T7023] hci_tx_work+0x9f9/0x1710 [ 284.916739][ T7023] process_one_work+0x85f/0x1010 [ 284.922214][ T7023] worker_thread+0xaa6/0x1290 [ 284.927430][ T7023] kthread+0x436/0x520 [ 284.932117][ T7023] ret_from_fork+0x1f/0x30 [ 284.937067][ T7023] [ 284.937067][ T7023] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 284.946298][ T7023] __lock_acquire+0x2c42/0x7d10 [ 284.952119][ T7023] lock_acquire+0x19e/0x400 [ 284.957170][ T7023] __flush_work+0x116/0x210 [ 284.962206][ T7023] hci_dev_do_close+0x1e7/0x1030 [ 284.967790][ T7023] hci_rfkill_set_block+0x10a/0x190 [ 284.973526][ T7023] rfkill_set_block+0x1c9/0x3d0 [ 284.978910][ T7023] rfkill_fop_write+0x452/0x560 [ 284.984293][ T7023] vfs_write+0x30b/0xd60 [ 284.989075][ T7023] ksys_write+0x152/0x260 [ 284.993936][ T7023] do_syscall_64+0x4c/0xa0 [ 284.998887][ T7023] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.005345][ T7023] [ 285.005345][ T7023] other info that might help us debug this: [ 285.005345][ T7023] [ 285.015865][ T7023] Chain exists of: [ 285.015865][ T7023] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 285.015865][ T7023] [ 285.030822][ T7023] Possible unsafe locking scenario: [ 285.030822][ T7023] [ 285.038279][ T7023] CPU0 CPU1 [ 285.043649][ T7023] ---- ---- [ 285.049020][ T7023] lock(&hdev->req_lock); [ 285.053450][ T7023] lock(rfkill_global_mutex); [ 285.060740][ T7023] lock(&hdev->req_lock); [ 285.067682][ T7023] lock((work_completion)(&hdev->tx_work)); [ 285.073677][ T7023] [ 285.073677][ T7023] *** DEADLOCK *** [ 285.073677][ T7023] [ 285.081823][ T7023] 2 locks held by syz.1.907/7023: [ 285.086852][ T7023] #0: ffffffff8d6c65a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 285.096984][ T7023] #1: ffff88807a19cff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 285.106746][ T7023] [ 285.106746][ T7023] stack backtrace: [ 285.112659][ T7023] CPU: 0 PID: 7023 Comm: syz.1.907 Not tainted syzkaller #0 [ 285.119955][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.130032][ T7023] Call Trace: [ 285.133329][ T7023] [ 285.136271][ T7023] dump_stack_lvl+0x188/0x250 [ 285.140992][ T7023] ? load_image+0x400/0x400 [ 285.145684][ T7023] ? show_regs_print_info+0x20/0x20 [ 285.150906][ T7023] ? print_circular_bug+0x12b/0x1a0 [ 285.156130][ T7023] check_noncircular+0x296/0x330 [ 285.161090][ T7023] ? look_up_lock_class+0x71/0x110 [ 285.166219][ T7023] ? add_chain_block+0x940/0x940 [ 285.171170][ T7023] ? lockdep_lock+0xf1/0x1f0 [ 285.175791][ T7023] ? mark_lock+0x94/0x320 [ 285.180133][ T7023] __lock_acquire+0x2c42/0x7d10 [ 285.185010][ T7023] ? lockdep_unlock+0x143/0x2e0 [ 285.189874][ T7023] ? mark_lock+0x94/0x320 [ 285.194215][ T7023] ? verify_lock_unused+0x140/0x140 [ 285.199430][ T7023] ? __lock_acquire+0x12e8/0x7d10 [ 285.204476][ T7023] lock_acquire+0x19e/0x400 [ 285.208998][ T7023] ? __flush_work+0xfa/0x210 [ 285.213608][ T7023] ? verify_lock_unused+0x140/0x140 [ 285.218821][ T7023] ? __mutex_trylock_common+0x155/0x260 [ 285.224389][ T7023] ? read_lock_is_recursive+0x10/0x10 [ 285.229785][ T7023] __flush_work+0x116/0x210 [ 285.234299][ T7023] ? __flush_work+0xfa/0x210 [ 285.238909][ T7023] ? flush_work+0x20/0x20 [ 285.243342][ T7023] ? hci_leds_update_powered+0x148/0x160 [ 285.248996][ T7023] ? rcu_lock_release+0x5/0x20 [ 285.253786][ T7023] ? __lock_acquire+0x7d10/0x7d10 [ 285.259178][ T7023] hci_dev_do_close+0x1e7/0x1030 [ 285.264135][ T7023] ? _raw_spin_unlock+0x40/0x40 [ 285.268997][ T7023] hci_rfkill_set_block+0x10a/0x190 [ 285.274213][ T7023] ? rcu_lock_release+0x20/0x20 [ 285.279079][ T7023] rfkill_set_block+0x1c9/0x3d0 [ 285.283945][ T7023] rfkill_fop_write+0x452/0x560 [ 285.288812][ T7023] ? rfkill_fop_read+0x520/0x520 [ 285.293759][ T7023] ? common_file_perm+0xc0/0x1c0 [ 285.298716][ T7023] ? fsnotify_perm+0x5d/0x560 [ 285.303410][ T7023] ? security_file_permission+0x75/0xa0 [ 285.308970][ T7023] ? rfkill_fop_read+0x520/0x520 [ 285.313920][ T7023] vfs_write+0x30b/0xd60 [ 285.318175][ T7023] ? file_end_write+0x250/0x250 [ 285.323039][ T7023] ? __fget_files+0x40f/0x480 [ 285.327733][ T7023] ? __fdget_pos+0x1e2/0x370 [ 285.332335][ T7023] ? ksys_write+0x71/0x260 [ 285.336773][ T7023] ksys_write+0x152/0x260 [ 285.341120][ T7023] ? __ia32_sys_read+0x80/0x80 [ 285.345899][ T7023] ? lockdep_hardirqs_on+0x94/0x140 [ 285.351114][ T7023] do_syscall_64+0x4c/0xa0 [ 285.355544][ T7023] ? clear_bhb_loop+0x30/0x80 [ 285.360234][ T7023] ? clear_bhb_loop+0x30/0x80 [ 285.365009][ T7023] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.370930][ T7023] RIP: 0033:0x7f41baafce59 [ 285.375361][ T7023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.395005][ T7023] RSP: 002b:00007f41b8d56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 285.403440][ T7023] RAX: ffffffffffffffda RBX: 00007f41bad75fa0 RCX: 00007f41baafce59 [ 285.411423][ T7023] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009 [ 285.419409][ T7023] RBP: 00007f41bab92d6f R08: 0000000000000000 R09: 0000000000000000 [ 285.427390][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.435458][ T7023] R13: 00007f41bad76038 R14: 00007f41bad75fa0 R15: 00007fff42b517e8 [ 285.443450][ T7023]