last executing test programs: 14.54792786s ago: executing program 4 (id=213): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x10001, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x18, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000500000000000000ffff000018110000", @ANYRES32], &(0x7f0000000280)='GPL\x00', 0xffff0000, 0xdc, &(0x7f0000000580)=""/220, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xd, 0x80000000, 0x2}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000980)=[{0x0, 0x3, 0xc, 0x1}, {0x2, 0x3, 0xf, 0x9}, {0x4, 0x2, 0x2, 0x6}, {0x2, 0x1, 0xf, 0x9}, {0x2, 0x2, 0x10, 0x9}, {0x5, 0x1, 0x2, 0x8}], 0x10, 0x9}, 0x94) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0x1) r2 = socket(0x8000000010, 0x2, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00090000000000000003ac72", @ANYRES16, @ANYBLOB="010025bd7000fddbdf250000000005000d001b00"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 14.5477385s ago: executing program 1 (id=214): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$ptys(0xc, 0x3, 0x1) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r5, &(0x7f0000001740)={0x2020}, 0x2020) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000340)={0x8, @win={{0xa83e, 0x4, 0x7, 0x6}, 0x6, 0x1, 0x0, 0xfffffff7, 0x0, 0x3}}) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5de75ebd1a5024d46c7b61b1ec7da0336d5a13c170823e906450f8a4e7f98b3b70560f2e66c8b9574a01762832e10bba8456c06ca7840c8cb52e0ff93966f453881115bd435bcf041e94669fdff2733ec607a19534e467e0291894e72c96a56965e32ac0c41f04b8e074112cdef165c49538bbcf0b2ecbb19c84d18da8ab01", 0x7f}], 0x1, &(0x7f0000000440)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x9}}, @ip_ttl={{0x10, 0x0, 0x2, 0x6}}, @ip_retopts={{0x10, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xa4, 0x3, 0x7}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @private=0xa010101}}}], 0x48}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r6, @ANYBLOB="37040000000000000000010000005c03088030000080060005000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39223400008004000980060005000080000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922f4020080cc02098034000080060001000200000008000200ac1414aa0500030003000000060001000200000008000200640101010500030000000000a0000080060001000a00000014000200000000000000000000000000000000000500030003000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000200000008000200ac1414bb0500030002000000060001000200000008000200e00000010500030000000000060001000a00000014000200fe80000000000000000000000000003305000300020000001c000080060001000200000008000200ac1414bb050003000200000028000080060001000a00000014000200fc000000000000000000000000000001050003000000000034000080060001000200000008000200ac1414bb05000300030000000600010002", @ANYRES32], 0x378}}, 0x0) 12.535760498s ago: executing program 2 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 11.95928069s ago: executing program 2 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) write$rfkill(0xffffffffffffffff, 0x0, 0x0) 10.967952979s ago: executing program 2 (id=220): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2f", 0x68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r7, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r9, 0x0, 0xffffffff004) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd02337761000200048140060905870308"], 0x0) 10.91282177s ago: executing program 1 (id=221): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000440)={r8, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) 9.163450724s ago: executing program 4 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) socket(0x40000000015, 0x5, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'ovf\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) 9.072573365s ago: executing program 4 (id=225): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03"], 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffe3, 0x4004840, 0x0, 0xfffffffffffffe1b) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11", @ANYRES32, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x1277, 0x0) 8.121106063s ago: executing program 0 (id=228): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000001e00)={0x2, @sdr={0x32314d54, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='syz', 0xfffffffffffffff8) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000540)="31f4ab74", 0x4, 0xfffffffffffffffd) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000066b5b84f00000100000000", @ANYRES32=r6, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x2, 0x1, 0x2, 0xa, 0xc53e, 0x8}, 0x20) r8 = socket(0x1e, 0x1, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x100}) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5603, 0x10000000000004) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00', @ANYRESOCT=r7, @ANYRESHEX=r8, @ANYRES32, @ANYBLOB="0a0004000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4008000) 6.399940187s ago: executing program 2 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 5.937552455s ago: executing program 4 (id=230): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x2b08}}, 0x4000806) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x304}, "e26ed5fb6fe3f3f4", "e0e6d476803da0686d23e136c58671e3", '\x00', "00ab032000"}, 0x28) 5.775790459s ago: executing program 0 (id=231): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x1000, 0x200, 0x0) madvise(&(0x7f0000163000/0x1000)=nil, 0x1000, 0x13) syz_io_uring_submit(0x0, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0xffffffffffffffff) prlimit64(r0, 0xe, &(0x7f0000000000)={0xc, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)={0x44000, 0x10, 0x31}, 0x18) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x15, "5660359c3245d1c42317afad0000000000000100000000012000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0x40103e05, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) syz_genetlink_get_family_id$fou(0x0, r2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.761940809s ago: executing program 1 (id=233): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="00000900000009002a53fb8991f8e04b22cf888b6fcedf371785d6d01c27504de73c9746b0a2e304d6faea171b91a944fe88cb6503e43466ad3e22f9c771e1fe1f46c1f9e6f7f76e20522267aaba9dacaf2923a0c0ceec7962892ee602b2f85c757f71ac91c6b92f3b6c284167f9aa55639054f34dda47"], 0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x80001) ioctl$I2C_PEC(r1, 0x708, 0x11) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000380)={0x0, 0xa, 0x2, 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x7f, 0x8, {{0x9, 0x4, 0x1, 0x5, 0x24, 0x64, 0x0, 0xf, 0x29, 0x0, @multicast1, @multicast2, {[@noop, @generic={0x7, 0x6, "7b3a749f"}, @cipso={0x86, 0x6, 0x1}]}}}}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @multicast}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1d, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/24], 0x0}, 0x94) r9 = epoll_create1(0x0) r10 = fcntl$dupfd(r9, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="1100", @ANYRES32=r10, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="d49f9a98542bc089f24cb84c281f2183bb1ea54b32c8ea0050e0909555bbba97a98d29e06beed349c6b9b06e80cbcdac7e11ac6b5744b184374f9d1ff2d1e13c0893ed88b947f4aeeef6d0", @ANYRESOCT=r8], 0x20) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="1100000000000000", @ANYBLOB, @ANYBLOB], 0x11) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x804) 5.137230571s ago: executing program 2 (id=234): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f00000003c0)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) syz_io_uring_setup(0x1714, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) modify_ldt$write(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000002240)=0x3, 0xab02000d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mknodat$null(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xc000, 0x103) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000"], 0xb8}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000003c0007010000000000000000017c03000400fc800c000180060005f60000000009000280ce467b1e74100000080005000900000008000880040048807eb484a5919afb042eafcdc0454571e546a10972b60757b7709cfe6c084a731e1a590e88004ff34d1a5729bc4575eb7fe3ceb2138c30d9d427b8dafbba2ea116b96a592f74de60833e7eb959946b1ba7ab180be73d9a3b92274b"], 0x40}}, 0x4040) close(0xffffffffffffffff) 4.906202265s ago: executing program 0 (id=236): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0xf) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setgroups(0x0, 0x0) lseek(r5, 0x10000000005, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x20, 0x22, 0x3b, {0x3b, 0x23, "20030d7638411125b7df162f4b24e384217101ba8d53e6326e4f6ed3826c676e2d36d983fc9359000dd004172c2966c3aa8817b9cff36d35d4"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}}, &(0x7f0000000700)={0x34, &(0x7f0000000540)=ANY=[@ANYBLOB="9818fdac77065ef07b62233310ea2cbbfb1f5106000000000000007edd83269744361bd9d70e38121fafe866a36a34398bdd013d20cd03804b7358d318fcac638ee7d867cf4acbca5aa50d6f5ba7331857ebe8cb1038b5a0e0dbb5bf27242a70f64c4c460bbd472546e29faeee8048fcdb7beedd4d461b"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x98}, &(0x7f0000000940)=ANY=[], &(0x7f0000000680)={0x20, 0x1, 0x1, 0x25}, &(0x7f00000006c0)={0x20, 0x0, 0x1, 0x6}}) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a"], 0xd) newfstatat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x100) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58840}, 0x0) r7 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040), 0x0) 4.904383245s ago: executing program 3 (id=237): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x1, 0xffff, 0xa, 0x201, 0x4}) 4.696049509s ago: executing program 3 (id=238): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.882148235s ago: executing program 3 (id=239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffee8, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="480601080000000000000000050000000400078000000300856173683a6e65742c2e65740000000000000780000003000100000005000400000000000900020073797a31000000a98b0004000200000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x200400c1}, 0x8000000) syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x4000000805, 0x0) listen(r4, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000010c0)={0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0212090902"], 0x10}}, 0x40010) 3.653261579s ago: executing program 3 (id=240): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write(r0, 0x1, 0x0, 0x0) 3.396126414s ago: executing program 0 (id=241): socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) shmdt(r0) 3.192295158s ago: executing program 4 (id=242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000300)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000380)=0x28) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x5, 0x12, 0x53, 0x8, 0x979, 0x270, 0xddeb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x39, 0x8, 0x0, 0x1, [{{0x9, 0x4, 0xe5, 0x4, 0x0, 0x6a, 0xbd, 0xfa, 0x5}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 2.161382338s ago: executing program 1 (id=243): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x8102) ioctl$BLKROTATIONAL(r0, 0x127e, 0x0) 1.955975032s ago: executing program 1 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 1.577481609s ago: executing program 2 (id=245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000440)={r8, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) 1.53161835s ago: executing program 0 (id=246): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r4 = epoll_create1(0x0) r5 = gettid() pause() r6 = syz_open_procfs(r5, &(0x7f0000000180)='wchan\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0xc0002000}) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x4, 0x40100000, 0x5, 0x0, 0x1, "362e851f84882fb90efa3fa665d2eb144970e2", 0x8, 0x81}) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100), &(0x7f0000000000)) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) close_range(r2, 0xffffffffffffffff, 0x0) 1.002518361s ago: executing program 1 (id=247): syz_usb_connect(0x0, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c36e8240ac051c92fb9d000000010902360001000000000904000004034100000905", @ANYRES64], 0x0) 319.841344ms ago: executing program 0 (id=248): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8001}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}}) 257.655135ms ago: executing program 3 (id=249): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) 99.368088ms ago: executing program 3 (id=250): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x2, 0x80805, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, r2, 0x40099d}}, 0x48) writev(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x9, 0x7, {{0xc, 0x4, 0x1, 0x19, 0x30, 0x67, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast, {[@ssrr={0x89, 0xb, 0xbe, [@rand_addr=0x64010102, @remote]}, @generic={0x89, 0x11, "9083eb54037d8f88bad6d2c7f03109"}]}}}}}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000880)={'ip_vti0\x00', r3, 0x1, 0x8000, 0x3, 0x7, {{0x1b, 0x4, 0x0, 0x4, 0x6c, 0x66, 0x0, 0x6, 0x4, 0x0, @multicast2, @loopback, {[@lsrr={0x83, 0xf, 0xcc, [@loopback, @private=0xa010100, @multicast1]}, @noop, @end, @end, @timestamp={0x44, 0xc, 0xe9, 0x0, 0x4, [0x400, 0x9]}, @timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @timestamp_addr={0x44, 0x2c, 0x1e, 0x1, 0xd, [{@remote, 0x7}, {@multicast2, 0x8}, {@broadcast, 0x8}, {@private=0xa010102, 0x77f}, {@local, 0x11}]}]}}}}}) socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20044000) write$rfkill(r4, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) 0s ago: executing program 4 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[], 0x3c}}, 0x24000084) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r3, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. [ 65.559813][ T4172] cgroup: Unknown subsys name 'net' [ 65.673376][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.285125][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.797709][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 68.900944][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 68.963772][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 69.004408][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 69.022487][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.030543][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.039254][ T4183] device bridge_slave_0 entered promiscuous mode [ 69.055213][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.062343][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.070824][ T4183] device bridge_slave_1 entered promiscuous mode [ 69.102543][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 69.156648][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.165906][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.173310][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.182558][ T4188] device bridge_slave_0 entered promiscuous mode [ 69.203721][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.213115][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.220569][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.228512][ T4188] device bridge_slave_1 entered promiscuous mode [ 69.295541][ T4183] team0: Port device team_slave_0 added [ 69.329428][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.336644][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.344675][ T4184] device bridge_slave_0 entered promiscuous mode [ 69.353824][ T4183] team0: Port device team_slave_1 added [ 69.361703][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.382845][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.390078][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.398423][ T4192] device bridge_slave_0 entered promiscuous mode [ 69.406368][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.413544][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.421995][ T4184] device bridge_slave_1 entered promiscuous mode [ 69.439188][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.455667][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.463011][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.471210][ T4192] device bridge_slave_1 entered promiscuous mode [ 69.502074][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.509215][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.517368][ T4185] device bridge_slave_0 entered promiscuous mode [ 69.543271][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.550415][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.576866][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.596264][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.603819][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.611943][ T4185] device bridge_slave_1 entered promiscuous mode [ 69.629202][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.639079][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.646042][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.672064][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.685644][ T4188] team0: Port device team_slave_0 added [ 69.701821][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.713181][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.736367][ T4188] team0: Port device team_slave_1 added [ 69.758813][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.787396][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.812500][ T4184] team0: Port device team_slave_0 added [ 69.838249][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.854946][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.862199][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.888831][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.901563][ T4184] team0: Port device team_slave_1 added [ 69.926334][ T4192] team0: Port device team_slave_0 added [ 69.933150][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.940421][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.969119][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.992715][ T4183] device hsr_slave_0 entered promiscuous mode [ 69.999758][ T4183] device hsr_slave_1 entered promiscuous mode [ 70.015737][ T4192] team0: Port device team_slave_1 added [ 70.047857][ T4185] team0: Port device team_slave_0 added [ 70.070019][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.077183][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.103474][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.119940][ T4185] team0: Port device team_slave_1 added [ 70.139134][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.146115][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.172179][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.184295][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.191445][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.218031][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.257074][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.264064][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.290370][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.317724][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.324710][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.351263][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.366861][ T4188] device hsr_slave_0 entered promiscuous mode [ 70.373727][ T4188] device hsr_slave_1 entered promiscuous mode [ 70.380888][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.388869][ T4188] Cannot create hsr debugfs directory [ 70.403695][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.410787][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.436826][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.507317][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 70.507553][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 70.514021][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 70.520558][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 70.532250][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 70.541041][ T4184] device hsr_slave_0 entered promiscuous mode [ 70.548472][ T4184] device hsr_slave_1 entered promiscuous mode [ 70.555037][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.562959][ T4184] Cannot create hsr debugfs directory [ 70.613891][ T4192] device hsr_slave_0 entered promiscuous mode [ 70.621743][ T4192] device hsr_slave_1 entered promiscuous mode [ 70.628568][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.636139][ T4192] Cannot create hsr debugfs directory [ 70.662819][ T4185] device hsr_slave_0 entered promiscuous mode [ 70.670201][ T4185] device hsr_slave_1 entered promiscuous mode [ 70.677354][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.684949][ T4185] Cannot create hsr debugfs directory [ 70.953299][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.969463][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.980690][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.000632][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.048920][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.059594][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.069184][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.083869][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.131843][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.151696][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.169904][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.183323][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.249638][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.272677][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.284624][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.319636][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.384321][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.400218][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.408129][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.426258][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.436285][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.455810][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.469581][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.487864][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.504559][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.520214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.530910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.561285][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.572742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.582227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.593003][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.600346][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.611568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.620391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.628656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.638724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.648339][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.655498][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.663316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.672487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.682420][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.689916][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.698978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.707374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.719936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.732581][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.761664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.770952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.782418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.791534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.801606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.810568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.820306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.829182][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.836512][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.844286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.868638][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.898177][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.916259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.928508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.938610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.954056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.964018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.974032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.983008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.991905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.000618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.008928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.018990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.029851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.038683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.047834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.056292][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.063474][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.071566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.079850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.089126][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.106336][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.120654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.132318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.141686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.150721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.162815][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.169991][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.178460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.191679][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.200709][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.209829][ T239] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.216974][ T239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.226128][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.235705][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.269532][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.282026][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.291645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.301829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.310760][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.317907][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.326290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.338289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.347523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.355850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.368541][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.380336][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.423245][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.435707][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.452515][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.464570][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.480702][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.493802][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.523783][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.535070][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.554575][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.564392][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.572914][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.582117][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.591092][ T4244] Bluetooth: hci4: command 0x041b tx timeout [ 72.597844][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.598294][ T4244] Bluetooth: hci2: command 0x041b tx timeout [ 72.612016][ T4244] Bluetooth: hci3: command 0x041b tx timeout [ 72.613179][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.618500][ T4244] Bluetooth: hci1: command 0x041b tx timeout [ 72.632800][ T4244] Bluetooth: hci0: command 0x041b tx timeout [ 72.633615][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.647842][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.656853][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.665349][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.675222][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.684925][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.694361][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.721938][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.743753][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.758875][ T1256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.767496][ T1256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.795751][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.807986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.827072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.848213][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.859278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.893978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.905818][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.932569][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.957857][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.967655][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.974751][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.033610][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.054384][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.080064][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.108874][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.116096][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.124238][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.133260][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.143436][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.153161][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.163041][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.173689][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.182967][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.204473][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.213730][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.245867][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.278884][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.286813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.294441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.304081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.313047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.323048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.332355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.341691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.350261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.360131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.368360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.381198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.389953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.399929][ T4188] device veth0_vlan entered promiscuous mode [ 73.421921][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.432909][ T4188] device veth1_vlan entered promiscuous mode [ 73.487025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.495134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.511779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.524864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.533809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.564793][ T4184] device veth0_vlan entered promiscuous mode [ 73.578556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.588501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.599706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.609641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.619039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.652433][ T4184] device veth1_vlan entered promiscuous mode [ 73.662850][ T4183] device veth0_vlan entered promiscuous mode [ 73.674114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.683489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.692478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.701376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.711181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.720311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.729623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.743997][ T4185] device veth0_vlan entered promiscuous mode [ 73.757457][ T4185] device veth1_vlan entered promiscuous mode [ 73.770497][ T4188] device veth0_macvtap entered promiscuous mode [ 73.780708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.789493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.799056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.807493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.815584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.824427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.833742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.842114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.850797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.862717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.879399][ T4183] device veth1_vlan entered promiscuous mode [ 73.893082][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.902426][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.913818][ T4188] device veth1_macvtap entered promiscuous mode [ 73.948348][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.979050][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.010067][ T4184] device veth0_macvtap entered promiscuous mode [ 74.021531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.030916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.040286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.049486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.058524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.068163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.077349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.086766][ T4183] device veth0_macvtap entered promiscuous mode [ 74.099516][ T4183] device veth1_macvtap entered promiscuous mode [ 74.117272][ T4184] device veth1_macvtap entered promiscuous mode [ 74.130199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.139159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.149647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.158501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.168614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.189704][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.210511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.220265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.229646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.240684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.252278][ T4185] device veth0_macvtap entered promiscuous mode [ 74.270310][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.280698][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.290640][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.299959][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.320666][ T4185] device veth1_macvtap entered promiscuous mode [ 74.329494][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.340913][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.353843][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.365089][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.375869][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.392953][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.408180][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.418945][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.430103][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.440864][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.452657][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.475219][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.486739][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.496981][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.508915][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.519005][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.529494][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.541746][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.550738][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.559270][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.567639][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.576259][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.585425][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.596639][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.605373][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.614542][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.623850][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.632795][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.644192][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.653291][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.663401][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.672519][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.682661][ T4253] Bluetooth: hci0: command 0x040f tx timeout [ 74.689145][ T4253] Bluetooth: hci1: command 0x040f tx timeout [ 74.695424][ T4253] Bluetooth: hci3: command 0x040f tx timeout [ 74.697887][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.712314][ T4253] Bluetooth: hci2: command 0x040f tx timeout [ 74.718722][ T4253] Bluetooth: hci4: command 0x040f tx timeout [ 74.719735][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.736857][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.748442][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.759902][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.774296][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.786832][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.797256][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.808093][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.818394][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.830769][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.842339][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.854175][ T4192] device veth0_vlan entered promiscuous mode [ 74.867546][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.876725][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.886199][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.895351][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.904437][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.913889][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.926108][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.934947][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.944006][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.952941][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.981904][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.995192][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.008294][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.017327][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.026199][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.035035][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.048854][ T4192] device veth1_vlan entered promiscuous mode [ 75.155370][ T4192] device veth0_macvtap entered promiscuous mode [ 75.192029][ T1256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.201776][ T1256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.212254][ T1256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.231568][ T1256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.231718][ T4192] device veth1_macvtap entered promiscuous mode [ 75.242597][ T1256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.274431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.284476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.313464][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.325887][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.338927][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.349748][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.360299][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.372095][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.382074][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.392917][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.403106][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.413932][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.425740][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.441483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.453476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.462514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.481910][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.482535][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.490513][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.502246][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.520015][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.530752][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.541575][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.552752][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.563708][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.574491][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.586312][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.606721][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.614873][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.629152][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.642319][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.652951][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.661849][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.670945][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.721990][ T1256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.731894][ T1256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.757255][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.794611][ T239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.803257][ T1256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.813485][ T239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.834638][ T1256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.844065][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.861729][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.913620][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.935980][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.996696][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.004704][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.016251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.038669][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.066095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.080055][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.102771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.153274][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.204214][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.311326][ T1256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.580857][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 76.583625][ T4311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.590788][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 76.620967][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.626448][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.629937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.638899][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.647660][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.656610][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.665363][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.674333][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 76.867810][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 77.071996][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 77.093372][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 77.132853][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 77.186849][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 79.096633][ T4310] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.148734][ T4254] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.356554][ T4310] usb 2-1: Using ep0 maxpacket: 8 [ 79.398391][ T4254] usb 5-1: Using ep0 maxpacket: 16 [ 79.517076][ T4254] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 79.637730][ T4310] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 79.656615][ T4310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.674913][ T4310] usb 2-1: Product: syz [ 79.685091][ T4310] usb 2-1: Manufacturer: syz [ 79.690335][ T4254] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 79.708595][ T4310] usb 2-1: SerialNumber: syz [ 79.713403][ T4254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.735403][ T4254] usb 5-1: Product: syz [ 79.754317][ T4310] usb 2-1: config 0 descriptor?? [ 79.760947][ T4254] usb 5-1: Manufacturer: syz [ 79.765591][ T4254] usb 5-1: SerialNumber: syz [ 79.815790][ T4254] usb 5-1: config 0 descriptor?? [ 79.825511][ T4310] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 80.348680][ T4310] gspca_sonixj: reg_w1 err -110 [ 80.354986][ T4310] sonixj: probe of 2-1:0.0 failed with error -110 [ 80.472717][ T4351] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 80.516891][ T4351] qnx6: wrong signature (magic) in superblock #1. [ 80.525836][ T4351] qnx6: unable to read the first superblock [ 80.634864][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 80.902290][ T4354] device netdevsim0 entered promiscuous mode [ 81.254868][ T4362] input: syz1 as /devices/virtual/input/input5 [ 82.161457][ T4299] usb 2-1: USB disconnect, device number 2 [ 82.226887][ T4254] usb 5-1: USB disconnect, device number 2 [ 82.282333][ T4373] binder_alloc: binder_alloc_mmap_handler: 4372 200000ffc000-200001000000 already mapped failed -16 [ 82.294826][ T4371] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 82.547676][ T4267] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 83.026874][ T4267] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.036771][ T4267] usb 4-1: config 0 has no interface number 0 [ 83.104879][ T4267] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 83.192966][ T4267] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 83.275028][ T4267] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 83.336709][ T4267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.425831][ T4267] usb 4-1: config 0 descriptor?? [ 83.476787][ T4369] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 83.593641][ T4267] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 83.735662][ T4267] usb 4-1: USB disconnect, device number 2 [ 83.746454][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 85.286583][ T4299] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.556562][ T4299] usb 1-1: Using ep0 maxpacket: 32 [ 85.676732][ T4299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.712763][ T4299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.759960][ T4299] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 85.821091][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.905479][ T4299] usb 1-1: config 0 descriptor?? [ 86.498150][ T4299] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 86.506682][ T4299] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 87.365463][ T7] cfg80211: failed to load regulatory.db [ 87.384468][ T4299] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 87.560203][ T4299] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 87.587033][ T4299] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 88.150311][ T4299] koneplus 0003:1E7D:2D51.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 88.229367][ T4299] koneplus 0003:1E7D:2D51.0001: couldn't init struct koneplus_device [ 88.381405][ T4299] koneplus 0003:1E7D:2D51.0001: couldn't install mouse [ 89.188494][ T4299] koneplus: probe of 0003:1E7D:2D51.0001 failed with error -71 [ 89.325329][ T4299] usb 1-1: USB disconnect, device number 2 [ 89.466559][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.714916][ T4456] fido_id[4456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 90.066797][ T13] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 90.326853][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.327274][ T1092] block nbd4: Attempted send on invalid socket [ 90.334890][ T13] usb 4-1: Product: syz [ 90.342510][ T1092] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.346548][ T13] usb 4-1: Manufacturer: syz [ 90.361671][ T13] usb 4-1: SerialNumber: syz [ 90.479396][ T13] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 90.762952][ T4479] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 90.776747][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.791357][ T4479] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 90.920127][ T4435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.021340][ T4483] ptrace attach of "./syz-executor exec"[4185] was attempted by "./syz-executor exec"[4483] [ 91.076519][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 91.408264][ T7] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.486661][ T13] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 91.593183][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 91.615731][ T13] usb 4-1: ath9k_htc: USB layer deinitialized [ 91.683838][ T7] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 91.714843][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.737904][ T7] usb 1-1: config 0 descriptor?? [ 91.755898][ T1108] usb 4-1: USB disconnect, device number 3 [ 92.135027][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 92.563487][ T7] hid-generic 0003:07C0:1125.0002: hidraw0: USB HID v0.02 Device [HID 07c0:1125] on usb-dummy_hcd.0-1/input0 [ 92.762317][ T4472] syz.0.45 uses obsolete (PF_INET,SOCK_PACKET) [ 93.371497][ T4507] overlayfs: missing 'workdir' [ 95.031389][ T4516] Zero length message leads to an empty skb [ 96.436596][ T4254] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.716518][ T4254] usb 4-1: Using ep0 maxpacket: 16 [ 97.128227][ T4539] blk_update_request: I/O error, dev loop3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.140427][ T4539] ADFS-fs (loop3): error: unable to read block 3, try 0 [ 98.488474][ T4545] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0 [ 98.593857][ T4310] usb 1-1: USB disconnect, device number 3 [ 98.702103][ T4552] process 'syz.2.68' launched './file0' with NULL argv: empty string added [ 99.470264][ T4254] usb 4-1: unable to get BOS descriptor or descriptor too short [ 99.746927][ T4254] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 100.024258][ T4254] usb 4-1: can't read configurations, error -71 [ 101.171581][ T150] block nbd1: Attempted send on invalid socket [ 101.178019][ T150] blk_update_request: I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 101.216882][ T4584] tipc: Started in network mode [ 101.254634][ T4584] tipc: Node identity 821c5924c3bf, cluster identity 4711 [ 101.265494][ T4584] tipc: Enabled bearer , priority 0 [ 101.286336][ T4584] device syzkaller0 entered promiscuous mode [ 101.618204][ T4584] tipc: Resetting bearer [ 101.702006][ T4582] tipc: Resetting bearer [ 101.728434][ T4582] tipc: Disabling bearer [ 102.706523][ T4254] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 103.096680][ T4254] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 103.132429][ T4254] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.195662][ T4254] usb 4-1: config 0 has no interface number 0 [ 103.227523][ T4254] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 103.278980][ T4254] usb 4-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.320089][ T4254] usb 4-1: config 0 interface 11 has no altsetting 0 [ 103.341530][ T4254] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 103.369766][ T4254] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.416279][ T4254] usb 4-1: config 0 descriptor?? [ 104.537386][ T4254] usb 4-1: can't set config #0, error -71 [ 104.593250][ T4254] usb 4-1: USB disconnect, device number 6 [ 106.829708][ T4673] syz.0.99 sent an empty control message without MSG_MORE. [ 108.599798][ T26] audit: type=1326 audit(1758254589.913:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8cab4ba9 code=0x7ffc0000 [ 108.664186][ T26] audit: type=1326 audit(1758254589.943:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fee8cab4ba9 code=0x7ffc0000 [ 108.722481][ T26] audit: type=1326 audit(1758254589.943:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4692 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8cab4ba9 code=0x7ffc0000 [ 110.846560][ T4227] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 111.049619][ T4719] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.256717][ T4227] usb 1-1: not running at top speed; connect to a high speed hub [ 111.348169][ T4722] mmap: syz.1.114 (4722) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 111.366582][ T4227] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.406687][ T4227] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 111.457001][ T4227] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.508393][ T4724] netlink: 56 bytes leftover after parsing attributes in process `syz.2.115'. [ 111.697578][ T4227] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.709237][ T4732] binder: 4731:4732 unknown command 0 [ 111.728396][ T4732] binder: 4731:4732 ioctl c0306201 200000000080 returned -22 [ 111.737458][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.778826][ T4227] usb 1-1: Product: syz [ 111.778849][ T4227] usb 1-1: Manufacturer: syz [ 111.778865][ T4227] usb 1-1: SerialNumber: syz [ 111.926554][ T4254] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.072319][ T4227] cdc_ncm 1-1:1.0: skipping garbage [ 112.072350][ T4227] cdc_ncm 1-1:1.0: skipping garbage [ 112.072359][ T4227] cdc_ncm 1-1:1.0: skipping garbage [ 112.072368][ T4227] cdc_ncm 1-1:1.0: skipping garbage [ 112.072377][ T4227] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 112.072390][ T4227] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 112.072411][ T4227] cdc_ncm 1-1:1.0: bind() failure [ 112.077729][ T4227] usb 1-1: USB disconnect, device number 4 [ 112.166605][ T4254] usb 2-1: Using ep0 maxpacket: 8 [ 112.205982][ T4738] vxcan1 speed is unknown, defaulting to 1000 [ 112.219867][ T4738] vxcan1 speed is unknown, defaulting to 1000 [ 112.229006][ T4738] vxcan1 speed is unknown, defaulting to 1000 [ 112.704300][ T4738] infiniband syz2: set active [ 112.704448][ T4738] infiniband syz2: added vxcan1 [ 112.790525][ T4738] infiniband syz2: Couldn't open port 1 [ 112.807060][ T4299] vxcan1 speed is unknown, defaulting to 1000 [ 112.825798][ T4738] RDS/IB: syz2: added [ 112.826249][ T4738] smc: adding ib device syz2 with port count 1 [ 112.826422][ T4738] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) [ 112.829072][ T4738] vxcan1 speed is unknown, defaulting to 1000 [ 112.848136][ T4310] vxcan1 speed is unknown, defaulting to 1000 [ 112.897464][ T4254] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 112.897501][ T4254] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 112.897528][ T4254] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.897552][ T4254] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.897591][ T4254] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.897616][ T4254] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.965207][ T4738] vxcan1 speed is unknown, defaulting to 1000 [ 113.067817][ T4738] vxcan1 speed is unknown, defaulting to 1000 [ 113.156004][ T4738] vxcan1 speed is unknown, defaulting to 1000 [ 113.241591][ T4738] vxcan1 speed is unknown, defaulting to 1000 [ 113.656641][ T4254] usb 2-1: GET_CAPABILITIES returned 0 [ 113.656679][ T4254] usbtmc 2-1:16.0: can't read capabilities [ 114.771765][ T1108] usb 2-1: USB disconnect, device number 3 [ 114.826127][ T4730] vxcan1 speed is unknown, defaulting to 1000 [ 117.385845][ T4784] NILFS (loop1): device size too small [ 118.011297][ T4783] netlink: 36 bytes leftover after parsing attributes in process `syz.0.132'. [ 120.619105][ T4815] binder: 4814:4815 unknown command 0 [ 120.705985][ T4815] binder: 4814:4815 ioctl c0306201 200000000080 returned -22 [ 124.696506][ T4845] device netdevsim0 entered promiscuous mode [ 124.758296][ T4845] device macsec1 entered promiscuous mode [ 126.423714][ T4854] ODEBUG: Out of memory. ODEBUG disabled [ 126.641543][ T4854] syz.1.153 (4854): drop_caches: 2 [ 127.007901][ T4254] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 127.125994][ T4882] NILFS (loop1): device size too small [ 127.936461][ T4254] usb 4-1: Using ep0 maxpacket: 32 [ 128.001860][ T4885] syzkaller0: create flow: hash 3739086649 index 1 [ 128.068326][ T21] syzkaller0: tun_net_xmit 76 [ 128.081529][ T21] syzkaller0: tun_net_xmit 48 [ 128.087019][ T4254] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.117397][ T4254] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.148772][ T4254] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 128.171845][ T4254] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.193936][ T4885] syzkaller0: delete flow: hash 3739086649 index 1 [ 128.232589][ T4254] usb 4-1: config 0 descriptor?? [ 128.253292][ T150] block nbd2: Attempted send on invalid socket [ 128.259657][ T150] blk_update_request: I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 128.277754][ T4254] hub 4-1:0.0: bad descriptor, ignoring hub [ 128.297276][ T4254] hub: probe of 4-1:0.0 failed with error -5 [ 128.333189][ T4254] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 128.490405][ T4878] udc-core: couldn't find an available UDC or it's busy [ 128.512144][ T4878] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 128.636726][ T4299] usb 4-1: USB disconnect, device number 7 [ 129.392068][ T26] audit: type=1326 audit(1758254610.703:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba41aba9 code=0x7ffc0000 [ 130.099671][ T26] audit: type=1326 audit(1758254610.733:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7effba41aba9 code=0x7ffc0000 [ 130.258376][ T26] audit: type=1326 audit(1758254610.733:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba41aba9 code=0x7ffc0000 [ 130.352646][ T26] audit: type=1326 audit(1758254610.733:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7effba41aba9 code=0x7ffc0000 [ 130.422363][ T26] audit: type=1326 audit(1758254610.733:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba41aba9 code=0x7ffc0000 [ 130.469163][ T26] audit: type=1326 audit(1758254610.733:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba41aba9 code=0x7ffc0000 [ 130.526140][ T26] audit: type=1326 audit(1758254610.733:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7effba41aba9 code=0x7ffc0000 [ 130.586514][ T26] audit: type=1326 audit(1758254610.733:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba41aba9 code=0x7ffc0000 [ 130.685829][ T26] audit: type=1326 audit(1758254610.733:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effba41aba9 code=0x7ffc0000 [ 130.903698][ T26] audit: type=1326 audit(1758254610.733:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7effba41aba9 code=0x7ffc0000 [ 131.547271][ T4174] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 131.926695][ T4174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.961506][ T4174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.991956][ T4174] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.112682][ T4174] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.149145][ T4174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.181812][ T4174] usb 4-1: config 0 descriptor?? [ 132.588024][ T13] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 132.639164][ T13] Bluetooth: hci4: Injecting HCI hardware error event [ 132.665241][ T146] Bluetooth: hci4: hardware error 0x00 [ 132.808541][ T4174] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 132.831412][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.839833][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.864296][ T4174] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 134.994615][ T4267] usb 4-1: USB disconnect, device number 8 [ 135.918257][ T4958] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 135.925548][ T4958] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 136.089972][ T4958] vhci_hcd vhci_hcd.0: Device attached [ 136.376715][ T4254] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 136.459595][ T4962] vhci_hcd: connection reset by peer [ 136.498063][ T154] vhci_hcd: stop threads [ 136.498135][ T154] vhci_hcd: release socket [ 136.499050][ T154] vhci_hcd: disconnect device [ 136.957992][ T4950] qnx6: unable to read the first superblock [ 136.970819][ T4950] lo speed is unknown, defaulting to 1000 [ 136.977094][ T4950] lo speed is unknown, defaulting to 1000 [ 136.983750][ T4950] lo speed is unknown, defaulting to 1000 [ 136.992668][ T4950] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 137.004935][ T4950] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 137.023759][ T4950] lo speed is unknown, defaulting to 1000 [ 137.030753][ T4950] lo speed is unknown, defaulting to 1000 [ 137.037207][ T4950] lo speed is unknown, defaulting to 1000 [ 137.043664][ T4950] lo speed is unknown, defaulting to 1000 [ 137.050804][ T4950] lo speed is unknown, defaulting to 1000 [ 140.096563][ T4174] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 140.223237][ T4996] netlink: 52 bytes leftover after parsing attributes in process `syz.2.198'. [ 140.276552][ T4996] netlink: 52 bytes leftover after parsing attributes in process `syz.2.198'. [ 140.492383][ T5004] ksmbd: Unknown IPC event: 4, ignore. [ 140.556661][ T4174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.574122][ T4174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.638265][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 141.166507][ T4174] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.203491][ T4174] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.217546][ T4174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.231660][ T4174] usb 4-1: config 0 descriptor?? [ 141.382942][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 141.466528][ T4254] vhci_hcd: vhci_device speed not set [ 141.480364][ T4174] usbhid 4-1:0.0: can't add hid device: -71 [ 141.490989][ T4174] usbhid: probe of 4-1:0.0 failed with error -71 [ 141.511930][ T4174] usb 4-1: USB disconnect, device number 9 [ 141.581865][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 141.692321][ T13] usb 5-1: config 4 interface 0 has no altsetting 0 [ 142.249493][ T5028] netlink: 48 bytes leftover after parsing attributes in process `syz.2.208'. [ 142.309883][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 142.366659][ T13] usb 5-1: string descriptor 0 read error: -22 [ 142.376542][ T13] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 142.448320][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.508895][ T13] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 142.522602][ T5028] syz.2.208 (5028) used greatest stack depth: 18592 bytes left [ 142.558372][ T13] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 142.620449][ T13] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 142.665622][ T13] usb 5-1: media controller created [ 142.718530][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.788855][ T13] zl10353_read_register: readreg error (reg=127, ret==0) [ 142.875892][ T13] usb 5-1: USB disconnect, device number 3 [ 142.956467][ T1111] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 143.236735][ T1111] usb 3-1: Using ep0 maxpacket: 16 [ 143.376802][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.431359][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.495755][ T1111] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 143.645276][ T1111] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 143.683068][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.857685][ T5049] netlink: 172 bytes leftover after parsing attributes in process `syz.0.216'. [ 143.896033][ T1111] usb 3-1: config 0 descriptor?? [ 144.474001][ T5051] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 144.484160][ T1111] hid-generic 0003:0955:7214.0004: unknown main item tag 0x0 [ 144.492331][ T1111] hid-generic 0003:0955:7214.0004: unknown main item tag 0x0 [ 144.500391][ T1111] hid-generic 0003:0955:7214.0004: unknown main item tag 0x0 [ 144.509003][ T1111] hid-generic 0003:0955:7214.0004: unknown main item tag 0x0 [ 144.517133][ T1111] hid-generic 0003:0955:7214.0004: unknown main item tag 0x0 [ 144.540623][ T1111] hid-generic 0003:0955:7214.0004: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 144.722144][ T5051] device bond1 entered promiscuous mode [ 144.909673][ T4174] usb 3-1: USB disconnect, device number 2 [ 144.927058][ T5055] fido_id[5055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0955:7214.0004/report_descriptor': No such device [ 144.947038][ T5051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.394154][ T5075] overlayfs: missing 'lowerdir' [ 149.126557][ T1108] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 149.206638][ T4254] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 150.046641][ T1108] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 151.076515][ T5093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.228'. [ 151.376621][ T5092] sched: RT throttling activated [ 151.390592][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.426562][ T1108] usb 5-1: config 0 has no interface number 0 [ 151.776438][ T4254] usb 4-1: Using ep0 maxpacket: 32 [ 151.797310][ T1108] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 151.816427][ T1108] usb 5-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.936655][ T1108] usb 5-1: string descriptor 0 read error: -71 [ 151.946511][ T1108] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 152.053552][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.071581][ T1108] usb 5-1: config 0 descriptor?? [ 152.082861][ T4254] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 152.100517][ T4254] usb 4-1: can't read configurations, error -71 [ 152.107514][ T1108] usb 5-1: can't set config #0, error -71 [ 152.144123][ T1108] usb 5-1: USB disconnect, device number 4 [ 152.526407][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 152.926515][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 153.076739][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.102586][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.181039][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 153.230802][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.407309][ T7] usb 2-1: config 0 descriptor?? [ 153.602101][ T7] hub 2-1:0.0: bad descriptor, ignoring hub [ 153.711899][ T7] hub: probe of 2-1:0.0 failed with error -5 [ 153.925460][ T7] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 154.506540][ T4267] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 154.878860][ T5108] usb 2-1: USB disconnect, device number 4 [ 154.991087][ T5153] rdma_rxe: rxe_register_device failed with error -23 [ 155.000591][ T5153] rdma_rxe: failed to add vxcan1 [ 155.436798][ T4254] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 155.651485][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 155.776675][ T4254] usb 5-1: Using ep0 maxpacket: 8 [ 155.936752][ T4267] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 155.946789][ T4254] usb 5-1: unable to get BOS descriptor or descriptor too short [ 155.956864][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.964924][ T4267] usb 4-1: Product: syz [ 155.973476][ T4267] usb 4-1: Manufacturer: syz [ 156.058233][ T4254] usb 5-1: config 57 has an invalid interface number: 229 but max is 0 [ 156.111922][ T4267] usb 4-1: SerialNumber: syz [ 156.132904][ T4254] usb 5-1: config 57 has no interface number 0 [ 156.148557][ T4254] usb 5-1: config 57 interface 229 has no altsetting 0 [ 156.167275][ T4267] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 156.346547][ T4254] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=dd.eb [ 156.360831][ T4254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.379580][ T4254] usb 5-1: Product: syz [ 156.384173][ T4254] usb 5-1: Manufacturer: syz [ 156.389157][ T4254] usb 5-1: SerialNumber: syz [ 156.866564][ T4267] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 157.073317][ T7] usb 4-1: USB disconnect, device number 12 [ 157.171033][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 157.536708][ T23] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 157.549171][ T23] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 157.583964][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 157.635667][ T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 157.657912][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.698808][ T23] usb 2-1: config 0 descriptor?? [ 157.805128][ T5170] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 157.863633][ T23] appledisplay 2-1:0.0: Could not find int-in endpoint [ 157.873352][ T4254] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 157.956593][ T4267] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 157.974330][ T4267] ath9k_htc: Failed to initialize the device [ 157.989655][ T5179] [ 157.992032][ T5179] ====================================================== [ 157.999083][ T5179] WARNING: possible circular locking dependency detected [ 158.006125][ T5179] syzkaller #0 Not tainted [ 158.010646][ T5179] ------------------------------------------------------ [ 158.017674][ T5179] syz.3.250/5179 is trying to acquire lock: [ 158.023579][ T5179] ffff888077950c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 158.034673][ T5179] [ 158.034673][ T5179] but task is already holding lock: [ 158.040481][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 158.042055][ T5179] ffffffff8d4c0468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 158.059070][ T5179] [ 158.059070][ T5179] which lock already depends on the new lock. [ 158.059070][ T5179] [ 158.069492][ T5179] [ 158.069492][ T5179] the existing dependency chain (in reverse order) is: [ 158.070186][ T4254] usb 5-1: USB disconnect, device number 5 [ 158.078536][ T5179] [ 158.078536][ T5179] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 158.078573][ T5179] __mutex_lock_common+0x1eb/0x2390 [ 158.078600][ T5179] mutex_lock_nested+0x17/0x20 [ 158.103579][ T5179] rfkill_register+0x33/0x8a0 [ 158.108897][ T5179] hci_register_dev+0x452/0x970 [ 158.114301][ T5179] vhci_create_device+0x32c/0x5c0 [ 158.119876][ T5179] vhci_write+0x391/0x450 [ 158.124756][ T5179] vfs_write+0x712/0xd00 [ 158.129537][ T5179] ksys_write+0x14d/0x250 [ 158.134403][ T5179] do_syscall_64+0x4c/0xa0 [ 158.139377][ T5179] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.145816][ T5179] [ 158.145816][ T5179] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 158.153655][ T5179] __mutex_lock_common+0x1eb/0x2390 [ 158.159408][ T5179] mutex_lock_nested+0x17/0x20 [ 158.164837][ T5179] vhci_send_frame+0x88/0x100 [ 158.170249][ T5179] hci_send_frame+0x1a9/0x2e0 [ 158.175480][ T5179] hci_tx_work+0x9f9/0x1710 [ 158.180526][ T5179] process_one_work+0x863/0x1000 [ 158.186111][ T5179] worker_thread+0xaa8/0x12a0 [ 158.191329][ T5179] kthread+0x436/0x520 [ 158.195942][ T5179] ret_from_fork+0x1f/0x30 [ 158.200928][ T5179] [ 158.200928][ T5179] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 158.210173][ T5179] __flush_work+0xdd/0x1b0 [ 158.215136][ T5179] hci_dev_do_close+0x1e7/0x1030 [ 158.220623][ T5179] hci_error_reset+0x101/0x2c0 [ 158.225934][ T5179] process_one_work+0x863/0x1000 [ 158.231422][ T5179] worker_thread+0xaa8/0x12a0 [ 158.236754][ T5179] kthread+0x436/0x520 [ 158.241368][ T5179] ret_from_fork+0x1f/0x30 [ 158.246335][ T5179] [ 158.246335][ T5179] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 158.254001][ T5179] __mutex_lock_common+0x1eb/0x2390 [ 158.259746][ T5179] mutex_lock_nested+0x17/0x20 [ 158.265057][ T5179] bg_scan_update+0x44/0x3b0 [ 158.270281][ T5179] process_one_work+0x863/0x1000 [ 158.275762][ T5179] worker_thread+0xaa8/0x12a0 [ 158.280977][ T5179] kthread+0x436/0x520 [ 158.285597][ T5179] ret_from_fork+0x1f/0x30 [ 158.290544][ T5179] [ 158.290544][ T5179] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 158.300630][ T5179] __lock_acquire+0x2c33/0x7c60 [ 158.306039][ T5179] lock_acquire+0x197/0x3f0 [ 158.311075][ T5179] __flush_work+0xdd/0x1b0 [ 158.316114][ T5179] __cancel_work_timer+0x3ac/0x520 [ 158.321757][ T5179] hci_request_cancel_all+0xcc/0x300 [ 158.327609][ T5179] hci_dev_do_close+0x4e/0x1030 [ 158.333031][ T5179] hci_rfkill_set_block+0x10a/0x190 [ 158.338765][ T5179] rfkill_set_block+0x1c6/0x420 [ 158.344139][ T5179] rfkill_fop_write+0x458/0x560 [ 158.349510][ T5179] vfs_write+0x300/0xd00 [ 158.354270][ T5179] ksys_write+0x14d/0x250 [ 158.359121][ T5179] do_syscall_64+0x4c/0xa0 [ 158.364061][ T5179] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.370480][ T5179] [ 158.370480][ T5179] other info that might help us debug this: [ 158.370480][ T5179] [ 158.380879][ T5179] Chain exists of: [ 158.380879][ T5179] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 158.380879][ T5179] [ 158.396605][ T5179] Possible unsafe locking scenario: [ 158.396605][ T5179] [ 158.404057][ T5179] CPU0 CPU1 [ 158.409421][ T5179] ---- ---- [ 158.414780][ T5179] lock(rfkill_global_mutex); [ 158.419541][ T5179] lock(&data->open_mutex); [ 158.426650][ T5179] lock(rfkill_global_mutex); [ 158.433934][ T5179] lock((work_completion)(&hdev->bg_scan_update)); [ 158.440519][ T5179] [ 158.440519][ T5179] *** DEADLOCK *** [ 158.440519][ T5179] [ 158.448652][ T5179] 1 lock held by syz.3.250/5179: [ 158.453590][ T5179] #0: ffffffff8d4c0468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 158.463690][ T5179] [ 158.463690][ T5179] stack backtrace: [ 158.469584][ T5179] CPU: 0 PID: 5179 Comm: syz.3.250 Not tainted syzkaller #0 [ 158.476876][ T5179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.486938][ T5179] Call Trace: [ 158.490226][ T5179] [ 158.493157][ T5179] dump_stack_lvl+0x168/0x230 [ 158.497839][ T5179] ? load_image+0x3b0/0x3b0 [ 158.502361][ T5179] ? show_regs_print_info+0x20/0x20 [ 158.507569][ T5179] ? print_circular_bug+0x12b/0x1a0 [ 158.512856][ T5179] check_noncircular+0x274/0x310 [ 158.517802][ T5179] ? add_chain_block+0x940/0x940 [ 158.522738][ T5179] ? lockdep_lock+0xdc/0x1e0 [ 158.527330][ T5179] ? __lock_acquire+0x12d9/0x7c60 [ 158.532366][ T5179] ? lockdep_lock+0x1e0/0x1e0 [ 158.537046][ T5179] ? mark_lock+0x94/0x320 [ 158.541380][ T5179] __lock_acquire+0x2c33/0x7c60 [ 158.546245][ T5179] ? mark_lock+0x94/0x320 [ 158.550624][ T5179] ? verify_lock_unused+0x140/0x140 [ 158.555843][ T5179] lock_acquire+0x197/0x3f0 [ 158.560353][ T5179] ? __flush_work+0xc1/0x1b0 [ 158.564945][ T5179] ? __lock_acquire+0x7c60/0x7c60 [ 158.570066][ T5179] ? read_lock_is_recursive+0x10/0x10 [ 158.575545][ T5179] ? start_flush_work+0x776/0x820 [ 158.580664][ T5179] __flush_work+0xdd/0x1b0 [ 158.585101][ T5179] ? __flush_work+0xc1/0x1b0 [ 158.589691][ T5179] ? flush_work+0x20/0x20 [ 158.594024][ T5179] ? try_to_grab_pending+0xf3/0x7e0 [ 158.599236][ T5179] ? lockdep_hardirqs_off+0x70/0x100 [ 158.604523][ T5179] ? mark_lock+0x94/0x320 [ 158.609200][ T5179] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 158.615182][ T5179] ? lock_chain_count+0x20/0x20 [ 158.620038][ T5179] ? mark_lock+0x94/0x320 [ 158.624369][ T5179] ? __cancel_work_timer+0x331/0x520 [ 158.629675][ T5179] __cancel_work_timer+0x3ac/0x520 [ 158.634787][ T5179] ? cancel_work_sync+0x20/0x20 [ 158.639639][ T5179] ? __cancel_work+0x1f4/0x2d0 [ 158.644491][ T5179] ? lockdep_hardirqs_on+0x94/0x140 [ 158.649693][ T5179] ? __cancel_work+0x26f/0x2d0 [ 158.654456][ T5179] ? cancel_work+0x20/0x20 [ 158.658888][ T5179] ? lock_chain_count+0x20/0x20 [ 158.663740][ T5179] hci_request_cancel_all+0xcc/0x300 [ 158.669029][ T5179] hci_dev_do_close+0x4e/0x1030 [ 158.673884][ T5179] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 158.679779][ T5179] ? _raw_spin_unlock+0x40/0x40 [ 158.684636][ T5179] hci_rfkill_set_block+0x10a/0x190 [ 158.689833][ T5179] ? rcu_lock_release+0x20/0x20 [ 158.694779][ T5179] rfkill_set_block+0x1c6/0x420 [ 158.699638][ T5179] rfkill_fop_write+0x458/0x560 [ 158.704497][ T5179] ? rfkill_fop_read+0x4b0/0x4b0 [ 158.709454][ T5179] ? common_file_perm+0xc0/0x1c0 [ 158.714396][ T5179] ? fsnotify_perm+0x5d/0x560 [ 158.719096][ T5179] ? security_file_permission+0x75/0xa0 [ 158.724642][ T5179] ? rfkill_fop_read+0x4b0/0x4b0 [ 158.729579][ T5179] vfs_write+0x300/0xd00 [ 158.733833][ T5179] ? file_end_write+0x250/0x250 [ 158.738701][ T5179] ? __fget_files+0x40f/0x480 [ 158.743377][ T5179] ? __fdget_pos+0x1e2/0x370 [ 158.747969][ T5179] ? ksys_write+0x71/0x250 [ 158.752389][ T5179] ksys_write+0x14d/0x250 [ 158.756804][ T5179] ? __ia32_sys_read+0x80/0x80 [ 158.761572][ T5179] ? lockdep_hardirqs_on+0x94/0x140 [ 158.766772][ T5179] do_syscall_64+0x4c/0xa0 [ 158.771184][ T5179] ? clear_bhb_loop+0x30/0x80 [ 158.775863][ T5179] ? clear_bhb_loop+0x30/0x80 [ 158.780537][ T5179] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.786445][ T5179] RIP: 0033:0x7effba41aba9 [ 158.790865][ T5179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.810471][ T5179] RSP: 002b:00007effb8661038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.818905][ T5179] RAX: ffffffffffffffda RBX: 00007effba662090 RCX: 00007effba41aba9 [ 158.826876][ T5179] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000008 [ 158.834845][ T5179] RBP: 00007effba49de19 R08: 0000000000000000 R09: 0000000000000000 [ 158.842812][ T5179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.850790][ T5179] R13: 00007effba662128 R14: 00007effba662090 R15: 00007ffe6e3f64b8 [ 158.858798][ T5179] [ 158.861917][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.874403][ T23] usb 2-1: USB disconnect, device number 5 [ 158.924137][ T7] usb 4-1: ath9k_htc: USB layer deinitialized