last executing test programs: 13.319158329s ago: executing program 2 (id=135): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000180)) 13.085052109s ago: executing program 2 (id=137): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x6, 0x3, 0x5, 0x1635}}, 0x120) 12.188347568s ago: executing program 2 (id=142): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x20, 0x140a, 0x1f95844b79e8a54d, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x24000890) 12.025503735s ago: executing program 2 (id=144): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f10c000280", @ANYRES32=0x0], 0x3c}}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000"]) socket(0x80000000000000a, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a0a1ebbcedc62d22393f2be08ea8dfac58b60553597e7e8", @ANYRES32, @ANYBLOB='l:'], 0x48) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000400)=0x68) fremovexattr(r2, &(0x7f0000000200)=@known='security.apparmor\x00') sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0xca, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x94, 0x0, 0x0, @local, @local, {[@dstopts={0x89, 0xa, '\x00', [@generic={0x31, 0x53, "fa913621b5a2df267f483e43d9b58309590995aa46d548ffd3b795fef52731d3896c94289df9d986f67309f7573613633974f50accf3710d8c5ed7363d4d7ac5f11c7a7961f11a5041acb384f3db60a99de868"}]}], "31455408edf31db961ce075e34cee311757fbc3511e16ddffb204dedc8b2745fe0724db43bbf2d3b602c21541007000062a2d376"}}}}}, 0x0) 9.523099314s ago: executing program 1 (id=153): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kfree_skb\x00', r0, 0x0, 0x5}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000340)) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r1) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) 9.370039231s ago: executing program 1 (id=154): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(0x0, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x4040004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x8) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8.319727597s ago: executing program 1 (id=156): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) 8.050584399s ago: executing program 2 (id=158): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r4 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = eventfd2(0x0, 0x80800) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r8, 0xc0585611, &(0x7f0000000200)=@multiplanar_mmap={0x6, 0x3, 0x4, 0x0, 0x6, {}, {0x4, 0xc, 0x1f, 0x8, 0x81, 0xfc}, 0xb421, 0x1, {&(0x7f0000000380)=[{0xfd, 0x7, {0x315c}, 0x7}, {0x7, 0x3ff, {0x5}, 0x9}]}, 0x33}) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f046}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x3, 0x0, 0x0, r6}) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000010000104000000004200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c300000000000000000001c0012800b000100697036746e6c00000c0002800600100006000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x1c) 5.316072298s ago: executing program 1 (id=159): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20024090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608faffffff0000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) 5.26513133s ago: executing program 2 (id=160): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x8000, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x10, 0x4) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000500)={0x3, 0x5, 0xd, 0x9}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 5.073234538s ago: executing program 3 (id=161): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) 4.908269235s ago: executing program 3 (id=162): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newspdinfo={0x1c, 0x24, 0x801, 0x70bd2c, 0x25dfdbfb, 0xf, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x40) 4.857837908s ago: executing program 0 (id=163): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f00007fc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f00007fe000/0x3000)=nil) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.636299627s ago: executing program 3 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, 0x0, 0x4008800) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r2, &(0x7f0000000c80)={&(0x7f0000000a40)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80, 0x0}, 0x4040050) recvfrom(r1, 0x0, 0xffffffffffffffab, 0x2042, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.426117826s ago: executing program 3 (id=166): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x8400, 0x1}) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 4.236229575s ago: executing program 3 (id=168): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8c5}, 0x20000000) 4.092568741s ago: executing program 3 (id=169): readv(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[@ANYBLOB="0380c20000000180c200000008004500005c0000000000019078ac1e0001ac1414aa050190787f000001409e0003"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0xfe61}}, 0x880) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) 4.091138011s ago: executing program 4 (id=170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd2d, 0x20000000, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x4, 0xfffffff8, 0x2e3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xcc}}, 0x0) 3.876399531s ago: executing program 4 (id=171): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xf9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x0, 0x5, 0x0, 0x0, 0x0}) 3.536255375s ago: executing program 4 (id=172): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 3.399247791s ago: executing program 4 (id=173): syz_open_dev$media(&(0x7f0000000000), 0x6, 0x2800) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6, 0x2, 0x7, 0x1}, 0x6}, 0x20, 0x1, 0x0) r0 = syz_io_uring_setup(0x1e1a, &(0x7f0000000440)={0x0, 0x430, 0x10100, 0x0, 0x83}, &(0x7f0000002000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(r0, 0x100048ed, 0x0, 0x2, 0x0, 0x0) openat$vcsu(0xffffff9c, 0x0, 0x2000, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000740)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000040)={0x0, r5}) close(0x3) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c005ff57561137d2d396b9ffc34e50000", @ANYRES16=r7, @ANYBLOB="010029bd700000dcdf250900000008000300", @ANYRES32=r8, @ANYBLOB="05000800000000000800370001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r10, 0x80dc5521, &(0x7f0000000180)=""/42) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40081, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) 3.152941362s ago: executing program 4 (id=174): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) unshare(0x64000600) r2 = gettid() syz_clone(0x42164011, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850) 2.672207313s ago: executing program 0 (id=175): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, &(0x7f0000000180)) 2.50880912s ago: executing program 0 (id=176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.386015425s ago: executing program 0 (id=177): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x2100, 0x1, 0x9, 0x56595559, [0x8, 0x8], [0x0, 0x1], 0x1}}) 2.180172175s ago: executing program 0 (id=178): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@empty, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x200, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x15, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x24008011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1400}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r5, 0x0}) 1.940371125s ago: executing program 4 (id=179): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="af", 0x1, 0x840, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) close(0xffffffffffffffff) r2 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x8000000000000001, 0x40) ioctl$HIDIOCSREPORT(r3, 0x400c4808, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r4, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) read$char_usb(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fchdir(r2) syz_clone3(&(0x7f00000005c0)={0x80000000, 0x0, &(0x7f0000000380), &(0x7f00000003c0), {0x40}, &(0x7f0000000400)=""/71, 0x47, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x58) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) 149.453393ms ago: executing program 1 (id=180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x7, 0x65c3, 0x9, 0x112, 0x1, 0xcf02}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r2, 0x0) 328.4µs ago: executing program 0 (id=181): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x10000, 0x6, 0x100000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 0s ago: executing program 1 (id=182): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="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", 0x24f}], 0x1}}], 0x1, 0x40000d0) sendto$inet(r0, &(0x7f0000000300)="0906c422", 0x4, 0x40040011, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.150' (ED25519) to the list of known hosts. [ 56.545807][ T4173] cgroup: Unknown subsys name 'net' [ 56.683325][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.163328][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.738991][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 59.755352][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 59.838592][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 59.870613][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 59.943989][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 59.955968][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.963194][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.972639][ T4187] device bridge_slave_0 entered promiscuous mode [ 60.002689][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.009921][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.018884][ T4184] device bridge_slave_0 entered promiscuous mode [ 60.027236][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.034479][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.043290][ T4187] device bridge_slave_1 entered promiscuous mode [ 60.073299][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.080712][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.088793][ T4184] device bridge_slave_1 entered promiscuous mode [ 60.114650][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.121976][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.130200][ T4183] device bridge_slave_0 entered promiscuous mode [ 60.159025][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.166115][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.174833][ T4183] device bridge_slave_1 entered promiscuous mode [ 60.191680][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.230445][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.241532][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.258057][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.265145][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.273239][ T4189] device bridge_slave_0 entered promiscuous mode [ 60.293440][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.311002][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.318385][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.326201][ T4189] device bridge_slave_1 entered promiscuous mode [ 60.342582][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.362623][ T4187] team0: Port device team_slave_0 added [ 60.386056][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.404752][ T4187] team0: Port device team_slave_1 added [ 60.417924][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.425002][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.433459][ T4191] device bridge_slave_0 entered promiscuous mode [ 60.451591][ T4184] team0: Port device team_slave_0 added [ 60.465834][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.475371][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.482665][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.491393][ T4191] device bridge_slave_1 entered promiscuous mode [ 60.505695][ T4184] team0: Port device team_slave_1 added [ 60.522057][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.540666][ T4183] team0: Port device team_slave_0 added [ 60.554506][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.561816][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.587766][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.616065][ T4183] team0: Port device team_slave_1 added [ 60.630214][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.637525][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.663568][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.685055][ T4189] team0: Port device team_slave_0 added [ 60.692984][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.710940][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.718258][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.744627][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.762253][ T4189] team0: Port device team_slave_1 added [ 60.769937][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.793900][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.801340][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.827450][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.867474][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.874457][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.900493][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.941023][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.948188][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.974214][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.996475][ T4187] device hsr_slave_0 entered promiscuous mode [ 61.003405][ T4187] device hsr_slave_1 entered promiscuous mode [ 61.010950][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.018224][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.044383][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.057957][ T4191] team0: Port device team_slave_0 added [ 61.080491][ T4184] device hsr_slave_0 entered promiscuous mode [ 61.087773][ T4184] device hsr_slave_1 entered promiscuous mode [ 61.094354][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.102352][ T4184] Cannot create hsr debugfs directory [ 61.121290][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.128551][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.154594][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.171764][ T4191] team0: Port device team_slave_1 added [ 61.220987][ T4183] device hsr_slave_0 entered promiscuous mode [ 61.227907][ T4183] device hsr_slave_1 entered promiscuous mode [ 61.234421][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.242474][ T4183] Cannot create hsr debugfs directory [ 61.269122][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.276097][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.302137][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.342147][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.351962][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.379402][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.405466][ T4189] device hsr_slave_0 entered promiscuous mode [ 61.412291][ T4189] device hsr_slave_1 entered promiscuous mode [ 61.419052][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.427099][ T4189] Cannot create hsr debugfs directory [ 61.437874][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 61.444840][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 61.462213][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 61.468409][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 61.474472][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 61.573177][ T4191] device hsr_slave_0 entered promiscuous mode [ 61.580138][ T4191] device hsr_slave_1 entered promiscuous mode [ 61.587298][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.594883][ T4191] Cannot create hsr debugfs directory [ 61.774907][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.792915][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.804638][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.817815][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.873890][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.896004][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.908486][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.945522][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.972806][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.009003][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.018240][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.031005][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.046375][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.059728][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.081560][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.105287][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.132241][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.180714][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.191269][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.204268][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.215532][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.228558][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.238847][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.258071][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.268320][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.280199][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.289580][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.296883][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.306448][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.347419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.358409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.367774][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.375082][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.387271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.401092][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.436839][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.446298][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.457929][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.466961][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.475838][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.493416][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.519185][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.528970][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.537909][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.545662][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.555629][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.569039][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.580852][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.598542][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.607952][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.616448][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.627078][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.635607][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.642753][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.671777][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.679170][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.688877][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.705052][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.714181][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.721301][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.729329][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.738494][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.763353][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.791557][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.802788][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.815097][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.827015][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.835799][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.845531][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.855418][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.864492][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.874047][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.882795][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.893424][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.901597][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.918928][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.932498][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.941228][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.978139][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.987708][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.996652][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.003733][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.019954][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.028993][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.038371][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.045420][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.053387][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.072782][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.088798][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.098653][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.110948][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.121155][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.130029][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.138904][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.146506][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.169477][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.199196][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.210460][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.219309][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.226389][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.234493][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.243687][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.254530][ T1240] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.261655][ T1240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.270169][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.279793][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.305673][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.314739][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.326074][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.334888][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.344017][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.353182][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.362504][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.371578][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.379767][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.390123][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.399873][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.409405][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.417513][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.434373][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.444497][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.454259][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.464044][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.481874][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.497516][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.508091][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.517440][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.528880][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 63.534753][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.535000][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 63.544134][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.549617][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 63.557780][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.568892][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 63.571438][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.575976][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 63.584692][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.600472][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.608980][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.640295][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.660132][ T4184] device veth0_vlan entered promiscuous mode [ 63.676166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.686319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.695409][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.702546][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.712646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.721889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.730908][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.738025][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.745820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.755326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.763927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.792407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.801160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.810229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.819570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.829520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.840485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.849823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.859466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.868741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.879599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.888577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.904352][ T4184] device veth1_vlan entered promiscuous mode [ 63.920063][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.972227][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.985151][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.995546][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.005345][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.047299][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.054482][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.067205][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.087070][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.103093][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.113168][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.121735][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.139186][ T4187] device veth0_vlan entered promiscuous mode [ 64.156346][ T4184] device veth0_macvtap entered promiscuous mode [ 64.177777][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.186515][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.199108][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.208096][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.215618][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.228416][ T4184] device veth1_macvtap entered promiscuous mode [ 64.243779][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.257819][ T4187] device veth1_vlan entered promiscuous mode [ 64.296231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.312177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.323693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.334136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.363433][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.377068][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.387047][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.395678][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.405662][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.415548][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.425779][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.434294][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.462110][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.470452][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.478667][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.486520][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.495782][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.503349][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.511614][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.520758][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.530365][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.541946][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.550339][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.567355][ T4189] device veth0_vlan entered promiscuous mode [ 64.580249][ T4183] device veth0_vlan entered promiscuous mode [ 64.589881][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.598399][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.607942][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.622561][ T4189] device veth1_vlan entered promiscuous mode [ 64.633782][ T4187] device veth0_macvtap entered promiscuous mode [ 64.647430][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.656357][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.667205][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.675932][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.691951][ T4183] device veth1_vlan entered promiscuous mode [ 64.708294][ T4187] device veth1_macvtap entered promiscuous mode [ 64.795849][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.809872][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.821889][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.854452][ T4189] device veth0_macvtap entered promiscuous mode [ 64.870974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.879917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.888655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.897997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.906386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.915499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.924808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.934185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.944897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.953858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.964746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.990864][ T4189] device veth1_macvtap entered promiscuous mode [ 65.005927][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.017205][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.030248][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.039273][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.048322][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.057269][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.065852][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.081836][ T4183] device veth0_macvtap entered promiscuous mode [ 65.100915][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.110392][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.119975][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.129263][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.151384][ T4183] device veth1_macvtap entered promiscuous mode [ 65.160976][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.164573][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.169950][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.189840][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.200942][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.211581][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.222691][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.232824][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.241066][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.249398][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.257492][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.266254][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.275290][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.285141][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.310061][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.324150][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.334204][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.344642][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.356286][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.393800][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.403039][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.418939][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.430268][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.440255][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.449809][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.461071][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.471941][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.482273][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.493618][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.504392][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.515057][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.529585][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.569821][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.580165][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.589825][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.599215][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.606994][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 65.607142][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 65.616164][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.626493][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 65.630279][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.636018][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 65.645903][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.658539][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 65.661902][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.678207][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.689668][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.700797][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.715307][ T4191] device veth0_vlan entered promiscuous mode [ 65.729815][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.737763][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.745546][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.754656][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.769030][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.777251][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.784917][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.793881][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.802905][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.814623][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.842397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.872551][ T4191] device veth1_vlan entered promiscuous mode [ 65.902301][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.920799][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.970033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.985348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.994206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.047110][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.051041][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.055122][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.072528][ T298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.097877][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.098265][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.111341][ T298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.138084][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.151913][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.363515][ T4191] device veth0_macvtap entered promiscuous mode [ 66.387790][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.420544][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.474327][ T4300] loop2: detected capacity change from 0 to 1024 [ 67.240460][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 67.256702][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 67.267030][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 67.277551][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 67.288378][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 67.298535][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 67.308646][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 67.318952][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 67.329124][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 67.338954][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 68.451591][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 68.936758][ T4191] device veth1_macvtap entered promiscuous mode [ 69.102376][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.121618][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.224381][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.264610][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 69.274565][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.466939][ T4299] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2'. [ 69.533634][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.875178][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.069791][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.195719][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.278553][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 70.286755][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 70.289208][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.292933][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 70.392094][ T4317] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6'. [ 71.066755][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.107309][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.118362][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.155648][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.202765][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.213293][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.287272][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.468365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.519113][ T4324] loop2: detected capacity change from 0 to 8192 [ 71.533591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.605200][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.635644][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.651318][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.664291][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.676506][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.687152][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.726186][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.749628][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.929447][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.943783][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.955977][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.203509][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.248415][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.293082][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.770919][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.869415][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.967592][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.265967][ T4342] overlayfs: overlapping lowerdir path [ 74.192209][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.346079][ T4351] netlink: 256 bytes leftover after parsing attributes in process `syz.3.16'. [ 76.666801][ T4360] loop2: detected capacity change from 0 to 256 [ 79.328722][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.398034][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.747724][ T4360] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 256) [ 79.757110][ T4360] exFAT-fs (loop2): failed to load alloc-bitmap [ 79.763855][ T4360] exFAT-fs (loop2): failed to recognize exfat type [ 80.321036][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.078439][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.086493][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.097231][ T4369] loop3: detected capacity change from 0 to 128 [ 81.173232][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.521761][ T1326] cfg80211: failed to load regulatory.db [ 82.049865][ T4369] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.053880][ T4369] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.128611][ T4375] loop1: detected capacity change from 0 to 8192 [ 82.997878][ T4388] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 84.249730][ T4393] loop4: detected capacity change from 0 to 256 [ 84.392849][ T4388] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 84.948000][ T4393] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 256) [ 84.957027][ T4393] exFAT-fs (loop4): failed to load alloc-bitmap [ 84.963822][ T4393] exFAT-fs (loop4): failed to recognize exfat type [ 85.235923][ T4404] loop0: detected capacity change from 0 to 256 [ 86.834134][ T4396] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.647319][ T4404] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 256) [ 87.657024][ T4404] exFAT-fs (loop0): failed to load alloc-bitmap [ 87.663687][ T4404] exFAT-fs (loop0): failed to recognize exfat type [ 89.535424][ T4412] netlink: 256 bytes leftover after parsing attributes in process `syz.4.28'. [ 89.846285][ T4420] loop4: detected capacity change from 0 to 512 [ 90.137887][ T4426] loop0: detected capacity change from 0 to 512 [ 90.901725][ T4426] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.914926][ T4426] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.938115][ T4420] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.981630][ T4426] EXT4-fs (loop0): 1 truncate cleaned up [ 90.987370][ T4426] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 91.048863][ T4423] syz.0.29 (pid 4423) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 91.145300][ T4420] EXT4-fs (loop4): 1 truncate cleaned up [ 91.156759][ T4420] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 91.382326][ T4431] loop1: detected capacity change from 0 to 4096 [ 91.450358][ T4431] NILFS (loop1): unrecognized mount option "ÿÿÿÿ" [ 91.562785][ T4431] overlayfs: overlapping lowerdir path [ 96.343696][ T4456] loop4: detected capacity change from 0 to 4096 [ 96.506353][ T4456] NILFS (loop4): unrecognized mount option "ÿÿÿÿ" [ 96.580109][ T4456] overlayfs: overlapping lowerdir path [ 97.697271][ T4467] loop0: detected capacity change from 0 to 512 [ 98.439116][ T4463] loop3: detected capacity change from 0 to 4096 [ 98.446950][ T4467] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.498740][ T4467] EXT4-fs (loop0): 1 truncate cleaned up [ 98.504427][ T4467] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 98.548881][ T4463] NILFS (loop3): unrecognized mount option "ÿÿÿÿ" [ 98.569067][ T4463] overlayfs: overlapping lowerdir path [ 98.907121][ T4475] loop4: detected capacity change from 0 to 512 [ 99.741971][ T4475] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.118391][ T4475] EXT4-fs (loop4): 1 truncate cleaned up [ 100.124085][ T4475] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 101.253431][ T4479] loop0: detected capacity change from 0 to 4096 [ 101.315086][ T4479] NILFS (loop0): unrecognized mount option "ÿÿÿÿ" [ 101.363396][ T4479] overlayfs: overlapping lowerdir path [ 101.653925][ T4496] netlink: 256 bytes leftover after parsing attributes in process `syz.4.45'. [ 104.244528][ T4526] futex_wake_op: syz.0.51 tries to shift op by 32; fix this program [ 104.586649][ T4529] netlink: 256 bytes leftover after parsing attributes in process `syz.4.49'. [ 105.146435][ T4518] sched: RT throttling activated [ 105.910612][ T4547] loop0: detected capacity change from 0 to 512 [ 107.594730][ T4547] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.617754][ T4547] EXT4-fs (loop0): 1 truncate cleaned up [ 107.623443][ T4547] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 107.669083][ T4538] loop3: detected capacity change from 0 to 4096 [ 107.756959][ T4538] NILFS (loop3): unrecognized mount option "ÿÿÿÿ" [ 107.880445][ T4546] loop4: detected capacity change from 0 to 4096 [ 107.889116][ T4538] overlayfs: overlapping lowerdir path [ 108.114640][ T4546] NILFS (loop4): unrecognized mount option "ÿÿÿÿ" [ 108.156387][ T4546] overlayfs: overlapping lowerdir path [ 108.221149][ T4552] loop0: detected capacity change from 0 to 4096 [ 108.345039][ T4552] NILFS (loop0): unrecognized mount option "ÿÿÿÿ" [ 108.409210][ T4552] overlayfs: overlapping lowerdir path [ 109.008687][ T4557] loop3: detected capacity change from 0 to 4096 [ 109.033632][ T4557] NILFS (loop3): unrecognized mount option "ÿÿÿÿ" [ 109.133609][ T4557] overlayfs: overlapping lowerdir path [ 109.639984][ T4565] binder: 4561:4565 ioctl c0306201 0 returned -14 [ 109.806814][ T1110] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.387008][ T1110] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 110.651386][ T4581] 9pnet_virtio: no channels available for device syz [ 110.661553][ T1110] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 110.720398][ T1110] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.989253][ T4197] Bluetooth: hci2: link tx timeout [ 110.994805][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 111.005157][ T4197] Bluetooth: hci2: link tx timeout [ 111.010374][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 111.019028][ T4197] Bluetooth: hci2: link tx timeout [ 111.024541][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 111.032821][ T4197] Bluetooth: hci2: link tx timeout [ 111.042508][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 111.052943][ T4197] Bluetooth: hci2: link tx timeout [ 111.063135][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 111.085965][ T4197] Bluetooth: hci2: link tx timeout [ 111.092617][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 111.102967][ T4197] Bluetooth: hci2: link tx timeout [ 111.113183][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 111.133153][ T4197] Bluetooth: hci2: link tx timeout [ 111.148943][ T4197] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 111.669405][ T4589] 9pnet_virtio: no channels available for device syz [ 111.757072][ T1110] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 111.827721][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 112.016689][ T1110] usb 5-1: Product: syz [ 112.020927][ T1110] usb 5-1: Manufacturer: syz [ 112.025561][ T1110] usb 5-1: SerialNumber: syz [ 112.163410][ T1110] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 112.267012][ T1110] usb 5-1: USB disconnect, device number 2 [ 112.330870][ T1110] usblp0: removed [ 113.046700][ T4232] Bluetooth: hci2: command 0x0406 tx timeout [ 114.852553][ T4643] 9pnet_virtio: no channels available for device syz [ 115.977154][ T4646] netlink: 124 bytes leftover after parsing attributes in process `syz.4.87'. [ 116.271704][ T4638] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 116.856711][ T4394] Bluetooth: hci5: Frame reassembly failed (-84) [ 116.925323][ T4394] Bluetooth: hci5: Frame reassembly failed (-84) [ 119.061110][ T4232] Bluetooth: hci5: command 0x1003 tx timeout [ 119.076960][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 119.940044][ T4232] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.346780][ T4708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 120.390411][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.472807][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.585675][ T4232] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.749743][ T4232] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.876547][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.075280][ T4232] usb 5-1: config 0 descriptor?? [ 121.124803][ T4290] Bluetooth: hci5: command 0x1001 tx timeout [ 121.144004][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 121.365546][ T26] audit: type=1326 audit(1763954962.886:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfeba7f749 code=0x7ffc0000 [ 121.436912][ T26] audit: type=1326 audit(1763954962.936:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfeba7f749 code=0x7ffc0000 [ 121.459012][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.487146][ T26] audit: type=1326 audit(1763954962.936:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfeba7f749 code=0x7ffc0000 [ 121.509238][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.521887][ T26] audit: type=1326 audit(1763954962.936:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdfeba7f749 code=0x7ffc0000 [ 121.543826][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.550484][ T26] audit: type=1326 audit(1763954962.936:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfeba7f749 code=0x7ffc0000 [ 121.579030][ T26] audit: type=1326 audit(1763954962.936:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfeba7f749 code=0x7ffc0000 [ 121.626880][ T26] audit: type=1326 audit(1763954962.936:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfeba7f749 code=0x7ffc0000 [ 121.656253][ T4727] netlink: 'syz.3.110': attribute type 10 has an invalid length. [ 121.677913][ T4232] usbhid 5-1:0.0: can't add hid device: -71 [ 121.691313][ T26] audit: type=1326 audit(1763954962.936:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fdfeba7f749 code=0x7ffc0000 [ 121.694351][ T4232] usbhid: probe of 5-1:0.0 failed with error -71 [ 121.732054][ T4727] team0: Port device dummy0 added [ 121.744205][ T4728] netlink: 'syz.3.110': attribute type 10 has an invalid length. [ 121.752330][ T26] audit: type=1326 audit(1763954962.936:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfeba7f749 code=0x7ffc0000 [ 121.774466][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.783150][ T4232] usb 5-1: USB disconnect, device number 3 [ 121.788712][ T26] audit: type=1326 audit(1763954962.956:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfeba7f749 code=0x7ffc0000 [ 121.811083][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.868713][ T4728] team0: Port device dummy0 removed [ 121.884368][ T4728] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 121.978594][ T4728] syz.3.110 (4728) used greatest stack depth: 21152 bytes left [ 123.197466][ T2288] Bluetooth: hci5: command 0x1009 tx timeout [ 124.158677][ T4765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 124.358580][ T4770] process 'syz.1.124' launched './file0' with NULL argv: empty string added [ 127.686696][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 127.790723][ T4797] netlink: 'syz.4.133': attribute type 11 has an invalid length. [ 127.941926][ T4807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'. [ 128.121600][ T1110] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 128.136403][ T1110] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 128.181243][ T1110] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 128.202205][ T1110] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 128.226441][ T1110] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 128.261305][ T1110] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 128.318405][ T1110] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 128.355905][ T1110] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 128.385310][ T1110] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 128.418566][ T1110] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 128.484400][ T1110] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 128.543877][ T1110] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 128.596782][ T1110] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 128.623882][ T1110] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 128.656999][ T1110] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 128.710277][ T1110] hid-generic 00A0:0006:0003.0001: hidraw0: HID v0.05 Device [syz1] on syz0 [ 129.164261][ T4821] fido_id[4821]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 129.884684][ T4829] device bond1 entered promiscuous mode [ 130.461736][ T4829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.709729][ T4855] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 132.639081][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.645579][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.890574][ T4862] 9pnet: Could not find request transport: xen [ 136.840727][ T4894] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.322233][ T4918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.174'. [ 138.555986][ T4920] tmpfs: Unknown parameter 'quota' [ 141.156933][ T4930] [ 141.159303][ T4930] ====================================================== [ 141.166344][ T4930] WARNING: possible circular locking dependency detected [ 141.173390][ T4930] syzkaller #0 Not tainted [ 141.177816][ T4930] ------------------------------------------------------ [ 141.184843][ T4930] syz.4.179/4930 is trying to acquire lock: [ 141.190738][ T4930] ffff888022bd8c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 141.201791][ T4930] [ 141.201791][ T4930] but task is already holding lock: [ 141.209148][ T4930] ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 141.218804][ T4930] [ 141.218804][ T4930] which lock already depends on the new lock. [ 141.218804][ T4930] [ 141.229199][ T4930] [ 141.229199][ T4930] the existing dependency chain (in reverse order) is: [ 141.238207][ T4930] [ 141.238207][ T4930] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 141.246191][ T4930] __mutex_lock_common+0x1eb/0x2390 [ 141.251916][ T4930] mutex_lock_nested+0x17/0x20 [ 141.257220][ T4930] rfkill_register+0x33/0x8a0 [ 141.262436][ T4930] hci_register_dev+0x452/0x970 [ 141.267803][ T4930] vhci_create_device+0x32c/0x5c0 [ 141.273342][ T4930] vhci_write+0x391/0x450 [ 141.278194][ T4930] vfs_write+0x712/0xd00 [ 141.282965][ T4930] ksys_write+0x14d/0x250 [ 141.287803][ T4930] do_syscall_64+0x4c/0xa0 [ 141.292734][ T4930] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.299146][ T4930] [ 141.299146][ T4930] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 141.306960][ T4930] __mutex_lock_common+0x1eb/0x2390 [ 141.312703][ T4930] mutex_lock_nested+0x17/0x20 [ 141.318015][ T4930] vhci_send_frame+0x88/0x100 [ 141.323239][ T4930] hci_send_frame+0x1a9/0x2e0 [ 141.328455][ T4930] hci_tx_work+0x9f9/0x1710 [ 141.333500][ T4930] process_one_work+0x863/0x1000 [ 141.338991][ T4930] worker_thread+0xaa8/0x12a0 [ 141.344226][ T4930] kthread+0x436/0x520 [ 141.348829][ T4930] ret_from_fork+0x1f/0x30 [ 141.353781][ T4930] [ 141.353781][ T4930] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 141.363002][ T4930] __flush_work+0xdd/0x1b0 [ 141.368000][ T4930] hci_dev_do_open+0xc58/0x1270 [ 141.373390][ T4930] hci_power_on+0x1c1/0x610 [ 141.378429][ T4930] process_one_work+0x863/0x1000 [ 141.383903][ T4930] worker_thread+0xaa8/0x12a0 [ 141.389114][ T4930] kthread+0x436/0x520 [ 141.393708][ T4930] ret_from_fork+0x1f/0x30 [ 141.398654][ T4930] [ 141.398654][ T4930] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 141.406326][ T4930] __mutex_lock_common+0x1eb/0x2390 [ 141.412053][ T4930] mutex_lock_nested+0x17/0x20 [ 141.417340][ T4930] bg_scan_update+0x44/0x3b0 [ 141.422451][ T4930] process_one_work+0x863/0x1000 [ 141.427934][ T4930] worker_thread+0xaa8/0x12a0 [ 141.433130][ T4930] kthread+0x436/0x520 [ 141.437718][ T4930] ret_from_fork+0x1f/0x30 [ 141.442658][ T4930] [ 141.442658][ T4930] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 141.452478][ T4930] __lock_acquire+0x2c33/0x7c60 [ 141.457853][ T4930] lock_acquire+0x197/0x3f0 [ 141.462884][ T4930] __flush_work+0xdd/0x1b0 [ 141.467822][ T4930] __cancel_work_timer+0x3ac/0x520 [ 141.473456][ T4930] hci_request_cancel_all+0xcc/0x300 [ 141.479260][ T4930] hci_dev_do_close+0x4e/0x1030 [ 141.484629][ T4930] hci_rfkill_set_block+0x10a/0x190 [ 141.490363][ T4930] rfkill_set_block+0x1c6/0x420 [ 141.495736][ T4930] rfkill_fop_write+0x458/0x560 [ 141.501107][ T4930] vfs_write+0x300/0xd00 [ 141.505870][ T4930] ksys_write+0x14d/0x250 [ 141.510722][ T4930] do_syscall_64+0x4c/0xa0 [ 141.515660][ T4930] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.522075][ T4930] [ 141.522075][ T4930] other info that might help us debug this: [ 141.522075][ T4930] [ 141.532298][ T4930] Chain exists of: [ 141.532298][ T4930] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 141.532298][ T4930] [ 141.548058][ T4930] Possible unsafe locking scenario: [ 141.548058][ T4930] [ 141.555503][ T4930] CPU0 CPU1 [ 141.560865][ T4930] ---- ---- [ 141.566229][ T4930] lock(rfkill_global_mutex); [ 141.570990][ T4930] lock(&data->open_mutex); [ 141.578107][ T4930] lock(rfkill_global_mutex); [ 141.585387][ T4930] lock((work_completion)(&hdev->bg_scan_update)); [ 141.591968][ T4930] [ 141.591968][ T4930] *** DEADLOCK *** [ 141.591968][ T4930] [ 141.600106][ T4930] 1 lock held by syz.4.179/4930: [ 141.605051][ T4930] #0: ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 141.615172][ T4930] [ 141.615172][ T4930] stack backtrace: [ 141.621087][ T4930] CPU: 1 PID: 4930 Comm: syz.4.179 Not tainted syzkaller #0 [ 141.628382][ T4930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 141.638461][ T4930] Call Trace: [ 141.641743][ T4930] [ 141.644678][ T4930] dump_stack_lvl+0x168/0x230 [ 141.649374][ T4930] ? load_image+0x3b0/0x3b0 [ 141.653882][ T4930] ? show_regs_print_info+0x20/0x20 [ 141.659089][ T4930] ? print_circular_bug+0x12b/0x1a0 [ 141.664283][ T4930] check_noncircular+0x274/0x310 [ 141.669218][ T4930] ? add_chain_block+0x940/0x940 [ 141.674166][ T4930] ? lockdep_lock+0xdc/0x1e0 [ 141.678759][ T4930] ? __lock_acquire+0x12d9/0x7c60 [ 141.683783][ T4930] ? lockdep_lock+0x1e0/0x1e0 [ 141.688463][ T4930] ? mark_lock+0x94/0x320 [ 141.692795][ T4930] __lock_acquire+0x2c33/0x7c60 [ 141.697653][ T4930] ? verify_lock_unused+0x140/0x140 [ 141.702854][ T4930] ? verify_lock_unused+0x140/0x140 [ 141.708079][ T4930] lock_acquire+0x197/0x3f0 [ 141.712585][ T4930] ? __flush_work+0xc1/0x1b0 [ 141.717174][ T4930] ? __lock_acquire+0x7c60/0x7c60 [ 141.722198][ T4930] ? read_lock_is_recursive+0x10/0x10 [ 141.727567][ T4930] ? start_flush_work+0x776/0x820 [ 141.732591][ T4930] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 141.738477][ T4930] ? _raw_spin_unlock+0x40/0x40 [ 141.743324][ T4930] __flush_work+0xdd/0x1b0 [ 141.747732][ T4930] ? __flush_work+0xc1/0x1b0 [ 141.752321][ T4930] ? flush_work+0x20/0x20 [ 141.756646][ T4930] ? try_to_grab_pending+0xf3/0x7e0 [ 141.761839][ T4930] ? lockdep_hardirqs_off+0x70/0x100 [ 141.767119][ T4930] ? mark_lock+0x94/0x320 [ 141.771449][ T4930] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 141.777451][ T4930] ? lock_chain_count+0x20/0x20 [ 141.782301][ T4930] ? mark_lock+0x94/0x320 [ 141.786632][ T4930] ? __cancel_work_timer+0x331/0x520 [ 141.791915][ T4930] __cancel_work_timer+0x3ac/0x520 [ 141.797024][ T4930] ? cancel_work_sync+0x20/0x20 [ 141.801895][ T4930] ? __cancel_work+0x1f4/0x2d0 [ 141.806655][ T4930] ? lockdep_hardirqs_on+0x94/0x140 [ 141.811855][ T4930] ? __cancel_work+0x26f/0x2d0 [ 141.816682][ T4930] ? cancel_work+0x20/0x20 [ 141.821102][ T4930] ? lock_chain_count+0x20/0x20 [ 141.825948][ T4930] hci_request_cancel_all+0xcc/0x300 [ 141.831237][ T4930] hci_dev_do_close+0x4e/0x1030 [ 141.836106][ T4930] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 141.842000][ T4930] ? _raw_spin_unlock+0x40/0x40 [ 141.846851][ T4930] hci_rfkill_set_block+0x10a/0x190 [ 141.852228][ T4930] ? rcu_lock_release+0x20/0x20 [ 141.857078][ T4930] rfkill_set_block+0x1c6/0x420 [ 141.861928][ T4930] rfkill_fop_write+0x458/0x560 [ 141.866780][ T4930] ? rfkill_fop_read+0x4b0/0x4b0 [ 141.871723][ T4930] ? common_file_perm+0x130/0x1c0 [ 141.876747][ T4930] ? fsnotify_perm+0x5d/0x560 [ 141.881428][ T4930] ? security_file_permission+0x75/0xa0 [ 141.886977][ T4930] ? rfkill_fop_read+0x4b0/0x4b0 [ 141.891945][ T4930] vfs_write+0x300/0xd00 [ 141.896191][ T4930] ? file_end_write+0x250/0x250 [ 141.901053][ T4930] ? __fget_files+0x40f/0x480 [ 141.905755][ T4930] ? __fdget_pos+0x1e2/0x370 [ 141.910342][ T4930] ? ksys_write+0x71/0x250 [ 141.914846][ T4930] ksys_write+0x14d/0x250 [ 141.919263][ T4930] ? __ia32_sys_read+0x80/0x80 [ 141.924023][ T4930] ? lockdep_hardirqs_on+0x94/0x140 [ 141.929241][ T4930] do_syscall_64+0x4c/0xa0 [ 141.933658][ T4930] ? clear_bhb_loop+0x30/0x80 [ 141.938339][ T4930] ? clear_bhb_loop+0x30/0x80 [ 141.943041][ T4930] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.948947][ T4930] RIP: 0033:0x7fef44856749 [ 141.953367][ T4930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.972974][ T4930] RSP: 002b:00007fef42abd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.981388][ T4930] RAX: ffffffffffffffda RBX: 00007fef44aacfa0 RCX: 00007fef44856749 [ 141.989465][ T4930] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000006 [ 141.997446][ T4930] RBP: 00007fef448daf91 R08: 0000000000000000 R09: 0000000000000000 [ 142.005414][ T4930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.013387][ T4930] R13: 00007fef44aad038 R14: 00007fef44aacfa0 R15: 00007ffee438ac98 [ 142.021363][ T4930]