last executing test programs: 8.767848566s ago: executing program 3 (id=380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001b0000022bbd7000fedbdf2500000000000000000000000000fffffffb0000000000000000000000000000004e2200004e230007020020203c000000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4008034}, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r6}, 0x20) 7.797035111s ago: executing program 3 (id=384): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x80000000}, &(0x7f0000000280)=0x8) 7.662755933s ago: executing program 3 (id=387): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.544332594s ago: executing program 3 (id=389): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003a00)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0xf}, 0x560}, 0x1c, 0x0, 0x0, &(0x7f0000003d40)=[@tclass={{0x14, 0x29, 0x43, 0x1}}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x210}}], 0x2, 0x0) 6.587260129s ago: executing program 3 (id=391): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.476091991s ago: executing program 3 (id=393): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x481e) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000280)='wg1\x00', 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000180)={@private=0xa010100, @multicast1, 0x1, 0x3, [@empty, @multicast1, @loopback]}, 0x1c) 4.773735827s ago: executing program 1 (id=402): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r1, &(0x7f0000000480), 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 4.703260468s ago: executing program 0 (id=403): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f000053e000/0x2000)=nil, 0x2000}) 4.119407497s ago: executing program 1 (id=406): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48011}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x161000, 0x0) unshare(0x2c060000) unshare(0x24020400) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000002900f47110b8dab5dd5ed800bb2fc2fc0b0027bd7000d1a4266178a449a00000000000000000", @ANYRES64=r2], 0x1c}}, 0x4004005) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x1, 0x141102) writev(r5, &(0x7f0000000980)=[{0x0}, {0x0}, {&(0x7f0000000340)}, {&(0x7f0000000640)="403438d05dd2143b389fe01cd889802562976b6841bd7f5eb9660bf6c14ce082556dd145ebc3790eb046dd891780593e6bd93fbbc9d6974efd639fd5110ce2b103f592e1cf8d007f1e9861f23fb7f6d0713d403b5840ff1a61843765a73ae505e85ce0d45ab3722deae27806e4c95ebbe5b17992df40787670e4627f67dd6d90d482e07f8c007bc22072", 0x8a}, {&(0x7f0000000880)="f9a09da857fd70a1deac07dcf9525f5ac5538d948971f2c53a3c263d0cae9b588ed27fc237088362ce594faa41dbd7f015bdf5bb9822d75da1bcebaa9147161fa8d32ff64ad2892e7a05152ee6406937d3d847fa3d44319985195498f86b6018f1edce7dc7b3153d646aa6dc144757dbdd36b88a76f30b7d524e8a9459b1d8a569813829368e3e396429213fc54b306c13a0b46b0635a3bdea27132124119105edfd27fa9fdcb1e0f22458eba7b5324438c22d17865ba8e09ecaebe02a1fa55c3cfbf484f589064efeaac12a7922a6467220da99", 0xd4}, {&(0x7f0000000700)="a11121f1916410c7587fd94625775bf63d5aba93f48fbac36c5cd4c3263b1a593964591c051e20f94551a36016f39ecfa5", 0x31}], 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@deltaction={0xb4, 0x31, 0x400, 0x70bd3d, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x804, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x22, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4384}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) r7 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) capset(0x0, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES16=r0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4044081}, 0x4000080) 3.877908831s ago: executing program 4 (id=407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x7, &(0x7f0000000080)=0x6e) io_uring_setup(0xaab, 0x0) getgroups(0x27, &(0x7f0000002540)) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000080)={0xf0f004, 0x4}) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) shutdown(r7, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009000000d04ebbe99417bf6105ea7f8c1714144b653eb9e8e6e63e45459b3f092265a7461a031cd3bf2d184297425cb57202f5118dc5346f2e7e0665245b031c3820811736fbd9004df498d0b15b7286591811d21cb38ea16fcb1a10c2743a83e08222f18e8aafd494e0e1696a2a8482cd44979d3617e265599faa526daceb3558837def9133"], 0x24}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0xa, 0x4e22, 0x200ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000001}, 0x1c, 0x0}, 0x4006) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002}) 3.807248942s ago: executing program 2 (id=408): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(0x0, 0x39b, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="31832ebd700000000000190000000c0001800800030001000000f49de09e4f80d75cf85031e012f7b1f4a104b7"], 0x20}, 0x1, 0x0, 0x0, 0x2804c040}, 0x4886) 3.309977859s ago: executing program 1 (id=409): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000200)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1) 3.309623909s ago: executing program 0 (id=410): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001b0000022bbd7000fedbdf2500000000000000000000000000fffffffb0000000000000000000000000000004e2200004e230007020020203c000000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4008034}, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.900688876s ago: executing program 1 (id=411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000000ffff00000000000000000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x8841}, 0x2000) 2.459736272s ago: executing program 2 (id=412): syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}}) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, 0x0) 2.458721083s ago: executing program 4 (id=413): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x3, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000140)=@can={0x1d, r1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000740)="a34d04", 0x3}, {0x0}], 0x2}}], 0x1, 0x2004c801) 2.366537124s ago: executing program 0 (id=414): prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000170000/0x3000)=nil) 2.279042305s ago: executing program 1 (id=415): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x80) r7 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x300, 0x0, 0xc000}, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmmsg$unix(r7, &(0x7f00000029c0)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000480)="7459f65067b382c90f07e0c3abc7d3eb3887a8866c00ac2310534e2032a84e532a7b2b735f0f9abe263c599f1cfd386bf075a0", 0x33}, {0x0}, {&(0x7f0000000d00)="faaa5fd5d49bfb794ece3d5e9e5196c244a50b3d7ed941282a9f6f97cc4348e93202b9160d23cab56a7f01bef808136c8b95d77ee9aebed5fdc001069e91f6aff08260415d7d032bac11505bce38b9533c429512b4fbadd56deba8dbe9a0ae057c679823c52e2fc8f6c086f248a5fe987488c025853aa03ce4844ce4d1d33beb5c7270be15dcc33b544b4006404b78cf1bb2e80fc8927d10c7d1d39c90b90000000000000000ed5a220f97315036cf18e7d248327e92700f8280083284517e4a5cbb3b18f55809", 0xc7}], 0x5, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRESOCT=r7, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r4, @ANYRES32=r4], 0x48, 0x40}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)="6bf0d4b9bbcad9b1b86a62b8e32873057d6099bc847cb6e138e29a34ea0bbedc50b69e96462cbbe1955bfc6d0b39b96948bbbd264cb4e64f496c94253444bca9ad3d2ac3b779401a225aa6e110b64539be2c92425ab156a924ec74e8820cfb110564489d1dfe39c374b6192831464355c3c11be8661b3362a32ad4065521dd721fae6a0513ab71d7a0ad12c0595ba27c04c0ab942fac469c63084f2f8a805578b2d9b1983815", 0xa6}, {&(0x7f0000000100)="4a298c0d3e6bab1e99ca3bb005bef99e59411d0c7ea29d858a56cce1a38520ec28f6ed9b9b33560533f000ccbe6af0", 0x2f}, {&(0x7f0000000b00)="df47aab77966914451d7f8ec160ee577edecfce8580843124b2807a244f76e286c6cd1283d5e2f56f5f8aab298f6850e2baf0253422bfb8e0cd020347b76a56c6725cd91f97791ff41df613190c4b6593936fb2b0abe41b0a8595e304c8e14d2810edcfd2056a88c06e78dddbdf4906f607c442708186560d60c5b83c16582cd801fba10ca2e1e8d646e877d827b0513fe7f28638fbca9b2d4b14aa85aca37c032286678b424427cebf1ca9ed7a73d9cf905ba52682f7c2218c4af7f49ff58243df296b69a21b225367dcbba01e7b1a3b2ae542ed2ad567bd75b4e26bd397a2fc48ac43c2a0893ba9d47e98625634ce035", 0xf1}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="100000000000000001000000010000001c00000000000000010000000200", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002", @ANYRESOCT, @ANYRESDEC=r8, @ANYRES32=0x0, @ANYBLOB="000100"/20, @ANYRES32=r7, @ANYRES32, @ANYRES16=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x40001}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000003c0)="d6435fc75231ac991094826b3ce5071d002126bfaa169213a30f4e99b7db5885bb6e7a0bc8dae3e7cde02c3a8a6dec800517", 0x32}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x4044}}], 0x3, 0xc004) 2.278630465s ago: executing program 4 (id=416): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 2.278502575s ago: executing program 2 (id=417): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0b45545, &(0x7f0000000040)=0x1000) 2.261949635s ago: executing program 0 (id=418): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000140)=0x8, 0x4) socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r6 = fanotify_init(0x20, 0x1) write$bt_hci(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r6], 0xe) 2.226988766s ago: executing program 4 (id=419): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x34, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xff7ffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000140)=0x8, 0x4) socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) write$9p(0xffffffffffffffff, &(0x7f00000000c0)="089c9a013c0215ee0e", 0x9) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) fcntl$setown(r3, 0x8, 0x0) fanotify_init(0x40, 0x1) write$bt_hci(r5, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r5], 0xe) 1.997224529s ago: executing program 2 (id=420): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f00000021c0)=@v2={0x5, 0x2, 0x13, 0x5, 0xf8, "ff71ace60ad1a532b7cbefdaac8b1ddc886d3eee217a485fff1657406a40323b422c56b8b72463848516bc956490a1cd32ddcbd28e8e55a9a206e6dc319c9c8cf009c626c561db1696c5cd21f1261ba5623844f2b12f8dd8a5a364c883d69696f0d2df059ca9c072edbafa297198b2f94c2f4ff0a720b599866a56cfd447a00776c43c69465056d5a135d03e4a598ea9cfc27a0fb65f9ef1ab233c0181ce41474547b7c31706d8485ad246a050e65d80b5d249fa3b92e4c124ecf72e248614876b6465bc65a08b01b538102c412e3e67ff1dfbbd565b618e1be4095923391d12a1c829a6765dae0c6bc9c955b9d09558958d2cd0ef0811b3"}, 0x101, 0x2) 1.99656302s ago: executing program 2 (id=421): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.421184498s ago: executing program 0 (id=422): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(0x0, 0x39b, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="31832ebd700000000000190000000c0001800800030001000000f49de09e4f80d75cf85031e012f7b1f4a104b7"], 0x20}, 0x1, 0x0, 0x0, 0x2804c040}, 0x4886) 1.33892796s ago: executing program 1 (id=423): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x1c, r5, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@beacon]}, 0x1c}}, 0x0) 1.32370875s ago: executing program 4 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc3, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 1.035098574s ago: executing program 2 (id=425): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001b0000022bbd7000fedbdf2500000000000000000000000000fffffffb0000000000000000000000000000004e2200004e230007020020203c000000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4008034}, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 119.194348ms ago: executing program 0 (id=426): fsopen(&(0x7f0000000200)='xfs\x00', 0x0) 0s ago: executing program 4 (id=427): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x0, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) write$rfkill(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. [ 40.840863][ T4012] cgroup: Unknown subsys name 'net' [ 41.097553][ T4012] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.456587][ T4012] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 42.933493][ T4029] chnl_net:caif_netlink_parms(): no params data found [ 42.957633][ T4023] chnl_net:caif_netlink_parms(): no params data found [ 42.961339][ T4028] chnl_net:caif_netlink_parms(): no params data found [ 43.056911][ T4025] chnl_net:caif_netlink_parms(): no params data found [ 43.071662][ T4028] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.074106][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.076681][ T4028] device bridge_slave_0 entered promiscuous mode [ 43.107447][ T4028] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.109465][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.112529][ T4028] device bridge_slave_1 entered promiscuous mode [ 43.121377][ T4023] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.123626][ T4023] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.126252][ T4023] device bridge_slave_0 entered promiscuous mode [ 43.129200][ T4031] chnl_net:caif_netlink_parms(): no params data found [ 43.140087][ T4029] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.142309][ T4029] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.144781][ T4029] device bridge_slave_0 entered promiscuous mode [ 43.160780][ T4023] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.164064][ T4023] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.166719][ T4023] device bridge_slave_1 entered promiscuous mode [ 43.178459][ T4029] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.180496][ T4029] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.183254][ T4029] device bridge_slave_1 entered promiscuous mode [ 43.210999][ T4028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.240280][ T4028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.244514][ T4029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.254837][ T4023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.263999][ T4029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.272853][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.274853][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.277397][ T4025] device bridge_slave_0 entered promiscuous mode [ 43.282094][ T4023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.284819][ T4031] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.286799][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.289440][ T4031] device bridge_slave_0 entered promiscuous mode [ 43.303797][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.305793][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.308322][ T4025] device bridge_slave_1 entered promiscuous mode [ 43.321222][ T4031] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.323567][ T4031] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.326180][ T4031] device bridge_slave_1 entered promiscuous mode [ 43.336674][ T4028] team0: Port device team_slave_0 added [ 43.368223][ T4029] team0: Port device team_slave_0 added [ 43.371088][ T4028] team0: Port device team_slave_1 added [ 43.376018][ T4031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.386583][ T4023] team0: Port device team_slave_0 added [ 43.390457][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.394393][ T4029] team0: Port device team_slave_1 added [ 43.410051][ T4031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.413951][ T4023] team0: Port device team_slave_1 added [ 43.417384][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.426645][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.428685][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.436503][ T4029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.469176][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.471159][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.478779][ T4029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.488066][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.490026][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.497374][ T4028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.508865][ T4031] team0: Port device team_slave_0 added [ 43.528482][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.530350][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.537525][ T4028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.543444][ T4031] team0: Port device team_slave_1 added [ 43.545526][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.547498][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.554821][ T4023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.560420][ T4025] team0: Port device team_slave_0 added [ 43.589506][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.591485][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.598633][ T4023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.603267][ T4025] team0: Port device team_slave_1 added [ 43.644065][ T4029] device hsr_slave_0 entered promiscuous mode [ 43.682073][ T4029] device hsr_slave_1 entered promiscuous mode [ 43.803665][ T4028] device hsr_slave_0 entered promiscuous mode [ 43.862120][ T4028] device hsr_slave_1 entered promiscuous mode [ 43.901917][ T4028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.904111][ T4028] Cannot create hsr debugfs directory [ 43.906105][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.907927][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.915063][ T4031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.918941][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.920858][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.928302][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.973000][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.974980][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.982403][ T4031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.986269][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.988240][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.995702][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.063858][ T4023] device hsr_slave_0 entered promiscuous mode [ 44.122100][ T4023] device hsr_slave_1 entered promiscuous mode [ 44.161814][ T4023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.163958][ T4023] Cannot create hsr debugfs directory [ 44.243539][ T4031] device hsr_slave_0 entered promiscuous mode [ 44.282037][ T4031] device hsr_slave_1 entered promiscuous mode [ 44.321811][ T4031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.323949][ T4031] Cannot create hsr debugfs directory [ 44.423644][ T4025] device hsr_slave_0 entered promiscuous mode [ 44.462074][ T4025] device hsr_slave_1 entered promiscuous mode [ 44.501845][ T4025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.503928][ T4025] Cannot create hsr debugfs directory [ 44.662420][ T4014] Bluetooth: hci1: command 0x0409 tx timeout [ 44.664844][ T4014] Bluetooth: hci2: command 0x0409 tx timeout [ 44.666622][ T4014] Bluetooth: hci0: command 0x0409 tx timeout [ 44.699285][ T4029] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 44.731910][ T4014] Bluetooth: hci3: command 0x0409 tx timeout [ 44.731936][ T1959] Bluetooth: hci4: command 0x0409 tx timeout [ 44.744854][ T4029] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 44.784518][ T4029] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 44.828029][ T4029] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.898470][ T4028] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.935461][ T4028] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.004905][ T4028] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.044568][ T4028] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.108495][ T4031] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.161265][ T4031] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.193815][ T4031] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.233978][ T4031] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.334443][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.344363][ T4023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.375842][ T4023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.416675][ T4023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.469292][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.473811][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.479446][ T4023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.531144][ T4029] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.543621][ T4025] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 45.615135][ T4025] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 45.655864][ T4025] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 45.694766][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.697588][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.700778][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.702897][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.705722][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.708472][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.711070][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.713185][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.716039][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.727156][ T4025] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 45.789703][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.792749][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.795912][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.798691][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.801422][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.804615][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.807322][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.809921][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.825144][ T4028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.831257][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.839647][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.845908][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.865012][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.869820][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.873214][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.890064][ T4028] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.917434][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.945084][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.948031][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.950584][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.952632][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.955400][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.967373][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.970159][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.974052][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.975992][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.978465][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.980924][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.995744][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.010619][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.028057][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.031118][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.034957][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.037510][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.039459][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.043028][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.060062][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.062867][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.065615][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.067560][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.069901][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.074233][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.077016][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.085509][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.099509][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.107473][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.124911][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.127998][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.130687][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.134244][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.136984][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.139117][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.141293][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.153154][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.155548][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.158000][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.169315][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.174873][ T4028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.178829][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.183892][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.186544][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.189056][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.191358][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.194826][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.197483][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.200245][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.204478][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.211661][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.215856][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.221928][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.225002][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.245844][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.248597][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.251239][ T579] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.253233][ T579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.263827][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.266660][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.269299][ T579] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.271244][ T579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.280049][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.283026][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.285686][ T579] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.287645][ T579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.289948][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.294520][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.297592][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.300242][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.315751][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.318843][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.321610][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.326924][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.329702][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.338800][ T579] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.340887][ T579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.346917][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.371482][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.376511][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.379279][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.383857][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.386845][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.389615][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.394110][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.396873][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.399628][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.413028][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.416067][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.418788][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.423235][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.439543][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.448242][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.450897][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.456254][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.459376][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.463149][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.465996][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.468677][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.471322][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.474703][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.485306][ T4029] device veth0_vlan entered promiscuous mode [ 46.488896][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.492256][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.495268][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.498154][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.507173][ T4028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.512863][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.524804][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.537761][ T4029] device veth1_vlan entered promiscuous mode [ 46.576203][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.578895][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.581013][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.610944][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.615450][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.618476][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.621174][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.662521][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.665652][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.668473][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.673316][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.680657][ T4028] device veth0_vlan entered promiscuous mode [ 46.689915][ T4029] device veth0_macvtap entered promiscuous mode [ 46.696643][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.699357][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.702954][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.717853][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.719955][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.723951][ T4028] device veth1_vlan entered promiscuous mode [ 46.733868][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.736516][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.739120][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.743797][ T4069] Bluetooth: hci0: command 0x041b tx timeout [ 46.745617][ T4069] Bluetooth: hci2: command 0x041b tx timeout [ 46.747310][ T4069] Bluetooth: hci1: command 0x041b tx timeout [ 46.749666][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.754868][ T4029] device veth1_macvtap entered promiscuous mode [ 46.758535][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.767585][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.770324][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.773856][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.808990][ T4028] device veth0_macvtap entered promiscuous mode [ 46.812287][ T4070] Bluetooth: hci4: command 0x041b tx timeout [ 46.812576][ T4069] Bluetooth: hci3: command 0x041b tx timeout [ 46.820110][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.823402][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.826265][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.828918][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.831649][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.834926][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.837482][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.841526][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.852972][ T4031] device veth0_vlan entered promiscuous mode [ 46.857426][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.860456][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.871104][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.878255][ T4028] device veth1_macvtap entered promiscuous mode [ 46.880999][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.885382][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.888096][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.909250][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.911469][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.916322][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.919147][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.922351][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.925075][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.927562][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.942724][ T4031] device veth1_vlan entered promiscuous mode [ 46.948096][ T4029] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.950725][ T4029] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.959172][ T4029] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.961507][ T4029] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.967760][ T4023] device veth0_vlan entered promiscuous mode [ 46.987296][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.990390][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.997899][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.000584][ T4023] device veth1_vlan entered promiscuous mode [ 47.008007][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.010817][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.018957][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.021566][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.026111][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.044331][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.047394][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.051110][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.068462][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.071353][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.074448][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.077228][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.080026][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.086244][ T4028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.088721][ T4028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.091164][ T4028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.095292][ T4028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.105804][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.108655][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.116303][ T4031] device veth0_macvtap entered promiscuous mode [ 47.158298][ T4031] device veth1_macvtap entered promiscuous mode [ 47.164543][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.167349][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.199620][ T4023] device veth0_macvtap entered promiscuous mode [ 47.206652][ T4023] device veth1_macvtap entered promiscuous mode [ 47.217712][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.220484][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.220869][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.225024][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.230003][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.235991][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.238758][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.241527][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.248648][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.273648][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.276540][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.279360][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.283472][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.287502][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.290419][ T4025] device veth0_vlan entered promiscuous mode [ 47.306195][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.309171][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.318888][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.320449][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.321184][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.326480][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.329245][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.333482][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.337478][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.352893][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.355445][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.358209][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.364255][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.367162][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.369874][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.375528][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.378294][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.381134][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.386513][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.389390][ T4025] device veth1_vlan entered promiscuous mode [ 47.396385][ T4031] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.398760][ T4031] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.401440][ T4031] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.404508][ T4031] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.412194][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.415005][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.418937][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.451229][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.455448][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.458169][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.461004][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.470104][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.473713][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.477786][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.488178][ T579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.490420][ T579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.493230][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.495808][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.498647][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.540668][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.580370][ T4025] device veth0_macvtap entered promiscuous mode [ 47.600212][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.608633][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.668998][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.671365][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.700080][ T334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.702389][ T334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.747517][ T4023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.749983][ T4023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.752856][ T4023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.755250][ T4023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.758978][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.763679][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.766508][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.769071][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.771815][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.775285][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.559978][ T4025] device veth1_macvtap entered promiscuous mode [ 48.646545][ T4107] udc-core: couldn't find an available UDC or it's busy [ 48.648549][ T4107] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.812566][ T1959] Bluetooth: hci0: command 0x040f tx timeout [ 48.828000][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.845605][ T25] Bluetooth: hci1: command 0x040f tx timeout [ 48.848136][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.849144][ T25] Bluetooth: hci2: command 0x040f tx timeout [ 48.850939][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.861881][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.864724][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.872439][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.875162][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.878018][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.888406][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.894810][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.897735][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.902434][ T4071] Bluetooth: hci3: command 0x040f tx timeout [ 48.908307][ T4071] Bluetooth: hci4: command 0x040f tx timeout [ 49.736473][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.747811][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.751001][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.761186][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.764378][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.772705][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.775535][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.778443][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.793995][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.800022][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.803976][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.824191][ T4025] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.826583][ T4025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.829345][ T4025] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.832407][ T4025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.856080][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.858825][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.870423][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.914756][ T4125] udc-core: couldn't find an available UDC or it's busy [ 49.919070][ T4125] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 49.958423][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.960773][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.968303][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.991266][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.998953][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.001943][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.055071][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.057563][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.060914][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.070851][ T4128] loop0: detected capacity change from 0 to 128 [ 50.771817][ T4138] loop1: detected capacity change from 0 to 32768 [ 52.103347][ T4069] Bluetooth: hci2: command 0x0419 tx timeout [ 52.105364][ T4069] Bluetooth: hci1: command 0x0419 tx timeout [ 52.127100][ T4069] Bluetooth: hci0: command 0x0419 tx timeout [ 52.129037][ T4119] Bluetooth: hci4: command 0x0419 tx timeout [ 52.130719][ T4119] Bluetooth: hci3: command 0x0419 tx timeout [ 52.382775][ T4138] ======================================================= [ 52.382775][ T4138] WARNING: The mand mount option has been deprecated and [ 52.382775][ T4138] and is ignored by this kernel. Remove the mand [ 52.382775][ T4138] option from the mount to silence this warning. [ 52.382775][ T4138] ======================================================= [ 54.353026][ T4138] (syz.1.10,4138,0):ocfs2_initialize_super:2313 ERROR: status = -12 [ 54.355480][ T4138] (syz.1.10,4138,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 54.562825][ T4160] device batadv1 entered promiscuous mode [ 54.565434][ T4160] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 56.016684][ T4168] syz.3.16 uses obsolete (PF_INET,SOCK_PACKET) [ 56.561681][ C1] sched: RT throttling activated [ 56.855503][ T4168] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 58.829525][ T4183] netlink: 'syz.2.20': attribute type 10 has an invalid length. [ 58.927075][ T4183] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 61.754851][ T4069] Bluetooth: hci3: command 0x0405 tx timeout [ 63.586479][ T4231] loop2: detected capacity change from 0 to 32768 [ 64.014431][ T4231] JBD2: Ignoring recovery information on journal [ 64.151358][ T4231] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 64.179291][ T4231] ocfs2: Unmounting device (7,2) on (node local) [ 64.187194][ T4243] udc-core: couldn't find an available UDC or it's busy [ 64.191571][ T4243] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 64.275329][ T4246] netlink: 'syz.4.37': attribute type 10 has an invalid length. [ 64.447296][ T4246] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 64.473249][ T579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.478908][ T579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.504429][ T4303] loop4: detected capacity change from 0 to 32768 [ 68.624272][ T4303] JBD2: Ignoring recovery information on journal [ 68.664456][ T4303] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 68.677117][ T4303] ocfs2: Unmounting device (7,4) on (node local) [ 69.624240][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.626303][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.110416][ T4386] loop3: detected capacity change from 0 to 32768 [ 74.146913][ T4393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.75'. [ 74.193474][ T4386] JBD2: Ignoring recovery information on journal [ 74.314336][ T4386] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 74.327414][ T4386] ocfs2: Unmounting device (7,3) on (node local) [ 75.000795][ T1534] cfg80211: failed to load regulatory.db [ 75.971873][ T4420] capability: warning: `syz.1.81' uses 32-bit capabilities (legacy support in use) [ 76.682230][ T4426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.82'. [ 76.887447][ T4426] loop2: detected capacity change from 0 to 32768 [ 76.956622][ T4426] XFS: noikeep mount option is deprecated. [ 76.958365][ T4426] xfs: Unknown parameter 'obj_role' [ 77.389170][ T4442] loop3: detected capacity change from 0 to 65 [ 77.445255][ T4442] BFS-fs: bfs_fill_super(): Impossible last inode number 2097665 > 513 on loop3 [ 78.682710][ T4452] loop4: detected capacity change from 0 to 32768 [ 78.770968][ T4452] JBD2: Ignoring recovery information on journal [ 78.862515][ T4452] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 78.870399][ T4452] ocfs2: Unmounting device (7,4) on (node local) [ 80.717404][ T4476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.97'. [ 80.923969][ T4476] loop4: detected capacity change from 0 to 32768 [ 80.972385][ T4476] XFS: noikeep mount option is deprecated. [ 80.974087][ T4476] xfs: Unknown parameter 'obj_role' [ 84.315682][ T4543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.113'. [ 84.520647][ T4543] loop3: detected capacity change from 0 to 32768 [ 84.562430][ T4543] XFS: noikeep mount option is deprecated. [ 84.564133][ T4543] xfs: Unknown parameter 'obj_role' [ 88.262326][ T4577] loop1: detected capacity change from 0 to 65 [ 88.268352][ T4577] BFS-fs: bfs_fill_super(): Impossible last inode number 2097665 > 513 on loop1 [ 90.504254][ T4595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.126'. [ 91.194672][ T4595] loop3: detected capacity change from 0 to 32768 [ 91.210993][ T4595] XFS: noikeep mount option is deprecated. [ 91.212927][ T4595] xfs: Unknown parameter 'obj_role' [ 92.314227][ T4611] netlink: 196 bytes leftover after parsing attributes in process `syz.4.128'. [ 94.611327][ T4629] loop0: detected capacity change from 0 to 65 [ 94.788600][ T4629] BFS-fs: bfs_fill_super(): Impossible last inode number 2097665 > 513 on loop0 [ 98.094448][ T4664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.140'. [ 98.160119][ T4673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.145'. [ 98.169153][ T4673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.145'. [ 98.303157][ T4664] loop0: detected capacity change from 0 to 32768 [ 98.305724][ T4664] XFS: noikeep mount option is deprecated. [ 98.307429][ T4664] xfs: Unknown parameter 'obj_role' [ 100.605494][ T4687] device syzkaller1 entered promiscuous mode [ 101.721137][ T4697] loop4: detected capacity change from 0 to 65 [ 102.722408][ T4697] BFS-fs: bfs_fill_super(): Impossible last inode number 2097665 > 513 on loop4 [ 103.855855][ T4713] (syz.2.153,4713,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 103.858458][ T4713] (syz.2.153,4713,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 107.229702][ T4738] netlink: 48 bytes leftover after parsing attributes in process `syz.2.162'. [ 109.680521][ T4761] loop3: detected capacity change from 0 to 65 [ 109.721632][ T4763] device ipvlan2 entered promiscuous mode [ 109.878950][ T4761] BFS-fs: bfs_fill_super(): Impossible last inode number 2097665 > 513 on loop3 [ 109.929672][ T4769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.147832][ T4769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.158900][ T4769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.158933][ T4769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.505892][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.182'. [ 112.508866][ T4804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.182'. [ 117.829156][ T4857] udc-core: couldn't find an available UDC or it's busy [ 117.831231][ T4857] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 118.023760][ T4845] tipc: Started in network mode [ 118.025444][ T4845] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 118.027489][ T4845] tipc: Enabled bearer , priority 0 [ 119.234583][ T4385] tipc: Node number set to 11578026 [ 120.973335][ T4873] netlink: 60 bytes leftover after parsing attributes in process `syz.0.200'. [ 122.438453][ T4901] netlink: 36 bytes leftover after parsing attributes in process `syz.1.205'. [ 123.605995][ T4904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'. [ 124.582823][ T4904] netlink: 'syz.2.209': attribute type 2 has an invalid length. [ 125.831812][ T7] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 126.832794][ T4932] udc-core: couldn't find an available UDC or it's busy [ 126.841842][ T4932] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 126.855590][ T4932] udc-core: couldn't find an available UDC or it's busy [ 126.857572][ T4932] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 127.087862][ T4932] udc-core: couldn't find an available UDC or it's busy [ 127.089889][ T4932] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 127.209703][ T4941] loop1: detected capacity change from 0 to 128 [ 127.223164][ T7] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.225549][ T7] usb 1-1: config 0 has no interface number 0 [ 127.227228][ T7] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 127.237477][ T7] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 127.240422][ T7] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.257922][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.268728][ T7] usb 1-1: config 0 descriptor?? [ 127.292698][ T4916] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.320828][ T7] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 129.017405][ T7] usb 1-1: USB disconnect, device number 2 [ 129.259404][ T4963] udc-core: couldn't find an available UDC or it's busy [ 129.266940][ T4963] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 130.354532][ T4988] udc-core: couldn't find an available UDC or it's busy [ 130.356457][ T4988] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 131.067000][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.075428][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.405498][ T5001] loop4: detected capacity change from 0 to 128 [ 131.772356][ T5014] udc-core: couldn't find an available UDC or it's busy [ 131.775553][ T5014] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 134.935408][ T5038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.250'. [ 136.613598][ T5046] tmpfs: Unknown parameter 'usrquota' [ 136.683144][ T5038] loop1: detected capacity change from 0 to 32768 [ 136.723148][ T5038] XFS: noikeep mount option is deprecated. [ 136.724874][ T5038] xfs: Unknown parameter 'obj_role' [ 136.873954][ T5051] Zero length message leads to an empty skb [ 136.969961][ T5056] loop4: detected capacity change from 0 to 128 [ 136.983838][ T5058] udc-core: couldn't find an available UDC or it's busy [ 136.989354][ T5058] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 137.484631][ T5058] udc-core: couldn't find an available UDC or it's busy [ 137.486864][ T5058] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 138.516517][ T5085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.262'. [ 138.998539][ T5096] loop0: detected capacity change from 0 to 128 [ 139.189703][ T5097] loop3: detected capacity change from 0 to 32768 [ 139.293485][ T5097] JBD2: Ignoring recovery information on journal [ 139.340464][ T5097] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 139.349671][ T5097] ocfs2: Unmounting device (7,3) on (node local) [ 140.591472][ T4076] Bluetooth: hci3: command 0x0405 tx timeout [ 142.495333][ T5127] xt_time: unknown flags 0xc [ 144.020823][ T5142] loop4: detected capacity change from 0 to 128 [ 144.838709][ T5151] usb usb1: usbfs: process 5151 (syz.1.288) did not claim interface 0 before use [ 149.009200][ T5211] udc-core: couldn't find an available UDC or it's busy [ 149.021227][ T5211] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 149.947703][ T4385] Bluetooth: hci3: command 0x0405 tx timeout [ 150.242253][ T5238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.314'. [ 150.245714][ T5238] netlink: 5 bytes leftover after parsing attributes in process `syz.0.314'. [ 150.248325][ T5238] netlink: 5 bytes leftover after parsing attributes in process `syz.0.314'. [ 151.431807][ T1959] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 152.731839][ T1959] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 152.734067][ T1959] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 152.736981][ T1959] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 153.564138][ T5277] binder: BINDER_SET_CONTEXT_MGR already set [ 153.565916][ T5277] binder: 5275:5277 ioctl 4018620d 20000040 returned -16 [ 153.612246][ T1959] usb 1-1: unable to read config index 1 descriptor/all [ 153.615348][ T5277] binder: 5275:5277 got transaction to invalid handle, 1 [ 153.617483][ T5277] binder: 5275:5277 transaction failed 29201/-22, size 0-0 line 2917 [ 153.637177][ T1959] usb 1-1: can't read configurations, error -71 [ 153.667710][ T5135] binder: undelivered TRANSACTION_ERROR: 29201 [ 154.632654][ T5296] udc-core: couldn't find an available UDC or it's busy [ 154.634806][ T5296] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 154.671794][ T1959] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 155.022482][ T1959] usb 1-1: Using ep0 maxpacket: 8 [ 155.495132][ T5301] loop4: detected capacity change from 0 to 128 [ 155.592705][ T1959] usb 1-1: config index 0 descriptor too short (expected 61008, got 80) [ 155.603924][ T1959] usb 1-1: config 0 has an invalid interface number: 31 but max is -1 [ 155.610517][ T1959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.642462][ T1959] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 155.651521][ T1959] usb 1-1: config 0 has no interface number 0 [ 155.972039][ T1959] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 155.975105][ T1959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.977693][ T1959] usb 1-1: Product: syz [ 155.980027][ T1959] usb 1-1: Manufacturer: syz [ 155.982460][ T1959] usb 1-1: SerialNumber: syz [ 155.997866][ T1959] usb 1-1: config 0 descriptor?? [ 156.912427][ T1959] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 156.914321][ T1959] usb 1-1: No valid video chain found. [ 156.942036][ T1959] usb 1-1: USB disconnect, device number 4 [ 161.199477][ T5367] 9pnet: Unknown protocol version 9p200 [ 164.450711][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 165.631940][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 165.685933][ T5418] udc-core: couldn't find an available UDC or it's busy [ 165.694267][ T5418] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 165.772215][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 165.775704][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 165.778805][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.791802][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.795410][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 165.798022][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.830249][ T5434] 9pnet: Unknown protocol version 9p200 [ 168.494649][ T7] usb 1-1: usb_control_msg returned -71 [ 168.496349][ T7] usbtmc 1-1:16.0: can't read capabilities [ 168.522982][ T7] usb 1-1: USB disconnect, device number 5 [ 169.542282][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 169.544096][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 169.545723][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 169.547417][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 169.649915][ T5460] udc-core: couldn't find an available UDC or it's busy [ 169.662272][ T5460] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 170.535812][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 170.550047][ T5458] vivid-000: disconnect [ 170.557053][ T5458] vivid-000: reconnect [ 171.946237][ T5487] udc-core: couldn't find an available UDC or it's busy [ 171.961600][ T5487] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 172.323561][ T5496] 9pnet: Unknown protocol version 9p200 [ 172.491018][ T5503] udc-core: couldn't find an available UDC or it's busy [ 172.496679][ T5503] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 174.842145][ T5535] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 174.847515][ T5537] vivid-000: disconnect [ 174.848979][ T5536] tipc: New replicast peer: 0.0.255.255 [ 174.850679][ T5536] tipc: Enabled bearer , priority 10 [ 174.862092][ T5534] vivid-000: reconnect [ 177.283190][ T5578] [ 177.283831][ T5578] ====================================================== [ 177.285857][ T5578] WARNING: possible circular locking dependency detected [ 177.287870][ T5578] 5.15.185-syzkaller #0 Not tainted [ 177.289384][ T5578] ------------------------------------------------------ [ 177.291465][ T5578] syz.4.427/5578 is trying to acquire lock: [ 177.293143][ T5578] ffff0000c16b0c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 177.296309][ T5578] [ 177.296309][ T5578] but task is already holding lock: [ 177.298439][ T5578] ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 177.301330][ T5578] [ 177.301330][ T5578] which lock already depends on the new lock. [ 177.301330][ T5578] [ 177.304459][ T5578] [ 177.304459][ T5578] the existing dependency chain (in reverse order) is: [ 177.307055][ T5578] [ 177.307055][ T5578] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 177.309316][ T5578] __mutex_lock_common+0x194/0x1edc [ 177.311012][ T5578] mutex_lock_nested+0xac/0x11c [ 177.312553][ T5578] rfkill_register+0x44/0x77c [ 177.314035][ T5578] hci_register_dev+0x3d8/0x854 [ 177.315648][ T5578] vhci_create_device+0x2bc/0x564 [ 177.317331][ T5578] vhci_write+0x30c/0x3ac [ 177.318718][ T5578] vfs_write+0x7c8/0xa2c [ 177.320061][ T5578] ksys_write+0x120/0x210 [ 177.321494][ T5578] __arm64_sys_write+0x7c/0x90 [ 177.322973][ T5578] invoke_syscall+0x98/0x2b8 [ 177.324372][ T5578] el0_svc_common+0x138/0x258 [ 177.325878][ T5578] do_el0_svc+0x58/0x14c [ 177.327255][ T5578] el0_svc+0x78/0x1e0 [ 177.328608][ T5578] el0t_64_sync_handler+0xcc/0xe4 [ 177.330187][ T5578] el0t_64_sync+0x1a0/0x1a4 [ 177.331669][ T5578] [ 177.331669][ T5578] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 177.333914][ T5578] __mutex_lock_common+0x194/0x1edc [ 177.335593][ T5578] mutex_lock_nested+0xac/0x11c [ 177.337206][ T5578] vhci_send_frame+0x88/0x118 [ 177.338701][ T5578] hci_send_frame+0x194/0x2f0 [ 177.340219][ T5578] hci_tx_work+0x7e4/0x1394 [ 177.341716][ T5578] process_one_work+0x79c/0x1140 [ 177.343301][ T5578] worker_thread+0x8f4/0x101c [ 177.344797][ T5578] kthread+0x374/0x454 [ 177.346120][ T5578] ret_from_fork+0x10/0x20 [ 177.347477][ T5578] [ 177.347477][ T5578] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 177.350175][ T5578] __flush_work+0xf4/0x1bc [ 177.351593][ T5578] flush_work+0x24/0x38 [ 177.352892][ T5578] hci_dev_do_close+0x164/0x105c [ 177.354469][ T5578] hci_dev_close+0xc8/0x1b8 [ 177.355888][ T5578] hci_sock_ioctl+0x474/0x94c [ 177.357381][ T5578] sock_do_ioctl+0xf8/0x240 [ 177.358818][ T5578] sock_ioctl+0x5c8/0x87c [ 177.360134][ T5578] __arm64_sys_ioctl+0x14c/0x1c8 [ 177.361696][ T5578] invoke_syscall+0x98/0x2b8 [ 177.363166][ T5578] el0_svc_common+0x138/0x258 [ 177.364688][ T5578] do_el0_svc+0x58/0x14c [ 177.366059][ T5578] el0_svc+0x78/0x1e0 [ 177.367325][ T5578] el0t_64_sync_handler+0xcc/0xe4 [ 177.368972][ T5578] el0t_64_sync+0x1a0/0x1a4 [ 177.370469][ T5578] [ 177.370469][ T5578] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 177.372669][ T5578] __mutex_lock_common+0x194/0x1edc [ 177.374359][ T5578] mutex_lock_nested+0xac/0x11c [ 177.375905][ T5578] bg_scan_update+0x48/0x3d0 [ 177.377468][ T5578] process_one_work+0x79c/0x1140 [ 177.379072][ T5578] worker_thread+0x8f4/0x101c [ 177.380609][ T5578] kthread+0x374/0x454 [ 177.382022][ T5578] ret_from_fork+0x10/0x20 [ 177.383532][ T5578] [ 177.383532][ T5578] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 177.386590][ T5578] __lock_acquire+0x2928/0x651c [ 177.388242][ T5578] lock_acquire+0x1f4/0x620 [ 177.389812][ T5578] __flush_work+0xf4/0x1bc [ 177.391319][ T5578] __cancel_work_timer+0x2ec/0x448 [ 177.393123][ T5578] cancel_work_sync+0x24/0x38 [ 177.394676][ T5578] hci_request_cancel_all+0xbc/0x2d0 [ 177.396492][ T5578] hci_dev_do_close+0x54/0x105c [ 177.398207][ T5578] hci_rfkill_set_block+0xdc/0x1d0 [ 177.399912][ T5578] rfkill_set_block+0x18c/0x374 [ 177.401644][ T5578] rfkill_fop_write+0x4a4/0x5cc [ 177.403268][ T5578] vfs_write+0x280/0xa2c [ 177.404751][ T5578] ksys_write+0x120/0x210 [ 177.406261][ T5578] __arm64_sys_write+0x7c/0x90 [ 177.407983][ T5578] invoke_syscall+0x98/0x2b8 [ 177.409555][ T5578] el0_svc_common+0x138/0x258 [ 177.411060][ T5578] do_el0_svc+0x58/0x14c [ 177.412522][ T5578] el0_svc+0x78/0x1e0 [ 177.413955][ T5578] el0t_64_sync_handler+0xcc/0xe4 [ 177.415649][ T5578] el0t_64_sync+0x1a0/0x1a4 [ 177.417199][ T5578] [ 177.417199][ T5578] other info that might help us debug this: [ 177.417199][ T5578] [ 177.420358][ T5578] Chain exists of: [ 177.420358][ T5578] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 177.420358][ T5578] [ 177.425170][ T5578] Possible unsafe locking scenario: [ 177.425170][ T5578] [ 177.427437][ T5578] CPU0 CPU1 [ 177.429022][ T5578] ---- ---- [ 177.430643][ T5578] lock(rfkill_global_mutex); [ 177.432150][ T5578] lock(&data->open_mutex); [ 177.434350][ T5578] lock(rfkill_global_mutex); [ 177.436607][ T5578] lock((work_completion)(&hdev->bg_scan_update)); [ 177.438682][ T5578] [ 177.438682][ T5578] *** DEADLOCK *** [ 177.438682][ T5578] [ 177.441193][ T5578] 1 lock held by syz.4.427/5578: [ 177.442714][ T5578] #0: ffff800016507d48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 177.445846][ T5578] [ 177.445846][ T5578] stack backtrace: [ 177.447645][ T5578] CPU: 0 PID: 5578 Comm: syz.4.427 Not tainted 5.15.185-syzkaller #0 [ 177.450165][ T5578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.453195][ T5578] Call trace: [ 177.454177][ T5578] dump_backtrace+0x0/0x43c [ 177.455484][ T5578] show_stack+0x2c/0x3c [ 177.456728][ T5578] __dump_stack+0x30/0x40 [ 177.457976][ T5578] dump_stack_lvl+0xf8/0x160 [ 177.459314][ T5578] dump_stack+0x1c/0x5c [ 177.460568][ T5578] print_circular_bug+0x148/0x1b0 [ 177.462087][ T5578] check_noncircular+0x240/0x2d4 [ 177.463613][ T5578] __lock_acquire+0x2928/0x651c [ 177.465125][ T5578] lock_acquire+0x1f4/0x620 [ 177.466502][ T5578] __flush_work+0xf4/0x1bc [ 177.467854][ T5578] __cancel_work_timer+0x2ec/0x448 [ 177.469406][ T5578] cancel_work_sync+0x24/0x38 [ 177.470808][ T5578] hci_request_cancel_all+0xbc/0x2d0 [ 177.472386][ T5578] hci_dev_do_close+0x54/0x105c [ 177.473945][ T5578] hci_rfkill_set_block+0xdc/0x1d0 [ 177.475504][ T5578] rfkill_set_block+0x18c/0x374 [ 177.476985][ T5578] rfkill_fop_write+0x4a4/0x5cc [ 177.478387][ T5578] vfs_write+0x280/0xa2c [ 177.479710][ T5578] ksys_write+0x120/0x210 [ 177.481070][ T5578] __arm64_sys_write+0x7c/0x90 [ 177.482540][ T5578] invoke_syscall+0x98/0x2b8 [ 177.483981][ T5578] el0_svc_common+0x138/0x258 [ 177.485426][ T5578] do_el0_svc+0x58/0x14c [ 177.486747][ T5578] el0_svc+0x78/0x1e0 [ 177.487879][ T5578] el0t_64_sync_handler+0xcc/0xe4 [ 177.489370][ T5578] el0t_64_sync+0x1a0/0x1a4