last executing test programs: 55.464834009s ago: executing program 4 (id=85): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x84200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) epoll_create(0x80f04) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x8004000, 0x0, 0x0, 0x0, 0x7fff}}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r7) ioctl$NBD_DO_IT(r1, 0xab03) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r8}, 0x10) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x100000000100002) 53.288180152s ago: executing program 4 (id=89): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a50000000060a010400000000000000000a00fffe0900010073797a310000000024000480200001800800010066696200140002800800024000008fd632d50140000000040900020073797a32"], 0x78}}, 0x24000000) 53.16123468s ago: executing program 4 (id=90): ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x600, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 51.960085384s ago: executing program 4 (id=92): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 48.474950636s ago: executing program 4 (id=102): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x8000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="3f000000010000", 0x7) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f00000003c0)="e8700e404d50a969ff67347cff6127e6", 0x10}], 0x2}], 0x1, 0x801) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/68, 0x44}], 0x1}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, 0x0, 0x0, 0x4a, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r8, &(0x7f0000000180), 0x8) 46.673147013s ago: executing program 4 (id=105): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x42, 0x120) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/51}], 0x0, &(0x7f0000000580)=""/212}, 0xb}, {{&(0x7f0000000680)=@nfc, 0x0, &(0x7f0000000500)=[{&(0x7f0000000780)=""/179}, {&(0x7f0000000380)=""/54}], 0x0, &(0x7f0000000700)=""/16}, 0x6}, {{&(0x7f0000000840)=@sco={0x1f, @none}, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000900)=""/238}, {&(0x7f0000000a00)=""/20}, {&(0x7f0000000a40)=""/28}, {&(0x7f0000000a80)=""/12}, {&(0x7f0000000ac0)=""/4096}], 0x0, &(0x7f0000001b40)=""/16}, 0x48}, {{&(0x7f0000001b80)=@rc={0x1f, @fixed}, 0x0, &(0x7f0000004040)=[{&(0x7f0000001c00)=""/246}, {&(0x7f0000001d00)=""/22}, {&(0x7f0000001d40)=""/161}, {&(0x7f0000001e00)=""/139}, {&(0x7f0000001ec0)=""/199}, {&(0x7f0000001fc0)=""/51}, {&(0x7f0000002000)=""/35}, {&(0x7f0000002040)=""/4096}, {&(0x7f0000003040)=""/4096}], 0x0, &(0x7f0000004100)}, 0x5}], 0xa1ccff80a14f9f6f, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r3}, 0x8) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8002) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x82100, 0x0) fcntl$setstatus(r4, 0x4, 0x40000) r5 = socket$inet(0x2, 0x3, 0x5) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x40}, [], "3eff9b74"}, 0x44) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8002) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xffffffff, 0xfffffffd}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x2, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0x4]}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0xf) 31.602133438s ago: executing program 32 (id=105): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x42, 0x120) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/51}], 0x0, &(0x7f0000000580)=""/212}, 0xb}, {{&(0x7f0000000680)=@nfc, 0x0, &(0x7f0000000500)=[{&(0x7f0000000780)=""/179}, {&(0x7f0000000380)=""/54}], 0x0, &(0x7f0000000700)=""/16}, 0x6}, {{&(0x7f0000000840)=@sco={0x1f, @none}, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000900)=""/238}, {&(0x7f0000000a00)=""/20}, {&(0x7f0000000a40)=""/28}, {&(0x7f0000000a80)=""/12}, {&(0x7f0000000ac0)=""/4096}], 0x0, &(0x7f0000001b40)=""/16}, 0x48}, {{&(0x7f0000001b80)=@rc={0x1f, @fixed}, 0x0, &(0x7f0000004040)=[{&(0x7f0000001c00)=""/246}, {&(0x7f0000001d00)=""/22}, {&(0x7f0000001d40)=""/161}, {&(0x7f0000001e00)=""/139}, {&(0x7f0000001ec0)=""/199}, {&(0x7f0000001fc0)=""/51}, {&(0x7f0000002000)=""/35}, {&(0x7f0000002040)=""/4096}, {&(0x7f0000003040)=""/4096}], 0x0, &(0x7f0000004100)}, 0x5}], 0xa1ccff80a14f9f6f, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r3}, 0x8) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8002) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x82100, 0x0) fcntl$setstatus(r4, 0x4, 0x40000) r5 = socket$inet(0x2, 0x3, 0x5) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x40}, [], "3eff9b74"}, 0x44) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8002) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xffffffff, 0xfffffffd}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x2, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0x4]}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0xf) 14.127999743s ago: executing program 1 (id=217): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f000000b4c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000240)=[{0x0}], 0x1}}, {{&(0x7f0000000340)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x2, 0x488c4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000015c0)={0x0, 0x1000, "96795768aa08a0b34e8fdb405a12243bc480f8dbf18f6aa195920be1a38e740de28713a72d108088d0cf18d270d4a1fec4ac84b48c13714c8d4b6746a99d1919ac328383574878227f2f684eb4cae150d8a1da74485a52d61dee9649fe66be7773535aa26f02a8c49aeee12f37829d2d0b5a9c7a366a8b2f65748601292595e2c5218a025e00504dfd086f0f6cb282bb1806bb29b13833c516062fb80e78051189c73ae1cdb653bc8ac55b4dcc583e78b07079d1b6b5ebaed548feed66d74e752f388d28687069a033e62ecb891635423226f5bd88a1c7060d4e1dbf6761ff5f333555b2f72efa7c5a5bc34d5e15dbff13f20bdd6b29fc2f969fc6eb9959ae09b2fb8021bcde518d4337920292ace730af538cf08ae853fcf4b1744f190593dc63ea7dfaaa8df780c8146bc3f3caf2d7c048e9ece5438b27eadc717e9b9f183846dc01c5428c7c5ce23a4fbecdfef6ab836dc1b400194307ce181299a1363f00ccd60acc3ebcf27295137397819e6ab478e3730d95f94de4f50d179efa940faaefff9f693d0837c5430b18e133438506e3f7ff26d542e689541f818a1137a61e35c835c43a544ab00988501bd0f7aa41060cfbe8faf0fb64e4e74a1f9e07601b884d9e3927a78f9178ae32ac2e7db6e7e566d3037f0bf06be2352f9dd4927f4fac85dd22095a9595689f282180917efa69be29c64ad77b415978e5a982d705c40ea0ebaa3a715357e9c0e25e4cff4c3b831521bc56f215f95a84891b610e5e3d595ca22d960245d5b76d999e1c04d224c15442d83d4c9f883de31170f2c348bc813fff5413dc7e45c65ff6db2cbb6ba9e21257fcdd8fbace78f5ec3a77aa3c8c25dad56bbca0cd9196a9596cacc5710481c5b1fb5ca85d8804a0f51725f5ab4c3c8c8ba01e15821db40ddf88739b93d35674b42c7daf55c410aa52c27f4d5c3139677b576e4e6466b9bc6d3655f3877ec0103d7e1f8c2b689e9fd24e818e6f1e9560af6aeba3b59653c51782a13c346c7524c8d4a3b3d6f405feb05cd2c35f7c0970683203cf58ee7352449b4f564d985668af8e5b3d20ac9b9758379986a308c1a3a0f67c9d940507b5c6b101c04fb5348772a25f2620289fe8ad48369b747b73113d8a2dc09349df88501332965190634e192ace5d095324d42d01001c64055917073a0737c9f9e301306f86cec35caf8c1d6b7d100b14e48d4b8f34dac41ea4633413db2e1cfd050af87ee75fdbebdfb2ca6054109dc1420bf972723fa2d5eefebf5c885328259c6f63e8e218cd6b94257871e4a93c6cf9268c7b278cd4dab05839f6b9fa0b38ff5f681fc075f8df9ffa1b7c70b155337ecb560e6d95f35455cadc7b3a12fec07b123754edec43e801096e44633888aaa36b641216b1e6246c158e06dddb781a001de0e4a057ca437409963e75e959ad0df5dd55d2f67583608b2ce9e3a5ed2935ebb3282f44c7a915bc8c9ae7780278ed52d465b862dbd703d2c19a49eeb798d7d194dcc6ed835ae14714bd951d2b757e0e2624a5b2e6fd164071228563f372f24df5ad927e17cec482dd511183782272c8aab3468c93d1fc9b3657dcd167f5d5c6eb988f81154833c61f8b05f02777828f26598d459c344781df606299e6552fdcaa16774563642a31d7fca927db6609ade056ac2ad54fab94798c4d62ef02ccf001b8369335b7ec0754168674c8842deb9ae0cafc011eba7566d81d3d43ecdcd73802d4df9a741907c53823989a026171295d49983880748caa8c5ae6553cb883f3d7aea9843c9820410cb5339f88c452e05f31fc8903aaf060058cd94f126a7a2c32485a7535939e094c750f0d8cc9083a35b79e625d0ac427773e9c0e553d05d476a1edce50fccca7654d1fe3bc97882e679f25698dcb4a7a178dee0c9fc7c2a9757bf24a3d65c5cfcc60a60f8f094b848f333687d97265795aefa5897fd7387aab739641c7596f3d967dfcfa07dd830f213304fd895971504d4b993907ffd2a259f0ded6ff8361acadbe6cec0a2a5cddaa32dc4bbd7b316cdf347220bf683a1d66246f8684dbc8fff79c5877d48f17803592fab1da1a211b2f45a372ce8f256a813fa5e8e0d184d5bae9baff86f7d54aab4177b58973d8644d8b4cbd3672c55a0c761704cda6edfd8e3696534f6244fe1a6482843495d217fb06c16b9fe82d72a0d42adc29fdc66cd1b7e10ccedec08999c73caecaff7019445e74cf899e015c2821fb86646678098aafc647b1c0a118ea2787123b668bd28540c53ae3da776ccebf6a68dd966288ef01e69b1a94a4187c6cf076abc992afb2714ecf447abd73b3d4fbdf9c95feff60d2f11d77d1ac9d320e4f6e459a1a0986853494d1d9725fd50eb75edfd16d2fe66b770eb71526f7480bd7dbed40f4843211b1dedf581f0a702849ab103f59837d63ac95938812ed64f2b741831f121fdcc9044d4d9b7bb00fb7a842e5a13aac201f6d1af45eb57ff7c7dcda3062b0e53754d0102e62a1ebc2f1a5dcdfbb4bd50d7567b3c7e4531b06364b66af6120794bf125991f3f63fc34ae993a703ce9e89e6fcf46998a820e3c9dd549979e649f890ffacde9a617c25e7862b1c8d2c5a83ddcf97631fac85ea5c0597bfaf1110563710503ff35b379c694abc4aa5ba89787b9e04efe36bad69ecb486e13cef76714c951f90595c0d761d6e1250949d3de24c17fda994cb5f22b513659ea61bc763efce0475b7da6223e20dda06a11427f56a668f12b5a07d9fffb78442a294c84bcd47716d67abf9c723b551440b30fc0e4d82040e82adcaf3ea6b0221d75b8b37323ec2c6dcb02be61fa347f9af25da89dd8c30b2bd0aa9de413b4329c57f187f7ba59741ac6010f70d59edb5d920e5da3a441db3a8b3f4b1e9f3c625711272b098095271b0201b94076bdd04277611816a368f92937c0998f2f5f74559157182e41e19ed5bff4034ee285b61a1b731e88440e81c5bff1c304d52deb25a0361234899a2fe9f655d4d4bdc52722e8ef9f3bfac454664333cedd4918e0597c73a39d49247f362ca85aaac8a8716cd93ac81ef6d61fd8c61e599f9d85ac257a62173d989108799aa9de1326d89ac0626a472605439207fd959049c5321806f5e3c8c01ce04ccba3c7d6986a6456da8cb13b86a26f91aa7b933c0863b100ded362c23233a765bba59e90833a854cb81b751886654163fe196935cdb1697a1ab4fbe42ed26d94e49d3080ab9b7293040986d7f26ec8108a40bd491a47b18b1c5216416f558320335a95af74684a4ca2b195a58eb61628af2eef65acf7b740f054973de11bf1b694a4e7cf51377245158f3e78389b5bd6fc8b3eeccb2abdb618ca01ab7258543de367abb3b4a9b10da6707644879c3c62133c125c0b2023748842623a916093e394ca40687c7784891d426512126c8fbd0ab93ae5f780113f0fd078c4d719c4c0c6f0897dd2014f4d7eea22a0f4360fc20341f94e9e6da2d38bd167ceb92b0843c8bb765b25f48add73ae8d6b81a06adf82867965a1e1d87724d2f4c605d79c75266a53f412ea88bb49b1b18783b10e40b27198c9e2ba936fad7592b31567ad9ce0a43ba756aa51d38b5d34528b96c399efec77307b24e09cbc508e42ac6a859f8b4adc30856f5cf23e2c13fb198f956b4b0f09d456248b67c25b6409c87be383f4b2ec5160e17752334dfd3415a4261c863f41cbe2056a0e9c071736329110759cfd9aafc169061b482728a44fb3348ec823b2c953f10b091ece9c7fc41dc3586415f652d2c8f065ece95a78ddfa5abc1a5464cf98dcecd91b745b9353f40a647cfebc88c87d362b5a82ee0108e69b897fb7b38d5200ec74eeb5fd57298f66f9b95816cd0b6394c5bb7a71a3c87d806f87fc8954a53ed5e359e7522ab4a520a10b2be0232e495344515e9a13bddcf7743b45c4f2929896ae35acc9ef1f15ba87db5b4facf0ba5553d218bdb8b959f9b49a7635846d89c258c96f25f56e6ce38f3cb6c20f9ae07abb296e8c14e51bfb2f1b1e86e49336703ac5a1ee452ec0f55111eaa08d0edb7143833774ea6e09dee19c5de8b902c95b91072f312b0683390bb9b7c0ed6655986e1723df0aa5fba29bb55a47b4f672f4226d5f6897f9d2d467e85ed327329d3eaebab4732a35da467386547aa3498a09e0ba83273b94cfb0ef610224b5070b2101695aed932faeca07f0bbea87b285344ff65c2d615a5c247ff02b6b6837040d93e564f985f366f17a35cbb421ee2fd81d071db502035c601539c76505cb29c8f225bff9659744632a5a4510d8a33f886315ca22722c819cbd64c5c297f4e1e51598584cbe262fd8bdc9d4aaee19938de0243ae776e3c19dc26f10d15b79f766360756dba796d84b6515b51c64f173579e8d1d3591ec8291229a6e1299ce1cf2b9ec772872f73c01a8c2a9b48347a14b1eb915ea89521ba6bf86d8053f63549de7ee3b81bcc2ca1c28f830e83c1146f255bfa6668b742a9a2de5918bcc245364334e805a81278f3e2077f232294cbd0500091fbd3ba5185e3b2572a5db84c0dd3c2eb8b83de0baeb372ea3cd07ba7119be0980901f24402467058a6aacf1b8a07d771e007d148eebeca2a3f5be59430e2c6181e3bea3b6be558f2c1d87e9de95c407629693fc5e187b6a9d96fde2b702e36780534d59a2a9df2917ced855da6be3e603cb2b59c80b1c7518521597e155d4cb95af764d8c289116dfa2b652ae58495b96ddb0f3643124bef96477994fdac01d5981904db6795790f5d94aad44b8a8fd2730f26de3f6cd685f61a43265ca2866b6664887b1c4dc031255a43e9cf51e3776cda4e34bd04035bc5c73c825ac67561430ef29a55959debb40831c8b021bc44bba4ca77059b64b6c761e03948e2ad53dc688421ce14f0a177f4005bd0089377d0a2c4584fafa980e2ca8a4e052e46b60e3bec019c6a5eeee91345c53e031e2e88b351bc7dbdac24d3f611fe5db0edcdfb6fa50e9f5d44b76ca275c97f1c9e1d4ac1999e92945a909cf6712f3bf4f482e9e2a62ad4d7a7d8e529d0804b96c3e541483fc24aa999b139f805e8a29613f146526877d47fb47e080891aa5743a38c41ba2dd3f065e5dcb0190e62acb60661098e10c54796aeb23ff30a06241007f17be18d4b0e1d39da1cd7d8a36a7cd731f9a5d730aa15b922bf65585187a6380b3758c775f6f8db1ae006f38cc7d1a591eedb166800d40510717d66a2e5bb4be31bbc7c7740b6e0ffb1f32f6732a8f38f9dda6ce3893f3255e06453bf64e7ba1fdafbdc544c4a3f9be9bc7e251dbba9f22075c48ec4481d29e4d90fc42c7401fec1ca688dd41bfd6d72aa37b4ea9a0d74873ff5fb6f4c16c4d1a64b48319298f3661dd8a8e096cc67da017e46297fae89e105232f7254fb84fe55428ef2fee07006b7ee54ee47c1d4b950d0f22c2c2edce7439c3208baf2405c09039ff07a08040917ab57369ea9f3c9fd9cc28d2d6bc1c83be599c94958b7b53eb6f7befd3c3fda3953f24d0e3078220e1e8a346a981d26418bb7d900aea6b7a2358f61a8ed13f4bf3257e261673e5418e36dbec46f93029c319a0f1856d5365521e9015d9b036cee11697a4cc3ab67eb12545ef790d3fc1087d41cb9c63e945cc77af1c27b668eb4b8ac405fc53860238aa051eb4320745366f8921c8b64f63d964d77012316dc6eaa8182c7a3d2f1115b6a9a91d5550dc454ce237207a175a462f7d696dec92941b6fb96c402ee26c1ef842adee6655bfa4fa6bde138446bea5d4e5ecce77f3cb55d62cf2be5de4f88a347ad39b4e"}, &(0x7f0000000000)=0x1008) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r1}, &(0x7f0000000080)=0x8) ppoll(&(0x7f00000001c0)=[{r0, 0x300}], 0x1, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000380)={[0x400]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket(0xa, 0x2, 0x0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet(0x2, 0x3, 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 9.467529998s ago: executing program 1 (id=233): recvmmsg(0xffffffffffffffff, &(0x7f00000063c0)=[{{&(0x7f0000000540)=@ax25={{0x3, @bcast}, [@bcast, @remote, @null, @default, @remote, @remote, @netrom, @null]}, 0x80, 0x0}, 0x2}, {{&(0x7f0000000880)=@pppoe, 0x80, 0x0}, 0x409}], 0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 8.985152549s ago: executing program 1 (id=237): syz_usb_connect(0x3, 0x24, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x2) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f00000001c0)=0x1) 7.1079192s ago: executing program 0 (id=246): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x121) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0x27, &(0x7f0000001bc0)=ANY=[@ANYBLOB="186100000600000000000000010000001801000020696c0000000000002020207b1af8ff00000000bfa180000000000007010000f8ffffffb7", @ANYRES32, @ANYRES64, @ANYRESOCT, @ANYRES32, @ANYRESOCT], 0x0, 0x52, 0xca, &(0x7f00000003c0)=""/202, 0x41100, 0x11, '\x00', 0x0, @fallback=0x14, r1, 0x8, &(0x7f0000000200)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x1}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f00000005c0)=[r1, r1, r1, r1, r1, 0xffffffffffffffff, r1], 0x0, 0x10, 0x3}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000540)='./file0\x00', r1}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x590) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x4) 7.033535766s ago: executing program 2 (id=247): syz_usb_connect(0x5, 0x24, &(0x7f0000001340)={{0x12, 0x1, 0x300, 0x8a, 0xa1, 0xed, 0x20, 0x182d, 0x21c, 0x6847, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xea, 0x0, 0xd0, 0x84, [{{0x9, 0x4, 0xc4, 0x1b, 0x0, 0x77, 0xa9, 0x5, 0x1}}]}}]}}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0}) 7.028074844s ago: executing program 0 (id=248): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @broadcast}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x2}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xffffff80}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @loopback}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}]}]}]}}]}, 0x8c}}, 0x404c004) 6.920201669s ago: executing program 0 (id=249): ioperm(0x6, 0x88, 0x8) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 6.841867403s ago: executing program 1 (id=250): socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x80000000) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x42e6, &(0x7f0000000340)={0x0, 0x2b13, 0x10100, 0x0, 0x25c, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 6.412456972s ago: executing program 5 (id=251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 6.035970498s ago: executing program 0 (id=252): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000040000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000180)={0x6, 0x7f, 0x0, 0x9, 0x40, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010) 5.98339503s ago: executing program 5 (id=253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='rxrpc_call_complete\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r7, &(0x7f0000000040)={{0x3, @null}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca3164b48412ba8000000000000", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmmsg$unix(r9, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/45, 0x2d}], 0x1}}], 0x1, 0x43, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x6a4, 0x0, 0x6eb202c2}]}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x4000) bind$can_raw(r9, &(0x7f00000001c0), 0x10) setsockopt$inet_tcp_int(r10, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) sendmmsg$inet6(r10, &(0x7f0000001480)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0xde03, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000300)='`7', 0x2}], 0x1}}], 0x1, 0x24088058) 5.152309777s ago: executing program 1 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000300)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) 5.057476455s ago: executing program 0 (id=255): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x3, 0x141101) dup(r1) syz_usb_disconnect(r0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000140)={0xb, @pix_mp={0x1, 0x2, 0x35323645, 0x5, 0x3, [{0x4, 0xb}, {0x10001, 0xa7000000}, {0x6, 0x6}, {0x9, 0x9}, {0x3, 0x8}, {0x2, 0xe15}, {0x4, 0x5}, {0x9ec, 0x10001}], 0x9, 0x1, 0x6, 0x2, 0x2}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.851417257s ago: executing program 1 (id=256): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') signalfd(0xffffffffffffffff, 0x0, 0x0) io_submit(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x2, 0xf2, 0x3, 0x0, 0x7}, 0x1c, &(0x7f0000000300)={0x5, 0xf, 0x1c, 0x2, [@generic={0x3, 0x10, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "3781888b620165cbf0550cda9616fa53"}]}, 0x4, [{0x67, &(0x7f0000000200)=ANY=[]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x180c}}, {0x6e, &(0x7f0000000540)=@string={0x6e, 0x3, "9908479de2e5bd2fc9fc83dd73c7fca884d9641fabd242352ba5e7f7608bb5aae5377af06b3b4bb796a824126c077bf7b5ed137bab075e663a9fa77074a3f13b63a4ddfb089b30fad03e771cefbc9f4b1cdb8d6a9cae81fc1bd9dda32990e0d48e16d870fbb1a9724e37b7f6"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x240a}}]}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x379}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) close(0xffffffffffffffff) io_uring_enter(r2, 0x3516, 0x0, 0x20, 0x0, 0x0) 4.317983772s ago: executing program 0 (id=257): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0xd, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0xe, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7800000002060108000000000000000000000000050005000a0000001400078008001140000000000500150000000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e65740000000015000300686173683a69702c706f72742c6e6574"], 0x78}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4.108107713s ago: executing program 5 (id=258): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 4.015256142s ago: executing program 2 (id=259): pipe2$9p(0x0, 0x80) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101) r1 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x200, 0x40) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xf4651) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000200)) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000280)) mount_setattr(r0, &(0x7f0000000240)='./file0\x00', 0x8000, &(0x7f00000002c0)={0x2, 0x1, 0x180000, {r2}}, 0x20) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000340)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e21, 0xc, @remote, 0xfffffff2}, @in6={0xa, 0x4e24, 0xda5e, @rand_addr=' \x01\x00', 0x6}, @in={0x2, 0x4e24, @private=0xa010100}], 0x68) r3 = syz_clone(0x8000, &(0x7f00000003c0)="95b06a6df04fb6aa3cb74548a2d4e4deb9a0d5be9fd0c9d53e4b9df6c5f8c8c70f625847deee1a723fd723bbd56b728eb83713ccd48f2ee21e2ca332ef0358bd3fbabe47af8a0422d519c3d9ed6d7d1eedfb94ecebd80855db4259d22dee049c86e0e2072ec9449b3c", 0x69, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="b64cecf2c20c03ab3f829434621f7390d6ab1055429fec6ac0320be673c915626d17201a8bf7ec4f6996c23d05932a1f7db34667030b486370a3c78defb07b66aa04ba7e1678a8adba9052acc1607e119be286b3f21d0a774b54176d5e1cd87cf6326b105de33fc14d67ed9872eb88676f95fcc20f3adc780f159e00a97a7141b656a0a098f5bbeb9b329e578b9133a079a7332596870794ae0fe013abd1ea37f7e5c9f1774be7") ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r5 = accept4(r4, &(0x7f0000000640)=@phonet, &(0x7f00000006c0)=0x80, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000700), &(0x7f0000000740)=0x4) timer_create(0x7, &(0x7f0000000b00)={0x0, 0x15, 0x1, @tid=r3}, &(0x7f0000000b40)) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000b80)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@o_path={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x4008, r5}, 0x18) sendto$x25(r0, &(0x7f0000000c40)="4436ca223b7016ec7c2c3dd9bcb665730e5b4c3431dfa42d50e45adfeb493ac3", 0x20, 0x80, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) 3.807912574s ago: executing program 2 (id=260): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc65, 0x5, &(0x7f0000006680)) geteuid() 3.560035872s ago: executing program 2 (id=261): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0x11080}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x800, 0xfffe, 0xff80, 0x5, 0x3, 0x0, 0x0, 0x10, 0x2}}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000000c0)=0x6, 0x4) 3.225318532s ago: executing program 5 (id=263): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100"], 0x40) 2.896659294s ago: executing program 3 (id=265): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, &(0x7f0000000340)) 2.61175326s ago: executing program 2 (id=266): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000300)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) 2.568044615s ago: executing program 5 (id=267): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d400500000000004704000001ed00000f030000000000002c440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e75"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80002) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) 2.541047656s ago: executing program 3 (id=268): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f000001b700)={0x2020}, 0x2020) r2 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000200)=0x7fffffff) 1.800391022s ago: executing program 2 (id=269): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.292031815s ago: executing program 5 (id=270): r0 = socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) syz_emit_vhci(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000500000004000000010000030000000000000000000000000000000000000000007e846f6d736719d9c27c963bf459e4e1a2fee7fc00849bf12855931d5528735c18e02c0710086996ebfea19f60d9728efeca3051a460508e1405bf66f89eaa4476868920f317017ab2586774ad53b4aa54a336ecb1bdbb19bb0bc2e36a056f0ffd65f337340c2de188825b3e5858e4017c64ee7733ccec782651e0e614d7c4e8bd42e124820d"], 0x0, 0x35, 0x0, 0x1}, 0x28) read(r2, &(0x7f0000000180)=""/65, 0x41) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xe, 0x3}, 0x34, [0xe, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a1, 0x3, 0x3, 0x7, 0x5b8, 0x2, 0x6, 0xc, 0x7, 0x51, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0xb, 0x80, 0x9ad, 0x26, 0x1, 0x5, 0x1, 0x1, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0x1, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x8001, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x339, 0xbbf, 0xfffff000, 0x800, 0x8], [0x2, 0x100, 0x7af, 0x6, 0x5, 0x0, 0x5, 0x7fffc, 0x2, 0x6, 0xa, 0x10000, 0x2, 0x17, 0x20, 0x2, 0x5, 0x5, 0xa, 0x65, 0x9, 0x9, 0x8, 0x4, 0x7fff, 0x3ff, 0xffffff01, 0x8, 0x3, 0x9, 0xb6, 0x7cb4cb2c, 0x0, 0x2, 0x81, 0xffff, 0x7, 0xc5d3, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0xc98, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0x4, 0x5, 0xffffffff, 0x200, 0x5e4, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x10000, 0x9, 0x3, 0x2, 0x89a, 0x100, 0x5, 0x2, 0x1, 0x3, 0xfffffffb, 0x7, 0x6, 0x20000007, 0x9, 0x4, 0x0, 0x3, 0x9, 0x0, 0x2, 0x80000000, 0x0, 0xfffffff8, 0x7, 0x0, 0x3, 0x6, 0x0, 0x5, 0x3, 0x9bb, 0xa, 0x0, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x1, 0x5, 0x9, 0x7, 0x80000000, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0xd54, 0x1, 0x9, 0xb, 0x4, 0x7f, 0x6, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe68f, 0xdaba, 0xfffffffe, 0x52b, 0x8010, 0x9, 0xff, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0xd2c7, 0x8001, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x0, 0x8, 0x6, 0x3, 0x7, 0x0, 0x7, 0x961a, 0x1, 0x7, 0x49, 0x7, 0x255d, 0x1, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0xff, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="45000200", @ANYBLOB="000227bd7000fcdbdf250100000006000a004e23000005000400020000001400090000000000000000000000ffff7f00000105000300040000000500020002000000040005"], 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x40804) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000000c00070000000000000000000800090030002300090006006e6f6e650000000008000800"], 0x58}}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000400)) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="48000000150081fb7059ae08060c04000aff0f11000000040011019501546fabca1b4e7d06a6bd7c493872f7503744d08a", 0x31}], 0x1}, 0x4000080) 1.291766545s ago: executing program 3 (id=271): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x3000000}, 0x8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001500)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) r6 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000240)={0x0, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) ioprio_set$uid(0x3, 0x0, 0x0) 531.467454ms ago: executing program 3 (id=272): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x41}, 0x94) 126.319601ms ago: executing program 3 (id=273): syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_settime(0x17, &(0x7f0000000040)) 0s ago: executing program 3 (id=274): openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ustat(0x11, &(0x7f0000000600)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. [ 65.094723][ T4172] cgroup: Unknown subsys name 'net' [ 65.231372][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.610658][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.705270][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 68.755777][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 68.785355][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 68.808068][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 68.856615][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 68.924809][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.931929][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.940580][ T4185] device bridge_slave_0 entered promiscuous mode [ 68.966977][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.974066][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.982999][ T4185] device bridge_slave_1 entered promiscuous mode [ 69.056754][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.073796][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.081438][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.089818][ T4192] device bridge_slave_0 entered promiscuous mode [ 69.113616][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.123246][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.130461][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.138682][ T4184] device bridge_slave_0 entered promiscuous mode [ 69.146501][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.153585][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.161713][ T4192] device bridge_slave_1 entered promiscuous mode [ 69.168898][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.176198][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.184030][ T4183] device bridge_slave_0 entered promiscuous mode [ 69.191724][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.199051][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.207042][ T4182] device bridge_slave_0 entered promiscuous mode [ 69.223880][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.236580][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.244935][ T4184] device bridge_slave_1 entered promiscuous mode [ 69.265809][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.272913][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.280953][ T4183] device bridge_slave_1 entered promiscuous mode [ 69.288132][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.295291][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.303146][ T4182] device bridge_slave_1 entered promiscuous mode [ 69.348775][ T4185] team0: Port device team_slave_0 added [ 69.356252][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.367975][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.379134][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.400132][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.418992][ T4185] team0: Port device team_slave_1 added [ 69.432740][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.443910][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.455074][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.500462][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.535356][ T4184] team0: Port device team_slave_0 added [ 69.558781][ T4183] team0: Port device team_slave_0 added [ 69.565836][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.573245][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.599891][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.612802][ T4184] team0: Port device team_slave_1 added [ 69.621628][ T4192] team0: Port device team_slave_0 added [ 69.630080][ T4183] team0: Port device team_slave_1 added [ 69.639762][ T4182] team0: Port device team_slave_0 added [ 69.648027][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.655321][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.681658][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.702611][ T4192] team0: Port device team_slave_1 added [ 69.724099][ T4182] team0: Port device team_slave_1 added [ 69.771317][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.778374][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.804521][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.822383][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.829841][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.856151][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.876104][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.883084][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.909666][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.922916][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.930247][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.956312][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.968915][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.975973][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.002004][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.013579][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.020819][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.046863][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.058500][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.065477][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.091939][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.140274][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.147355][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.173642][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.219551][ T4185] device hsr_slave_0 entered promiscuous mode [ 70.226463][ T4185] device hsr_slave_1 entered promiscuous mode [ 70.236153][ T4182] device hsr_slave_0 entered promiscuous mode [ 70.243898][ T4182] device hsr_slave_1 entered promiscuous mode [ 70.250532][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.258956][ T4182] Cannot create hsr debugfs directory [ 70.273462][ T4183] device hsr_slave_0 entered promiscuous mode [ 70.280444][ T4183] device hsr_slave_1 entered promiscuous mode [ 70.287154][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.295067][ T4183] Cannot create hsr debugfs directory [ 70.312733][ T4184] device hsr_slave_0 entered promiscuous mode [ 70.320518][ T4184] device hsr_slave_1 entered promiscuous mode [ 70.327244][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.335529][ T4184] Cannot create hsr debugfs directory [ 70.365502][ T4188] Bluetooth: hci2: command 0x0409 tx timeout [ 70.374967][ T1346] Bluetooth: hci3: command 0x0409 tx timeout [ 70.381597][ T1346] Bluetooth: hci4: command 0x0409 tx timeout [ 70.387723][ T1346] Bluetooth: hci1: command 0x0409 tx timeout [ 70.393950][ T1346] Bluetooth: hci0: command 0x0409 tx timeout [ 70.407031][ T4192] device hsr_slave_0 entered promiscuous mode [ 70.413599][ T4192] device hsr_slave_1 entered promiscuous mode [ 70.420492][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.428098][ T4192] Cannot create hsr debugfs directory [ 70.721311][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.735575][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.744960][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.757650][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.791462][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.804386][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.826111][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.847941][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.867399][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.877299][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.905781][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.941748][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.977008][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.998168][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.011746][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.037458][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.050040][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.064547][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.073757][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.083209][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.107902][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.132513][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.160372][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.168122][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.178235][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.209334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.217609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.225852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.234388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.244361][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.251598][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.260274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.269631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.278148][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.285262][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.294081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.309903][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.326101][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.344806][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.368261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.377511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.385825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.394282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.402996][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.408615][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.410079][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.416600][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.434957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.443029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.454186][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.467103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.476086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.497302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.505796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.514320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.522820][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.530061][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.540117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.548848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.557805][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.564884][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.572522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.597392][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.611894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.621044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.630068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.640389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.650077][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.657167][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.664769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.673342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.691491][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.702007][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.746550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.762513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.773596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.787905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.796792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.804442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.813512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.822585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.832369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.841067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.849914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.859072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.868387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.877923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.887530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.897061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.905781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.913986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.927776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.935488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.943350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.953572][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.971323][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.986999][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.000050][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.010470][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.024465][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.033495][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.058940][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.070361][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.089848][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.099818][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.114002][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.131144][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.141083][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.148193][ T469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.156681][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.164077][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.172124][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.191343][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.218230][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.238225][ T1398] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.245345][ T1398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.258865][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.267547][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.275955][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.287971][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.299666][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.324499][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.347389][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.356062][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.363613][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.376649][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.385562][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.394063][ T1218] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.401183][ T1218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.409675][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.418405][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.430248][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.438624][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.446678][ T4250] Bluetooth: hci0: command 0x041b tx timeout [ 72.454998][ T4250] Bluetooth: hci1: command 0x041b tx timeout [ 72.461169][ T4250] Bluetooth: hci4: command 0x041b tx timeout [ 72.467808][ T4250] Bluetooth: hci3: command 0x041b tx timeout [ 72.473916][ T4250] Bluetooth: hci2: command 0x041b tx timeout [ 72.483330][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.498515][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.532989][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.542898][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.558838][ T1218] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.566013][ T1218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.576045][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.585168][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.594483][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.603074][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.612052][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.622885][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.631748][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.641537][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.650867][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.659672][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.668465][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.677554][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.700570][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.732556][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.742113][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.751421][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.761802][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.772417][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.785765][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.794092][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.802653][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.836763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.846407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.857222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.866336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.875867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.883318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.893022][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.911424][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.931567][ T4185] device veth0_vlan entered promiscuous mode [ 72.953137][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.976240][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.004385][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.013461][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.050821][ T4182] device veth0_vlan entered promiscuous mode [ 73.064291][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.073636][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.092670][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.108491][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.117075][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.127120][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.140694][ T4185] device veth1_vlan entered promiscuous mode [ 73.160079][ T4183] device veth0_vlan entered promiscuous mode [ 73.190594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.200647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.209679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.218066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.231020][ T4182] device veth1_vlan entered promiscuous mode [ 73.250344][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.257795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.266633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.295601][ T4183] device veth1_vlan entered promiscuous mode [ 73.302933][ T4185] device veth0_macvtap entered promiscuous mode [ 73.350882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.360021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.370864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.380472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.392373][ T4185] device veth1_macvtap entered promiscuous mode [ 73.431552][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.444767][ T4182] device veth0_macvtap entered promiscuous mode [ 73.456971][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.466612][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.475270][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.483855][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.493095][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.502237][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.511238][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.527257][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.537512][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.553063][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.567753][ T4182] device veth1_macvtap entered promiscuous mode [ 73.583221][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.593082][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.602582][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.611548][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.622524][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.630952][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.640370][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.649538][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.658794][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.674363][ T4183] device veth0_macvtap entered promiscuous mode [ 73.688426][ T4183] device veth1_macvtap entered promiscuous mode [ 73.701932][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.711061][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.721496][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.730768][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.739445][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.748034][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.758935][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.767031][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.793190][ T4192] device veth0_vlan entered promiscuous mode [ 73.824050][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.836336][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.849048][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.863004][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.873766][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.885516][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.896840][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.908234][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.920105][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.930819][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.940155][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.950650][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.959678][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.969932][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.981504][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.993164][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.005579][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.016245][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.025662][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.034396][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.043457][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.065214][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.081126][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.091598][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.091639][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.093514][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.120256][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.128937][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.138054][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.147865][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.157293][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.166610][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.182040][ T4192] device veth1_vlan entered promiscuous mode [ 74.192890][ T4184] device veth0_vlan entered promiscuous mode [ 74.254089][ T469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.257401][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.271268][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.279730][ T469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.282364][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.298833][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.325846][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.338430][ T4184] device veth1_vlan entered promiscuous mode [ 74.389365][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.399974][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.422682][ T4192] device veth0_macvtap entered promiscuous mode [ 74.443386][ T1398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.462336][ T1398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.475767][ T4192] device veth1_macvtap entered promiscuous mode [ 74.491695][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.500822][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.509434][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.517692][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.526766][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 74.530441][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.533020][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 74.547397][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 74.553724][ T4267] Bluetooth: hci1: command 0x040f tx timeout [ 74.560210][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 74.582794][ T4184] device veth0_macvtap entered promiscuous mode [ 74.603328][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.616892][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.627100][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.637858][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.648234][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.659114][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.671313][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.690717][ T469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.709829][ T4184] device veth1_macvtap entered promiscuous mode [ 74.718838][ T469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.723606][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.734540][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.743330][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.752373][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.765125][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.788754][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.803889][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.820719][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.832194][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.842468][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.855974][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.867419][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.881791][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.890616][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.966387][ T4299] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.683906][ T1398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.692824][ T1398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.701665][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.720585][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.737656][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.749684][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.766807][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.782680][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.808106][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.836155][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.848642][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.865835][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.874963][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.883667][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.903522][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.914146][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.021896][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.030937][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.041694][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.052393][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.062679][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.073297][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.083241][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.119909][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.190687][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.260385][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.337419][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.422981][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.462271][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.502205][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.561111][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.605341][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 76.626974][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 76.639965][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.666978][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.720908][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.730254][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.744529][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.817197][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 76.823293][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 76.830213][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 76.870319][ T469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.895432][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.934755][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.952117][ T469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.961282][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.978154][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.993400][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.001380][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.020700][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.028385][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.044887][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.225313][ T4313] 9pnet: Insufficient options for proto=fd [ 77.237682][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.248505][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.257800][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.267356][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.276640][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.285955][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.295310][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.305085][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.314162][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.366213][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.904898][ T1218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.921237][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.238540][ T1218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.510962][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.722311][ T4325] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.648759][ T4335] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'. [ 81.674197][ T23] cfg80211: failed to load regulatory.db [ 83.349006][ T4342] ceph: No mds server is up or the cluster is laggy [ 83.641281][ T4188] libceph: connect (1)[c::]:6789 error -101 [ 83.725520][ T4188] libceph: mon0 (1)[c::]:6789 connect error [ 84.366500][ T4188] libceph: connect (1)[c::]:6789 error -101 [ 85.389488][ T4356] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.431807][ T4188] libceph: mon0 (1)[c::]:6789 connect error [ 86.613010][ T4368] UBIFS error (pid: 4368): cannot open "./file0", error -22 [ 88.654126][ T4383] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.846623][ T4393] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23'. [ 91.758693][ T4405] UBIFS error (pid: 4405): cannot open "./file0", error -22 [ 96.652693][ T4441] ODEBUG: Out of memory. ODEBUG disabled [ 100.365266][ T4477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.48'. [ 100.599095][ T4483] process 'syz.3.51' launched './file0' with NULL argv: empty string added [ 102.054443][ T4267] libceph: connect (1)[c::]:6789 error -101 [ 102.076064][ T4267] libceph: mon0 (1)[c::]:6789 connect error [ 102.262764][ T4495] ceph: No mds server is up or the cluster is laggy [ 102.389786][ T4267] libceph: connect (1)[c::]:6789 error -101 [ 102.397019][ T4267] libceph: mon0 (1)[c::]:6789 connect error [ 102.943631][ T4488] Zero length message leads to an empty skb [ 105.644660][ T4306] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.085095][ T4306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.116895][ T4306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.164796][ T4306] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 106.213665][ T4306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.285359][ T4306] usb 5-1: config 0 descriptor?? [ 106.324938][ T4306] usb 5-1: can't set config #0, error -71 [ 106.384289][ T4306] usb 5-1: USB disconnect, device number 2 [ 106.484710][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.119312][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 107.276791][ T13] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 107.684741][ T13] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 107.904118][ T13] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 107.962254][ T13] usb 2-1: Product: syz [ 108.263117][ T13] usb 2-1: Manufacturer: syz [ 108.272418][ T13] usb 2-1: SerialNumber: syz [ 108.335658][ T13] usb 2-1: config 0 descriptor?? [ 108.371707][ T4530] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 108.405657][ T13] hub 2-1:0.0: bad descriptor, ignoring hub [ 108.422163][ T13] hub: probe of 2-1:0.0 failed with error -5 [ 108.624761][ T4306] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.874642][ T4306] usb 5-1: Using ep0 maxpacket: 16 [ 109.154698][ T4306] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 109.984637][ T4306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.025608][ T4306] usb 5-1: Product: syz [ 110.084709][ T4306] usb 5-1: Manufacturer: syz [ 110.118561][ T4306] usb 5-1: SerialNumber: syz [ 110.169738][ T4306] usb 5-1: config 0 descriptor?? [ 110.186776][ T21] usb 2-1: USB disconnect, device number 2 [ 110.231155][ T4306] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 111.137131][ T4585] mmap: syz.1.79 (4585) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 111.943572][ T4306] ssu100: probe of 5-1:0.0 failed with error -110 [ 111.981587][ T4188] usb 5-1: USB disconnect, device number 3 [ 111.998166][ T4576] kvm [4575]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x80 [ 112.085513][ T4576] kvm [4575]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 112.425387][ T4591] vivid-003: disconnect [ 112.949289][ T4588] vivid-003: reconnect [ 113.194879][ T4303] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.444628][ T4303] usb 4-1: Using ep0 maxpacket: 8 [ 113.984768][ T4303] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 114.198334][ T4303] usb 4-1: config 0 has no interface number 0 [ 114.366506][ T4303] usb 4-1: config 0 interface 251 has no altsetting 0 [ 114.373449][ T4303] usb 4-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=b1.d7 [ 114.383045][ T4303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.028089][ T4303] usb 4-1: config 0 descriptor?? [ 115.086522][ T4303] gspca_main: kinect-2.14.0 probing 045e:02ae [ 115.268313][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 115.289859][ T4303] usb 4-1: USB disconnect, device number 2 [ 118.265298][ T4642] vivid-001: disconnect [ 118.475965][ T4641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.95'. [ 118.592899][ T4638] vivid-001: reconnect [ 118.939554][ T4647] tipc: Started in network mode [ 118.944789][ T4647] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 118.956606][ T4647] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 118.966022][ T4647] tipc: Enabled bearer , priority 10 [ 119.631129][ T4649] syz.0.98 uses obsolete (PF_INET,SOCK_PACKET) [ 120.104842][ T4250] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.180961][ T21] tipc: Node number set to 1 [ 121.824980][ T4250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.874617][ T4250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.939714][ T4250] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 121.949771][ T4250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.005588][ T4250] usb 3-1: config 0 descriptor?? [ 122.480903][ T4250] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 122.514700][ T4250] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 122.557331][ T4250] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 122.611792][ T4250] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 122.641408][ T4250] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 122.679121][ T4657] udc-core: couldn't find an available UDC or it's busy [ 122.705118][ T4657] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 122.735921][ T4250] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 122.864836][ T4250] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 9: -71 [ 122.896126][ T4250] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -71 [ 122.944286][ T4250] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 122.999069][ T4250] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 123.031091][ T4250] playstation: probe of 0003:054C:0DF2.0001 failed with error -71 [ 123.080177][ T4250] usb 3-1: USB disconnect, device number 2 [ 123.330524][ T4675] fido_id[4675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 124.573895][ T4697] netlink: 140 bytes leftover after parsing attributes in process `syz.3.114'. [ 125.260618][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 127.185739][ T4719] bridge0: port 3(gretap0) entered blocking state [ 127.196150][ T4719] bridge0: port 3(gretap0) entered disabled state [ 127.423326][ T4719] device gretap0 entered promiscuous mode [ 127.525844][ T4719] bridge0: port 3(gretap0) entered blocking state [ 127.532616][ T4719] bridge0: port 3(gretap0) entered forwarding state [ 127.854181][ T4733] futex_wake_op: syz.0.123 tries to shift op by -1; fix this program [ 128.224505][ T4746] IPVS: persistence engine module ip_vs_pe_ not found [ 128.334763][ T4250] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.362295][ T4750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 128.744624][ T4250] usb 3-1: Using ep0 maxpacket: 16 [ 129.594804][ T4250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.616034][ T4250] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 129.646388][ T4250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.688526][ T4250] usb 3-1: config 0 descriptor?? [ 130.686472][ T4250] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 130.904204][ T4240] usb 3-1: USB disconnect, device number 3 [ 131.240591][ T4788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.142'. [ 131.472062][ T4789] input: syz1 as /devices/virtual/input/input5 [ 131.493529][ T4250] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 131.842104][ T4250] Bluetooth: hci1: Injecting HCI hardware error event [ 131.853765][ T4193] Bluetooth: hci1: hardware error 0x00 [ 132.847376][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.854107][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.260389][ T4802] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 133.489112][ T4804] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 133.503987][ T4804] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 133.532693][ T4804] CIFS: Unable to determine destination address [ 136.736232][ T26] audit: type=1326 audit(1766110785.546:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14dd776749 code=0x7ffc0000 [ 136.805705][ T26] audit: type=1326 audit(1766110785.546:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14dd776749 code=0x7ffc0000 [ 136.954870][ T26] audit: type=1326 audit(1766110785.546:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14dd776749 code=0x7ffc0000 [ 137.108233][ T26] audit: type=1326 audit(1766110785.546:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14dd776749 code=0x7ffc0000 [ 137.201250][ T26] audit: type=1326 audit(1766110785.546:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14dd776749 code=0x7ffc0000 [ 137.408931][ T26] audit: type=1326 audit(1766110785.546:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4847 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f14dd776749 code=0x7ffc0000 [ 137.853353][ T4317] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.358998][ T4317] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.418560][ T4862] chnl_net:caif_netlink_parms(): no params data found [ 138.479981][ T4317] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.645126][ T4317] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.158494][ T4862] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.197490][ T4862] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.263298][ T4862] device bridge_slave_0 entered promiscuous mode [ 139.424960][ T4862] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.444722][ T4862] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.644796][ T4247] Bluetooth: hci5: command 0x0409 tx timeout [ 139.944787][ T4862] device bridge_slave_1 entered promiscuous mode [ 140.079826][ T4862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.151576][ T4862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.204728][ T4306] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.342469][ T4862] team0: Port device team_slave_0 added [ 140.411053][ T4862] team0: Port device team_slave_1 added [ 140.454649][ T4306] usb 3-1: Using ep0 maxpacket: 32 [ 140.537903][ T4862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.567972][ T4862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.683863][ T4862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.734904][ T4306] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 140.742412][ T4862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.781530][ T4306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.781547][ T4862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.815688][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.844679][ T4306] usb 3-1: Product: syz [ 140.848897][ T4306] usb 3-1: Manufacturer: syz [ 140.853520][ T4306] usb 3-1: SerialNumber: syz [ 140.906681][ T4306] usb 3-1: config 0 descriptor?? [ 140.914870][ T4862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.966329][ T4306] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 141.081205][ T4862] device hsr_slave_0 entered promiscuous mode [ 141.098848][ T4862] device hsr_slave_1 entered promiscuous mode [ 141.135613][ T4862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.164523][ T4862] Cannot create hsr debugfs directory [ 141.644102][ T4247] libceph: connect (1)[c::]:6789 error -101 [ 141.653507][ T4247] libceph: mon0 (1)[c::]:6789 connect error [ 141.698679][ T4916] ceph: No mds server is up or the cluster is laggy [ 141.761914][ T4862] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.772283][ T23] Bluetooth: hci5: command 0x041b tx timeout [ 142.210272][ T4928] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 142.228228][ T4928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.237179][ T4928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.256717][ T26] audit: type=1326 audit(1766110791.066:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.2.174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14dd776749 code=0x0 [ 142.309000][ T4928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.322659][ T4928] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 142.331238][ T4928] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 142.357479][ T4862] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.486290][ T4862] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.565189][ T4306] gspca_ov534_9: reg_w failed -110 [ 142.631140][ T4317] device hsr_slave_0 left promiscuous mode [ 142.701549][ T4317] device hsr_slave_1 left promiscuous mode [ 142.778370][ T4317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.814181][ T4317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.852450][ T4317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.900757][ T4317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.913982][ T4317] device bridge_slave_1 left promiscuous mode [ 142.925945][ T4317] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.970908][ T4317] device bridge_slave_0 left promiscuous mode [ 143.012635][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.029186][ T4306] gspca_ov534_9: Unknown sensor 0000 [ 143.029241][ T4306] ov534_9: probe of 3-1:0.0 failed with error -22 [ 143.718709][ T4247] usb 3-1: USB disconnect, device number 4 [ 143.860703][ T4317] device veth1_macvtap left promiscuous mode [ 143.868079][ T4317] device veth0_macvtap left promiscuous mode [ 143.874132][ T4317] device veth1_vlan left promiscuous mode [ 143.930218][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 144.126372][ T4964] No such timeout policy "syz1" [ 144.146152][ T4964] autofs4:pid:4964:autofs_fill_super: called with bogus options [ 144.167525][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 145.539324][ T4317] device veth0_vlan left promiscuous mode [ 145.703721][ T4971] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 145.922381][ T26] audit: type=1326 audit(1766110794.726:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4973 comm="syz.1.187" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa343d61749 code=0x0 [ 145.964903][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 146.160012][ T4317] team0 (unregistering): Port device team_slave_1 removed [ 146.177712][ T4317] team0 (unregistering): Port device team_slave_0 removed [ 146.200276][ T4317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.220423][ T4317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.326475][ T4317] bond0 (unregistering): Released all slaves [ 146.414809][ T4862] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 146.866827][ T4862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.977624][ T4862] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.012616][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.035344][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.168416][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.195361][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.205001][ T1398] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.212059][ T1398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.243416][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.295327][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.443521][ T1398] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.450621][ T1398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.214849][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.230042][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.462335][ T5008] bridge0: port 3(gretap0) entered disabled state [ 148.469065][ T5008] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.476871][ T5008] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.528780][ T4862] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.583644][ T4862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.818897][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.948282][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.971619][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.002305][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.021626][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.031930][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.074175][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.243452][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.302448][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.371372][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.428832][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.134053][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.160748][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.203854][ T4862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.022704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.054140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.094829][ T23] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 151.144352][ T4862] device veth0_vlan entered promiscuous mode [ 151.156846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.182364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.205436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.245393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.284081][ T4862] device veth1_vlan entered promiscuous mode [ 151.319009][ T5077] tmpfs: Unknown parameter 'usrquota' [ 151.337029][ T4188] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 151.361924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.375777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.396480][ T4862] device veth0_macvtap entered promiscuous mode [ 151.444032][ T4862] device veth1_macvtap entered promiscuous mode [ 151.504799][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 151.510823][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.553270][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.558312][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.599897][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.610801][ T4188] usb 3-1: Using ep0 maxpacket: 16 [ 151.645802][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.654639][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.662023][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.695027][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.705170][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.728592][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.742558][ T4188] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.763104][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.794390][ T4188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.830304][ T4862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.854725][ T4188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 151.872456][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.890651][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.900374][ T4188] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 151.914411][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.923734][ T4188] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.945618][ T1398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.965227][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.992624][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.014632][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.024728][ T23] usb 2-1: GET_CAPABILITIES returned 0 [ 152.030753][ T23] usbtmc 2-1:16.0: can't read capabilities [ 152.031653][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.056593][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.069376][ T4188] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 152.082890][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.095088][ T4188] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 152.103088][ T4188] usb 3-1: Manufacturer: syz [ 152.112489][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.133645][ T4188] usb 3-1: config 0 descriptor?? [ 152.143864][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.170881][ T4862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.194848][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.241744][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.256693][ T23] usb 2-1: USB disconnect, device number 3 [ 152.333465][ T5091] No such timeout policy "syz1" [ 152.345079][ T5091] autofs4:pid:5091:autofs_fill_super: called with bogus options [ 152.360326][ T5091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'. [ 152.421940][ T5072] udc-core: couldn't find an available UDC or it's busy [ 152.653774][ T4862] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.733582][ T4862] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.824117][ T4862] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.877464][ T5072] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 152.958361][ T4862] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.083797][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.098461][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.124757][ T4188] rc_core: IR keymap rc-hauppauge not found [ 153.131287][ T4188] Registered IR keymap rc-empty [ 153.145892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.161666][ T4188] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.180047][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.199570][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.208153][ T4188] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.256867][ T4188] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 153.270283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.284840][ T4247] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 153.323303][ T4188] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 153.410652][ T4188] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.455005][ T4188] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.494940][ T4188] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.535014][ T4188] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.576602][ T4188] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.634753][ T4188] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.725783][ T4188] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 153.915571][ T4188] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.118242][ T4188] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.244731][ T4188] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 154.326233][ T4188] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 154.412980][ T4188] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 154.479246][ T4188] usb 3-1: USB disconnect, device number 5 [ 154.484930][ T4247] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.516007][ T4247] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 154.629185][ T4247] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 154.685618][ T4247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.755919][ T4247] usb 4-1: config 0 descriptor?? [ 154.837631][ T4247] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 154.848339][ T5129] netlink: 28 bytes leftover after parsing attributes in process `syz.5.218'. [ 154.885955][ T4247] dvb-usb: bulk message failed: -22 (3/0) [ 155.076410][ T4247] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 155.435137][ T4247] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 155.442589][ T4247] usb 4-1: media controller created [ 155.503125][ T4247] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.602272][ T4247] dvb-usb: bulk message failed: -22 (6/0) [ 155.640181][ T4247] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 155.716084][ T4247] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 155.807724][ T4247] dvb-usb: schedule remote query interval to 150 msecs. [ 155.995621][ T4247] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 156.955797][ T4247] usb 4-1: USB disconnect, device number 3 [ 156.964853][ T1346] dvb-usb: bulk message failed: -22 (1/0) [ 156.970867][ T1346] dvb-usb: error while querying for an remote control event. [ 157.087360][ T4247] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 157.274512][ T5154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.224'. [ 157.720470][ T5159] overlayfs: missing 'workdir' [ 158.024686][ T4240] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 159.186016][ T4240] usb 3-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 159.205941][ T4240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.292819][ T4240] pwc: Logitech ViewPort AV 100 webcam detected. [ 159.724859][ T4240] pwc: send_video_command error -71 [ 159.731155][ T4240] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 159.749672][ T4240] Philips webcam: probe of 3-1:127.0 failed with error -71 [ 160.212362][ T4240] usb 3-1: USB disconnect, device number 6 [ 160.422899][ T5208] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.952518][ T5218] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 161.041011][ T5208] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.048838][ T5218] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 161.207401][ T5208] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.468267][ T5208] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.563591][ T5208] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.579802][ T5208] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.593602][ T5208] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.607459][ T5208] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.655415][ T1346] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 161.762771][ T5247] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 161.769633][ T5247] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.783445][ T5247] vhci_hcd vhci_hcd.0: Device attached [ 161.810668][ T5253] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(16) [ 161.817290][ T5253] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.826671][ T5253] vhci_hcd vhci_hcd.0: Device attached [ 161.835360][ T4247] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 161.849945][ T5247] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(18) [ 161.856551][ T5247] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 161.888840][ T5247] vhci_hcd vhci_hcd.0: Device attached [ 161.889856][ T5253] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(21) [ 161.900888][ T5253] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.917992][ T5253] vhci_hcd vhci_hcd.0: Device attached [ 161.944663][ T1346] usb 4-1: Using ep0 maxpacket: 32 [ 161.953815][ T5247] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(20) [ 161.960524][ T5247] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.990465][ T5247] vhci_hcd vhci_hcd.0: Device attached [ 162.011159][ T5253] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(25) [ 162.017778][ T5253] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 162.031829][ T5253] vhci_hcd vhci_hcd.0: Device attached [ 162.084875][ T1346] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 162.093651][ T1346] usb 4-1: config 0 has no interface number 0 [ 162.100284][ T4247] usb 3-1: Using ep0 maxpacket: 32 [ 162.106290][ T5247] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 162.118219][ T13] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 162.138927][ T5253] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 162.152024][ T1346] usb 4-1: config 0 interface 184 has no altsetting 0 [ 162.171501][ T5273] device vlan2 entered promiscuous mode [ 162.180379][ T5247] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 162.205556][ T5273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.251'. [ 162.207542][ T5263] vhci_hcd: connection closed [ 162.214653][ T5268] vhci_hcd: connection closed [ 162.220760][ T5261] vhci_hcd: connection closed [ 162.220820][ T5257] vhci_hcd: connection closed [ 162.225503][ T4336] vhci_hcd: stop threads [ 162.225565][ T4336] vhci_hcd: release socket [ 162.232118][ T5254] vhci_hcd: connection closed [ 162.240943][ T4336] vhci_hcd: disconnect device [ 162.244782][ T5248] vhci_hcd: connection reset by peer [ 162.253535][ T4336] vhci_hcd: stop threads [ 162.271017][ T4336] vhci_hcd: release socket [ 162.275874][ T4336] vhci_hcd: disconnect device [ 162.281504][ T4336] vhci_hcd: stop threads [ 162.288062][ T4336] vhci_hcd: release socket [ 162.292654][ T4336] vhci_hcd: disconnect device [ 162.298125][ T4336] vhci_hcd: stop threads [ 162.302429][ T4336] vhci_hcd: release socket [ 162.307530][ T4336] vhci_hcd: disconnect device [ 162.312546][ T4336] vhci_hcd: stop threads [ 162.314736][ T4247] usb 3-1: unable to get BOS descriptor or descriptor too short [ 162.318132][ T4336] vhci_hcd: release socket [ 162.329770][ T4336] vhci_hcd: disconnect device [ 162.336383][ T4336] vhci_hcd: stop threads [ 162.340881][ T4336] vhci_hcd: release socket [ 162.345664][ T4336] vhci_hcd: disconnect device [ 162.381966][ T1346] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 162.396516][ T1346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.404514][ T1346] usb 4-1: Product: syz [ 162.408878][ T1346] usb 4-1: Manufacturer: syz [ 162.413493][ T1346] usb 4-1: SerialNumber: syz [ 162.421533][ T1346] usb 4-1: config 0 descriptor?? [ 162.426736][ T4247] usb 3-1: config 234 has an invalid interface number: 196 but max is 0 [ 162.435249][ T4247] usb 3-1: config 234 has no interface number 0 [ 162.441519][ T4247] usb 3-1: config 234 interface 196 has no altsetting 0 [ 162.489528][ T1346] smsc75xx v1.0.0 [ 163.414635][ T4247] usb 3-1: New USB device found, idVendor=182d, idProduct=021c, bcdDevice=68.47 [ 163.454455][ T4247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.458135][ T5293] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 163.475061][ T4247] usb 3-1: Product: syz [ 163.485053][ T4247] usb 3-1: Manufacturer: syz [ 163.489678][ T4247] usb 3-1: SerialNumber: syz [ 163.494828][ T1346] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 163.504220][ T5293] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 163.685338][ T1346] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 163.756524][ T5295] ax25_connect(): syz.5.253 uses autobind, please contact jreuter@yaina.de [ 163.819778][ T5301] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 164.236329][ T4247] sisusb 3-1:234.196: Invalid USB2VGA device [ 164.242402][ T4247] sisusb: probe of 3-1:234.196 failed with error -22 [ 164.291977][ T4247] usb 3-1: USB disconnect, device number 7 [ 164.354506][ T5310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.364888][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 164.625061][ T1346] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 164.646238][ T1346] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 164.677177][ T1346] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 164.713166][ T1346] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 164.759302][ T1346] usb 4-1: USB disconnect, device number 4 [ 164.786622][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.814706][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.839865][ T23] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 164.864805][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.882678][ T23] usb 2-1: config 0 descriptor?? [ 165.544014][ T5336] dlm: dev_write: no op 0 0 [ 166.031298][ T5352] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 166.476694][ T5352] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 167.254835][ T13] vhci_hcd: vhci_device speed not set [ 167.919970][ T5374] input: syz0 as /devices/virtual/input/input8 [ 168.594839][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 168.601029][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 168.636993][ T4188] [ 168.639359][ T4188] ====================================================== [ 168.646369][ T4188] WARNING: possible circular locking dependency detected [ 168.653417][ T4188] syzkaller #0 Not tainted [ 168.657825][ T4188] ------------------------------------------------------ [ 168.664831][ T4188] kworker/0:3/4188 is trying to acquire lock: [ 168.670892][ T4188] ffff8880798d8c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 168.681942][ T4188] [ 168.681942][ T4188] but task is already holding lock: [ 168.689311][ T4188] ffffffff8d4ba7e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 168.698360][ T4188] [ 168.698360][ T4188] which lock already depends on the new lock. [ 168.698360][ T4188] [ 168.708759][ T4188] [ 168.708759][ T4188] the existing dependency chain (in reverse order) is: [ 168.717767][ T4188] [ 168.717767][ T4188] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 168.725757][ T4188] __mutex_lock_common+0x1eb/0x2390 [ 168.731485][ T4188] mutex_lock_nested+0x17/0x20 [ 168.736790][ T4188] rfkill_register+0x33/0x8a0 [ 168.741987][ T4188] hci_register_dev+0x452/0x970 [ 168.747353][ T4188] vhci_create_device+0x32c/0x5c0 [ 168.752898][ T4188] vhci_write+0x391/0x450 [ 168.757748][ T4188] vfs_write+0x712/0xd00 [ 168.762503][ T4188] ksys_write+0x14d/0x250 [ 168.767349][ T4188] do_syscall_64+0x4c/0xa0 [ 168.772282][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.778709][ T4188] [ 168.778709][ T4188] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 168.786518][ T4188] __mutex_lock_common+0x1eb/0x2390 [ 168.792237][ T4188] mutex_lock_nested+0x17/0x20 [ 168.797518][ T4188] vhci_send_frame+0x88/0x100 [ 168.802713][ T4188] hci_send_frame+0x1a9/0x2e0 [ 168.807910][ T4188] hci_tx_work+0x9f9/0x1710 [ 168.812933][ T4188] process_one_work+0x863/0x1000 [ 168.818393][ T4188] worker_thread+0xaa8/0x12a0 [ 168.823605][ T4188] kthread+0x436/0x520 [ 168.828190][ T4188] ret_from_fork+0x1f/0x30 [ 168.833128][ T4188] [ 168.833128][ T4188] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 168.842328][ T4188] __flush_work+0xdd/0x1b0 [ 168.847264][ T4188] hci_dev_do_close+0x1e7/0x1030 [ 168.852721][ T4188] hci_error_reset+0x101/0x2c0 [ 168.858005][ T4188] process_one_work+0x863/0x1000 [ 168.863466][ T4188] worker_thread+0xaa8/0x12a0 [ 168.868666][ T4188] kthread+0x436/0x520 [ 168.873250][ T4188] ret_from_fork+0x1f/0x30 [ 168.878185][ T4188] [ 168.878185][ T4188] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 168.885821][ T4188] __mutex_lock_common+0x1eb/0x2390 [ 168.891538][ T4188] mutex_lock_nested+0x17/0x20 [ 168.896822][ T4188] bg_scan_update+0x44/0x3b0 [ 168.901938][ T4188] process_one_work+0x863/0x1000 [ 168.907405][ T4188] worker_thread+0xaa8/0x12a0 [ 168.912606][ T4188] kthread+0x436/0x520 [ 168.917194][ T4188] ret_from_fork+0x1f/0x30 [ 168.922133][ T4188] [ 168.922133][ T4188] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 168.931943][ T4188] __lock_acquire+0x2c33/0x7c60 [ 168.937328][ T4188] lock_acquire+0x197/0x3f0 [ 168.942355][ T4188] __flush_work+0xdd/0x1b0 [ 168.947308][ T4188] __cancel_work_timer+0x3ac/0x520 [ 168.952934][ T4188] hci_request_cancel_all+0xcc/0x300 [ 168.958735][ T4188] hci_dev_do_close+0x4e/0x1030 [ 168.964104][ T4188] hci_rfkill_set_block+0x10a/0x190 [ 168.969812][ T4188] rfkill_set_block+0x1c6/0x420 [ 168.975181][ T4188] rfkill_epo+0x75/0x170 [ 168.979937][ T4188] rfkill_op_handler+0x76/0x220 [ 168.985304][ T4188] process_one_work+0x863/0x1000 [ 168.990754][ T4188] worker_thread+0xaa8/0x12a0 [ 168.995945][ T4188] kthread+0x436/0x520 [ 169.000523][ T4188] ret_from_fork+0x1f/0x30 [ 169.005453][ T4188] [ 169.005453][ T4188] other info that might help us debug this: [ 169.005453][ T4188] [ 169.015667][ T4188] Chain exists of: [ 169.015667][ T4188] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 169.015667][ T4188] [ 169.031392][ T4188] Possible unsafe locking scenario: [ 169.031392][ T4188] [ 169.038833][ T4188] CPU0 CPU1 [ 169.044192][ T4188] ---- ---- [ 169.049547][ T4188] lock(rfkill_global_mutex); [ 169.054389][ T4188] lock(&data->open_mutex); [ 169.061489][ T4188] lock(rfkill_global_mutex); [ 169.068762][ T4188] lock((work_completion)(&hdev->bg_scan_update)); [ 169.075458][ T4188] [ 169.075458][ T4188] *** DEADLOCK *** [ 169.075458][ T4188] [ 169.083598][ T4188] 3 locks held by kworker/0:3/4188: [ 169.088788][ T4188] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 169.099143][ T4188] #1: ffffc90002f4fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 169.109487][ T4188] #2: ffffffff8d4ba7e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 169.118960][ T4188] [ 169.118960][ T4188] stack backtrace: [ 169.124836][ T4188] CPU: 0 PID: 4188 Comm: kworker/0:3 Not tainted syzkaller #0 [ 169.132284][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.142506][ T4188] Workqueue: events rfkill_op_handler [ 169.147891][ T4188] Call Trace: [ 169.151167][ T4188] [ 169.154091][ T4188] dump_stack_lvl+0x168/0x230 [ 169.158762][ T4188] ? load_image+0x3b0/0x3b0 [ 169.163267][ T4188] ? show_regs_print_info+0x20/0x20 [ 169.168458][ T4188] ? print_circular_bug+0x12b/0x1a0 [ 169.173647][ T4188] check_noncircular+0x274/0x310 [ 169.178579][ T4188] ? add_chain_block+0x940/0x940 [ 169.183521][ T4188] ? lockdep_lock+0xdc/0x1e0 [ 169.188106][ T4188] ? __lock_acquire+0x12d9/0x7c60 [ 169.193127][ T4188] ? lockdep_lock+0x1e0/0x1e0 [ 169.197812][ T4188] ? mark_lock+0x94/0x320 [ 169.202138][ T4188] __lock_acquire+0x2c33/0x7c60 [ 169.207007][ T4188] ? unwind_next_frame+0x1296/0x1d90 [ 169.212298][ T4188] ? verify_lock_unused+0x140/0x140 [ 169.217494][ T4188] ? ret_from_fork+0x1e/0x30 [ 169.222084][ T4188] lock_acquire+0x197/0x3f0 [ 169.226596][ T4188] ? __flush_work+0xc1/0x1b0 [ 169.231181][ T4188] ? __lock_acquire+0x7c60/0x7c60 [ 169.236203][ T4188] ? read_lock_is_recursive+0x10/0x10 [ 169.241570][ T4188] ? start_flush_work+0x776/0x820 [ 169.246587][ T4188] ? kasan_set_track+0x62/0x70 [ 169.251343][ T4188] __flush_work+0xdd/0x1b0 [ 169.255760][ T4188] ? __flush_work+0xc1/0x1b0 [ 169.260349][ T4188] ? flush_work+0x20/0x20 [ 169.264666][ T4188] ? try_to_grab_pending+0xf3/0x7e0 [ 169.269977][ T4188] ? lockdep_hardirqs_off+0x70/0x100 [ 169.275258][ T4188] ? mark_lock+0x94/0x320 [ 169.279583][ T4188] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 169.285668][ T4188] ? lock_chain_count+0x20/0x20 [ 169.290525][ T4188] ? lockdep_hardirqs_off+0x70/0x100 [ 169.295819][ T4188] ? mark_lock+0x94/0x320 [ 169.300149][ T4188] ? __cancel_work_timer+0x331/0x520 [ 169.305428][ T4188] __cancel_work_timer+0x3ac/0x520 [ 169.310535][ T4188] ? cancel_work_sync+0x20/0x20 [ 169.315377][ T4188] ? __cancel_work+0x1f4/0x2d0 [ 169.320133][ T4188] ? lockdep_hardirqs_on+0x94/0x140 [ 169.325415][ T4188] ? __cancel_work+0x26f/0x2d0 [ 169.330200][ T4188] ? cancel_work+0x20/0x20 [ 169.334634][ T4188] hci_request_cancel_all+0xcc/0x300 [ 169.339935][ T4188] hci_dev_do_close+0x4e/0x1030 [ 169.344796][ T4188] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 169.350685][ T4188] ? _raw_spin_unlock+0x40/0x40 [ 169.355532][ T4188] ? kobject_uevent_env+0x371/0x890 [ 169.360739][ T4188] hci_rfkill_set_block+0x10a/0x190 [ 169.365932][ T4188] ? rcu_lock_release+0x20/0x20 [ 169.370777][ T4188] rfkill_set_block+0x1c6/0x420 [ 169.375624][ T4188] rfkill_epo+0x75/0x170 [ 169.379855][ T4188] rfkill_op_handler+0x76/0x220 [ 169.384702][ T4188] process_one_work+0x863/0x1000 [ 169.389664][ T4188] ? worker_detach_from_pool+0x240/0x240 [ 169.395307][ T4188] ? lockdep_hardirqs_off+0x70/0x100 [ 169.400588][ T4188] ? _raw_spin_lock_irq+0xab/0xe0 [ 169.405603][ T4188] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 169.410972][ T4188] ? wq_worker_running+0x97/0x170 [ 169.415990][ T4188] worker_thread+0xaa8/0x12a0 [ 169.420834][ T4188] ? lockdep_hardirqs_on+0x94/0x140 [ 169.426042][ T4188] ? lockdep_hardirqs_on+0x94/0x140 [ 169.431248][ T4188] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 169.437138][ T4188] kthread+0x436/0x520 [ 169.441202][ T4188] ? rcu_lock_release+0x20/0x20 [ 169.446049][ T4188] ? kthread_blkcg+0xd0/0xd0 [ 169.450632][ T4188] ret_from_fork+0x1f/0x30 [ 169.455045][ T4188] [ 169.502289][ T23] usb 2-1: USB disconnect, device number 4