last executing test programs: 12.764145567s ago: executing program 1 (id=336): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000a80)={0x28, 0x0, 0x0, @host}, 0x10) 12.605502635s ago: executing program 1 (id=338): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r4, &(0x7f0000004540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000100), 0x40000c4, 0x7ffffff7) 11.35657008s ago: executing program 1 (id=342): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r2, 0x0) 11.254036251s ago: executing program 1 (id=345): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000300)='ipvlan1\x00', 0x10) ioctl$SIOCPNENABLEPIPE(r7, 0x89ed, 0x500) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)={0x24, r1, 0x801, 0x0, 0x0, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) 9.457218639s ago: executing program 1 (id=351): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) accept(r3, 0x0, 0x0) 9.412231094s ago: executing program 3 (id=353): socket$inet6_udp(0xa, 0x2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/fdt', 0x202, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.217571517s ago: executing program 3 (id=354): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c9"], 0x138) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 8.282608034s ago: executing program 3 (id=357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0xba770000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020600) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x40044160, 0x3) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 8.193634535s ago: executing program 0 (id=360): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) 8.100434245s ago: executing program 0 (id=362): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 6.766598599s ago: executing program 0 (id=364): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b03d25a806f8c6394f90424fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 6.15420825s ago: executing program 3 (id=365): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x2) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid(0x0, r2, 0x0, 0x40000000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setreuid(0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000000c80)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000000300)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)}}], 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) recvmmsg(r6, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:1'], 0x16) 5.987104199s ago: executing program 0 (id=367): prctl$PR_SET_KEEPCAPS(0x8, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 5.98413943s ago: executing program 1 (id=368): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001240), 0x10000, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000001280)=@req={0x33cf, 0x5, 0x0, 0x4}, 0x10) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000002340)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1807000000000000000000000000f4008510000002000000260000000000000085000000130500"/48], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x14, 0x52, 0x311}, 0x14}}, 0x0) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000002200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002280)=0x14) getsockname$packet(r3, &(0x7f00000022c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002300)=0x14) read(r1, 0x0, 0x3e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) accept4$x25(r7, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x1000007}}]}}, 0x0, 0x32, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0xa, @pix_mp}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r9, 0xa, &(0x7f0000002240)={0x4000000000000, 0x1}, &(0x7f00000021c0)) 5.813555989s ago: executing program 4 (id=369): syz_open_dev$loop(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a000000080003", @ANYRES32=r3, @ANYBLOB="13005b"], 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5.016945041s ago: executing program 3 (id=370): r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) 4.777676449s ago: executing program 0 (id=371): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x88}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x80, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 4.697542748s ago: executing program 3 (id=372): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385aa3", 0x4) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000005080)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="09de", 0x2}, {&(0x7f0000000680)="d5bb69fd2ec3a88c5df48b69469a", 0xe}], 0x2, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) 4.696346668s ago: executing program 4 (id=373): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4050000200080006110600000000000b70000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5c26838f2b9000f205891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fe5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a2ad3c249c95b7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = epoll_create1(0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0x6000001f}) read$char_usb(r6, 0x0, 0x0) epoll_pwait(r5, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1200000004000000040000000e00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000100000000000000000000000000000000000000000000000137deb486fd25207caba3a637d2f5d9bd408510d88f32e4240a4587a7adfaa58edce16879d745b0669aa775f806a1b91f743d10500001f678f32d0093d316e596fcbbd671b39210462278407bb23fe702fc91c8a8574f93ff34a8dd6fc7b7a5c8cd94bc8fff930e168171c450ec87fd7d63a349d71bca1ae"], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x6) socket$inet(0x2, 0x3, 0x7f) 4.665425602s ago: executing program 2 (id=374): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 4.553625665s ago: executing program 0 (id=375): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = io_uring_setup(0x4b8d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3.741173979s ago: executing program 2 (id=376): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x1b) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00'}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r7, 0x111, 0x3, 0x0, 0x4) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000300)="0a000000010001", 0x7) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0x4) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000040)=0x4, 0x4) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 3.546434192s ago: executing program 4 (id=377): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000300)='ipvlan1\x00', 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x275a, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)={0x24, r1, 0x801, 0x0, 0x0, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) 2.649708225s ago: executing program 4 (id=378): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) accept(r3, 0x0, 0x0) 2.479304885s ago: executing program 2 (id=379): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r0}) write(r4, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c}, 0x1c) listen(r5, 0x0) socket$key(0xf, 0x3, 0x2) 1.287877472s ago: executing program 2 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x1ff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x20002048) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000001580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x80) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.12904668s ago: executing program 4 (id=381): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x800}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xfffffffffffffffd}, {}, 0xf}}, 0xb8}, 0x1, 0x0, 0x0, 0x2001}, 0x0) 545.523338ms ago: executing program 4 (id=382): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x4, &(0x7f0000000180)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f00000002c0)='GPL\x00', 0x5, 0xcc, &(0x7f0000000440)=""/204, 0x41100, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x9, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[r1, 0xffffffffffffffff, r1, r1, r1], 0x0, 0x10, 0x1190, @void, @value}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$unix(0x1, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000240)="04000000000303", 0x7}], 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000040)='./file0\x00', 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r7, &(0x7f0000001a80)='./file0/../file0/file0\x00') renameat2(r7, &(0x7f00000000c0)='./file0\x00', r7, &(0x7f0000000100)='./file0/../file0/file0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 347.261051ms ago: executing program 2 (id=383): syz_open_dev$loop(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a000000080003", @ANYRES32=r3, @ANYBLOB="13005b"], 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 2 (id=384): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[], 0xfdef) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r5, &(0x7f0000004540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000100), 0x40000c4, 0x7ffffff7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.109' (ED25519) to the list of known hosts. [ 43.523379][ T4017] cgroup: Unknown subsys name 'net' [ 43.799959][ T4017] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 44.173226][ T4017] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 46.114596][ T4028] chnl_net:caif_netlink_parms(): no params data found [ 46.125287][ T4037] chnl_net:caif_netlink_parms(): no params data found [ 46.176185][ T4033] chnl_net:caif_netlink_parms(): no params data found [ 46.220269][ T4028] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.221927][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.224484][ T4028] device bridge_slave_0 entered promiscuous mode [ 46.236728][ T4038] chnl_net:caif_netlink_parms(): no params data found [ 46.245302][ T4028] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.246865][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.249021][ T4028] device bridge_slave_1 entered promiscuous mode [ 46.260457][ T4036] chnl_net:caif_netlink_parms(): no params data found [ 46.299379][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.301027][ T4037] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.303486][ T4037] device bridge_slave_0 entered promiscuous mode [ 46.320741][ T4028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.345876][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.347466][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.349812][ T4037] device bridge_slave_1 entered promiscuous mode [ 46.366731][ T4028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.374446][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.376026][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.378442][ T4033] device bridge_slave_0 entered promiscuous mode [ 46.391098][ T4037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.418606][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.420198][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.422368][ T4033] device bridge_slave_1 entered promiscuous mode [ 46.426396][ T4037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.443117][ T4028] team0: Port device team_slave_0 added [ 46.475641][ T4028] team0: Port device team_slave_1 added [ 46.477209][ T4038] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.478784][ T4038] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.481016][ T4038] device bridge_slave_0 entered promiscuous mode [ 46.495627][ T4036] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.497190][ T4036] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.499651][ T4036] device bridge_slave_0 entered promiscuous mode [ 46.509140][ T4038] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.510836][ T4038] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.513355][ T4038] device bridge_slave_1 entered promiscuous mode [ 46.517287][ T4033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.521350][ T4037] team0: Port device team_slave_0 added [ 46.525456][ T4037] team0: Port device team_slave_1 added [ 46.532835][ T4036] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.534375][ T4036] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.536982][ T4036] device bridge_slave_1 entered promiscuous mode [ 46.546540][ T4033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.556494][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.557959][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.564186][ T4028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.598100][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.599568][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.605172][ T4037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.608592][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.610167][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.616075][ T4028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.620329][ T4038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.624372][ T4036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.627696][ T4038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.638134][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.639789][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.646155][ T4037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.653977][ T4036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.668798][ T4033] team0: Port device team_slave_0 added [ 46.695873][ T4038] team0: Port device team_slave_0 added [ 46.700455][ T4038] team0: Port device team_slave_1 added [ 46.703648][ T4033] team0: Port device team_slave_1 added [ 46.725454][ T4036] team0: Port device team_slave_0 added [ 46.805107][ T4037] device hsr_slave_0 entered promiscuous mode [ 46.853198][ T4037] device hsr_slave_1 entered promiscuous mode [ 46.894211][ T4036] team0: Port device team_slave_1 added [ 46.902431][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.904160][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.909657][ T4033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.932926][ T4038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.934576][ T4038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.940030][ T4038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.943828][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.945287][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.950759][ T4033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.984807][ T4028] device hsr_slave_0 entered promiscuous mode [ 47.043161][ T4028] device hsr_slave_1 entered promiscuous mode [ 47.083012][ T4028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.085010][ T4028] Cannot create hsr debugfs directory [ 47.092171][ T4038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.093897][ T4038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.099524][ T4038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.109609][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.111030][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.116411][ T4036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.134059][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.135597][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.141051][ T4036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.264993][ T4038] device hsr_slave_0 entered promiscuous mode [ 47.303107][ T4038] device hsr_slave_1 entered promiscuous mode [ 47.353010][ T4038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.354652][ T4038] Cannot create hsr debugfs directory [ 47.415891][ T4033] device hsr_slave_0 entered promiscuous mode [ 47.453324][ T4033] device hsr_slave_1 entered promiscuous mode [ 47.492841][ T4033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.494356][ T4033] Cannot create hsr debugfs directory [ 47.564832][ T4036] device hsr_slave_0 entered promiscuous mode [ 47.603219][ T4036] device hsr_slave_1 entered promiscuous mode [ 47.652981][ T4036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.654646][ T4036] Cannot create hsr debugfs directory [ 47.773258][ T3604] Bluetooth: hci0: command 0x0409 tx timeout [ 47.850991][ T4037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.852898][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 47.853112][ T4019] Bluetooth: hci3: command 0x0409 tx timeout [ 47.860701][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 47.895012][ T4037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.932988][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 47.939972][ T4037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.987640][ T4037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.076276][ T4028] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 48.100743][ T4028] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.155631][ T4028] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.205784][ T4028] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 48.269246][ T4038] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.305432][ T4038] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.385698][ T4038] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.450246][ T4038] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.511918][ T4037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.519804][ T4033] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.555104][ T4033] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.610802][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.614318][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.622426][ T4033] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.680649][ T4033] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.717463][ T4037] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.751927][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.755247][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.757594][ T1377] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.759311][ T1377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.761855][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.770175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.772352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.775174][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.776695][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.788157][ T4036] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.808893][ T4036] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.856394][ T4036] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.905378][ T4036] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.968742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.984831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.987439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.989990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.009725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.019726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.022303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.040598][ T4038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.054255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.056537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.070123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.072433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.080786][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.099223][ T4028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.111080][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.113777][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.132277][ T4038] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.160874][ T4028] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.164788][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.166920][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.169039][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.171706][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.182477][ T1377] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.184092][ T1377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.187919][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.218533][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.236048][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.238319][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.240405][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.241956][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.247229][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.249725][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.251910][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.253559][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.256402][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.258796][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.262455][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.272106][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.274777][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.276920][ T584] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.278380][ T584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.287474][ T4036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.291185][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.294336][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.297218][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.300884][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.307722][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.326495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.328910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.330522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.332215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.334886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.339982][ T4037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.344388][ T4033] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.352335][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.356026][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.358244][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.368737][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.371694][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.375890][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.388733][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.390749][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.392661][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.396479][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.398722][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.400970][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.403671][ T1377] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.405239][ T1377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.407114][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.409336][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.411617][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.416703][ T4036] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.423960][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.428732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.430988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.433464][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.435031][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.446798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.449358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.451571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.456831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.459083][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.460668][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.467403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.474323][ T4028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.477081][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.481973][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.484407][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.498642][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.500867][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.506920][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.521889][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.531243][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.533710][ T4085] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.535229][ T4085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.542580][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.559257][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.561796][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.571172][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.573555][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.576650][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.579175][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.581393][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.584648][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.586609][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.590854][ T4037] device veth0_vlan entered promiscuous mode [ 49.599774][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.601412][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.611430][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.614636][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.626603][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.628813][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.631044][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.635227][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.637607][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.655654][ T4038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.659622][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.661921][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.666556][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.668742][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.674271][ T4037] device veth1_vlan entered promiscuous mode [ 49.684594][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.686931][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.689036][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.691336][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.699588][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.701291][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.709050][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.715635][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.717965][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.726823][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.732213][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.735005][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.756797][ T4028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.778102][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.780779][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.811993][ T4037] device veth0_macvtap entered promiscuous mode [ 49.819862][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.822177][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.825033][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.834361][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.837364][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.845199][ T4037] device veth1_macvtap entered promiscuous mode [ 49.848328][ T4038] device veth0_vlan entered promiscuous mode [ 49.853697][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 49.885480][ T4038] device veth1_vlan entered promiscuous mode [ 49.896457][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.915647][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.917877][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.919975][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.921968][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.929866][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.933472][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 49.934977][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 49.936289][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 49.942340][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.951167][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.954494][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.975046][ T4037] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.976850][ T4037] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.978664][ T4037] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.980457][ T4037] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.987244][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.989527][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.991873][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.994486][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.006524][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.013377][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 50.019615][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.022018][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.050960][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.053492][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.057764][ T4038] device veth0_macvtap entered promiscuous mode [ 50.062163][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.065762][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.068043][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.070586][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.073352][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.078498][ T4038] device veth1_macvtap entered promiscuous mode [ 50.088793][ T4036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.092420][ T4028] device veth0_vlan entered promiscuous mode [ 50.116234][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.118360][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.120663][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.138823][ T4028] device veth1_vlan entered promiscuous mode [ 50.163631][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.165735][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.167758][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.169952][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.172254][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.176567][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.178888][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.181103][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.186720][ T4038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.196880][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.199084][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.203783][ T4033] device veth0_vlan entered promiscuous mode [ 50.219144][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.221519][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.225867][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.228114][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.232509][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.235819][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.238871][ T4038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.252424][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.255300][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.264559][ T4038] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.266410][ T4038] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.268332][ T4038] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.270061][ T4038] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.276230][ T4028] device veth0_macvtap entered promiscuous mode [ 50.285632][ T4028] device veth1_macvtap entered promiscuous mode [ 50.300377][ T584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.300850][ T4033] device veth1_vlan entered promiscuous mode [ 50.302342][ T584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.314632][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.316793][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.318876][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.321059][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.324144][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.326128][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.349467][ T4036] device veth0_vlan entered promiscuous mode [ 50.374967][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.377167][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.379193][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.381189][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.385277][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.397651][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.399434][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.400090][ T4036] device veth1_vlan entered promiscuous mode [ 50.404855][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.406994][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.409272][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.411378][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.436144][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.438193][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.440156][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.442372][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.447464][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.469757][ T4028] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.471733][ T4028] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.473792][ T4028] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.475646][ T4028] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.482347][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.484591][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.486797][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.499818][ T1377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.501629][ T1377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.547638][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.549864][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.552156][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.579313][ T4033] device veth0_macvtap entered promiscuous mode [ 50.631163][ T302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.650479][ T584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.652371][ T584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.654534][ T1377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.656232][ T1377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.663277][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.665516][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.675618][ T302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.678712][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.695056][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.792162][ T4033] device veth1_macvtap entered promiscuous mode [ 50.838338][ T4109] loop4: detected capacity change from 0 to 1024 [ 51.701088][ T4109] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 51.705006][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.707212][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.709369][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.712535][ T4036] device veth0_macvtap entered promiscuous mode [ 51.720102][ T4109] UDF-fs: error (device loop4): udf_read_inode: (ino 832) failed !bh [ 51.721982][ T4109] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=48, partition=0 [ 51.761398][ T4036] device veth1_macvtap entered promiscuous mode [ 51.816022][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.818217][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.820262][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.822465][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.825656][ T4116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 51.840333][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.854174][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.858104][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.862524][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.866533][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.869760][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.872206][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.875242][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.877400][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.880728][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.893316][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.933375][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 52.013194][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 52.016245][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 52.018536][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 52.058078][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.093190][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 52.186619][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.246554][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.325556][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.665798][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.667989][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.670007][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.672195][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.690946][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.693517][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.696178][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.698400][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.706807][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.737277][ T4033] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.739135][ T4033] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.742057][ T4033] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.753138][ T4033] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.762639][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.767596][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.790246][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.792489][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.799016][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.801125][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.811557][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.819270][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.821339][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.838874][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.842488][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.863943][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.866246][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.898165][ T4036] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.900030][ T4036] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.902009][ T4036] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.935944][ T4036] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.572685][ C1] sched: RT throttling activated [ 54.584737][ T4071] Bluetooth: hci0: command 0x0419 tx timeout [ 54.586121][ T4071] Bluetooth: hci1: command 0x0419 tx timeout [ 54.749323][ T4071] Bluetooth: hci3: command 0x0419 tx timeout [ 54.750697][ T4071] Bluetooth: hci2: command 0x0419 tx timeout [ 54.751986][ T4071] Bluetooth: hci4: command 0x0419 tx timeout [ 54.757403][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.776953][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.781325][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.991321][ T4111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.010181][ T4111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.183077][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.233915][ T4153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.235659][ T4153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.259750][ T4111] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.292123][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.311317][ T4160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18'. [ 57.323289][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.326076][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.384798][ T4165] input: syz0 as /devices/virtual/input/input2 [ 60.569075][ T4200] netlink: 20 bytes leftover after parsing attributes in process `syz.4.29'. [ 63.123913][ T4223] loop2: detected capacity change from 0 to 8 [ 63.581280][ T4233] loop2: detected capacity change from 0 to 1024 [ 65.698778][ T4221] loop1: detected capacity change from 0 to 32768 [ 65.946950][ T4221] ======================================================= [ 65.946950][ T4221] WARNING: The mand mount option has been deprecated and [ 65.946950][ T4221] and is ignored by this kernel. Remove the mand [ 65.946950][ T4221] option from the mount to silence this warning. [ 65.946950][ T4221] ======================================================= [ 65.986021][ T4253] loop3: detected capacity change from 0 to 128 [ 65.993599][ T4254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.41'. [ 66.380040][ T4259] loop2: detected capacity change from 0 to 64 [ 68.768930][ T4221] (syz.1.35,4221,1):ocfs2_initialize_super:2310 ERROR: status = -12 [ 68.781077][ T4221] (syz.1.35,4221,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 70.778449][ T1959] cfg80211: failed to load regulatory.db [ 70.818429][ T4270] udc-core: couldn't find an available UDC or it's busy [ 70.820070][ T4270] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 70.921440][ T4141] udevd[4141]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 70.988761][ T4287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.57'. [ 71.124213][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.125755][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.227666][ T4291] udevd[4291]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 72.609638][ T4321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.70'. [ 75.737545][ T4366] netlink: 'syz.4.81': attribute type 29 has an invalid length. [ 79.155627][ T4398] udc-core: couldn't find an available UDC or it's busy [ 79.157221][ T4398] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 79.175594][ T4400] bridge0: port 3(syz_tun) entered blocking state [ 79.177071][ T4400] bridge0: port 3(syz_tun) entered disabled state [ 79.180946][ T4400] device syz_tun entered promiscuous mode [ 79.182741][ T4400] bridge0: port 3(syz_tun) entered blocking state [ 79.184407][ T4400] bridge0: port 3(syz_tun) entered forwarding state [ 80.436870][ T4420] openvswitch: netlink: Flow key attr not present in new flow. [ 82.983685][ T4453] udc-core: couldn't find an available UDC or it's busy [ 82.985127][ T4453] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 84.243199][ T4467] udc-core: couldn't find an available UDC or it's busy [ 84.263992][ T4467] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 87.816893][ T4492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.126'. [ 88.143386][ T4498] udc-core: couldn't find an available UDC or it's busy [ 88.144925][ T4498] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 89.792144][ T4517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.136'. [ 90.334703][ T4019] Bluetooth: hci5: command 0xfc11 tx timeout [ 90.517145][ T4517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.136'. [ 90.576521][ T144] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 91.964635][ T4528] netlink: 20 bytes leftover after parsing attributes in process `syz.3.138'. [ 92.162915][ T4538] netlink: 'syz.2.143': attribute type 10 has an invalid length. [ 92.171492][ T4538] netlink: 156 bytes leftover after parsing attributes in process `syz.2.143'. [ 94.715869][ T4578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.155'. [ 95.221062][ T26] audit: type=1326 audit(95.190:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7959f28 code=0x7ffc0000 [ 95.228953][ T26] audit: type=1326 audit(95.200:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb7959f28 code=0x7ffc0000 [ 95.507471][ T26] audit: type=1326 audit(95.200:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7959f28 code=0x7ffc0000 [ 96.067329][ T26] audit: type=1326 audit(96.040:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffffb7959f28 code=0x7ffc0000 [ 96.071755][ T26] audit: type=1326 audit(96.040:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7959f28 code=0x7ffc0000 [ 96.156936][ T26] audit: type=1326 audit(96.040:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7959f28 code=0x7ffc0000 [ 96.167371][ T26] audit: type=1326 audit(96.050:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffffb7959f28 code=0x7ffc0000 [ 96.220565][ T4585] mmap: syz.1.159 (4585) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 96.252188][ T26] audit: type=1326 audit(96.050:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7959f28 code=0x7ffc0000 [ 96.277205][ T26] audit: type=1326 audit(96.050:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7959f28 code=0x7ffc0000 [ 96.305530][ T26] audit: type=1326 audit(96.070:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffb7959f28 code=0x7ffc0000 [ 107.643024][ T4687] netlink: 'syz.2.190': attribute type 11 has an invalid length. [ 110.124602][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 110.221330][ T4718] udc-core: couldn't find an available UDC or it's busy [ 110.235324][ T4718] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 118.026587][ T4787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'. [ 119.883318][ T4801] udc-core: couldn't find an available UDC or it's busy [ 119.915358][ T4801] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 121.888175][ T4817] udc-core: couldn't find an available UDC or it's busy [ 121.895037][ T4817] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 121.978469][ T4819] IPv6: sit1: Disabled Multicast RS [ 123.178207][ T4833] udc-core: couldn't find an available UDC or it's busy [ 123.179843][ T4833] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 125.520628][ T4849] udc-core: couldn't find an available UDC or it's busy [ 125.520667][ T4849] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 127.038927][ T4072] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.093674][ T4072] usb 1-1: Using ep0 maxpacket: 32 [ 129.478461][ T4879] hub 2-0:1.0: USB hub found [ 129.482250][ T4879] hub 2-0:1.0: 8 ports detected [ 129.513381][ T4072] usb 1-1: device descriptor read/all, error -71 [ 132.645643][ T4916] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 136.677066][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.678487][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.715442][ T4944] netlink: 6 bytes leftover after parsing attributes in process `syz.0.267'. [ 136.721199][ T4945] netlink: 6 bytes leftover after parsing attributes in process `syz.3.268'. [ 139.385793][ T4986] Zero length message leads to an empty skb [ 140.455693][ T5002] udc-core: couldn't find an available UDC or it's busy [ 140.457173][ T5002] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 146.123569][ T5054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.301'. [ 152.011799][ T5101] tipc: Started in network mode [ 152.013137][ T5101] tipc: Node identity 9e61a8566223, cluster identity 4711 [ 152.014722][ T5101] tipc: Enabled bearer , priority 0 [ 152.017036][ T5101] ªªªªªª: renamed from syzkaller0 [ 153.723699][ T5101] tipc: Disabling bearer [ 153.892470][ T4072] tipc: Node number set to 4232226902 [ 154.865476][ T5144] udc-core: couldn't find an available UDC or it's busy [ 154.867070][ T5144] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 154.881026][ T5142] netlink: 'syz.1.332': attribute type 39 has an invalid length. [ 154.886607][ T5142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 154.898847][ T5142] bridge0: port 3(syz_tun) entered disabled state [ 154.900959][ T5142] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.903281][ T5142] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.310993][ T5178] netlink: 'syz.0.344': attribute type 72 has an invalid length. [ 157.313545][ T5178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.344'. [ 160.087397][ T4589] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 160.089135][ T4589] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 160.090584][ T4589] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 160.092101][ T4589] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 160.126734][ T4589] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 160.128221][ T4589] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 160.129765][ T4589] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 160.131270][ T4589] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 160.164931][ T4589] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 160.172275][ T4589] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 160.194955][ T4589] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 160.196530][ T4589] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 160.197979][ T4589] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 160.199457][ T4589] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 160.224080][ T4589] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 160.230056][ T5212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.356'. [ 162.485423][ T5233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.363'. [ 163.784891][ T5255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.369'. [ 168.261208][ T5304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.383'. [ 168.614094][ T5305] [ 168.614708][ T5305] ====================================================== [ 168.616282][ T5305] WARNING: possible circular locking dependency detected [ 168.617882][ T5305] 5.15.169-syzkaller #0 Not tainted [ 168.618893][ T5305] ------------------------------------------------------ [ 168.620331][ T5305] syz.4.382/5305 is trying to acquire lock: [ 168.621568][ T5305] ffff0000c8b64c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 168.624017][ T5305] [ 168.624017][ T5305] but task is already holding lock: [ 168.625569][ T5305] ffff800016e66da8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 168.627593][ T5305] [ 168.627593][ T5305] which lock already depends on the new lock. [ 168.627593][ T5305] [ 168.629866][ T5305] [ 168.629866][ T5305] the existing dependency chain (in reverse order) is: [ 168.631748][ T5305] [ 168.631748][ T5305] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 168.633363][ T5305] __mutex_lock_common+0x194/0x2154 [ 168.634560][ T5305] mutex_lock_nested+0xa4/0xf8 [ 168.635596][ T5305] rfkill_register+0x44/0x7a4 [ 168.636642][ T5305] hci_register_dev+0x3e0/0x880 [ 168.637776][ T5305] vhci_create_device+0x2c4/0x568 [ 168.638850][ T5305] vhci_write+0x318/0x3b8 [ 168.639908][ T5305] vfs_write+0x884/0xb44 [ 168.640799][ T5305] ksys_write+0x15c/0x26c [ 168.641866][ T5305] __arm64_sys_write+0x7c/0x90 [ 168.643009][ T5305] invoke_syscall+0x98/0x2b8 [ 168.644002][ T5305] el0_svc_common+0x138/0x258 [ 168.645179][ T5305] do_el0_svc+0x58/0x14c [ 168.646220][ T5305] el0_svc+0x7c/0x1f0 [ 168.647150][ T5305] el0t_64_sync_handler+0x84/0xe4 [ 168.648240][ T5305] el0t_64_sync+0x1a0/0x1a4 [ 168.649224][ T5305] [ 168.649224][ T5305] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 168.650757][ T5305] __mutex_lock_common+0x194/0x2154 [ 168.651878][ T5305] mutex_lock_nested+0xa4/0xf8 [ 168.652975][ T5305] vhci_send_frame+0x8c/0x10c [ 168.654121][ T5305] hci_send_frame+0x194/0x2f0 [ 168.655296][ T5305] hci_tx_work+0x9ac/0x16cc [ 168.656324][ T5305] process_one_work+0x790/0x11b8 [ 168.657448][ T5305] worker_thread+0x910/0x1034 [ 168.658482][ T5305] kthread+0x37c/0x45c [ 168.659422][ T5305] ret_from_fork+0x10/0x20 [ 168.660594][ T5305] [ 168.660594][ T5305] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 168.662567][ T5305] __flush_work+0xf8/0x1c0 [ 168.663539][ T5305] flush_work+0x24/0x38 [ 168.664511][ T5305] hci_dev_do_close+0x16c/0x1060 [ 168.665717][ T5305] hci_dev_close+0xc8/0x1b8 [ 168.666727][ T5305] hci_sock_ioctl+0x418/0x83c [ 168.667761][ T5305] sock_do_ioctl+0x134/0x2dc [ 168.668843][ T5305] sock_ioctl+0x4f0/0x8ac [ 168.669828][ T5305] __arm64_sys_ioctl+0x14c/0x1c8 [ 168.670916][ T5305] invoke_syscall+0x98/0x2b8 [ 168.671901][ T5305] el0_svc_common+0x138/0x258 [ 168.672915][ T5305] do_el0_svc+0x58/0x14c [ 168.673992][ T5305] el0_svc+0x7c/0x1f0 [ 168.675018][ T5305] el0t_64_sync_handler+0x84/0xe4 [ 168.676105][ T5305] el0t_64_sync+0x1a0/0x1a4 [ 168.677099][ T5305] [ 168.677099][ T5305] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 168.678785][ T5305] __mutex_lock_common+0x194/0x2154 [ 168.680009][ T5305] mutex_lock_nested+0xa4/0xf8 [ 168.681167][ T5305] bg_scan_update+0x9c/0x470 [ 168.682233][ T5305] process_one_work+0x790/0x11b8 [ 168.683382][ T5305] worker_thread+0x910/0x1034 [ 168.684477][ T5305] kthread+0x37c/0x45c [ 168.685414][ T5305] ret_from_fork+0x10/0x20 [ 168.686350][ T5305] [ 168.686350][ T5305] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 168.688398][ T5305] __lock_acquire+0x32d4/0x7638 [ 168.689529][ T5305] lock_acquire+0x240/0x77c [ 168.690556][ T5305] __flush_work+0xf8/0x1c0 [ 168.691520][ T5305] __cancel_work_timer+0x3ec/0x548 [ 168.692593][ T5305] cancel_work_sync+0x24/0x38 [ 168.693703][ T5305] hci_request_cancel_all+0xcc/0x2d0 [ 168.694958][ T5305] hci_dev_do_close+0x54/0x1060 [ 168.696069][ T5305] hci_rfkill_set_block+0xdc/0x1d0 [ 168.697229][ T5305] rfkill_set_block+0x18c/0x37c [ 168.698296][ T5305] rfkill_fop_write+0x594/0x750 [ 168.699292][ T5305] do_iter_write+0x33c/0x66c [ 168.700373][ T5305] do_writev+0x220/0x3ec [ 168.701432][ T5305] __arm64_sys_writev+0x80/0x94 [ 168.702501][ T5305] invoke_syscall+0x98/0x2b8 [ 168.703522][ T5305] el0_svc_common+0x138/0x258 [ 168.704620][ T5305] do_el0_svc+0x58/0x14c [ 168.705610][ T5305] el0_svc+0x7c/0x1f0 [ 168.706503][ T5305] el0t_64_sync_handler+0x84/0xe4 [ 168.707683][ T5305] el0t_64_sync+0x1a0/0x1a4 [ 168.708641][ T5305] [ 168.708641][ T5305] other info that might help us debug this: [ 168.708641][ T5305] [ 168.710649][ T5305] Chain exists of: [ 168.710649][ T5305] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 168.710649][ T5305] [ 168.713982][ T5305] Possible unsafe locking scenario: [ 168.713982][ T5305] [ 168.715472][ T5305] CPU0 CPU1 [ 168.716487][ T5305] ---- ---- [ 168.717549][ T5305] lock(rfkill_global_mutex); [ 168.718553][ T5305] lock(&data->open_mutex); [ 168.719992][ T5305] lock(rfkill_global_mutex); [ 168.721478][ T5305] lock((work_completion)(&hdev->bg_scan_update)); [ 168.722798][ T5305] [ 168.722798][ T5305] *** DEADLOCK *** [ 168.722798][ T5305] [ 168.724657][ T5305] 1 lock held by syz.4.382/5305: [ 168.725772][ T5305] #0: ffff800016e66da8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 168.727936][ T5305] [ 168.727936][ T5305] stack backtrace: [ 168.729056][ T5305] CPU: 1 PID: 5305 Comm: syz.4.382 Not tainted 5.15.169-syzkaller #0 [ 168.730724][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 168.732845][ T5305] Call trace: [ 168.733569][ T5305] dump_backtrace+0x0/0x530 [ 168.734578][ T5305] show_stack+0x2c/0x3c [ 168.735426][ T5305] dump_stack_lvl+0x108/0x170 [ 168.736328][ T5305] dump_stack+0x1c/0x58 [ 168.737276][ T5305] print_circular_bug+0x150/0x1b8 [ 168.738312][ T5305] check_noncircular+0x2cc/0x378 [ 168.739327][ T5305] __lock_acquire+0x32d4/0x7638 [ 168.740325][ T5305] lock_acquire+0x240/0x77c [ 168.741285][ T5305] __flush_work+0xf8/0x1c0 [ 168.742255][ T5305] __cancel_work_timer+0x3ec/0x548 [ 168.743366][ T5305] cancel_work_sync+0x24/0x38 [ 168.744393][ T5305] hci_request_cancel_all+0xcc/0x2d0 [ 168.745473][ T5305] hci_dev_do_close+0x54/0x1060 [ 168.746621][ T5305] hci_rfkill_set_block+0xdc/0x1d0 [ 168.747845][ T5305] rfkill_set_block+0x18c/0x37c [ 168.748761][ T5305] rfkill_fop_write+0x594/0x750 [ 168.749820][ T5305] do_iter_write+0x33c/0x66c [ 168.750873][ T5305] do_writev+0x220/0x3ec [ 168.751859][ T5305] __arm64_sys_writev+0x80/0x94 [ 168.752893][ T5305] invoke_syscall+0x98/0x2b8 [ 168.753883][ T5305] el0_svc_common+0x138/0x258 [ 168.754815][ T5305] do_el0_svc+0x58/0x14c [ 168.755666][ T5305] el0_svc+0x7c/0x1f0 [ 168.756495][ T5305] el0t_64_sync_handler+0x84/0xe4 [ 168.757576][ T5305] el0t_64_sync+0x1a0/0x1a4 [ 169.321346][ T4072] Bluetooth: hci3: command 0x0406 tx timeout [ 169.326978][ T4072] Bluetooth: hci2: command 0x0406 tx timeout