last executing test programs: 1m0.152630011s ago: executing program 4 (id=57): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0x8, 0x6, 0x4, 0xe000, 0x0, {}, {0x3, 0xc, 0xf3, 0x71, 0xcd, 0xf, "baa37df3"}, 0x7fffffff, 0x4, {}, 0x300000, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000a92000/0x3000)=nil, 0x3000, 0x0, 0x10010, r1, 0x9fc34000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) 54.528213908s ago: executing program 4 (id=66): socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x44804) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 51.641681191s ago: executing program 4 (id=71): socket(0xa, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = timerfd_create(0x0, 0x80000) timerfd_settime(r5, 0x3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000580)={0x8003ff, 0x7, 0x23e654d4, 0xa, 0x1000, 0x0, 0x0, 0x0, 0x200, 0x100, 0x0, 0xfffffdfffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x6, 0x0, 0x3}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r6, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d10, 0x0) recvfrom(r8, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000001680)) 42.307253996s ago: executing program 4 (id=90): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000ac0)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) 42.025444983s ago: executing program 4 (id=92): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') 41.846765312s ago: executing program 4 (id=93): socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f00000000c0)={0x73, @empty, 0x4e23, 0x0, 'lc\x00', 0x0, 0x5, 0x9}, 0x2c) 35.778291274s ago: executing program 2 (id=112): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)={0x3, {{0xa, 0x4e22, 0xc, @mcast1, 0x408}}, 0x1}, 0x90) 35.657323901s ago: executing program 2 (id=113): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioprio_get$uid(0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5}) write$bt_hci(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRESDEC], 0xb) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000100)=0x1) bind$packet(0xffffffffffffffff, 0x0, 0x0) 35.214546266s ago: executing program 2 (id=114): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0205647, &(0x7f0000000940)={0xf010000, @pix={0xa2d5, 0x9, 0x41495043, 0x5, 0xd, 0x80, 0x5, 0x8, 0x1, 0x1, 0x0, 0x2}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2710}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x90009427, &(0x7f0000000040)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000080)={0x3ff, 0x7, 0x100000, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 34.477260048s ago: executing program 2 (id=116): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x20, 0x0, r1}) 33.779753007s ago: executing program 2 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') 33.434442437s ago: executing program 2 (id=121): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x8d4ac000) r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) close(r0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x101, 0x0) 26.764223202s ago: executing program 32 (id=93): socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f00000000c0)={0x73, @empty, 0x4e23, 0x0, 'lc\x00', 0x0, 0x5, 0x9}, 0x2c) 16.577038666s ago: executing program 33 (id=121): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x8d4ac000) r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) close(r0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x101, 0x0) 13.154186349s ago: executing program 1 (id=184): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 12.685823875s ago: executing program 1 (id=187): socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video(0x0, 0x7, 0x40440) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x800, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xffffbff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') readv(r6, 0x0, 0x0) 11.774343417s ago: executing program 1 (id=188): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r3, &(0x7f0000001600)=""/4073, 0xfe9, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) socket(0x10, 0x803, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, 0x0, 0xfe61) 10.800230532s ago: executing program 1 (id=191): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x9, 0x12) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) splice(r5, 0x0, r8, 0x0, 0x25a5, 0x0) 9.528967793s ago: executing program 1 (id=193): syz_usb_connect(0x0, 0x51, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0) 6.251556988s ago: executing program 3 (id=199): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r3, &(0x7f0000001600)=""/4073, 0xfe9, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) socket(0x10, 0x803, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, 0x0, 0xfe61) 6.232149999s ago: executing program 5 (id=145): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0x8, 0x6, 0x4, 0xe000, 0x0, {}, {0x3, 0xc, 0xf3, 0x71, 0xcd, 0xf, "baa37df3"}, 0x7fffffff, 0x4, {}, 0x300000, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000a92000/0x3000)=nil, 0x3000, 0x0, 0x10010, r1, 0x9fc34000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, 0x0, 0x0) 5.271101103s ago: executing program 3 (id=200): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000009c0)="ed1436f9", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)="cc5a4dbac0ae0010000000000000d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f000600c9adf83738838bf00e6ff4f19aa78c555a7459de1f4c809aaa420500bc0c561521fa8c58875d916a4dccd28a4b4834e761a1e984f9afd1b700"/177, 0xb1}, {&(0x7f0000000a80)="ddad5578b806b57a1fb3db45b94f400f90cfe65af411a009366a96e6afb01c69a0f5eb21d27b0fc3767336311d4a890c48b4999ded7966d6cae5d010df2f961ed7bb0ecb5d355dc645ca55b9c8e91b4d84fbef2e22f3d42e3750c660798859338d2914db8a729fd710f97aea17edd0674bd72d8485c2f98feb726871d1bda7b2e1c6bed7f4a8d6acba440c41bf4953c12639b62c6acfdc58ce57254cbfa234c3e0f4219c97e1781dd21066a6c19bc79911831c41d6fcc0aa66ce3d6a58485052254608dd4f0323358fee252f88ec3b08dcf96de48012df9b5d8d98977b44", 0xde}, {&(0x7f0000000140)="654f25cb7f6059bc6d1fe973dcbf256511f27ea9d285bdba36f54af70215ed7643aa83528a8d20ae94b3936ab028bb287436649e45c8acd9994548258bb8786b8224f55b8fb0a0f8388f73306726f2dacb80", 0x52}, {&(0x7f00000004c0)="d1fb36180cdc531e24bb92c1e7eb236511eef6078c9f99fb79df8d104a064295a38728866bbd53ff4e8f3c2d58e72c496a298e928d7e657a91da8b1ab56a7eed769f8f6ecf8bca8aeecda12b365f1279891112ceb06d7e870638151f6d4483bbb66853f1651b93fe7a90e1402303cc9fab9135da9a22d4c8e21bbf1eb8f0c0b62929e2c9", 0x84}, {&(0x7f0000000640)="44ad9575ab50841bc63827ce482dd286d74a1991e8e36c12404e9586197941a12f6928acb5494c9cc5f9d238d60dc861dfbb025bed4c40f86d", 0x39}, {&(0x7f0000000700)="31e0f14284589e79d7caf85bb3ea9a9cef63752ab692f53f0bc85e5657845abec194019a36c52e653e7c463e051790baaf92c47fe81765dd3ce3ed718e1bd3ffbe3fcb998cf75e002bb89300f5eb7a596fa181495a6e62865a4152443b18c0eab596cee12e63f7e747746bd655e19b801c84ff5697f9fc566eae209c39c7d0742729a85ca2213df359868db2053f9cc3981f24b35217ff8847d0860513015ef51c5a82", 0xa3}], 0x6}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.132908391s ago: executing program 5 (id=202): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r2, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 5.088242284s ago: executing program 3 (id=203): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xffffffff, 0x0, 0x3a5f, 0x8}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x560a, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0xee01, 0x0) 4.748876642s ago: executing program 3 (id=205): socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x800, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xffffbff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') readv(r7, 0x0, 0x0) 3.7290461s ago: executing program 5 (id=206): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.72828114s ago: executing program 0 (id=215): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) preadv(r2, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 3.72790264s ago: executing program 3 (id=207): socketpair$unix(0x1, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}) r0 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_STAT(r0, 0x2, 0x0) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001b80)=""/79) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x100, 0x0, 0x4, 0x7, 0x80000a15, 0x0, 0x0, 0x4, 0x6}}, 0x50) 2.080636453s ago: executing program 5 (id=208): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) ioprio_get$uid(0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) write$bt_hci(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRESDEC], 0xb) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1) bind$packet(0xffffffffffffffff, 0x0, 0x0) 2.068176034s ago: executing program 0 (id=209): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r3, &(0x7f0000001600)=""/4073, 0xfe9, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) socket(0x10, 0x803, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, 0x0, 0xfe61) 1.502558465s ago: executing program 1 (id=210): socket(0xa, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = timerfd_create(0x0, 0x80000) timerfd_settime(r5, 0x3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000580)={0x8003ff, 0x7, 0x23e654d4, 0xa, 0x1000, 0x0, 0x0, 0x0, 0x200, 0x100, 0x0, 0xfffffdfffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x6, 0x0, 0x3}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r7, 0x40603d10, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000001680)) 1.093034319s ago: executing program 0 (id=211): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000002200)={0x5, 0x0, [{0x80000000, 0xe5f, 0x3, 0x2, 0xdf3, 0x6, 0x5}, {0x80000000, 0x100, 0x4, 0x6, 0xb, 0x2, 0x5}, {0xd, 0x8, 0x3, 0x3ff, 0x7ffffdff, 0xae, 0xffff}, {0x80000001, 0x2, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x6}, {0x80000000, 0x222bb, 0x1, 0xd, 0x3, 0x7fd, 0x400}]}) 1.001275274s ago: executing program 5 (id=212): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0x8, 0x6, 0x4, 0xe000, 0x0, {}, {0x3, 0xc, 0xf3, 0x71, 0xcd, 0xf, "baa37df3"}, 0x7fffffff, 0x4, {}, 0x300000, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000a92000/0x3000)=nil, 0x3000, 0x0, 0x10010, r1, 0x9fc34000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, 0x0, 0x0) 912.330088ms ago: executing program 0 (id=213): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000009c0)="ed1436f9", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)="cc5a4dbac0ae0010000000000000d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f000600c9adf83738838bf00e6ff4f19aa78c555a7459de1f4c809aaa420500bc0c561521fa8c58875d916a4dccd28a4b4834e761a1e984f9afd1b700"/177, 0xb1}, {&(0x7f0000000a80)="ddad5578b806b57a1fb3db45b94f400f90cfe65af411a009366a96e6afb01c69a0f5eb21d27b0fc3767336311d4a890c48b4999ded7966d6cae5d010df2f961ed7bb0ecb5d355dc645ca55b9c8e91b4d84fbef2e22f3d42e3750c660798859338d2914db8a729fd710f97aea17edd0674bd72d8485c2f98feb726871d1bda7b2e1c6bed7f4a8d6acba440c41bf4953c12639b62c6acfdc58ce57254cbfa234c3e0f4219c97e1781dd21066a6c19bc79911831c41d6fcc0aa66ce3d6a58485052254608dd4f0323358fee252f88ec3b08dcf96de48012df9b5d8d98977b44", 0xde}, {&(0x7f0000000140)="654f25cb7f6059bc6d1fe973dcbf256511f27ea9d285bdba36f54af70215ed7643aa83528a8d20ae94b3936ab028bb287436649e45c8acd9994548258bb8786b8224f55b8fb0a0f8388f73306726f2dacb80", 0x52}, {&(0x7f00000004c0)="d1fb36180cdc531e24bb92c1e7eb236511eef6078c9f99fb79df8d104a064295a38728866bbd53ff4e8f3c2d58e72c496a298e928d7e657a91da8b1ab56a7eed769f8f6ecf8bca8aeecda12b365f1279891112ceb06d7e870638151f6d4483bbb66853f1651b93fe7a90e1402303cc9fab9135da9a22d4c8e21bbf1eb8f0c0b62929e2c9", 0x84}, {&(0x7f0000000640)="44ad9575ab50841bc63827ce482dd286d74a1991e8e36c12404e9586197941a12f6928acb5494c9cc5f9d238d60dc861dfbb025bed4c40f86d", 0x39}, {&(0x7f0000000700)="31e0f14284589e79d7caf85bb3ea9a9cef63752ab692f53f0bc85e5657845abec194019a36c52e653e7c463e051790baaf92c47fe81765dd3ce3ed718e1bd3ffbe3fcb998cf75e002bb89300f5eb7a596fa181495a6e62865a4152443b18c0eab596cee12e63f7e747746bd655e19b801c84ff5697f9fc566eae209c39c7d0742729a85ca2213df359868db2053f9cc3981f24b35217ff8847d0860513015ef51c5a82", 0xa3}], 0x6}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 858.340832ms ago: executing program 3 (id=214): setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) getrlimit(0x7, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000051) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="40157a0000"], 0x0, 0x0, 0x0, 0x0}) 737.105578ms ago: executing program 0 (id=216): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x12, 0x0, 0x0) 385.276938ms ago: executing program 0 (id=217): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000500)={0x40, 0x11, 0x2, "a605"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=218): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], 0x0, 0x4}, 0x94) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fc, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0xc35, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x100000, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) pwritev2(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0xfffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.224' (ED25519) to the list of known hosts. [ 49.362670][ T4173] cgroup: Unknown subsys name 'net' [ 49.498199][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.835932][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.202758][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 52.244279][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 52.301555][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.308924][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.317513][ T4186] device bridge_slave_0 entered promiscuous mode [ 52.325523][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 52.342897][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 52.358180][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 52.373785][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.380934][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.388722][ T4186] device bridge_slave_1 entered promiscuous mode [ 52.456248][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.463396][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.471051][ T4187] device bridge_slave_0 entered promiscuous mode [ 52.480509][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.504665][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.511716][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.520242][ T4187] device bridge_slave_1 entered promiscuous mode [ 52.528510][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.574740][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.581845][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.590163][ T4192] device bridge_slave_0 entered promiscuous mode [ 52.602984][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.610771][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.618585][ T4192] device bridge_slave_1 entered promiscuous mode [ 52.642643][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.653750][ T4186] team0: Port device team_slave_0 added [ 52.677520][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.684762][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.692350][ T4188] device bridge_slave_0 entered promiscuous mode [ 52.701303][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.711457][ T4186] team0: Port device team_slave_1 added [ 52.724892][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.736256][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.745690][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.752735][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.760857][ T4185] device bridge_slave_0 entered promiscuous mode [ 52.768423][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.775652][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.783635][ T4188] device bridge_slave_1 entered promiscuous mode [ 52.806641][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.813795][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.821474][ T4185] device bridge_slave_1 entered promiscuous mode [ 52.850490][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.857857][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.884045][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.901153][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.908927][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.935005][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.957155][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.967854][ T4187] team0: Port device team_slave_0 added [ 52.976058][ T4192] team0: Port device team_slave_0 added [ 52.983398][ T4187] team0: Port device team_slave_1 added [ 52.996529][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.006981][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.024167][ T4192] team0: Port device team_slave_1 added [ 53.042684][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.066035][ T4186] device hsr_slave_0 entered promiscuous mode [ 53.072731][ T4186] device hsr_slave_1 entered promiscuous mode [ 53.086997][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.094116][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.120151][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.154715][ T4188] team0: Port device team_slave_0 added [ 53.170708][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.177880][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.203801][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.216737][ T4185] team0: Port device team_slave_0 added [ 53.226959][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.234256][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.260690][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.278424][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.285515][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.311803][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.324719][ T4188] team0: Port device team_slave_1 added [ 53.331458][ T4185] team0: Port device team_slave_1 added [ 53.379341][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.386349][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.412504][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.427778][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.435232][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.461867][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.478564][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.486427][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.512426][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.535226][ T4192] device hsr_slave_0 entered promiscuous mode [ 53.541761][ T4192] device hsr_slave_1 entered promiscuous mode [ 53.548342][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.556219][ T4192] Cannot create hsr debugfs directory [ 53.562016][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.569295][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.595370][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.609302][ T4187] device hsr_slave_0 entered promiscuous mode [ 53.616151][ T4187] device hsr_slave_1 entered promiscuous mode [ 53.622566][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.630339][ T4187] Cannot create hsr debugfs directory [ 53.690464][ T4188] device hsr_slave_0 entered promiscuous mode [ 53.697673][ T4188] device hsr_slave_1 entered promiscuous mode [ 53.704475][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.712067][ T4188] Cannot create hsr debugfs directory [ 53.756381][ T4185] device hsr_slave_0 entered promiscuous mode [ 53.763496][ T4185] device hsr_slave_1 entered promiscuous mode [ 53.769877][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.777713][ T4185] Cannot create hsr debugfs directory [ 53.954013][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 53.954013][ T1335] Bluetooth: hci3: command 0x0409 tx timeout [ 53.954784][ T1335] Bluetooth: hci4: command 0x0409 tx timeout [ 53.972519][ T1335] Bluetooth: hci1: command 0x0409 tx timeout [ 53.978842][ T1335] Bluetooth: hci0: command 0x0409 tx timeout [ 54.024088][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.034138][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.046250][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.065794][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.087164][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.104489][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.121884][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.131821][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.177614][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.192347][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.202242][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.238057][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.273536][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.300409][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.309915][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.319306][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.338313][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.379271][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.388730][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.399623][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.410791][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.420836][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.429791][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.439968][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.475324][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.484585][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.493378][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.500563][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.509815][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.520745][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.529502][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.536645][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.544324][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.552797][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.563146][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.585981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.602199][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.631722][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.639856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.649061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.657122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.666809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.676245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.685233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.694786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.703517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.711801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.733887][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.744786][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.753773][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.762351][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.769434][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.777819][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.787490][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.796128][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.806427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.814137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.831064][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.847778][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.855156][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.865829][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.874247][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.881436][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.889182][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.897982][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.908537][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.916290][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.925586][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.935471][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.944078][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.951137][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.959066][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.968742][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.994992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.005198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.014914][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.022065][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.030052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.039127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.047753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.058062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.067281][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.074372][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.082152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.091989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.100712][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.107804][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.116723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.125653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.133680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.188845][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.198962][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.209662][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.218606][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.228657][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.243599][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.252815][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.262532][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.271269][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.279850][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.289124][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.297855][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.306228][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.314750][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.323082][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.332008][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.340834][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.350543][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.359145][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.367766][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.376611][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.385160][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.393004][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.419693][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.434274][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.442575][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.451215][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.465340][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.478147][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.487517][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.503654][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.513020][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.524577][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.556296][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.573638][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.582036][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.589132][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.644751][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.665348][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.698651][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.714318][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.721500][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.736360][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.745831][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.754622][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.762013][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.769608][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.778417][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.796080][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.809184][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.820354][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.829408][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.839049][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.848323][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.875644][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.886316][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.899348][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.910613][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.925399][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.932811][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.956654][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.009061][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.019566][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.035090][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 56.041176][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 56.053898][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 56.059977][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 56.071113][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 56.082272][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.097214][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.111207][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.121713][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.138771][ T4186] device veth0_vlan entered promiscuous mode [ 56.157121][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.166459][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.179245][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.188472][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.203075][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.211124][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.239287][ T4186] device veth1_vlan entered promiscuous mode [ 56.288569][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.297795][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.308650][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.318437][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.332067][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.342549][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.362572][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.373821][ T4186] device veth0_macvtap entered promiscuous mode [ 56.384458][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.392871][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.400429][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.409575][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.419518][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.428674][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.437973][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.465791][ T4187] device veth0_vlan entered promiscuous mode [ 56.472756][ T4186] device veth1_macvtap entered promiscuous mode [ 56.482640][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.490896][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.498945][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.508540][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.526075][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.534434][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.550405][ T4187] device veth1_vlan entered promiscuous mode [ 56.567958][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.577614][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.586054][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.594787][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.607455][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.615407][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.624966][ T4192] device veth0_vlan entered promiscuous mode [ 56.640100][ T4185] device veth0_vlan entered promiscuous mode [ 56.648817][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.659528][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.676332][ T4192] device veth1_vlan entered promiscuous mode [ 56.688778][ T4185] device veth1_vlan entered promiscuous mode [ 56.697513][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.707056][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.715745][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.725083][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.733870][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.742409][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.751589][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.760561][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.773454][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.782265][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.792152][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.800974][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.822518][ T4188] device veth0_vlan entered promiscuous mode [ 56.844276][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.852170][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.861220][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.870284][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.879473][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.888093][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.899643][ T4188] device veth1_vlan entered promiscuous mode [ 56.930690][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.939928][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.948439][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.958114][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.971997][ T4187] device veth0_macvtap entered promiscuous mode [ 56.989848][ T4185] device veth0_macvtap entered promiscuous mode [ 57.002482][ T4185] device veth1_macvtap entered promiscuous mode [ 57.010612][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.020359][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.029415][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.039177][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.048037][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.056942][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.065434][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.091542][ T4192] device veth0_macvtap entered promiscuous mode [ 57.105868][ T4192] device veth1_macvtap entered promiscuous mode [ 57.113450][ T4187] device veth1_macvtap entered promiscuous mode [ 57.125614][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.134513][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.142402][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.150616][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.160559][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.199092][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.209927][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.222038][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.232866][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.245470][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.256800][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.265397][ T4188] device veth0_macvtap entered promiscuous mode [ 57.283771][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.291716][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.303908][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.311904][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.327961][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.337172][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.346118][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.355147][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.365960][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.375148][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.384782][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.394254][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.406383][ T4188] device veth1_macvtap entered promiscuous mode [ 57.416800][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.427836][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.437802][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.448321][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.460079][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.475420][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.488447][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.499002][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.509628][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.519866][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.530989][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.542030][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.550181][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.559587][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.568195][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.577634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.586431][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.606986][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.617937][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.621465][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.628456][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.645598][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.656410][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.668229][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.677948][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.689358][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.699351][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.711041][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.721886][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.732830][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.744343][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.757306][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.768651][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.778872][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.789567][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.801158][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.813268][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.823072][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.833803][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.845616][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.855918][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.865421][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.874801][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.885697][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.894504][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.902997][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.911826][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.925605][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.935042][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.944053][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.952758][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.976548][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.987602][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.996572][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.005464][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.018363][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.029755][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.042779][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.058917][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.068815][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.084566][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.094832][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.105521][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.116757][ T4291] Bluetooth: hci3: command 0x040f tx timeout [ 58.122947][ T4291] Bluetooth: hci2: command 0x040f tx timeout [ 58.130125][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.137874][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 58.144162][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 58.150592][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 58.171892][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.192005][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.222036][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.232198][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.248561][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.259173][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.395712][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.408422][ T4293] hugetlbfs: syz.3.4 (4293): Using mlock ulimits for SHM_HUGETLB is deprecated [ 59.449135][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.464332][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.514258][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.529725][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.558877][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.573803][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.599522][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.620066][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.638136][ T1280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.662712][ T1280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.674855][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.675622][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.723407][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.732270][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.762327][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.769878][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.781090][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.806329][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.815040][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.822975][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.830818][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.841330][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.853521][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.354469][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #92!!! [ 60.374452][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #92!!! [ 60.386142][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 60.410585][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 60.421914][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 60.433200][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 60.443208][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 60.453201][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 60.463200][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 60.473196][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 60.624745][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 60.667209][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 60.774893][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 60.847110][ T4291] Bluetooth: hci2: command 0x0419 tx timeout [ 60.968304][ T4291] Bluetooth: hci3: command 0x0419 tx timeout [ 61.755318][ T26] audit: type=1326 audit(1769895175.813:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 61.795247][ T26] audit: type=1326 audit(1769895175.813:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 61.826288][ T26] audit: type=1326 audit(1769895175.843:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 62.094895][ T26] audit: type=1326 audit(1769895175.843:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 62.764545][ T26] audit: type=1326 audit(1769895175.853:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 62.809590][ T4320] fuse: Bad value for 'fd' [ 62.829943][ T26] audit: type=1326 audit(1769895175.913:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 62.938236][ T26] audit: type=1326 audit(1769895175.913:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fabfb810c22 code=0x7ffc0000 [ 63.022609][ T26] audit: type=1326 audit(1769895175.913:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fabfb810cb7 code=0x7ffc0000 [ 63.114650][ T26] audit: type=1326 audit(1769895175.913:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fabfb7cdc51 code=0x7ffc0000 [ 63.171339][ T26] audit: type=1326 audit(1769895175.913:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fabfb811cc9 code=0x7ffc0000 [ 64.063679][ T4326] crypto_alloc_aead failed rc=-4 [ 64.320446][ T4372] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.716633][ T4410] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20003 [ 68.419448][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 68.419463][ T26] audit: type=1326 audit(1769895438.472:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270c050eb9 code=0x7ffc0000 [ 69.441965][ T26] audit: type=1326 audit(1769895438.502:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270c050eb9 code=0x7ffc0000 [ 69.500787][ T4415] fuse: Bad value for 'fd' [ 69.614784][ T26] audit: type=1326 audit(1769895438.502:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270c050eb9 code=0x7ffc0000 [ 69.792955][ T26] audit: type=1326 audit(1769895438.502:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270c050eb9 code=0x7ffc0000 [ 69.974374][ T26] audit: type=1326 audit(1769895438.502:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f270c050eb9 code=0x7ffc0000 [ 70.105255][ T26] audit: type=1326 audit(1769895438.632:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.22" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f270c050eb9 code=0x0 [ 70.462682][ T26] audit: type=1326 audit(1769895439.392:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270c050eb9 code=0x7ffc0000 [ 70.754543][ T26] audit: type=1326 audit(1769895439.392:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270c050eb9 code=0x7ffc0000 [ 70.921126][ T26] audit: type=1326 audit(1769895439.452:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270c050eb9 code=0x7ffc0000 [ 70.993428][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.000233][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.220149][ T26] audit: type=1326 audit(1769895439.452:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f270c050c22 code=0x7ffc0000 [ 78.096194][ T4459] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20003 [ 80.493613][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 80.493623][ T26] audit: type=1326 audit(1769895450.558:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 80.589365][ T4475] fuse: Bad value for 'fd' [ 80.680238][ T26] audit: type=1326 audit(1769895450.588:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 80.715979][ T26] audit: type=1326 audit(1769895450.588:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 81.246796][ T1111] cfg80211: failed to load regulatory.db [ 81.879558][ T26] audit: type=1326 audit(1769895450.588:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 82.004583][ T26] audit: type=1326 audit(1769895450.598:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.2.41" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x0 [ 82.267172][ T26] audit: type=1326 audit(1769895450.598:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fabfb7cd3ac code=0x7ffc0000 [ 82.923866][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 83.134254][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.134682][ T26] audit: type=1326 audit(1769895450.598:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fabfb7cd40e code=0x7ffc0000 [ 83.164617][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.334180][ T26] audit: type=1326 audit(1769895450.598:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fabfb810b4b code=0x7ffc0000 [ 83.434009][ T26] audit: type=1326 audit(1769895450.598:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 83.553933][ T26] audit: type=1326 audit(1769895450.598:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 86.199221][ T4522] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20003 [ 88.067842][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 88.067854][ T26] audit: type=1326 audit(1769895458.131:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d8cdfeb9 code=0x7ffc0000 [ 88.244328][ T26] audit: type=1326 audit(1769895458.171:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d8cdfeb9 code=0x7ffc0000 [ 88.281146][ T4531] fuse: Bad value for 'fd' [ 89.144752][ T26] audit: type=1326 audit(1769895458.171:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d8cdfeb9 code=0x7ffc0000 [ 89.245903][ T26] audit: type=1326 audit(1769895458.171:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f97d8cdfeb9 code=0x7ffc0000 [ 89.313124][ T26] audit: type=1326 audit(1769895458.171:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.53" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97d8cdfeb9 code=0x0 [ 89.366604][ T26] audit: type=1326 audit(1769895458.291:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d8cdfeb9 code=0x7ffc0000 [ 89.970749][ T26] audit: type=1326 audit(1769895458.291:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d8cdfeb9 code=0x7ffc0000 [ 90.010773][ T26] audit: type=1326 audit(1769895458.341:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d8cdfeb9 code=0x7ffc0000 [ 90.070469][ T26] audit: type=1326 audit(1769895458.341:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f97d8cdfc22 code=0x7ffc0000 [ 90.130667][ T26] audit: type=1326 audit(1769895458.341:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f97d8cdfcb7 code=0x7ffc0000 [ 94.834881][ T4570] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20003 [ 99.117604][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 99.117617][ T26] audit: type=1326 audit(1769895725.194:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 99.149233][ T26] audit: type=1326 audit(1769895725.224:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 99.284504][ T26] audit: type=1326 audit(1769895725.224:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 99.307293][ T26] audit: type=1326 audit(1769895725.224:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 99.348450][ T4610] fuse: Bad value for 'fd' [ 101.154527][ T26] audit: type=1326 audit(1769895725.224:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 101.399068][ T26] audit: type=1326 audit(1769895725.224:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.69" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x0 [ 102.133285][ T26] audit: type=1326 audit(1769895725.344:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 102.388067][ T4630] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20003 [ 102.966041][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.977469][ T26] audit: type=1326 audit(1769895725.344:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 103.000966][ T26] audit: type=1326 audit(1769895725.394:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 104.381560][ T4634] process 'syz.3.83' launched './file1' with NULL argv: empty string added [ 104.390294][ T26] audit: type=1326 audit(1769895725.394:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 104.469911][ T26] audit: type=1326 audit(1769895725.394:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fabfb810c22 code=0x7ffc0000 [ 104.663479][ T1111] usb 2-1: device not accepting address 2, error -71 [ 104.808600][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.922831][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.936923][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.109358][ T26] audit: type=1326 audit(1769895725.394:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fabfb810cb7 code=0x7ffc0000 [ 106.099396][ T26] audit: type=1326 audit(1769895725.394:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fabfb7cdc51 code=0x7ffc0000 [ 106.121428][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.157023][ T26] audit: type=1326 audit(1769895725.394:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fabfb811cc9 code=0x7ffc0000 [ 106.319988][ T26] audit: type=1326 audit(1769895725.394:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fabfb7cdcbb code=0x7ffc0000 [ 106.392528][ T26] audit: type=1326 audit(1769895725.394:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 106.415168][ T26] audit: type=1326 audit(1769895725.394:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabfb810eb9 code=0x7ffc0000 [ 106.455000][ T26] audit: type=1326 audit(1769895725.404:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fabfb7cd3ac code=0x7ffc0000 [ 106.484979][ T26] audit: type=1326 audit(1769895725.404:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4605 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fabfb7cd40e code=0x7ffc0000 [ 107.239230][ T4668] fuse: Bad value for 'fd' [ 108.536161][ T4227] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.791427][ T4227] usb 4-1: Using ep0 maxpacket: 8 [ 108.911386][ T4227] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 108.924778][ T4227] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.935860][ T4227] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.949613][ T4227] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.960861][ T4227] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.978819][ T4227] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 108.988120][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.097663][ T4682] overlayfs: unrecognized mount option "context=root" or missing value [ 109.300792][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.332733][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.340859][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.411582][ T4227] usb 4-1: usb_control_msg returned -32 [ 109.418889][ T4227] usbtmc 4-1:16.0: can't read capabilities [ 111.115302][ T4707] syz.1.104 uses obsolete (PF_INET,SOCK_PACKET) [ 111.239884][ T26] kauditd_printk_skb: 492 callbacks suppressed [ 111.239915][ T26] audit: type=1326 audit(1769895737.310:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.0.105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facdd4e4eb9 code=0x0 [ 111.267875][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.429064][ T4706] fuse: Bad value for 'fd' [ 111.635278][ T4227] usb 4-1: USB disconnect, device number 2 [ 118.080594][ T4778] loop8: detected capacity change from 0 to 8 [ 118.100491][ T4179] Dev loop8: unable to read RDB block 8 [ 118.106161][ T4179] loop8: unable to read partition table [ 118.126093][ T4179] loop8: partition table beyond EOD, truncated [ 118.142827][ T4778] Dev loop8: unable to read RDB block 8 [ 118.156882][ T4778] loop8: unable to read partition table [ 118.169554][ T4778] loop8: partition table beyond EOD, truncated [ 118.183375][ T4778] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 119.366023][ T4234] Bluetooth: hci0: command 0x1407 tx timeout [ 121.744793][ T4242] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.014661][ T4234] Bluetooth: hci0: command 0x1407 tx timeout [ 122.275206][ T4242] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 122.284640][ T4242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.292723][ T4242] usb 1-1: Product: syz [ 122.297118][ T4242] usb 1-1: Manufacturer: syz [ 122.302199][ T4242] usb 1-1: SerialNumber: syz [ 122.804771][ T4242] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 122.986304][ T4829] chnl_net:caif_netlink_parms(): no params data found [ 123.088466][ T4448] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.128126][ T4829] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.136046][ T4829] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.144686][ T4829] device bridge_slave_0 entered promiscuous mode [ 123.153272][ T4829] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.160625][ T4829] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.168801][ T4829] device bridge_slave_1 entered promiscuous mode [ 123.314098][ T4242] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 123.331773][ T4829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.342764][ T4242] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 123.362871][ T4242] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 123.373993][ T4242] lan78xx: probe of 1-1:1.0 failed with error -71 [ 123.398666][ T4242] usb 1-1: USB disconnect, device number 2 [ 123.466642][ T4448] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.491324][ T4829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.540344][ T4829] team0: Port device team_slave_0 added [ 123.557806][ T4448] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.578421][ T4829] team0: Port device team_slave_1 added [ 123.602571][ T4829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.626679][ T4829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.660656][ T4829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.686477][ T4448] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.707493][ T4829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.720912][ T4829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.746868][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.761186][ T4829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.793776][ T4234] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.888624][ T4829] device hsr_slave_0 entered promiscuous mode [ 123.904825][ T4829] device hsr_slave_1 entered promiscuous mode [ 123.914381][ T4829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.932449][ T4829] Cannot create hsr debugfs directory [ 124.872227][ T4860] loop8: detected capacity change from 0 to 8 [ 124.883130][ T4860] Dev loop8: unable to read RDB block 8 [ 124.886072][ T4257] Bluetooth: hci4: command 0x0409 tx timeout [ 124.889819][ T4860] loop8: unable to read partition table [ 124.899276][ T4829] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 124.916578][ T4829] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.922684][ T4860] loop8: partition table beyond EOD, truncated [ 124.934954][ T4829] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 124.948539][ T4860] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 124.953857][ T4234] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.969822][ T4829] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 124.977498][ T4234] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 124.988664][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 125.033329][ T4227] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 125.159508][ T4234] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 125.170244][ T4829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.184099][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.192146][ T4234] usb 4-1: Product: syz [ 125.210229][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.223176][ T4234] usb 4-1: Manufacturer: syz [ 125.228423][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.236044][ T4234] usb 4-1: SerialNumber: syz [ 125.243813][ T4829] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.255356][ T4234] usb 4-1: config 0 descriptor?? [ 125.270839][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.290248][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.310882][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.318008][ T4445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.333573][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.351668][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.382873][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.414517][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.421681][ T4493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.429400][ T4227] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 125.446964][ T4227] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 125.494234][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.502263][ T4227] usb 2-1: config 0 interface 0 has no altsetting 0 [ 125.539501][ T4234] usb 4-1: ucan: probing device on interface #0 [ 125.556929][ T4234] usb 4-1: ucan: invalid EP count (1) [ 125.562398][ T4234] usb 4-1: ucan: probe failed; try to update the device firmware [ 125.587261][ T4234] usb 4-1: USB disconnect, device number 3 [ 125.619241][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.703104][ T4227] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 125.718457][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 125.727013][ T4227] usb 2-1: Product: syz [ 125.731206][ T4227] usb 2-1: Manufacturer: syz [ 125.731986][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.736877][ T4227] usb 2-1: SerialNumber: syz [ 125.813528][ T4227] usb 2-1: config 0 descriptor?? [ 125.871808][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.894293][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.908871][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.921832][ T4227] usb 2-1: selecting invalid altsetting 0 [ 125.928773][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.963385][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.971732][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.159350][ T4853] usb 2-1: selecting invalid altsetting 0 [ 126.171711][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.182728][ T4853] usb 2-1: 0:0: usb_set_interface failed (-22) [ 126.190694][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.210080][ T4234] usb 2-1: USB disconnect, device number 4 [ 126.380487][ T4893] capability: warning: `syz.3.159' uses deprecated v2 capabilities in a way that may be insecure [ 126.457441][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.470818][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.486051][ T4897] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 126.519170][ T4829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.538059][ T4448] device hsr_slave_0 left promiscuous mode [ 126.566760][ T4448] device hsr_slave_1 left promiscuous mode [ 126.578477][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.600892][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.618294][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.632153][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.688283][ T4448] device bridge_slave_1 left promiscuous mode [ 126.763659][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.806082][ T4448] device bridge_slave_0 left promiscuous mode [ 126.819796][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.853898][ T4448] device veth1_macvtap left promiscuous mode [ 126.860339][ T4448] device veth0_macvtap left promiscuous mode [ 126.867053][ T4448] device veth1_vlan left promiscuous mode [ 126.873098][ T4448] device veth0_vlan left promiscuous mode [ 126.964291][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 127.141143][ T4912] netlink: 64 bytes leftover after parsing attributes in process `syz.1.162'. [ 127.161929][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 127.245691][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 127.295464][ T4448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.411006][ T4448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.207136][ T4448] bond0 (unregistering): Released all slaves [ 128.540833][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.577377][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.655826][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.677562][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.687269][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.695238][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.706901][ T4829] device veth0_vlan entered promiscuous mode [ 129.030306][ T4829] device veth1_vlan entered promiscuous mode [ 129.077797][ T4257] Bluetooth: hci4: command 0x040f tx timeout [ 130.166059][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.630934][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.826396][ T4966] hub 8-0:1.0: USB hub found [ 130.833540][ T4966] hub 8-0:1.0: 1 port detected [ 133.342413][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.348806][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.354062][ T1335] Bluetooth: hci4: command 0x0419 tx timeout [ 133.364384][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.430346][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.492758][ T4829] device veth0_macvtap entered promiscuous mode [ 133.524592][ T4829] device veth1_macvtap entered promiscuous mode [ 134.005340][ T4829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.346354][ T4829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.537351][ T4829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.731239][ T4829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.744942][ T4829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.780324][ T4829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.848888][ T4829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.351352][ T4829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.407292][ T4829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.438486][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.511256][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.619910][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.707811][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 135.929307][ T4829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.940097][ T4829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.975460][ T4829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.025239][ T4829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.061732][ T4829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.122321][ T4829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.145784][ T4829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.156656][ T4829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.508864][ T4829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.537963][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.546603][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.561471][ T4829] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.686721][ T4829] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.430591][ T4829] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.458451][ T4829] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.357529][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 140.499691][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 141.221298][ T4493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.354897][ T4493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.827771][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.889617][ T4974] chnl_net:caif_netlink_parms(): no params data found [ 142.598099][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 142.618283][ T4396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.663271][ T4396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.738164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.927402][ T4974] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.936457][ T4974] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.944505][ T4974] device bridge_slave_0 entered promiscuous mode [ 142.952861][ T4974] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.960079][ T4974] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.015231][ T4974] device bridge_slave_1 entered promiscuous mode [ 143.080860][ T4974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.080794][ T4974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.358913][ T4974] team0: Port device team_slave_0 added [ 144.480733][ T4974] team0: Port device team_slave_1 added [ 144.506330][ T4974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.551665][ T4974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.577662][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.797152][ T4974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.914367][ T4974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.024674][ T4974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.327777][ T4974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.504451][ T4974] device hsr_slave_0 entered promiscuous mode [ 145.551580][ T26] audit: type=1326 audit(1769896795.643:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5098 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d8cdfeb9 code=0x7ffc0000 [ 146.028362][ T26] audit: type=1326 audit(1769896795.683:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5098 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d8cdfeb9 code=0x7ffc0000 [ 146.067100][ T26] audit: type=1326 audit(1769896796.113:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5098 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d8cdfeb9 code=0x7ffc0000 [ 146.118374][ T4974] device hsr_slave_1 entered promiscuous mode [ 146.133963][ T4974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.147098][ T5106] fuse: Bad value for 'fd' [ 146.210901][ T5108] hub 8-0:1.0: USB hub found [ 146.216421][ T5108] hub 8-0:1.0: 1 port detected [ 146.363290][ T4974] Cannot create hsr debugfs directory [ 146.651930][ T26] audit: type=1326 audit(1769896796.113:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5098 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d8cdfeb9 code=0x7ffc0000 [ 146.675104][ T26] audit: type=1326 audit(1769896796.113:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5098 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f97d8cdfeb9 code=0x7ffc0000 [ 146.697867][ T26] audit: type=1326 audit(1769896796.113:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5098 comm="syz.3.207" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97d8cdfeb9 code=0x0 [ 146.775553][ T26] audit: type=1326 audit(1769896796.183:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5098 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d8cdfeb9 code=0x7ffc0000 [ 146.809431][ T26] audit: type=1326 audit(1769896796.183:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5098 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d8cdfeb9 code=0x7ffc0000 [ 147.061947][ T26] audit: type=1326 audit(1769896796.233:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5098 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d8cdfeb9 code=0x7ffc0000 [ 147.164842][ T26] audit: type=1326 audit(1769896796.233:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5098 comm="syz.3.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f97d8cdfc22 code=0x7ffc0000 [ 148.372205][ T4974] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 148.445013][ T4974] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 148.523124][ T4974] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 148.566383][ T4974] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 148.670227][ T4448] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.691375][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 148.797243][ T4448] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.866911][ T4974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.888583][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.916795][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.971329][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 148.994678][ T4448] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.054387][ T4974] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.111811][ T1111] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.119915][ T13] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.141654][ T4448] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.213971][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.242970][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.296818][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.303904][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.321263][ T13] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 149.337321][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.361175][ T1111] usb 1-1: Using ep0 maxpacket: 16 [ 149.367066][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.384279][ T5160] input: syz0 as /devices/virtual/input/input5 [ 149.386224][ T13] usb 4-1: Product: syz [ 149.394895][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.411832][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.426848][ T13] usb 4-1: Manufacturer: syz [ 149.433095][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.440144][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.451026][ T13] usb 4-1: SerialNumber: syz [ 149.479084][ T13] usb 4-1: config 0 descriptor?? [ 149.491283][ T1111] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 149.508402][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.601607][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.648090][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.681254][ T1111] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 149.712026][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.733939][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.751689][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.768696][ T1111] usb 1-1: Product: syz [ 149.777235][ T1111] usb 1-1: Manufacturer: syz [ 149.788138][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.816269][ T1111] usb 1-1: SerialNumber: syz [ 149.840001][ T1111] usb 1-1: config 0 descriptor?? [ 149.875119][ T4227] [ 149.877446][ T4227] ====================================================== [ 149.884448][ T4227] WARNING: possible circular locking dependency detected [ 149.891455][ T4227] syzkaller #0 Not tainted [ 149.895854][ T4227] ------------------------------------------------------ [ 149.902854][ T4227] kworker/1:4/4227 is trying to acquire lock: [ 149.908899][ T4227] ffff88807922cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 149.919936][ T4227] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 149.919936][ T4227] but task is already holding lock: [ 149.927307][ T4227] ffffffff8d6c47c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 149.936359][ T4227] [ 149.936359][ T4227] which lock already depends on the new lock. [ 149.936359][ T4227] [ 149.946755][ T4227] [ 149.946755][ T4227] the existing dependency chain (in reverse order) is: [ 149.955749][ T4227] [ 149.955749][ T4227] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 149.963722][ T4227] __mutex_lock_common+0x1e3/0x2400 [ 149.969430][ T4227] mutex_lock_nested+0x17/0x20 [ 149.974709][ T4227] rfkill_register+0x33/0x8a0 [ 149.979898][ T4227] hci_register_dev+0x452/0x970 [ 149.985255][ T4227] vhci_create_device+0x32c/0x5c0 [ 149.990829][ T4227] vhci_write+0x391/0x450 [ 149.995671][ T4227] vfs_write+0x745/0xd60 [ 150.000423][ T4227] ksys_write+0x152/0x260 [ 150.005262][ T4227] do_syscall_64+0x4c/0xa0 [ 150.010187][ T4227] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.016597][ T4227] [ 150.016597][ T4227] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 150.024393][ T4227] __mutex_lock_common+0x1e3/0x2400 [ 150.030101][ T4227] mutex_lock_nested+0x17/0x20 [ 150.035370][ T4227] vhci_send_frame+0x88/0x100 [ 150.040557][ T4227] hci_send_frame+0x1a9/0x2e0 [ 150.045770][ T4227] hci_tx_work+0x9f9/0x1710 [ 150.050800][ T4227] process_one_work+0x85f/0x1010 [ 150.056252][ T4227] worker_thread+0xaa6/0x1290 [ 150.061437][ T4227] kthread+0x436/0x520 [ 150.066013][ T4227] ret_from_fork+0x1f/0x30 [ 150.070955][ T4227] [ 150.070955][ T4227] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 150.080143][ T4227] __flush_work+0x116/0x210 [ 150.085158][ T4227] hci_dev_do_close+0x1e7/0x1030 [ 150.090606][ T4227] hci_unregister_dev+0x2d7/0x580 [ 150.096141][ T4227] vhci_release+0x73/0xc0 [ 150.100976][ T4227] __fput+0x234/0x930 [ 150.105463][ T4227] task_work_run+0x125/0x1a0 [ 150.110564][ T4227] do_exit+0x626/0x20c0 [ 150.115240][ T4227] do_group_exit+0x12e/0x300 [ 150.120335][ T4227] get_signal+0x6ca/0x12c0 [ 150.125259][ T4227] arch_do_signal_or_restart+0xe7/0x12c0 [ 150.131405][ T4227] exit_to_user_mode_loop+0x9e/0x130 [ 150.137201][ T4227] exit_to_user_mode_prepare+0xee/0x180 [ 150.143250][ T4227] syscall_exit_to_user_mode+0x16/0x40 [ 150.149217][ T4227] do_syscall_64+0x58/0xa0 [ 150.154156][ T4227] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.160578][ T4227] [ 150.160578][ T4227] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 150.168226][ T4227] __mutex_lock_common+0x1e3/0x2400 [ 150.173949][ T4227] mutex_lock_nested+0x17/0x20 [ 150.179222][ T4227] bg_scan_update+0x44/0x3b0 [ 150.184317][ T4227] process_one_work+0x85f/0x1010 [ 150.189763][ T4227] worker_thread+0xaa6/0x1290 [ 150.194944][ T4227] kthread+0x436/0x520 [ 150.199520][ T4227] ret_from_fork+0x1f/0x30 [ 150.204439][ T4227] [ 150.204439][ T4227] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 150.214236][ T4227] __lock_acquire+0x2c42/0x7d10 [ 150.219593][ T4227] lock_acquire+0x19e/0x400 [ 150.224603][ T4227] __flush_work+0x116/0x210 [ 150.229614][ T4227] __cancel_work_timer+0x3f4/0x560 [ 150.235233][ T4227] hci_request_cancel_all+0xcc/0x300 [ 150.241032][ T4227] hci_dev_do_close+0x4e/0x1030 [ 150.246387][ T4227] hci_rfkill_set_block+0x10a/0x190 [ 150.252096][ T4227] rfkill_set_block+0x1c6/0x420 [ 150.257455][ T4227] rfkill_epo+0x75/0x170 [ 150.262215][ T4227] rfkill_op_handler+0x76/0x220 [ 150.267573][ T4227] process_one_work+0x85f/0x1010 [ 150.273016][ T4227] worker_thread+0xaa6/0x1290 [ 150.278198][ T4227] kthread+0x436/0x520 [ 150.282771][ T4227] ret_from_fork+0x1f/0x30 [ 150.287704][ T4227] [ 150.287704][ T4227] other info that might help us debug this: [ 150.287704][ T4227] [ 150.297923][ T4227] Chain exists of: [ 150.297923][ T4227] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 150.297923][ T4227] [ 150.313638][ T4227] Possible unsafe locking scenario: [ 150.313638][ T4227] [ 150.321070][ T4227] CPU0 CPU1 [ 150.326420][ T4227] ---- ---- [ 150.331771][ T4227] lock(rfkill_global_mutex); [ 150.336524][ T4227] lock(&data->open_mutex); [ 150.343625][ T4227] lock(rfkill_global_mutex); [ 150.350897][ T4227] lock((work_completion)(&hdev->bg_scan_update)); [ 150.357475][ T4227] [ 150.357475][ T4227] *** DEADLOCK *** [ 150.357475][ T4227] [ 150.365615][ T4227] 3 locks held by kworker/1:4/4227: [ 150.370818][ T4227] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 150.381184][ T4227] #1: ffffc900031afd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 150.391517][ T4227] #2: ffffffff8d6c47c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 150.400980][ T4227] [ 150.400980][ T4227] stack backtrace: [ 150.406865][ T4227] CPU: 1 PID: 4227 Comm: kworker/1:4 Not tainted syzkaller #0 [ 150.414306][ T4227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.424349][ T4227] Workqueue: events rfkill_op_handler [ 150.429721][ T4227] Call Trace: [ 150.432992][ T4227] [ 150.435909][ T4227] dump_stack_lvl+0x188/0x250 [ 150.440581][ T4227] ? load_image+0x400/0x400 [ 150.445094][ T4227] ? show_regs_print_info+0x20/0x20 [ 150.450282][ T4227] ? print_circular_bug+0x12b/0x1a0 [ 150.455470][ T4227] check_noncircular+0x296/0x330 [ 150.460412][ T4227] ? look_up_lock_class+0x71/0x110 [ 150.465529][ T4227] ? add_chain_block+0x940/0x940 [ 150.470463][ T4227] ? lockdep_lock+0xf1/0x1f0 [ 150.475067][ T4227] ? __lock_acquire+0x12e8/0x7d10 [ 150.480085][ T4227] ? mark_lock+0x94/0x320 [ 150.484410][ T4227] __lock_acquire+0x2c42/0x7d10 [ 150.489256][ T4227] ? verify_lock_unused+0x140/0x140 [ 150.494450][ T4227] lock_acquire+0x19e/0x400 [ 150.498943][ T4227] ? __flush_work+0xfa/0x210 [ 150.503553][ T4227] ? __lock_acquire+0x7d10/0x7d10 [ 150.508572][ T4227] ? read_lock_is_recursive+0x10/0x10 [ 150.513942][ T4227] ? start_flush_work+0x776/0x820 [ 150.518964][ T4227] __flush_work+0x116/0x210 [ 150.523453][ T4227] ? __flush_work+0xfa/0x210 [ 150.528028][ T4227] ? flush_work+0x20/0x20 [ 150.532342][ T4227] ? try_to_grab_pending+0xfa/0x7f0 [ 150.537525][ T4227] ? mark_lock+0x94/0x320 [ 150.541836][ T4227] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 150.547812][ T4227] ? lock_chain_count+0x20/0x20 [ 150.552665][ T4227] ? mark_lock+0x94/0x320 [ 150.556979][ T4227] ? __cancel_work_timer+0x36a/0x560 [ 150.562252][ T4227] __cancel_work_timer+0x3f4/0x560 [ 150.567351][ T4227] ? cancel_work_sync+0x20/0x20 [ 150.572195][ T4227] ? __cancel_work+0x1f9/0x2e0 [ 150.576949][ T4227] ? lockdep_hardirqs_on+0x94/0x140 [ 150.582133][ T4227] ? __cancel_work+0x27b/0x2e0 [ 150.586884][ T4227] ? cancel_work+0x20/0x20 [ 150.591288][ T4227] hci_request_cancel_all+0xcc/0x300 [ 150.596567][ T4227] hci_dev_do_close+0x4e/0x1030 [ 150.601403][ T4227] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 150.607285][ T4227] ? _raw_spin_unlock+0x40/0x40 [ 150.612132][ T4227] ? kobject_uevent_env+0x371/0x890 [ 150.617321][ T4227] hci_rfkill_set_block+0x10a/0x190 [ 150.622505][ T4227] ? rcu_lock_release+0x20/0x20 [ 150.627344][ T4227] rfkill_set_block+0x1c6/0x420 [ 150.632186][ T4227] rfkill_epo+0x75/0x170 [ 150.636418][ T4227] rfkill_op_handler+0x76/0x220 [ 150.641259][ T4227] process_one_work+0x85f/0x1010 [ 150.646189][ T4227] ? worker_detach_from_pool+0x240/0x240 [ 150.651806][ T4227] ? lockdep_hardirqs_off+0x70/0x100 [ 150.657077][ T4227] ? _raw_spin_lock_irq+0xb7/0xf0 [ 150.662092][ T4227] ? _raw_spin_lock_irqsave+0x100/0x100 [ 150.667631][ T4227] ? wq_worker_running+0x97/0x170 [ 150.672639][ T4227] worker_thread+0xaa6/0x1290 [ 150.677318][ T4227] kthread+0x436/0x520 [ 150.681387][ T4227] ? rcu_lock_release+0x20/0x20 [ 150.686243][ T4227] ? kthread_blkcg+0xd0/0xd0 [ 150.690821][ T4227] ret_from_fork+0x1f/0x30 [ 150.695239][ T4227] [ 150.701903][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.742767][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.754531][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.779069][ T4974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.799658][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.819262][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.840897][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.739914][ T21] usb 1-1: USB disconnect, device number 3 [ 151.745804][ T4262] usb 4-1: USB disconnect, device number 4 [ 151.862014][ T4186] syz-executor (4186) used greatest stack depth: 20752 bytes left [ 152.051592][ T4448] device hsr_slave_0 left promiscuous mode [ 152.070747][ T4448] device hsr_slave_1 left promiscuous mode [ 152.077045][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.105351][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.113418][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.123014][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.131495][ T4448] device bridge_slave_1 left promiscuous mode [ 152.137665][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.149320][ T4448] device bridge_slave_0 left promiscuous mode [ 152.155649][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.168024][ T4448] device veth1_macvtap left promiscuous mode [ 152.174326][ T4448] device veth0_macvtap left promiscuous mode [ 152.182136][ T4448] device veth1_vlan left promiscuous mode [ 152.187876][ T4448] device veth0_vlan left promiscuous mode [ 152.279056][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 152.290894][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 152.302129][ T4448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.314329][ T4448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.353938][ T4448] bond0 (unregistering): Released all slaves [ 153.260402][ T4448] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.302412][ T4448] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.352847][ T4448] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.412592][ T4448] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.488291][ T4448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.532812][ T4448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.573776][ T4448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.623447][ T4448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.714921][ T4448] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.772409][ T4448] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.837228][ T4448] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.881822][ T4448] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.957459][ T4448] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.981283][ T4448] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.042401][ T4448] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.082459][ T4448] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.394160][ T4448] device hsr_slave_0 left promiscuous mode [ 155.400546][ T4448] device hsr_slave_1 left promiscuous mode [ 155.406753][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.414225][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.421777][ T4448] device bridge_slave_1 left promiscuous mode [ 155.428915][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.436958][ T4448] device bridge_slave_0 left promiscuous mode [ 155.444160][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.454975][ T4448] device hsr_slave_0 left promiscuous mode [ 155.462220][ T4448] device hsr_slave_1 left promiscuous mode [ 155.469293][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.476680][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.485492][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.494023][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.502664][ T4448] device bridge_slave_1 left promiscuous mode [ 155.510077][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.519564][ T4448] device bridge_slave_0 left promiscuous mode [ 155.525713][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.537097][ T4448] device hsr_slave_0 left promiscuous mode [ 155.544374][ T4448] device hsr_slave_1 left promiscuous mode [ 155.551597][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.560264][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.568661][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.576051][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.585144][ T4448] device bridge_slave_1 left promiscuous mode [ 155.592139][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.601316][ T4448] device bridge_slave_0 left promiscuous mode [ 155.607476][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.619934][ T4448] device hsr_slave_0 left promiscuous mode [ 155.626107][ T4448] device hsr_slave_1 left promiscuous mode [ 155.633179][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.641752][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.650398][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.659004][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.666491][ T4448] device bridge_slave_1 left promiscuous mode [ 155.673510][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.681599][ T4448] device bridge_slave_0 left promiscuous mode [ 155.687824][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.697450][ T4448] device hsr_slave_0 left promiscuous mode [ 155.703683][ T4448] device hsr_slave_1 left promiscuous mode [ 155.710035][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.717418][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.724973][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.732395][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.740487][ T4448] device bridge_slave_1 left promiscuous mode [ 155.746587][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.754498][ T4448] device bridge_slave_0 left promiscuous mode [ 155.760788][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.774405][ T4448] device veth1_macvtap left promiscuous mode [ 155.780473][ T4448] device veth0_macvtap left promiscuous mode [ 155.786472][ T4448] device veth1_vlan left promiscuous mode [ 155.792300][ T4448] device veth0_vlan left promiscuous mode [ 155.798629][ T4448] device veth1_macvtap left promiscuous mode [ 155.804611][ T4448] device veth0_macvtap left promiscuous mode [ 155.810701][ T4448] device veth1_vlan left promiscuous mode [ 155.816458][ T4448] device veth0_vlan left promiscuous mode [ 155.822724][ T4448] device veth1_macvtap left promiscuous mode [ 155.829009][ T4448] device veth0_macvtap left promiscuous mode [ 155.835026][ T4448] device veth1_vlan left promiscuous mode [ 155.841036][ T4448] device veth0_vlan left promiscuous mode [ 155.847162][ T4448] device veth1_macvtap left promiscuous mode [ 155.854046][ T4448] device veth0_macvtap left promiscuous mode [ 155.860422][ T4448] device veth1_vlan left promiscuous mode [ 155.866180][ T4448] device veth0_vlan left promiscuous mode [ 156.099339][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 156.114076][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 156.123936][ T4448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.135940][ T4448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.173815][ T4448] bond0 (unregistering): Released all slaves [ 156.256777][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 156.267343][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 156.283288][ T4448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.295185][ T4448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.332907][ T4448] bond0 (unregistering): Released all slaves [ 156.446233][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 156.457302][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 156.470534][ T4448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.482428][ T4448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.523474][ T4448] bond0 (unregistering): Released all slaves [ 156.606366][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 156.616607][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 156.626392][ T4448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.640515][ T4448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.679299][ T4448] bond0 (unregistering): Released all slaves [ 156.769810][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 156.782138][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 156.792610][ T4448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.804152][ T4448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.843408][ T4448] bond0 (unregistering): Released all slaves