last executing test programs: 9.275383399s ago: executing program 1 (id=12): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0xe}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 9.112180963s ago: executing program 4 (id=5): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x5, 0x11f4, &(0x7f0000001280)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) 8.082195912s ago: executing program 3 (id=15): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f00000002c0)=ANY=[], 0x0, 0x7ec, &(0x7f0000001580)="$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") syz_mount_image$fuse(0x0, 0x0, 0x400, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 7.784122358s ago: executing program 4 (id=19): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f00000023c0)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 7.501251974s ago: executing program 3 (id=22): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000200)="6fb355bb7c1e85390de40d0df22a", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x17, &(0x7f0000000000), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000000)={0x0, &(0x7f0000000300)}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x4c, r9, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x32}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@{/.-\x00'}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x8040) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'veth0_to_bridge\x00', @multicast}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 5.907740374s ago: executing program 0 (id=26): close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0xb, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5.902800435s ago: executing program 2 (id=27): add_key(&(0x7f00000000c0)='keyring\x00', 0x0, &(0x7f00000003c0)="f2343c0489", 0x5, 0xfffffffffffffffc) 5.63824404s ago: executing program 2 (id=28): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400", 0x2a}], 0x1) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) ftruncate(r7, 0x2007ffb) sendfile(r7, r7, 0x0, 0x1000000201005) 5.567644372s ago: executing program 4 (id=29): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x23b) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x0, 0x80) 5.266082397s ago: executing program 1 (id=30): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04"], 0x10) 5.1438607s ago: executing program 1 (id=31): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x4f27, 0x80000000, 0x4, 0x4, 0x5, 0x5, 0x656b, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x8a, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) 5.092799431s ago: executing program 1 (id=32): r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x400001) r1 = syz_io_uring_setup(0x34b7, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0xf0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x10) openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x88081) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) openat$fb0(0xffffff9c, &(0x7f00000002c0), 0x44000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) socket$kcm(0x10, 0x2, 0x0) 3.08401986s ago: executing program 4 (id=33): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x3) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x23a, &(0x7f00000004c0)={0x0, 0x1c2a, 0x10100, 0x2, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = inotify_init1(0x0) read(r6, 0x0, 0x0) 2.991844321s ago: executing program 2 (id=34): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x3) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x23a, &(0x7f00000004c0)={0x0, 0x1c2a, 0x10100, 0x2, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = inotify_init1(0x0) read(r6, 0x0, 0x0) 2.234814376s ago: executing program 1 (id=35): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8931, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x3, 0x143e42) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045520, &(0x7f00000001c0)=0xffffbf7f) 2.213305177s ago: executing program 0 (id=36): syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0xa00}]) 2.154268917s ago: executing program 3 (id=37): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0xd) writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000940)=':', 0xfdef}], 0x1) 2.051741419s ago: executing program 4 (id=38): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept4(r0, 0x0, 0x0, 0x0) 2.0380215s ago: executing program 2 (id=39): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, 0x0, &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x2, 0x7fffff7f}]}) openat$mice(0xffffff9c, &(0x7f0000000080), 0x8000) close_range(r4, 0xffffffffffffffff, 0x0) 1.574810439s ago: executing program 4 (id=40): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 1.327659823s ago: executing program 2 (id=41): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x80000000}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x44}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) bind$x25(0xffffffffffffffff, &(0x7f00000001c0), 0x12) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r4, r3, 0x5}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000007c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000bc0)={r5, "09f73d207a125e0b413323beb5ae24f5"}) bind$x25(0xffffffffffffffff, &(0x7f0000000440), 0x12) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.270134295s ago: executing program 3 (id=42): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x4f27, 0x80000000, 0x4, 0x4, 0x5, 0x5, 0x656b, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x8a, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) 1.204694746s ago: executing program 3 (id=43): openat$ptmx(0xffffffffffffff9c, 0x0, 0x129c81, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00000000"], 0x48) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000400)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1.146978417s ago: executing program 0 (id=44): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000020c0)={0x4, 0x0, 0x20, 0x8001, 0x100, &(0x7f0000000040)="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"}) 939.136781ms ago: executing program 0 (id=45): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) acct(0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 912.111782ms ago: executing program 0 (id=46): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r3 = socket(0xa, 0x5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}], 0x10) sendto$inet6(r3, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 457.30752ms ago: executing program 3 (id=47): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x2, 0x6a113fc2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x48, r1, 0x801, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x48}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3f) ioctl$KVM_CAP_X86_DISABLE_EXITS(r8, 0x4068aea3, &(0x7f0000000300)={0x8f, 0x0, 0x4}) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000bf2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002000000"], 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000005c0)='sys_exit\x00', r10, 0x0, 0x8}, 0x18) getegid() syz_usb_control_io$printer(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 391.755392ms ago: executing program 2 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)) r2 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000004c0)=""/219, 0xdb) r4 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r3, 0x58, &(0x7f0000000200)}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0xa2e65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_FORWARD(r7, 0xc0844123, &(0x7f0000000080)=0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x81, 0x0, 0x4}, 0xc) write$dsp(r1, &(0x7f00000001c0), 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) socket(0x2, 0x80805, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000280)='/proc/crypto\x00', 0x0, 0x0) 700.16µs ago: executing program 1 (id=49): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xff}, 0xe) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) 0s ago: executing program 0 (id=50): r0 = gettid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0xc0843, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) setrlimit(0x7, &(0x7f0000000080)={0x6, 0x3}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x11ffffffffff, 0x2, 0x500, 0x0, 0x1800000000000000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x53bf, 0x0, 0x200000004, 0x4000000000000086, 0x804, 0x3, 0x1}, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010b2abd5000ffdbdf250e00000008000600cac3391bbb14ec62c882", @ANYBLOB="08003c00ee10"], 0x34}}, 0x0) r4 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000700)={0x0, 0x3ca9, 0x10, 0x0, 0x10f}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x6, &(0x7f0000000380), 0x0, 0x4}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. [ 48.861340][ T4174] cgroup: Unknown subsys name 'net' [ 48.968457][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.149822][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.401466][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 51.446869][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 51.597807][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.605412][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.613459][ T4188] device bridge_slave_0 entered promiscuous mode [ 51.624879][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.631977][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.639855][ T4188] device bridge_slave_1 entered promiscuous mode [ 51.652405][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 51.662298][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.669360][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.677146][ T4185] device bridge_slave_0 entered promiscuous mode [ 51.684929][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.692138][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.699763][ T4185] device bridge_slave_1 entered promiscuous mode [ 51.707006][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 51.751824][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.785729][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.801791][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.811060][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 51.835983][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.873018][ T4188] team0: Port device team_slave_0 added [ 51.903487][ T4188] team0: Port device team_slave_1 added [ 51.926519][ T4185] team0: Port device team_slave_0 added [ 51.938402][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.945825][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.953531][ T4191] device bridge_slave_0 entered promiscuous mode [ 51.972253][ T4185] team0: Port device team_slave_1 added [ 51.987237][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.995044][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.003330][ T4191] device bridge_slave_1 entered promiscuous mode [ 52.010501][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.017548][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.025986][ T4198] device bridge_slave_0 entered promiscuous mode [ 52.047164][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.054244][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.080211][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.099371][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.106571][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.114214][ T4198] device bridge_slave_1 entered promiscuous mode [ 52.133615][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.140709][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.166899][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.191007][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.197952][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.224222][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.235453][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.243100][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.250955][ T4189] device bridge_slave_0 entered promiscuous mode [ 52.263576][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.278258][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.285573][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.311747][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.327599][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.334825][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.342954][ T4189] device bridge_slave_1 entered promiscuous mode [ 52.352944][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.363659][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.392838][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.435169][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.447389][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.466250][ T4191] team0: Port device team_slave_0 added [ 52.492468][ T4188] device hsr_slave_0 entered promiscuous mode [ 52.499326][ T4188] device hsr_slave_1 entered promiscuous mode [ 52.507523][ T4191] team0: Port device team_slave_1 added [ 52.516523][ T4185] device hsr_slave_0 entered promiscuous mode [ 52.523234][ T4185] device hsr_slave_1 entered promiscuous mode [ 52.529645][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.537794][ T4185] Cannot create hsr debugfs directory [ 52.549805][ T4198] team0: Port device team_slave_0 added [ 52.583007][ T4198] team0: Port device team_slave_1 added [ 52.589053][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.596550][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.623001][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.636542][ T4189] team0: Port device team_slave_0 added [ 52.645006][ T4189] team0: Port device team_slave_1 added [ 52.667934][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.674933][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.701169][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.759874][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.766975][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.793065][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.805580][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.813520][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.840512][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.855053][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.862152][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.888094][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.907407][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.914541][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.940949][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.995822][ T4191] device hsr_slave_0 entered promiscuous mode [ 53.002781][ T4191] device hsr_slave_1 entered promiscuous mode [ 53.009165][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.017058][ T4191] Cannot create hsr debugfs directory [ 53.039512][ T4198] device hsr_slave_0 entered promiscuous mode [ 53.046439][ T4198] device hsr_slave_1 entered promiscuous mode [ 53.053071][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.060881][ T4198] Cannot create hsr debugfs directory [ 53.105953][ T4189] device hsr_slave_0 entered promiscuous mode [ 53.112663][ T4189] device hsr_slave_1 entered promiscuous mode [ 53.119301][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.127205][ T4189] Cannot create hsr debugfs directory [ 53.180873][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 53.187008][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 53.190095][ T1349] Bluetooth: hci2: command 0x0409 tx timeout [ 53.194465][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 53.260156][ T1349] Bluetooth: hci4: command 0x0409 tx timeout [ 53.355024][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.371612][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.380608][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.392486][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.438780][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.455003][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.464063][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.474797][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.518022][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.527388][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.539492][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.548603][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.627254][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.659226][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.675031][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.689963][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.699177][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.723223][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.736594][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.747014][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.759627][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.781336][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.814559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.826067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.840759][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.854468][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.872336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.880593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.905248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.914927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.924533][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.931829][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.941375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.949945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.959579][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.966664][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.975225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.984486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.993432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.002210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.011021][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.018062][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.030263][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.037092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.046012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.087422][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.099518][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.108535][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.117252][ T1301] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.124337][ T1301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.133267][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.142984][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.151746][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.160319][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.167944][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.176900][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.185956][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.195294][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.219543][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.230407][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.250341][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.259095][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.267896][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.276726][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.285514][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.294044][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.304716][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.313445][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.322475][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.331504][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.339798][ T1301] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.346880][ T1301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.354599][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.363451][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.372094][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.381570][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.389856][ T1301] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.396917][ T1301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.411953][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.421644][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.442960][ T4198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.453547][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.465841][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.475044][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.482749][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.491641][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.499229][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.507710][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.516727][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.524674][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.535059][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.543487][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.552941][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.561437][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.569572][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.583523][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.597207][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.612143][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.640858][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.648163][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.701906][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.720546][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.729271][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.739425][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.746541][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.762101][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.771626][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.780330][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.788924][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.797675][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.806707][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.815808][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.824453][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.831546][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.839280][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.848707][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.857429][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.866252][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.875517][ T1285] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.882607][ T1285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.890520][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.898936][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.907540][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.916570][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.925200][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.933820][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.943195][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.951350][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.963207][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.978806][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.991084][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.012102][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.023208][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.047821][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.057925][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.067241][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.076328][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.085170][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.094389][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.105127][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.113765][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.122577][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.131214][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.139411][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.147929][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.156477][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.165314][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.173628][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.182913][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.191611][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.199537][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.222630][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.245493][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.257482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.265204][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 55.270377][ T4260] Bluetooth: hci3: command 0x041b tx timeout [ 55.276854][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 55.283768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.296578][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 55.303011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.313140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.330638][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.340222][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 55.378433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.401269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.434939][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.447788][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.466473][ T4198] device veth0_vlan entered promiscuous mode [ 55.491913][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.510518][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.519447][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.544944][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.559973][ T4198] device veth1_vlan entered promiscuous mode [ 55.574095][ T4188] device veth0_vlan entered promiscuous mode [ 55.595278][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.603505][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.612131][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.619732][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.637043][ T4188] device veth1_vlan entered promiscuous mode [ 55.658171][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.666231][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.674444][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.683478][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.692239][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.699637][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.707162][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.721878][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.739297][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.779213][ T4198] device veth0_macvtap entered promiscuous mode [ 55.795773][ T4188] device veth0_macvtap entered promiscuous mode [ 55.807467][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.816530][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.825786][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.834811][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.844128][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.853109][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.864574][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.872797][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.883121][ T4198] device veth1_macvtap entered promiscuous mode [ 55.894197][ T4188] device veth1_macvtap entered promiscuous mode [ 55.907549][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.919379][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.934433][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.946394][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.989348][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.998022][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.012084][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.024110][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.035015][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.044910][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.052839][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.067473][ T4189] device veth0_vlan entered promiscuous mode [ 56.075303][ T4191] device veth0_vlan entered promiscuous mode [ 56.087383][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.098487][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.116078][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.123676][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.134152][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.143347][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.152279][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.166336][ T4189] device veth1_vlan entered promiscuous mode [ 56.179121][ T4191] device veth1_vlan entered promiscuous mode [ 56.187138][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.195497][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.203605][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.211921][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.219794][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.229408][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.248764][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.258430][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.267523][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.276488][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.288046][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.299137][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.313803][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.322612][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.331522][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.340283][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.348726][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.375066][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.384568][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.393595][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.403879][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.419026][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.428492][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.437340][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.454886][ T4185] device veth0_vlan entered promiscuous mode [ 56.485491][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.493849][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.503636][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.512350][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.566380][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.581616][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.599756][ T4191] device veth0_macvtap entered promiscuous mode [ 56.623782][ T4185] device veth1_vlan entered promiscuous mode [ 56.631162][ T1285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.634540][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.640737][ T1285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.654840][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.664306][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.673724][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.684978][ T4191] device veth1_macvtap entered promiscuous mode [ 56.693056][ T4189] device veth0_macvtap entered promiscuous mode [ 56.719379][ T4189] device veth1_macvtap entered promiscuous mode [ 56.755048][ T1285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.764036][ T1285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.788878][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.801863][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.812042][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.822756][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.834291][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.843414][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.852481][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.861072][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.868922][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.879031][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.887773][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.906595][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.917203][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.930120][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.941929][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.952247][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.962863][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.974381][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.989565][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.002326][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.012636][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.029068][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.041491][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.051808][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.060849][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.069525][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.078507][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.098010][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.107911][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.117786][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.127608][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.137249][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.146258][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.159146][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.170635][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.181715][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.193233][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.203185][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.213617][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.224802][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.235902][ T4185] device veth0_macvtap entered promiscuous mode [ 57.260264][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.268353][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.273886][ T4293] loop0: detected capacity change from 0 to 128 [ 57.280852][ T1301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.292336][ T1301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.295506][ T1285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.316463][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.327762][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.333082][ T4293] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.340859][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.350597][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 57.364466][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.387325][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 57.394085][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 57.410712][ T4185] device veth1_macvtap entered promiscuous mode [ 57.420607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.425948][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 57.428588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.454546][ T4293] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.470625][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 57.512586][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.531613][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.543345][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.560395][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.570812][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.579437][ T9] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.581566][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.581601][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.581615][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.581623][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.581633][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.583729][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.653740][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.666688][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.675793][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.702550][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.713917][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.714579][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.724585][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.735361][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.747993][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.765816][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.776396][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.786791][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.798048][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.808910][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.854135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.869216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.879830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.892674][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.909441][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.920440][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.946297][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.060827][ T1301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.067390][ T4302] loop2: detected capacity change from 0 to 7 [ 58.068783][ T1301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.084897][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.106218][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.117691][ T4302] loop2: [ 58.132882][ T4302] loop2: partition table partially beyond EOD, truncated [ 58.144115][ T4307] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.190599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.198626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.294299][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.313586][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.360747][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.368751][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.389421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.419239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.433859][ T4309] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 58.447986][ T4309] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 58.500898][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.500944][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.502120][ T1301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.870125][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 58.879236][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 58.888245][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 58.897284][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 58.906319][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 58.916014][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 59.246016][ T4332] loop4: detected capacity change from 0 to 8192 [ 59.340270][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.349408][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.358941][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 59.368092][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 59.669743][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 59.675862][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 59.683674][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 59.695079][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 59.704474][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 59.786339][ T4342] loop3: detected capacity change from 0 to 764 [ 59.894168][ T4342] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 60.225653][ T4359] input: syz1 as /devices/virtual/input/input5 [ 60.589067][ T4368] netlink: 14 bytes leftover after parsing attributes in process `syz.0.24'. [ 60.706931][ T4368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.732413][ T4368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.772529][ T4368] bond0 (unregistering): Released all slaves [ 60.822600][ T4371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 61.839768][ T4373] lo speed is unknown, defaulting to 1000 [ 61.846137][ T4372] device veth0_to_bridge entered promiscuous mode [ 61.886021][ T4373] lo speed is unknown, defaulting to 1000 [ 61.934137][ T4373] lo speed is unknown, defaulting to 1000 [ 61.982185][ T4373] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 62.039919][ T4373] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 62.526755][ T4378] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.534729][ T4378] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.615105][ T4196] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 64.413375][ T4378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.444940][ T4378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.686120][ T4386] syz.4.29 (4386): drop_caches: 1 [ 65.207449][ T4378] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.218176][ T4378] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.228062][ T4378] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.237417][ T4378] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.566172][ T4373] lo speed is unknown, defaulting to 1000 [ 65.604181][ T4373] lo speed is unknown, defaulting to 1000 [ 65.625157][ T4373] lo speed is unknown, defaulting to 1000 [ 65.649202][ T4373] lo speed is unknown, defaulting to 1000 [ 65.657470][ T4373] lo speed is unknown, defaulting to 1000 [ 65.693844][ T4408] loop0: detected capacity change from 0 to 128 [ 65.739062][ T4412] [U] : [ 65.742163][ T4412] [U] [ 65.744870][ T4412] [U] [ 65.747600][ T4412] [U] [ 65.750301][ T4412] [U] [ 65.752998][ T4412] [U] [ 65.755695][ T4412] [U] [ 65.758380][ T4412] [U] [ 65.808987][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 65.819324][ T4196] CPU: 0 PID: 4196 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 65.826888][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.829142][ T4412] [U] [ 65.836954][ T4196] Workqueue: hci0 hci_rx_work [ 65.839648][ T4412] [U] [ 65.844306][ T4196] Call Trace: [ 65.846977][ T4412] [U] [ 65.850220][ T4196] [ 65.852897][ T4412] [U] [ 65.855808][ T4196] dump_stack_lvl+0x168/0x230 [ 65.858490][ T4412] [U] [ 65.863133][ T4196] ? show_regs_print_info+0x20/0x20 [ 65.865806][ T4412] [U] [ 65.870971][ T4196] ? load_image+0x3b0/0x3b0 [ 65.873650][ T4412] [U] [ 65.878125][ T4196] sysfs_create_dir_ns+0x252/0x280 [ 65.880782][ T4412] [U] [ 65.885861][ T4196] ? __lock_acquire+0x7c60/0x7c60 [ 65.893540][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 65.898228][ T4196] ? le_conn_complete_evt+0xcbc/0x1590 [ 65.903693][ T4196] ? hci_event_packet+0xe05/0x12f0 [ 65.908812][ T4196] ? process_one_work+0x863/0x1000 [ 65.913940][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 65.919294][ T4196] kobject_add_internal+0x662/0xd00 [ 65.924485][ T4196] kobject_add+0x152/0x210 [ 65.928887][ T4196] ? kobject_init+0x1d0/0x1d0 [ 65.933574][ T4196] ? klist_children_get+0x50/0x50 [ 65.938672][ T4196] ? get_device_parent+0x121/0x3f0 [ 65.943779][ T4196] device_add+0x483/0xfb0 [ 65.948147][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 65.953072][ T4196] le_conn_complete_evt+0xcbc/0x1590 [ 65.958364][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 65.963462][ T4196] ? __mutex_trylock_common+0x14f/0x250 [ 65.968998][ T4196] hci_le_meta_evt+0x289/0x3b80 [ 65.973830][ T4196] ? hci_event_packet+0x36d/0x12f0 [ 65.979113][ T4196] ? hci_event_packet+0x2e2/0x12f0 [ 65.984218][ T4196] ? __lock_acquire+0x7c60/0x7c60 [ 65.987946][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.989256][ T4196] ? hci_remote_host_features_evt+0x280/0x280 [ 65.989283][ T4196] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 65.989302][ T4196] ? mark_lock+0x94/0x320 [ 65.989321][ T4196] ? mutex_unlock+0x10/0x10 [ 65.989338][ T4196] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 65.989360][ T4196] ? lock_chain_count+0x20/0x20 [ 65.989379][ T4196] ? __rwlock_init+0x140/0x140 [ 65.989399][ T4196] hci_event_packet+0xe05/0x12f0 [ 65.989419][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 65.989444][ T4196] ? rcu_lock_release+0x20/0x20 [ 65.989469][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 65.989490][ T4196] hci_rx_work+0x255/0xa10 [ 65.989521][ T4196] process_one_work+0x863/0x1000 [ 65.989554][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 65.989570][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 65.989592][ T4196] ? _raw_spin_lock_irq+0xab/0xe0 [ 65.989613][ T4196] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 65.989635][ T4196] ? wq_worker_running+0x97/0x170 [ 65.989655][ T4196] worker_thread+0xaa8/0x12a0 [ 65.989672][ T4196] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 65.989692][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 65.989716][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 65.989734][ T4196] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 65.989764][ T4196] kthread+0x436/0x520 [ 65.989780][ T4196] ? rcu_lock_release+0x20/0x20 [ 65.989796][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 65.989813][ T4196] ret_from_fork+0x1f/0x30 [ 65.989840][ T4196] [ 65.992709][ T4196] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 66.151899][ T4196] Bluetooth: hci0: failed to register connection device [ 66.163588][ T4412] [U] [ 66.166298][ T4412] [U] [ 66.168984][ T4412] [U] [ 66.171673][ T4412] [U] [ 66.174364][ T4412] [U] [ 66.177054][ T4412] [U] [ 66.179748][ T4412] [U] [ 66.182438][ T4412] [U] [ 66.185295][ T4412] [U] [ 66.188000][ T4412] [U] [ 66.190699][ T4412] [U] [ 66.193381][ T4412] [U] [ 66.196061][ T4412] [U] [ 66.198803][ T4412] [U] [ 66.201488][ T4412] [U] [ 66.204176][ T4412] [U] [ 66.207284][ T4412] [U] [ 66.209985][ T4412] [U] [ 66.212668][ T4412] [U] [ 66.215354][ T4412] [U] [ 66.218077][ T4412] [U] [ 66.220750][ T4412] [U] [ 66.223423][ T4412] [U] [ 66.226103][ T4412] [U] [ 66.228960][ T4412] [U] [ 66.231654][ T4412] [U] [ 66.234337][ T4412] [U] [ 66.237014][ T4412] [U] [ 66.239688][ T4412] [U] [ 66.242368][ T4412] [U] [ 66.245043][ T4412] [U] [ 66.247719][ T4412] [U] [ 66.251047][ T4412] [U] [ 66.253758][ T4412] [U] [ 66.256448][ T4412] [U] [ 66.259135][ T4412] [U] [ 66.261823][ T4412] [U] [ 66.264518][ T4412] [U] [ 66.267206][ T4412] [U] [ 66.269891][ T4412] [U] [ 66.274322][ T4412] [U] [ 66.277024][ T4412] [U] [ 66.279715][ T4412] [U] [ 66.282402][ T4412] [U] [ 66.285096][ T4412] [U] [ 66.287784][ T4412] [U] [ 66.290472][ T4412] [U] [ 66.293161][ T4412] [U] [ 66.297304][ T4412] [U] [ 66.299999][ T4412] [U] [ 66.302688][ T4412] [U] [ 66.305381][ T4412] [U] [ 66.308068][ T4412] [U] [ 66.310741][ T4412] [U] [ 66.313411][ T4412] [U] [ 66.316099][ T4412] [U] [ 66.333286][ T4412] [U] [ 66.336007][ T4412] [U] [ 66.338689][ T4412] [U] [ 66.341369][ T4412] [U] [ 66.344044][ T4412] [U] [ 66.346718][ T4412] [U] [ 66.349393][ T4412] [U] [ 66.352073][ T4412] [U] [ 66.355891][ T4412] [U] [ 66.358591][ T4412] [U] [ 66.361278][ T4412] [U] [ 66.363973][ T4412] [U] [ 66.366645][ T4412] [U] [ 66.369314][ T4412] [U] [ 66.371972][ T4412] [U] [ 66.374631][ T4412] [U] [ 66.378539][ T4412] [U] [ 66.381242][ T4412] [U] [ 66.383933][ T4412] [U] [ 66.386600][ T4412] [U] [ 66.389260][ T4412] [U] [ 66.391920][ T4412] [U] [ 66.394580][ T4412] [U] [ 66.397251][ T4412] [U] [ 66.401510][ T4412] [U] [ 66.404214][ T4412] [U] [ 66.406898][ T4412] [U] [ 66.409574][ T4412] [U] [ 66.412249][ T4412] [U] [ 66.414927][ T4412] [U] [ 66.417599][ T4412] [U] [ 66.420277][ T4412] [U] [ 66.427714][ T4412] [U] [ 66.430426][ T4412] [U] [ 66.433112][ T4412] [U] [ 66.435802][ T4412] [U] [ 66.438489][ T4412] [U] [ 66.441170][ T4412] [U] [ 66.443873][ T4412] [U] [ 66.446558][ T4412] [U] [ 66.451722][ T4412] [U] [ 66.454427][ T4412] [U] [ 66.457112][ T4412] [U] [ 66.459801][ T4412] [U] [ 66.462488][ T4412] [U] [ 66.465175][ T4412] [U] [ 66.467860][ T4412] [U] [ 66.470552][ T4412] [U] [ 66.475571][ T4412] [U] [ 66.478277][ T4412] [U] [ 66.480971][ T4412] [U] [ 66.483650][ T4412] [U] [ 66.486328][ T4412] [U] [ 66.488996][ T4412] [U] [ 66.491667][ T4412] [U] [ 66.525548][ T4411] [U] [ 66.753366][ T23] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 66.788610][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.843905][ T23] usb 2-1: Product: syz [ 66.849131][ T23] usb 2-1: Manufacturer: syz [ 66.872496][ T23] usb 2-1: SerialNumber: syz [ 66.897303][ T23] usb 2-1: config 0 descriptor?? [ 67.196846][ T4261] usb 2-1: USB disconnect, device number 2 [ 67.860285][ T1327] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.975352][ T4452] process 'syz.0.50' launched './file0' with NULL argv: empty string added [ 68.100347][ T1327] usb 4-1: Using ep0 maxpacket: 32 [ 68.760783][ T4196] [ 68.763141][ T4196] ===================================== [ 68.768671][ T4196] WARNING: bad unlock balance detected! [ 68.774207][ T4196] syzkaller #0 Not tainted [ 68.778608][ T4196] ------------------------------------- [ 68.784137][ T4196] kworker/u5:5/4196 is trying to release lock (&chan->lock) at: [ 68.791765][ T4196] [] l2cap_recv_frame+0xd09/0x7a10 [ 68.798442][ T4196] but there are no more locks to release! [ 68.804148][ T4196] [ 68.804148][ T4196] other info that might help us debug this: [ 68.812276][ T4196] 2 locks held by kworker/u5:5/4196: [ 68.817547][ T4196] #0: ffff888076bdc138 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 68.827914][ T4196] #1: ffffc90002fafd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 68.839439][ T4196] [ 68.839439][ T4196] stack backtrace: [ 68.845307][ T4196] CPU: 0 PID: 4196 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 68.852826][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 68.862866][ T4196] Workqueue: hci3 hci_rx_work [ 68.867551][ T4196] Call Trace: [ 68.870816][ T4196] [ 68.873737][ T4196] dump_stack_lvl+0x168/0x230 [ 68.878431][ T4196] ? show_regs_print_info+0x20/0x20 [ 68.883612][ T4196] ? l2cap_recv_frame+0xd09/0x7a10 [ 68.888701][ T4196] lock_release+0x52f/0x870 [ 68.893181][ T4196] ? l2cap_recv_frame+0xd09/0x7a10 [ 68.898288][ T4196] ? __lock_acquire+0x7c60/0x7c60 [ 68.903291][ T4196] ? lock_chain_count+0x20/0x20 [ 68.908127][ T4196] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 68.914103][ T4196] __mutex_unlock_slowpath+0xb3/0x6a0 [ 68.919457][ T4196] ? __local_bh_enable_ip+0x12a/0x1b0 [ 68.920174][ T1327] usb 4-1: unable to get BOS descriptor or descriptor too short [ 68.924810][ T4196] ? mutex_unlock+0x10/0x10 [ 68.924833][ T4196] ? l2cap_sock_recv_cb+0x18b/0x1e0 [ 68.942085][ T4196] ? l2cap_sock_recv_cb+0x18b/0x1e0 [ 68.947267][ T4196] l2cap_recv_frame+0xd09/0x7a10 [ 68.952186][ T4196] ? l2cap_recv_frag+0x290/0x290 [ 68.957100][ T4196] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 68.962718][ T4196] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 68.968608][ T4196] ? mutex_unlock+0x10/0x10 [ 68.973088][ T4196] ? l2cap_recv_acldata+0x633/0x17c0 [ 68.978357][ T4196] hci_rx_work+0x4a4/0xa10 [ 68.982770][ T4196] process_one_work+0x863/0x1000 [ 68.987686][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 68.993290][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 68.998551][ T4196] ? _raw_spin_lock_irq+0xab/0xe0 [ 69.003560][ T4196] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 69.008908][ T4196] ? wq_worker_running+0x97/0x170 [ 69.013906][ T4196] worker_thread+0xaa8/0x12a0 [ 69.018562][ T4196] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 69.024433][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 69.029611][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 69.034875][ T4196] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 69.040746][ T4196] kthread+0x436/0x520 [ 69.044791][ T4196] ? rcu_lock_release+0x20/0x20 [ 69.049638][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 69.054204][ T4196] ret_from_fork+0x1f/0x30 [ 69.058600][ T4196] [ 70.130088][ T1327] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 70.162173][ T1327] usb 4-1: can't read configurations, error -71 [ 71.181538][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.187858][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.310058][ T4261] Bluetooth: hci0: command 0x0406 tx timeout [ 76.314756][ T13] cfg80211: failed to load regulatory.db