last executing test programs: 30.339843213s ago: executing program 4 (id=56): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) socket$netlink(0x10, 0x3, 0x12) r4 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_ATTR(r4, &(0x7f0000005340)={0x78, 0x0, 0x0, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, 0x0, 0x0, 0xb, 0x8, 0x1000000}}}, 0x78) lremovexattr(0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) 23.941955935s ago: executing program 4 (id=73): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r1 = accept(r0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8010) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}, 0x30845aa81b581fea) 23.631960491s ago: executing program 4 (id=75): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="260f090f20e0ff26c4e2f9320c1bf30f09ea00000000180066baf80cb83ca41b82ef66bafc0c66b84c2666efb8010000000f01c10f0ff01c0f6b0b", 0x3b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21.792009006s ago: executing program 4 (id=78): syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) socket$inet6(0xa, 0x80002, 0x0) 20.842532154s ago: executing program 4 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r3, &(0x7f0000000780)=""/185, 0xb9, 0x0) 19.916392371s ago: executing program 4 (id=82): r0 = syz_open_procfs(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x0, 0x7, 0x49, 0x3ff, 0x1005, 0x2, 0x1, 0x5, 0x7, 0xc1, 0x4, 0x2, 0x2, 0x2, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x1, 0x9, 0x888f, 0x1, 0x6, 0x46, 0x1, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xffffffffffbfffb7, 0xfffffffffffffffa, 0x2, 0xd, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x10, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x100000004, 0x1, 0xab6, 0x0, 0x4, 0x0, 0x9, 0xb, 0xff, 0x6, 0x28000000, 0x5, 0x9, 0x3, 0x7, 0x80000000f6, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd4, 0x5, 0x10, 0x20005, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x9, 0xfffffffffffffffe, 0xb692, 0xcd, 0x8, 0x1000003]}) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) read$eventfd(r0, 0x0, 0x0) 8.91777642s ago: executing program 1 (id=110): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) socket$inet(0x10, 0x3, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 8.347424521s ago: executing program 2 (id=113): syz_clone(0x7caa1480, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r4 = socket$pptp(0x18, 0x1, 0x2) getpeername(r4, 0x0, &(0x7f00000000c0)) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 6.81208866s ago: executing program 2 (id=117): syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0xf8, @none, "ebcd0f74ccbccd0e2c0fdffcdd8381a671d85b1b06611c75698fa5356de2bc6e41f44ae480ccd56b04b31e5519101567495ea4f5fbdf46d908d5f6d55b822b0462d69b04092b737276d12c6a4e801f775fe574b950ecea78858f5c15c9fe44a46cf45c20817f2485341a318a107df9fabf312023d18da86afff90367a08e42ba48ef7fc43835b05cd269278391d721bad754ea1e423d7ba9237b999bb0e11828c8723b192b4a5210562453987c2eb4a291119851adf6c110f34d73f4f348f168c92121c0295c921e284ad32f41fd2890714ec08837052c1d0a6cdda2ae191b6951511b34409ac6448c38376490e9a76a30812a5485057a66"}}}, 0x102) 6.740909442s ago: executing program 2 (id=118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}}) 5.735948651s ago: executing program 2 (id=120): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000000c0)={0x30, 0x6, 0x0, {0x1, 0x5, 0x7, 0x0, '$b%#{.)'}}, 0x30) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) socket$inet6(0x10, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 5.547088715s ago: executing program 2 (id=121): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56e, 0x11c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x4, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x89}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "4d36f5f8"}]}}, 0x0}, 0x0) 4.975951955s ago: executing program 1 (id=123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000140)}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x5, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 4.975748645s ago: executing program 0 (id=124): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e000102000000000000000000", @ANYRES8=r0], 0x1c}}, 0x0) 4.925385856s ago: executing program 0 (id=125): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) 4.304306258s ago: executing program 1 (id=126): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000004c0)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x6, @b={0x8, 0x5, 0x1, 0x8, {0x1, "13"}, 0x2}}, 0xa) 4.281900318s ago: executing program 32 (id=82): r0 = syz_open_procfs(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x0, 0x7, 0x49, 0x3ff, 0x1005, 0x2, 0x1, 0x5, 0x7, 0xc1, 0x4, 0x2, 0x2, 0x2, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x1, 0x9, 0x888f, 0x1, 0x6, 0x46, 0x1, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xffffffffffbfffb7, 0xfffffffffffffffa, 0x2, 0xd, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x10, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x100000004, 0x1, 0xab6, 0x0, 0x4, 0x0, 0x9, 0xb, 0xff, 0x6, 0x28000000, 0x5, 0x9, 0x3, 0x7, 0x80000000f6, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd4, 0x5, 0x10, 0x20005, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x9, 0xfffffffffffffffe, 0xb692, 0xcd, 0x8, 0x1000003]}) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) read$eventfd(r0, 0x0, 0x0) 4.234681229s ago: executing program 3 (id=128): close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r0, r0, 0x2, r2, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000200)={0x0, "63ff8791919a5b70f918110cd2e1f7fbd15ec7918e806deb14c0f82379b49307", 0x3, 0x1, 0x3, 0xcd5, 0x4, 0x4, 0x400, 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 3.491436203s ago: executing program 1 (id=129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f00000003c0)=0x887) 3.252606608s ago: executing program 3 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, 0x0, 0x24040000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x841}, 0x84) 2.315413466s ago: executing program 3 (id=131): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x48100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x11, 0x80}, 0x0, 0x2000040e, 0x7fffffff, {0x74, 0xf}, 0x80, 0x2}) 2.313703966s ago: executing program 2 (id=132): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="08000000010000", 0x7) userfaultfd(0x80001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x2f, &(0x7f0000001240)={@random="4e775a5feb36", @multicast, @val={@val={0x88a8, 0x7, 0x1}, {0x8100, 0x3, 0x1, 0x4}}, {@generic={0x88f7, "17b8d70ae6673e369df9ae301303b9f429f1c38792d5ac97ef"}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) 1.411712553s ago: executing program 1 (id=135): r0 = socket(0xa, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 1.326978595s ago: executing program 3 (id=136): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x1, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x75, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}, 0xffffffff}], 0x1, 0x10000, 0x0) 416.905442ms ago: executing program 0 (id=137): syz_open_dev$dri(0x0, 0x2000008, 0x3) unshare(0x24020400) open(0x0, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={0x0}, 0x118}, 0x81) 316.017964ms ago: executing program 3 (id=138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x84, 0x4, 0x5, 0x0, 0x9, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x4, 0x3, 0x44, '\x00', 0x4, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 299.642664ms ago: executing program 0 (id=139): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)="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", 0x117}, {&(0x7f00000005c0)="fc79ea35d065b9ab3476a577889a62263064a4f9365db73c96a2400dc5e53ae73f60b7254d3278aa75b0a65755395ca9de7ecf950a347b85775287a2fae0c370b5829b030c08d2571c104a342e4d1050b0422de409d7cb8a94b330cc7d125cf20f442f12e5cfc948aa28", 0x6a}, {&(0x7f0000000900)="ea47bc5a315cb2157880ce304c1abce402167fd4bedfea9bbcc20cf6de0308c26ade72d36e2f01eb0e20a7b506b3c21e39c540cd8c10f12cd3bcd024240058198d7b5ab8b13a401e0ef540e84c344fc9ef33cc7a03b39d275822c8042bbac5b0553282a5931d458a28949a6540655dff4ccb62c28b165fe9fee71d10d88000ec0db22336ed6b6db60d2d766d0f736e", 0x8f}, {&(0x7f00000009c0)="8465f974b3e02d242b46ef902928809312de5adb9fc3efedeb11c99628cfeec4a7918887ba379f68ffaf7e88157baf179d50cd31c4faacfbaf87f7c30c6ffbed1bf304c2b3e2cf5e9351d8c861e3072379e113511a8199ffffe0c171582cbc39f2c1c2c7b4dae0d4dc7b2c27d23175e14043b0b5ab1f0441460fa161766205fc4522e3c5dd17b8f61bb2ddea83db1750", 0x90}], 0x4, 0x0, 0x0, 0x4000014}], 0x1, 0x4c885) recvmmsg(r1, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f00000052c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x400101c3, 0x0) 160.684427ms ago: executing program 3 (id=140): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) 0s ago: executing program 0 (id=141): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r1, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) r2 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="d8", 0x1, r2) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r2) openat$snapshot(0xffffffffffffff9c, 0x0, 0x40040, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) readv(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. [ 49.893854][ T4171] cgroup: Unknown subsys name 'net' [ 49.996527][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.182983][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.381912][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 52.476531][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.483875][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.491940][ T4196] device bridge_slave_0 entered promiscuous mode [ 52.535120][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.542322][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.549860][ T4196] device bridge_slave_1 entered promiscuous mode [ 52.641873][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.668077][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 52.685017][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.699934][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 52.709000][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 52.739634][ T4196] team0: Port device team_slave_0 added [ 52.764918][ T4196] team0: Port device team_slave_1 added [ 52.781963][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 52.829311][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.836403][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.862312][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.886020][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.893275][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.919532][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.974054][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.981116][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.989548][ T4187] device bridge_slave_0 entered promiscuous mode [ 52.998629][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.005983][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.014098][ T4181] device bridge_slave_0 entered promiscuous mode [ 53.038433][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.045735][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.053909][ T4187] device bridge_slave_1 entered promiscuous mode [ 53.060841][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.068038][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.075662][ T4181] device bridge_slave_1 entered promiscuous mode [ 53.085607][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.092694][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.100285][ T4190] device bridge_slave_0 entered promiscuous mode [ 53.134572][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.141841][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.149390][ T4190] device bridge_slave_1 entered promiscuous mode [ 53.158650][ T4196] device hsr_slave_0 entered promiscuous mode [ 53.165516][ T4196] device hsr_slave_1 entered promiscuous mode [ 53.206988][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.217810][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.231158][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.240498][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.247784][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.255393][ T4185] device bridge_slave_0 entered promiscuous mode [ 53.271954][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.285730][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.296600][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.315036][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.322192][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.329779][ T4185] device bridge_slave_1 entered promiscuous mode [ 53.388256][ T4181] team0: Port device team_slave_0 added [ 53.405597][ T4190] team0: Port device team_slave_0 added [ 53.416442][ T4187] team0: Port device team_slave_0 added [ 53.424038][ T4187] team0: Port device team_slave_1 added [ 53.430822][ T4181] team0: Port device team_slave_1 added [ 53.438145][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.449576][ T4190] team0: Port device team_slave_1 added [ 53.481560][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.518918][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.525891][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.552139][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.566429][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.573872][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.599803][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.611144][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.618349][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.644541][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.656166][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.663193][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.689220][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.722612][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.729560][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.755560][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.767083][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.774276][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.800187][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.813450][ T4185] team0: Port device team_slave_0 added [ 53.840560][ T4185] team0: Port device team_slave_1 added [ 53.865618][ T4181] device hsr_slave_0 entered promiscuous mode [ 53.872664][ T4181] device hsr_slave_1 entered promiscuous mode [ 53.879148][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.887035][ T4181] Cannot create hsr debugfs directory [ 53.921743][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.928691][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.954797][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.969086][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.976116][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.002164][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.056716][ T4187] device hsr_slave_0 entered promiscuous mode [ 54.063417][ T4187] device hsr_slave_1 entered promiscuous mode [ 54.069873][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.077583][ T4187] Cannot create hsr debugfs directory [ 54.086102][ T4190] device hsr_slave_0 entered promiscuous mode [ 54.092864][ T4190] device hsr_slave_1 entered promiscuous mode [ 54.099238][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.107024][ T4190] Cannot create hsr debugfs directory [ 54.186259][ T4185] device hsr_slave_0 entered promiscuous mode [ 54.192972][ T4185] device hsr_slave_1 entered promiscuous mode [ 54.199414][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.207195][ T4185] Cannot create hsr debugfs directory [ 54.233864][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.242057][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 54.242082][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 54.248667][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 54.260205][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 54.266333][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 54.268361][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.304541][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.352830][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.468165][ T4181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.476552][ T4181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.491642][ T4181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.500345][ T4181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.583674][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.598073][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.611023][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.623852][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.647835][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.674195][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.692994][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.702108][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.711292][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.723010][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.744457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.753661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.763288][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.770442][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.779273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.787817][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.800095][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.811482][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.819975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.828869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.837912][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.845005][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.891123][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.900149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.909661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.917912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.928934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.952999][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.963778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.973775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.982258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.990690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.999428][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.006497][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.018349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.026912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.036171][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.043257][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.050876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.062688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.070907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.082304][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.092044][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.124522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.134972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.144223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.153070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.161646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.162298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.178281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.186806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.195325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.204201][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.232146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.240411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.250455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.259305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.269226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.280628][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.297713][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.309515][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.320792][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.347465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.356444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.374807][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.400034][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.417512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.429182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.474469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.484111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.498157][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.505272][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.520560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.529472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.538256][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.545339][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.555115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.563066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.570993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.580475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.589092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.603572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.619037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.649049][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.669385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.677550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.687728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.696978][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.704059][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.712661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.721077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.729616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.737846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.747365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.762571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.771260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.779989][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.787073][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.801273][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.812767][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.830786][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.838767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.847874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.856934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.865048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.872823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.886940][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.919462][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.930316][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.939121][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.947050][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.956917][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.972585][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.981073][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.990261][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.998954][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.007974][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.016494][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.025100][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.033994][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.042951][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.058133][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.066440][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.074162][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.083827][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.099498][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.129831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.150416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.201490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.210151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.219476][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.226591][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.234883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.243776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.252581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.261048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.270144][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.277230][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.285416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.294330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.303253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.312033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.320237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.321880][ T4255] Bluetooth: hci4: command 0x041b tx timeout [ 56.328477][ T1111] Bluetooth: hci3: command 0x041b tx timeout [ 56.340860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.349144][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 56.361976][ T1111] Bluetooth: hci1: command 0x041b tx timeout [ 56.368048][ T1111] Bluetooth: hci2: command 0x041b tx timeout [ 56.368887][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.382517][ T4196] device veth0_vlan entered promiscuous mode [ 56.404977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.420142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.428672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.441063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.455143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.463227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.470701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.479782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.489763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.498342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.522422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.530094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.538372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.547556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.559680][ T4181] device veth0_vlan entered promiscuous mode [ 56.580577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.593983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.606464][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.619658][ T4196] device veth1_vlan entered promiscuous mode [ 56.635424][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.652587][ T4181] device veth1_vlan entered promiscuous mode [ 56.747354][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.756588][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.766300][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.775007][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.784420][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.792972][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.803424][ T4196] device veth0_macvtap entered promiscuous mode [ 56.813342][ T4196] device veth1_macvtap entered promiscuous mode [ 56.827108][ T4181] device veth0_macvtap entered promiscuous mode [ 56.836831][ T4181] device veth1_macvtap entered promiscuous mode [ 56.858543][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.890783][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.903063][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.912493][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.920483][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.928881][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.937980][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.946868][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.957173][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.987200][ T4187] device veth0_vlan entered promiscuous mode [ 56.995242][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.006760][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.018614][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.026363][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.034874][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.044095][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.053146][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.061240][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.070188][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.082772][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.096159][ T4187] device veth1_vlan entered promiscuous mode [ 57.104832][ T4190] device veth0_vlan entered promiscuous mode [ 57.113159][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.124431][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.135335][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.151321][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.159399][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.167961][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.176882][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.185180][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.193245][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.202720][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.211220][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.218814][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.226910][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.235585][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.247018][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.255999][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.264922][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.273831][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.292780][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.310136][ T4190] device veth1_vlan entered promiscuous mode [ 57.324655][ T4181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.334147][ T4181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.342974][ T4181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.351832][ T4181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.409733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.419974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.428425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.437719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.447651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.456369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.464982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.473612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.482980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.493374][ T4187] device veth0_macvtap entered promiscuous mode [ 57.505620][ T4190] device veth0_macvtap entered promiscuous mode [ 57.547598][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.556021][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.564394][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.575454][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.584930][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.592882][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.601925][ T4187] device veth1_macvtap entered promiscuous mode [ 57.617535][ T4190] device veth1_macvtap entered promiscuous mode [ 57.625943][ T4185] device veth0_vlan entered promiscuous mode [ 57.678478][ T4185] device veth1_vlan entered promiscuous mode [ 57.695204][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.706989][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.717132][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.729427][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.740670][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.758477][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.769520][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.779907][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.790825][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.800653][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.811313][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.822490][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.832362][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.843495][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.854532][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.865008][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.875723][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.885948][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.894649][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.903847][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.912440][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.920884][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.929568][ T650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.944226][ T650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.952436][ T650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.972618][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.981925][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.988817][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.997975][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.008962][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.017684][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.027748][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.039319][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.049192][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.059738][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.069736][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.080376][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.093710][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.101614][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.109353][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.118570][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.127312][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.165692][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.176237][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.185012][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.194354][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.212142][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.223731][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.233813][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.233853][ T4185] device veth0_macvtap entered promiscuous mode [ 58.252797][ T650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.259664][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.278322][ T650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.290100][ T4185] device veth1_macvtap entered promiscuous mode [ 58.312694][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.322895][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.331976][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.339922][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.370185][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.386146][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.397222][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.408796][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 58.412276][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 58.415166][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 58.427128][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.437856][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.448636][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 58.450364][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.455003][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 58.472206][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.483708][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.496730][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.521586][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.530271][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.555089][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.567626][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.584833][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.600798][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.610850][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.621756][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.631695][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.644407][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.656424][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.676615][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.688033][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.688086][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.718991][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.728989][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.742974][ T4300] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.744378][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.769069][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.778165][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.805620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.838778][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.882267][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.901288][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.942618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.956062][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.969365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.004635][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.019808][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.061478][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.082460][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.110961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.119451][ T650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.136414][ T650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.263824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.276724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.375402][ T4313] ======================================================= [ 59.375402][ T4313] WARNING: The mand mount option has been deprecated and [ 59.375402][ T4313] and is ignored by this kernel. Remove the mand [ 59.375402][ T4313] option from the mount to silence this warning. [ 59.375402][ T4313] ======================================================= [ 59.420302][ T4313] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.433098][ T4313] blk_update_request: I/O error, dev loop3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.444471][ T4313] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 59.455644][ T4313] blk_update_request: I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.466983][ T4313] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 59.476652][ T4313] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 59.484390][ T4313] UDF-fs: Scanning with blocksize 512 failed [ 59.493348][ T4313] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.505231][ T4313] blk_update_request: I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.516523][ T4313] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 59.526902][ T4313] blk_update_request: I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.538278][ T4313] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 59.547933][ T4313] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 59.555668][ T4313] UDF-fs: Scanning with blocksize 1024 failed [ 59.563762][ T4313] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.575641][ T4313] blk_update_request: I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.586997][ T4313] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 59.597219][ T4313] blk_update_request: I/O error, dev loop3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.608572][ T4313] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 59.618228][ T4313] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 59.625967][ T4313] UDF-fs: Scanning with blocksize 2048 failed [ 59.633816][ T4313] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 59.645658][ T4313] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 59.656071][ T4313] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 59.691490][ T4313] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 59.699278][ T4313] UDF-fs: Scanning with blocksize 4096 failed [ 59.705399][ T4313] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 59.894759][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 59.911374][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 59.921362][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 59.931374][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 59.941364][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 59.950407][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 59.959363][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 59.968397][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 59.977340][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 59.986286][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 60.152696][ T4328] ubi31: attaching mtd0 [ 60.163820][ T4328] ubi31: scanning is finished [ 60.168561][ T4328] ubi31: empty MTD device detected [ 60.734488][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 60.740670][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 60.746802][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 60.752872][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 60.761908][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 60.777003][ T4328] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 66.581552][ T4295] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.861722][ T4295] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 67.881300][ T4295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.897907][ T4295] usb 2-1: Product: syz [ 67.910456][ T4295] usb 2-1: Manufacturer: syz [ 67.917331][ T4438] netlink: 72 bytes leftover after parsing attributes in process `syz.0.42'. [ 68.606364][ T4295] usb 2-1: SerialNumber: syz [ 68.742650][ T4295] usb 2-1: config 0 descriptor?? [ 68.794416][ T4295] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 69.622907][ T4295] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 69.630423][ T4295] sq905c 2-1:0.0: Get version command failed [ 69.661153][ T4295] sq905c: probe of 2-1:0.0 failed with error -110 [ 69.746444][ T4295] usb 2-1: USB disconnect, device number 2 [ 70.561696][ T4454] bond1 (unregistering): Released all slaves [ 71.172768][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.191597][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.532406][ T4472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 72.271472][ T4256] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.947056][ T4497] vivid-000: disconnect [ 72.962752][ T4256] usb 3-1: Using ep0 maxpacket: 16 [ 73.516031][ T4256] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 73.638500][ T4494] vivid-000: reconnect [ 73.805723][ T4256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.820473][ T4256] usb 3-1: Product: syz [ 73.949500][ T4256] usb 3-1: Manufacturer: syz [ 73.954290][ T4256] usb 3-1: SerialNumber: syz [ 74.605991][ T4256] r8152-cfgselector 3-1: config 0 descriptor?? [ 74.643824][ T4256] r8152-cfgselector 3-1: can't set config #0, error -71 [ 74.711552][ T4256] r8152-cfgselector 3-1: Unknown version 0x0000 [ 74.721101][ T4256] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 76.243602][ T1108] cfg80211: failed to load regulatory.db [ 82.165373][ T4579] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 84.654114][ T4596] usb usb8: usbfs: process 4596 (syz.2.87) did not claim interface 0 before use [ 84.775367][ T26] audit: type=1326 audit(1757281514.168:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4595 comm="syz.0.88" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f670d066be9 code=0x0 [ 87.464596][ T4618] netlink: 56 bytes leftover after parsing attributes in process `syz.3.94'. [ 89.618592][ T4641] device bridge1 entered promiscuous mode [ 90.191543][ T4233] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 90.582391][ T4233] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 90.622103][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.825886][ T4233] usb 4-1: config 0 descriptor?? [ 91.191855][ T4233] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 91.260974][ T4233] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 91.497429][ T4661] nvme_fabrics: missing parameter 'transport=%s' [ 91.504103][ T4661] nvme_fabrics: missing parameter 'nqn=%s' [ 91.613553][ T4233] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 91.621073][ T4233] [drm] Initialized udl on minor 2 [ 93.043225][ T4233] [drm:udl_get_edid_block] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 93.052986][ T4233] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 93.067877][ T4233] usb 4-1: USB disconnect, device number 2 [ 93.078161][ T4344] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 93.088913][ T4344] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 93.097736][ T4344] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 93.466350][ T4685] devtmpfs: Unknown parameter '' [ 93.593869][ T4687] netlink: 'syz.3.112': attribute type 29 has an invalid length. [ 93.694229][ T4687] netlink: 'syz.3.112': attribute type 29 has an invalid length. [ 93.722178][ T4687] netlink: 'syz.3.112': attribute type 29 has an invalid length. [ 96.332451][ T26] audit: type=1326 audit(1757281525.738:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.2.120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c89673be9 code=0x0 [ 96.359187][ T4711] netlink: 'syz.3.119': attribute type 4 has an invalid length. [ 96.590096][ T4709] netlink: 'syz.3.119': attribute type 4 has an invalid length. [ 96.731465][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.981430][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 97.111842][ T7] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 97.147214][ T7] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 97.217137][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 97.296650][ T7] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 97.400177][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.496641][ T7] usb 3-1: config 0 descriptor?? [ 98.257248][ T7] elecom 0003:056E:011C.0001: hidraw0: USB HID vf4.f6 Device [HID 056e:011c] on usb-dummy_hcd.2-1/input0 [ 98.649777][ T7] usb 3-1: USB disconnect, device number 3 [ 99.792678][ T4753] fido_id[4753]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 100.807539][ T4295] Bluetooth: hci5: command 0x0409 tx timeout [ 101.563349][ T4745] chnl_net:caif_netlink_parms(): no params data found [ 101.965928][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.982767][ T4745] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.013185][ T4800] [ 102.015536][ T4800] ====================================================== [ 102.022543][ T4800] WARNING: possible circular locking dependency detected [ 102.029564][ T4800] syzkaller #0 Not tainted [ 102.033971][ T4800] ------------------------------------------------------ [ 102.040980][ T4800] syz.0.141/4800 is trying to acquire lock: [ 102.046863][ T4800] ffff888073198b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 102.057309][ T4800] [ 102.057309][ T4800] but task is already holding lock: [ 102.064666][ T4800] ffff888073198ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 102.073978][ T4800] [ 102.073978][ T4800] which lock already depends on the new lock. [ 102.073978][ T4800] [ 102.084370][ T4800] [ 102.084370][ T4800] the existing dependency chain (in reverse order) is: [ 102.093381][ T4800] [ 102.093381][ T4800] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 102.101026][ T4800] __mutex_lock_common+0x1eb/0x2390 [ 102.106748][ T4800] mutex_lock_nested+0x17/0x20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 102.112035][ T4800] hci_dev_do_close+0x5f/0x1030 [ 102.117406][ T4800] hci_rfkill_set_block+0x10a/0x190 [ 102.123123][ T4800] rfkill_set_block+0x1c6/0x420 [ 102.128582][ T4800] rfkill_fop_write+0x458/0x560 [ 102.133954][ T4800] vfs_write+0x300/0xd00 [ 102.138715][ T4800] ksys_write+0x14d/0x250 [ 102.143564][ T4800] do_syscall_64+0x4c/0xa0 [ 102.148496][ T4800] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.154909][ T4800] [ 102.154909][ T4800] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 102.162905][ T4800] __mutex_lock_common+0x1eb/0x2390 [ 102.168627][ T4800] mutex_lock_nested+0x17/0x20 [ 102.173994][ T4800] rfkill_register+0x33/0x8a0 [ 102.179203][ T4800] hci_register_dev+0x452/0x970 [ 102.184576][ T4800] vhci_create_device+0x32c/0x5c0 [ 102.190120][ T4800] vhci_write+0x391/0x450 [ 102.195078][ T4800] vfs_write+0x712/0xd00 [ 102.199847][ T4800] ksys_write+0x14d/0x250 [ 102.201453][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.204696][ T4800] do_syscall_64+0x4c/0xa0 [ 102.217055][ T4800] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.223485][ T4800] [ 102.223485][ T4800] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 102.231347][ T4800] __mutex_lock_common+0x1eb/0x2390 [ 102.237066][ T4800] mutex_lock_nested+0x17/0x20 [ 102.242361][ T4800] vhci_send_frame+0x88/0x100 [ 102.247553][ T4800] hci_send_frame+0x1a9/0x2e0 [ 102.252741][ T4800] hci_tx_work+0x9f9/0x1710 [ 102.257746][ T4800] process_one_work+0x863/0x1000 [ 102.263188][ T4800] worker_thread+0xaa8/0x12a0 [ 102.268370][ T4800] kthread+0x436/0x520 [ 102.272941][ T4800] ret_from_fork+0x1f/0x30 [ 102.277861][ T4800] [ 102.277861][ T4800] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 102.287160][ T4800] __lock_acquire+0x2c33/0x7c60 [ 102.292527][ T4800] lock_acquire+0x197/0x3f0 [ 102.297547][ T4800] __flush_work+0xdd/0x1b0 [ 102.302471][ T4800] hci_dev_do_close+0x1e7/0x1030 [ 102.307918][ T4800] hci_rfkill_set_block+0x10a/0x190 [ 102.313625][ T4800] rfkill_set_block+0x1c6/0x420 [ 102.318981][ T4800] rfkill_fop_write+0x458/0x560 [ 102.324335][ T4800] vfs_write+0x300/0xd00 [ 102.329080][ T4800] ksys_write+0x14d/0x250 [ 102.333915][ T4800] do_syscall_64+0x4c/0xa0 [ 102.338838][ T4800] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.345238][ T4800] [ 102.345238][ T4800] other info that might help us debug this: [ 102.345238][ T4800] [ 102.355459][ T4800] Chain exists of: [ 102.355459][ T4800] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 102.355459][ T4800] [ 102.370377][ T4800] Possible unsafe locking scenario: [ 102.370377][ T4800] [ 102.377809][ T4800] CPU0 CPU1 [ 102.383153][ T4800] ---- ---- [ 102.388493][ T4800] lock(&hdev->req_lock); [ 102.392889][ T4800] lock(rfkill_global_mutex); [ 102.400147][ T4800] lock(&hdev->req_lock); [ 102.407061][ T4800] lock((work_completion)(&hdev->tx_work)); [ 102.413019][ T4800] [ 102.413019][ T4800] *** DEADLOCK *** [ 102.413019][ T4800] [ 102.421141][ T4800] 2 locks held by syz.0.141/4800: [ 102.426141][ T4800] #0: ffffffff8d4c0068 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 102.436234][ T4800] #1: ffff888073198ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 102.445966][ T4800] [ 102.445966][ T4800] stack backtrace: [ 102.451847][ T4800] CPU: 1 PID: 4800 Comm: syz.0.141 Not tainted syzkaller #0 [ 102.459108][ T4800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.469156][ T4800] Call Trace: [ 102.472418][ T4800] [ 102.475333][ T4800] dump_stack_lvl+0x168/0x230 [ 102.479998][ T4800] ? load_image+0x3b0/0x3b0 [ 102.484483][ T4800] ? show_regs_print_info+0x20/0x20 [ 102.489783][ T4800] ? print_circular_bug+0x12b/0x1a0 [ 102.494964][ T4800] check_noncircular+0x274/0x310 [ 102.499885][ T4800] ? add_chain_block+0x940/0x940 [ 102.504800][ T4800] ? lockdep_lock+0xdc/0x1e0 [ 102.509382][ T4800] ? mark_lock+0x94/0x320 [ 102.513695][ T4800] __lock_acquire+0x2c33/0x7c60 [ 102.518532][ T4800] ? lockdep_unlock+0x134/0x2d0 [ 102.523362][ T4800] ? lockdep_lock+0x1e0/0x1e0 [ 102.528020][ T4800] ? mark_lock+0x94/0x320 [ 102.532334][ T4800] ? verify_lock_unused+0x140/0x140 [ 102.537514][ T4800] ? __lock_acquire+0x12d9/0x7c60 [ 102.542534][ T4800] lock_acquire+0x197/0x3f0 [ 102.547019][ T4800] ? __flush_work+0xc1/0x1b0 [ 102.551590][ T4800] ? __mutex_trylock_common+0x14f/0x250 [ 102.557119][ T4800] ? read_lock_is_recursive+0x10/0x10 [ 102.562476][ T4800] ? lock_chain_count+0x20/0x20 [ 102.567310][ T4800] ? mark_lock+0x94/0x320 [ 102.571623][ T4800] __flush_work+0xdd/0x1b0 [ 102.576023][ T4800] ? __flush_work+0xc1/0x1b0 [ 102.580596][ T4800] ? flush_work+0x20/0x20 [ 102.584905][ T4800] ? hci_leds_update_powered+0x148/0x160 [ 102.590524][ T4800] ? rcu_lock_release+0x5/0x20 [ 102.595273][ T4800] ? __lock_acquire+0x7c60/0x7c60 [ 102.600287][ T4800] hci_dev_do_close+0x1e7/0x1030 [ 102.605215][ T4800] ? _raw_spin_unlock+0x40/0x40 [ 102.610054][ T4800] hci_rfkill_set_block+0x10a/0x190 [ 102.615234][ T4800] ? rcu_lock_release+0x20/0x20 [ 102.620065][ T4800] rfkill_set_block+0x1c6/0x420 [ 102.624900][ T4800] rfkill_fop_write+0x458/0x560 [ 102.629735][ T4800] ? rfkill_fop_read+0x4b0/0x4b0 [ 102.634657][ T4800] ? common_file_perm+0x130/0x1c0 [ 102.639663][ T4800] ? fsnotify_perm+0x5d/0x560 [ 102.644321][ T4800] ? security_file_permission+0x75/0xa0 [ 102.649847][ T4800] ? rfkill_fop_read+0x4b0/0x4b0 [ 102.654767][ T4800] vfs_write+0x300/0xd00 [ 102.658993][ T4800] ? file_end_write+0x250/0x250 [ 102.663830][ T4800] ? __fget_files+0x40f/0x480 [ 102.668487][ T4800] ? __fdget_pos+0x1e2/0x370 [ 102.673054][ T4800] ? ksys_write+0x71/0x250 [ 102.677452][ T4800] ksys_write+0x14d/0x250 [ 102.681944][ T4800] ? __ia32_sys_read+0x80/0x80 [ 102.686692][ T4800] ? lockdep_hardirqs_on+0x94/0x140 [ 102.691875][ T4800] do_syscall_64+0x4c/0xa0 [ 102.696292][ T4800] ? clear_bhb_loop+0x30/0x80 [ 102.700965][ T4800] ? clear_bhb_loop+0x30/0x80 [ 102.705622][ T4800] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.711509][ T4800] RIP: 0033:0x7f670d066be9 [ 102.715911][ T4800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.735498][ T4800] RSP: 002b:00007f670b2ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.743897][ T4800] RAX: ffffffffffffffda RBX: 00007f670d29e090 RCX: 00007f670d066be9 [ 102.751850][ T4800] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000004 [ 102.759814][ T4800] RBP: 00007f670d0e9e19 R08: 0000000000000000 R09: 0000000000000000 [ 102.767764][ T4800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.775715][ T4800] R13: 00007f670d29e128 R14: 00007f670d29e090 R15: 00007ffc406fbe48 [ 102.783673][ T4800] [ 102.794567][ T4745] device bridge_slave_0 entered promiscuous mode [ 102.881395][ T4344] Bluetooth: hci5: command 0x041b tx timeout [ 102.959358][ T4799] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 102.972226][ T4799] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 103.741831][ T4515] device bridge_slave_0 left promiscuous mode [ 103.747994][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.772905][ T4515] bond0 (unregistering): Released all slaves [ 104.217582][ T4515] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.284041][ T4515] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.354153][ T4515] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.404870][ T4515] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.485565][ T4515] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.534928][ T4515] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.586309][ T4515] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.640797][ T4515] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.717654][ T4515] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.745223][ T4515] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.805253][ T4515] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.856769][ T4515] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.928956][ T4515] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.987862][ T4515] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.034817][ T4515] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.084902][ T4515] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.171975][ T4515] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.225736][ T4515] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.255402][ T4515] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.314777][ T4515] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.092088][ T4515] IPVS: stopping backup sync thread 4579 ... [ 106.645447][ T4515] device hsr_slave_0 left promiscuous mode [ 106.651874][ T4515] device hsr_slave_1 left promiscuous mode [ 106.658978][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.666435][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.674965][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.683060][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.690577][ T4515] device bridge_slave_1 left promiscuous mode [ 106.696951][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.705329][ T4515] device bridge_slave_0 left promiscuous mode [ 106.711633][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.721799][ T4515] device hsr_slave_0 left promiscuous mode [ 106.727856][ T4515] device hsr_slave_1 left promiscuous mode [ 106.734535][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.742062][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.749445][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.756981][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.764457][ T4515] device bridge_slave_1 left promiscuous mode [ 106.770557][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.778849][ T4515] device bridge_slave_0 left promiscuous mode [ 106.785109][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.795298][ T4515] device hsr_slave_0 left promiscuous mode [ 106.801542][ T4515] device hsr_slave_1 left promiscuous mode [ 106.807602][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.815158][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.822656][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.830021][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.837539][ T4515] device bridge_slave_1 left promiscuous mode [ 106.843654][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.851299][ T4515] device bridge_slave_0 left promiscuous mode [ 106.857584][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.867135][ T4515] device hsr_slave_0 left promiscuous mode [ 106.873496][ T4515] device hsr_slave_1 left promiscuous mode [ 106.879571][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.887075][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.894523][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.902008][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.909380][ T4515] device bridge_slave_1 left promiscuous mode [ 106.915562][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.923233][ T4515] device bridge_slave_0 left promiscuous mode [ 106.929352][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.939173][ T4515] device hsr_slave_0 left promiscuous mode [ 106.945380][ T4515] device hsr_slave_1 left promiscuous mode [ 106.951680][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.959068][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.966757][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.975064][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.982548][ T4515] device bridge_slave_1 left promiscuous mode [ 106.988651][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.996485][ T4515] device bridge_slave_0 left promiscuous mode [ 107.002738][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.015317][ T4515] device veth1_macvtap left promiscuous mode [ 107.021308][ T4515] device veth0_macvtap left promiscuous mode [ 107.027376][ T4515] device veth1_vlan left promiscuous mode [ 107.033234][ T4515] device veth0_vlan left promiscuous mode [ 107.039378][ T4515] device veth1_macvtap left promiscuous mode [ 107.045417][ T4515] device veth0_macvtap left promiscuous mode [ 107.051577][ T4515] device veth1_vlan left promiscuous mode [ 107.057307][ T4515] device veth0_vlan left promiscuous mode [ 107.063673][ T4515] device veth1_macvtap left promiscuous mode [ 107.069660][ T4515] device veth0_macvtap left promiscuous mode [ 107.075962][ T4515] device veth1_vlan left promiscuous mode [ 107.081969][ T4515] device veth0_vlan left promiscuous mode [ 107.088059][ T4515] device veth1_macvtap left promiscuous mode [ 107.094259][ T4515] device veth0_macvtap left promiscuous mode [ 107.100254][ T4515] device veth1_vlan left promiscuous mode [ 107.106226][ T4515] device veth0_vlan left promiscuous mode [ 107.113038][ T4515] device veth1_macvtap left promiscuous mode [ 107.119043][ T4515] device veth0_macvtap left promiscuous mode [ 107.125668][ T4515] device veth1_vlan left promiscuous mode [ 107.131432][ T4515] device veth0_vlan left promiscuous mode [ 107.346744][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 107.357720][ T4515] team0 (unregistering): Port device team_slave_0 removed [ 107.367642][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.379469][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.414509][ T4515] bond0 (unregistering): Released all slaves [ 107.518879][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 107.528433][ T4515] team0 (unregistering): Port device team_slave_0 removed [ 107.537713][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.548597][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.585766][ T4515] bond0 (unregistering): Released all slaves [ 107.662576][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 107.673690][ T4515] team0 (unregistering): Port device team_slave_0 removed [ 107.684158][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.696176][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.728917][ T4515] bond0 (unregistering): Released all slaves [ 107.790703][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 107.800486][ T4515] team0 (unregistering): Port device team_slave_0 removed [ 107.809873][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.822231][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.856431][ T4515] bond0 (unregistering): Released all slaves [ 107.933124][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 107.944055][ T4515] team0 (unregistering): Port device team_slave_0 removed [ 107.955216][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.966785][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.001240][ T4515] bond0 (unregistering): Released all slaves