last executing test programs: 23.282246292s ago: executing program 2 (id=59): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r7}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000400)={0x40000018}) epoll_pwait(r4, &(0x7f0000000600)=[{}], 0x1, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x40086602, 0x110e22fff2) 23.144210736s ago: executing program 0 (id=61): setgroups(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r2, r2, 0x0, 0x40000f63c) 21.609860303s ago: executing program 2 (id=62): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000300000000000000080000009500000000000000e1931b4fd4bcdd6e8378cded20bdd34299a0bfad2989929e2975a0b0946d71d44b068c03acdb962498d601a6d069c8a786ba9611a2fdeb701130a9b2f51acc5a705e3510850d4ba4c92ca01fe09ee7d2386d9a41"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x440e0}, 0x48010) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.040100814s ago: executing program 2 (id=74): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0xeb) 13.879441073s ago: executing program 2 (id=75): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402000000028000000000150010001400259070f409000d2000000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee05e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5e08001b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6cce50dd6e4edef3d939acd92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, 0x0) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000540), 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07000000000000000400050000001c000380080004005a0a00000800020020000000080005007183bbda180001801400020073797a5f74756e000000000000000000080005"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x1, 0x2, 0x1f}}) 13.51876858s ago: executing program 3 (id=77): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000010) socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x340440f1) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x12, &(0x7f00000007c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 13.036162199s ago: executing program 3 (id=78): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x80002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x2000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xeeee0000, 0xeeee0000}) 12.744114748s ago: executing program 0 (id=81): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd1}, &(0x7f0000000000)=0x40) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000001f00)) 11.061627511s ago: executing program 0 (id=82): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) socket$tipc(0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000c00)={@loopback, 0x0}, &(0x7f0000002c40)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002c80)=@delqdisc={0x114, 0x25, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xb, 0x7}, {0x10, 0x3}, {0x2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x4c, 0xd8}}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x6, 0x91b8, 0x3, 0x1, 0x0, 0x3, 0x3}}, {0xa, 0x2, [0x8, 0x1ff, 0xfff9]}}, {{0x1c, 0x1, {0x90, 0xe, 0x563, 0x4, 0x0, 0xa, 0x0, 0x5}}, {0xe, 0x2, [0x6, 0x6, 0xfff7, 0x8, 0xe94]}}, {{0x1c, 0x1, {0xab, 0x3, 0x2, 0x7, 0x2, 0x6, 0xc, 0x3}}, {0xa, 0x2, [0x0, 0x7ff, 0x7]}}, {{0x1c, 0x1, {0xff, 0x2, 0x13, 0x5, 0x0, 0x5, 0xfffffff9, 0x5}}, {0xe, 0x2, [0x3, 0x9, 0x4c94, 0x6, 0x2]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}, @TCA_RATE={0x6, 0x5, {0x9}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xff59, 0xff}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000080)={0x0, 0xffff, 0xe2}, 0x8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) 9.635244016s ago: executing program 4 (id=83): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000540)=[{0x50, 0x8001, 0x0, 0x0}], 0x1}) 9.260243295s ago: executing program 3 (id=84): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) 9.077605243s ago: executing program 1 (id=85): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) io_uring_setup(0x4822, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) close_range(r0, 0xffffffffffffffff, 0x0) 8.988716032s ago: executing program 3 (id=86): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) getpid() r4 = mq_open(&(0x7f00000000c0)='!\x7f\x00\xca\x00\x00\x00|\f\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0H\xf1Ah\xda\xdaiB2y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\x01\x01\v\x1a9X\a\xca{\x11#\x95m\x1bW\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x154\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f00000191c0)) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0), 0x0, 0x1) close(r6) splice(r5, 0x0, r6, 0x0, 0xfffd, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00002e9000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00006c0000/0xd000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="4000b00408000100e0"], 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x80c0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000002e00090027bd7000", @ANYRES64=r0], 0xb8}}, 0x0) 3.196694054s ago: executing program 4 (id=93): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x181100) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000300)={r9, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={r10}) r11 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r12, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) 2.75088907s ago: executing program 2 (id=94): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x11, 0x800000003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x80, 0x2, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x30, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) socket$nl_generic(0x10, 0x3, 0x10) 2.025912584s ago: executing program 4 (id=95): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003040)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x9, 0x1}, {0xffe0, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20049090}, 0x0) 1.47939397s ago: executing program 0 (id=96): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000380)}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce898bd7e628ae1242068c2e81985e9ee753e1d02319449f6c878bb5726dbc4eda9097bc6315fec72ff234fb9f26512af7b647069e3415c0338618c7adb1ac5b2f77a9effa9b33193a6da989be1900ce5158f956fcb9510d3850911ba7792fb", 0x90}, {&(0x7f0000000140)}], 0x4}}], 0x1, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.3778526s ago: executing program 4 (id=97): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001d000100"], 0x1c}}, 0x0) 1.247265953s ago: executing program 0 (id=98): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, 0x0, 0x49) 1.036214625s ago: executing program 4 (id=99): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa91dd60f81fcb00303a00fc000000000000000000000000000000ff02000000000000000000000000000104009078"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 174.788263ms ago: executing program 0 (id=100): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="e00100001200000429bd7000ffdbdf2525000a7f4e244e24feffffff06000000e7fe00000f00000007000000a100000007000000fdffff", @ANYRES32=0x0, @ANYBLOB="0100000008000000080000000600000012000100714586e08bb122fa0dc30041834500005b0001003e805a178f528905e0516c48e8bfb939c3808eebac89afa5a21a18910e322d3d12215006911dda71c49c597e5b2cdf45b467cf6cfbf8ca0c645dac8605deed47f22578a1159dba4a02a19f6d88a3e7e6fc52bc58674b5b00040001005c000100e7dcc377a2e1135ed656ae13e9bc8340265cce49a06682f8bd9d6a0a8db1c4d27e31ee2da8253de23e9fb45a6123992a257a3e7d2f82e6521991a50435534f996b9dc474848aeb369452407b2a4c33da7a5ced9cc257615bc4000100df6116c2a44bf1dff191fb0e4ea96746a07f40ccd0b8801df296d62fb40065337dd243d9ab1db8674d08710b235d85a275a24039e2b089088583632af37a80e4817161e0521c5ba1f0d1c18a33b101dae9b3fb03f705c9c47647285f173ac84d6483632c9e7fd83f1adf38206fd80bda460f9a03e26cb69e0600000000000079592541c424d04cf1b22d6e137691916ab4fb867a0495ffa5670e07ffa2dd1ee65add92f7aaf9c1b5f457d58884b938dea3bba8eb8b9cf5394fda"], 0x1e0}, 0x1, 0x0, 0x0, 0x80}, 0x2000005c) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x1, 0x9, 0xfe}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) r8 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r8, &(0x7f0000000280)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, 0x24) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r8, 0x110, 0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r9}, &(0x7f0000002480), &(0x7f00000024c0)=r1}, 0x20) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="0101ecfd82"]) 110.438019ms ago: executing program 1 (id=101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x2c, r1, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 199.41µs ago: executing program 3 (id=102): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce898bd7e628ae1242068c2e81985e9ee753e1d02319449f6c878bb5726dbc4eda9097bc6315fec72ff234fb9f26512af7b647069e3415c0338618c7adb1ac5b2f77a9effa9b33193a6da989be1900ce5158f956fcb9510d3850911ba7792fb", 0x90}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b437951913173b31", 0x2a}], 0x3}}], 0x1, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 1 (id=103): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2004c040}, 0x800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, '\t\x00', "9f1b21bfcdd63f97d0778b079513f25d", "27bbde0a", "bcc42c7cc2eb2a34"}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x40010) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r7) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x64000) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts. syzkaller login: [ 74.933408][ T4254] cgroup: Unknown subsys name 'net' [ 75.043975][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.531178][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 78.206805][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.211880][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.218212][ T4276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.229207][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.229343][ T4276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.238303][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.246170][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.253824][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.258841][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.268059][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.272749][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.280686][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.286642][ T4276] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.300006][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.301311][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.312996][ T4276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.316369][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.323030][ T4276] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.332702][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.336207][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.347159][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.351170][ T4276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.357924][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.364288][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.370966][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.378370][ T4276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.392265][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.396814][ T4276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.435226][ T4276] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.455070][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.911412][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 79.045839][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 79.060150][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 79.154345][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 79.172737][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.183909][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.193506][ T4265] device bridge_slave_0 entered promiscuous mode [ 79.229655][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.237214][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.245811][ T4265] device bridge_slave_1 entered promiscuous mode [ 79.279680][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.287030][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.295425][ T4264] device bridge_slave_0 entered promiscuous mode [ 79.336616][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.343795][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.352339][ T4264] device bridge_slave_1 entered promiscuous mode [ 79.359868][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 79.372247][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.412299][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.421732][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.429724][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.438581][ T4266] device bridge_slave_0 entered promiscuous mode [ 79.463926][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.486648][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.493783][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.502830][ T4266] device bridge_slave_1 entered promiscuous mode [ 79.520537][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.580188][ T4265] team0: Port device team_slave_0 added [ 79.607273][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.614373][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.623789][ T4267] device bridge_slave_0 entered promiscuous mode [ 79.633058][ T4265] team0: Port device team_slave_1 added [ 79.640993][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.658904][ T4264] team0: Port device team_slave_0 added [ 79.665309][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.672462][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.681163][ T4267] device bridge_slave_1 entered promiscuous mode [ 79.708264][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.727082][ T4264] team0: Port device team_slave_1 added [ 79.741860][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.749217][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.775577][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.836887][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.843909][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.870248][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.884364][ T4266] team0: Port device team_slave_0 added [ 79.890832][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.898070][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.906838][ T4274] device bridge_slave_0 entered promiscuous mode [ 79.923866][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.936199][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.951846][ T4266] team0: Port device team_slave_1 added [ 79.967507][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.975076][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.983301][ T4274] device bridge_slave_1 entered promiscuous mode [ 79.991379][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.998426][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.024462][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.057225][ T4267] team0: Port device team_slave_0 added [ 80.089202][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.096469][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.123507][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.136460][ T4267] team0: Port device team_slave_1 added [ 80.155208][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.162210][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.188395][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.225796][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.232810][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.259205][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.275397][ T4265] device hsr_slave_0 entered promiscuous mode [ 80.282438][ T4265] device hsr_slave_1 entered promiscuous mode [ 80.290059][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.297369][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.324063][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.337875][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.348408][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.356157][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.382658][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.404001][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.425887][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 80.486810][ T4264] device hsr_slave_0 entered promiscuous mode [ 80.493682][ T4264] device hsr_slave_1 entered promiscuous mode [ 80.500695][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.505420][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 80.510565][ T4264] Cannot create hsr debugfs directory [ 80.515641][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 80.520928][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 80.528724][ T4275] Bluetooth: hci1: command 0x0409 tx timeout [ 80.562700][ T4274] team0: Port device team_slave_0 added [ 80.606023][ T4274] team0: Port device team_slave_1 added [ 80.615439][ T4267] device hsr_slave_0 entered promiscuous mode [ 80.622614][ T4267] device hsr_slave_1 entered promiscuous mode [ 80.629537][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.637307][ T4267] Cannot create hsr debugfs directory [ 80.655898][ T4266] device hsr_slave_0 entered promiscuous mode [ 80.662800][ T4266] device hsr_slave_1 entered promiscuous mode [ 80.669995][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.678160][ T4266] Cannot create hsr debugfs directory [ 80.766974][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.774025][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.800714][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.841569][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.848969][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.875554][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.967502][ T4274] device hsr_slave_0 entered promiscuous mode [ 80.974505][ T4274] device hsr_slave_1 entered promiscuous mode [ 80.981665][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.989660][ T4274] Cannot create hsr debugfs directory [ 81.198837][ T4265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.214102][ T4265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.224475][ T4265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.250322][ T4265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.310017][ T4264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.320080][ T4264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.336948][ T4264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.347480][ T4264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.450675][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.461893][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.500213][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.525668][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.571699][ T4266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.583123][ T4266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.606611][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.626952][ T4266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.649757][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.664213][ T4266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.679167][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.689369][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.722038][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.736343][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.750053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.758836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.795497][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.804732][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.814292][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.821709][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.832149][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.842445][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.851354][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.858556][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.872487][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.898928][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.910066][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.920491][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.931115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.941341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.951019][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.958207][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.967907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.976938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.985864][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.993006][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.001448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.013183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.046488][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.056947][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.066446][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.076285][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.087783][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.097177][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.106499][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.115932][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.136537][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.145446][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.154509][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.168258][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.177124][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.186492][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.208058][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.217904][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.251360][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.261225][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.274251][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.298356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.307726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.349947][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.360865][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.381626][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.407963][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.423087][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.479195][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.492265][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.508473][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 82.541115][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.570617][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.585139][ T4275] Bluetooth: hci1: command 0x041b tx timeout [ 82.591205][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.591347][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 82.604280][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 82.604308][ T4269] Bluetooth: hci3: command 0x041b tx timeout [ 82.644387][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.668732][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.700338][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.709519][ T1230] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.716792][ T1230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.742326][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.771870][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.798325][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.826889][ T1230] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.834118][ T1230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.869961][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.899057][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.915394][ T1230] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.922570][ T1230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.933246][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.961080][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.994855][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.003850][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.023530][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.030862][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.040113][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.050332][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.060064][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.070522][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.082149][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.091306][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.100648][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.110197][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.118804][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.143758][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.156846][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.168427][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.179125][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.196688][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.210108][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.220619][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.242271][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.259759][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.286136][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.307619][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.336007][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.345088][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.366419][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.407423][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.425546][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.445956][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.467924][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.483811][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.493626][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.508019][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.531706][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.551100][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.572406][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.581665][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.588868][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.636320][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.646698][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.654330][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.685321][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.705680][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.720537][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.727805][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.762216][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.794437][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.844289][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.867297][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.906442][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.926546][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.975771][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.000613][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.032334][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.045999][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.067846][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.079758][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.139145][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.149174][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.181437][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.206465][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.214183][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.246471][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.269555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.287752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.335605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.365830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.388235][ T4265] device veth0_vlan entered promiscuous mode [ 84.421006][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.445650][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.508905][ T4265] device veth1_vlan entered promiscuous mode [ 84.525781][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.537236][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.545532][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.559395][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.585130][ T4269] Bluetooth: hci2: command 0x040f tx timeout [ 84.594275][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.606203][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.617872][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.627701][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.638458][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.650521][ T4266] device veth0_vlan entered promiscuous mode [ 84.664920][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 84.669876][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 84.671003][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 84.677324][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 84.695274][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.712135][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.731940][ T4266] device veth1_vlan entered promiscuous mode [ 84.772398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.787870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.834449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.845811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.855818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.868251][ T4265] device veth0_macvtap entered promiscuous mode [ 84.890357][ T4264] device veth0_vlan entered promiscuous mode [ 84.909695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.919972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.930468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.940557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.949823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.958479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.985704][ T4265] device veth1_macvtap entered promiscuous mode [ 85.003505][ T4266] device veth0_macvtap entered promiscuous mode [ 85.013627][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.022337][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.030741][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.040708][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.057486][ T4267] device veth0_vlan entered promiscuous mode [ 85.067437][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.080685][ T4264] device veth1_vlan entered promiscuous mode [ 85.096138][ T4266] device veth1_macvtap entered promiscuous mode [ 85.103448][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.112674][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.121812][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.131720][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.151747][ T4267] device veth1_vlan entered promiscuous mode [ 85.175387][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.183664][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.195883][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.215976][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.227848][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.239411][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.252339][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.277688][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.286880][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.297019][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.311621][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.321649][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.331033][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.340665][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.353228][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.364209][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.379331][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.392117][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.406025][ T4266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.415484][ T4266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.424337][ T4266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.433493][ T4266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.448353][ T4264] device veth0_macvtap entered promiscuous mode [ 85.465496][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.474076][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.484273][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.495910][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.505971][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.515541][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.525327][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.536581][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.547292][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.556223][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.565176][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.587876][ T4264] device veth1_macvtap entered promiscuous mode [ 85.609458][ T4267] device veth0_macvtap entered promiscuous mode [ 85.636354][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.645518][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.654404][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.678281][ T4267] device veth1_macvtap entered promiscuous mode [ 85.722558][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.731699][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.770869][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.783543][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.803990][ T4274] device veth0_vlan entered promiscuous mode [ 85.821626][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.839528][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.850131][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.861679][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.874375][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.888170][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.899062][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.908549][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.918206][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.933382][ T4274] device veth1_vlan entered promiscuous mode [ 85.945338][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.957413][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.967761][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.978303][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.988511][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.999307][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.011502][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.050849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.059808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.069191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.078545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.092634][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.111503][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.125378][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.136293][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.148810][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.157924][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.168858][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.179633][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.190574][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.204764][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.215631][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.228326][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.256337][ T4274] device veth0_macvtap entered promiscuous mode [ 86.283077][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.293932][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.303279][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.312373][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.322103][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.332136][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.341408][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.357156][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.365488][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.371078][ T4264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.388540][ T4264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.397844][ T4264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.406993][ T4264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.436441][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.450683][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.460313][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.470133][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.480761][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.491523][ T4274] device veth1_macvtap entered promiscuous mode [ 86.549874][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.563786][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.587295][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.599482][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.616179][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.625811][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.637088][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.648308][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.659041][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.669766][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 86.677317][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.687691][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.701301][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.712999][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.743935][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.751927][ T4275] Bluetooth: hci1: command 0x0419 tx timeout [ 86.752201][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 86.752234][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 86.752261][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 86.783248][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.792371][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.800970][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.810175][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.867656][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.878997][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.890490][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.901503][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.911112][ T951] cfg80211: failed to load regulatory.db [ 86.925452][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.942351][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.952917][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.970011][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.982824][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.007970][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.008214][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.027871][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.056606][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.069350][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.086336][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.102401][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.111588][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.133676][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.192906][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.207293][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.226686][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.238927][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.271737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.284365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.387452][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.429354][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.467959][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.505901][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.570089][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.618426][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.651741][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.748451][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.862938][ T4393] No such timeout policy "syz0" [ 88.482270][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.495389][ T4392] netlink: 372 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.597278][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.628055][ T4389] process 'syz.1.2' launched './file2' with NULL argv: empty string added [ 88.666056][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.729484][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.465994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.474378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.482757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 89.491024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 89.499372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 89.507652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 89.515971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 89.524620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 89.532927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 89.541179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 89.637397][ T4415] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.759653][ T4417] Bluetooth: MGMT ver 1.22 [ 90.073132][ T4419] lo speed is unknown, defaulting to 1000 [ 90.079867][ T4419] lo speed is unknown, defaulting to 1000 [ 90.097476][ T4419] lo speed is unknown, defaulting to 1000 [ 90.133608][ T4419] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 90.191359][ T4419] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 90.298323][ T4419] lo speed is unknown, defaulting to 1000 [ 90.311212][ T4419] lo speed is unknown, defaulting to 1000 [ 90.322721][ T4419] lo speed is unknown, defaulting to 1000 [ 90.336132][ T4419] lo speed is unknown, defaulting to 1000 [ 90.348708][ T4419] lo speed is unknown, defaulting to 1000 [ 94.485182][ T4444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 94.494142][ T4444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'. [ 94.503388][ T4444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19'. [ 94.512338][ T4444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19'. [ 102.296793][ T4515] mmap: syz.2.38 (4515) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.636828][ T4523] netlink: 72 bytes leftover after parsing attributes in process `syz.1.41'. [ 103.689801][ T4527] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 106.482778][ T4546] sched: RT throttling activated [ 106.584353][ T4324] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.111220][ T4324] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 107.120041][ T4324] usb 2-1: config 1 has no interface number 0 [ 107.129576][ T4324] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 107.144505][ T4324] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.285224][ T4324] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 107.294373][ T4324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.604699][ T4324] usb 2-1: Product: syz [ 107.684630][ T4324] usb 2-1: Manufacturer: syz [ 107.689326][ T4324] usb 2-1: SerialNumber: syz [ 108.994382][ T4324] usb 2-1: can't set config #1, error -71 [ 109.097745][ T4324] usb 2-1: USB disconnect, device number 2 [ 111.655498][ T4652] random: crng reseeded on system resumption [ 114.398985][ T4660] netlink: 172 bytes leftover after parsing attributes in process `syz.3.56'. [ 118.456307][ T4703] lo speed is unknown, defaulting to 1000 [ 120.484703][ T4339] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.675564][ T4339] usb 5-1: Using ep0 maxpacket: 16 [ 120.732446][ T4339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.778235][ T4339] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 120.796854][ T4339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.842932][ T4339] usb 5-1: config 0 descriptor?? [ 122.342680][ T4339] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 122.370278][ T4339] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 122.418356][ T4339] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 122.439119][ T4339] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 122.458930][ T4339] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 122.506886][ T4339] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 122.688963][ T4339] usb 5-1: USB disconnect, device number 2 [ 125.067351][ T4744] lo speed is unknown, defaulting to 1000 [ 126.426334][ T4747] netlink: 48 bytes leftover after parsing attributes in process `syz.1.79'. [ 127.034762][ T4309] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 127.114473][ T4755] netlink: 172 bytes leftover after parsing attributes in process `syz.2.75'. [ 128.866773][ T4309] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.886128][ T4309] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 128.914860][ T4309] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 128.924004][ T4309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.485752][ T4309] usb 5-1: config 0 descriptor?? [ 130.907825][ T4309] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 130.925211][ T4309] dvb-usb: bulk message failed: -22 (3/0) [ 130.998715][ T4309] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 131.050377][ T4309] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 131.284711][ T4309] usb 5-1: media controller created [ 131.317547][ T4309] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.830109][ T4309] dvb-usb: bulk message failed: -22 (6/0) [ 131.856260][ T4309] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 131.883742][ T4309] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 131.933320][ T4309] dvb-usb: schedule remote query interval to 150 msecs. [ 132.005378][ T4309] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 132.060220][ T4309] usb 5-1: USB disconnect, device number 3 [ 132.714905][ T4309] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 132.998113][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.004927][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.366033][ T4798] binder: 4794:4798 unknown command 1074553619 [ 134.480682][ T4798] binder: 4794:4798 ioctl c0306201 200000000040 returned -22 [ 134.505171][ T4802] binder: 4794:4802 unknown command 1074553620 [ 134.550947][ T4802] binder: 4794:4802 ioctl c0306201 200000000640 returned -22 [ 134.724837][ T4808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.97'. [ 135.038587][ T4816] netlink: 830 bytes leftover after parsing attributes in process `syz.1.91'. [ 136.144954][ T4817] [ 136.147360][ T4817] ====================================================== [ 136.154418][ T4817] WARNING: possible circular locking dependency detected [ 136.161490][ T4817] syzkaller #0 Not tainted [ 136.165936][ T4817] ------------------------------------------------------ [ 136.172984][ T4817] syz.4.99/4817 is trying to acquire lock: [ 136.178811][ T4817] ffff88807a5e97d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 136.188526][ T4817] [ 136.188526][ T4817] but task is already holding lock: [ 136.195914][ T4817] ffff88802e774800 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 136.206836][ T4817] [ 136.206836][ T4817] which lock already depends on the new lock. [ 136.206836][ T4817] [ 136.217519][ T4817] [ 136.217519][ T4817] the existing dependency chain (in reverse order) is: [ 136.226902][ T4817] [ 136.226902][ T4817] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 136.235629][ T4817] down_write+0x36/0x60 [ 136.240340][ T4817] process_measurement+0x33c/0x1a10 [ 136.246091][ T4817] ima_file_mmap+0x104/0x150 [ 136.251230][ T4817] __se_sys_remap_file_pages+0x53e/0x770 [ 136.257418][ T4817] do_syscall_64+0x4c/0xa0 [ 136.262393][ T4817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.268923][ T4817] [ 136.268923][ T4817] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 136.276515][ T4817] __lock_acquire+0x2cf8/0x7c50 [ 136.281924][ T4817] lock_acquire+0x1b4/0x490 [ 136.286974][ T4817] down_read_killable+0x4c/0x340 [ 136.292550][ T4817] mmap_read_lock_killable+0x1d/0x60 [ 136.298379][ T4817] lock_mm_and_find_vma+0x2b1/0x2f0 [ 136.304170][ T4817] do_user_addr_fault+0x2db/0xb10 [ 136.309762][ T4817] exc_page_fault+0x60/0x100 [ 136.314929][ T4817] asm_exc_page_fault+0x22/0x30 [ 136.320400][ T4817] fault_in_readable+0x13e/0x1f0 [ 136.325909][ T4817] fault_in_iov_iter_readable+0xbb/0x2e0 [ 136.332190][ T4817] generic_perform_write+0x1ee/0x5a0 [ 136.338219][ T4817] __generic_file_write_iter+0x148/0x2a0 [ 136.344444][ T4817] generic_file_write_iter+0xab/0x2e0 [ 136.350408][ T4817] vfs_write+0x44c/0x960 [ 136.355215][ T4817] ksys_write+0x143/0x240 [ 136.360110][ T4817] do_syscall_64+0x4c/0xa0 [ 136.365338][ T4817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.371900][ T4817] [ 136.371900][ T4817] other info that might help us debug this: [ 136.371900][ T4817] [ 136.382411][ T4817] Possible unsafe locking scenario: [ 136.382411][ T4817] [ 136.389902][ T4817] CPU0 CPU1 [ 136.395302][ T4817] ---- ---- [ 136.400681][ T4817] lock(&sb->s_type->i_mutex_key#13); [ 136.406263][ T4817] lock(&mm->mmap_lock); [ 136.413224][ T4817] lock(&sb->s_type->i_mutex_key#13); [ 136.421246][ T4817] lock(&mm->mmap_lock); [ 136.425629][ T4817] [ 136.425629][ T4817] *** DEADLOCK *** [ 136.425629][ T4817] [ 136.433787][ T4817] 3 locks held by syz.4.99/4817: [ 136.438747][ T4817] #0: ffff8880752905e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 136.448020][ T4817] #1: ffff888028b5e460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x256/0x960 [ 136.456957][ T4817] #2: ffff88802e774800 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 136.468325][ T4817] [ 136.468325][ T4817] stack backtrace: [ 136.474290][ T4817] CPU: 1 PID: 4817 Comm: syz.4.99 Not tainted syzkaller #0 [ 136.481520][ T4817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.491609][ T4817] Call Trace: [ 136.494965][ T4817] [ 136.497919][ T4817] dump_stack_lvl+0x168/0x22e [ 136.502645][ T4817] ? load_image+0x3b0/0x3b0 [ 136.507220][ T4817] ? show_regs_print_info+0x12/0x12 [ 136.512515][ T4817] ? print_circular_bug+0x12b/0x1a0 [ 136.517763][ T4817] check_noncircular+0x274/0x310 [ 136.522921][ T4817] ? add_chain_block+0x940/0x940 [ 136.527897][ T4817] ? lockdep_lock+0xdc/0x1e0 [ 136.532523][ T4817] ? _find_first_zero_bit+0xcf/0x100 [ 136.537831][ T4817] __lock_acquire+0x2cf8/0x7c50 [ 136.542729][ T4817] ? verify_lock_unused+0x140/0x140 [ 136.547961][ T4817] ? verify_lock_unused+0x140/0x140 [ 136.553188][ T4817] ? verify_lock_unused+0x140/0x140 [ 136.558592][ T4817] ? mark_lock+0x94/0x320 [ 136.562968][ T4817] lock_acquire+0x1b4/0x490 [ 136.567501][ T4817] ? mmap_read_lock_killable+0x1d/0x60 [ 136.572982][ T4817] ? read_lock_is_recursive+0x10/0x10 [ 136.578382][ T4817] ? cmp_ex_search+0x1a/0x70 [ 136.582999][ T4817] ? bsearch+0x8a/0xb0 [ 136.587094][ T4817] ? fault_in_readable+0x13e/0x1f0 [ 136.592249][ T4817] ? search_extable+0x8c/0xd0 [ 136.596954][ T4817] ? trim_init_extable+0x3b0/0x3b0 [ 136.602102][ T4817] ? mmap_read_lock_killable+0x1d/0x60 [ 136.607602][ T4817] down_read_killable+0x4c/0x340 [ 136.612590][ T4817] ? mmap_read_lock_killable+0x1d/0x60 [ 136.618098][ T4817] mmap_read_lock_killable+0x1d/0x60 [ 136.623423][ T4817] lock_mm_and_find_vma+0x2b1/0x2f0 [ 136.628673][ T4817] do_user_addr_fault+0x2db/0xb10 [ 136.633747][ T4817] ? _raw_spin_unlock_irq+0x1f/0x40 [ 136.639001][ T4817] exc_page_fault+0x60/0x100 [ 136.643636][ T4817] asm_exc_page_fault+0x22/0x30 [ 136.648514][ T4817] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 136.654264][ T4817] Code: f8 e4 c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 d7 e4 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 ba e4 [ 136.674339][ T4817] RSP: 0018:ffffc90005fc7ab0 EFLAGS: 00050287 [ 136.680430][ T4817] RAX: ffffffff81bbfaf9 RBX: 0000000000001000 RCX: 0000000000080000 [ 136.688427][ T4817] RDX: ffffc9000e5f1000 RSI: 000000000000ee92 RDI: 000000000000ee93 [ 136.696415][ T4817] RBP: 0000000000000000 R08: ffff88802cef1dc0 R09: 0000000000000002 [ 136.704578][ T4817] R10: 0000000000000006 R11: 0000000000000002 R12: 000020000007f000 [ 136.712584][ T4817] R13: 0000000000000000 R14: 000020000007d100 R15: 000020000007e000 [ 136.721121][ T4817] ? fault_in_readable+0x139/0x1f0 [ 136.726271][ T4817] fault_in_iov_iter_readable+0xbb/0x2e0 [ 136.731943][ T4817] generic_perform_write+0x1ee/0x5a0 [ 136.737523][ T4817] ? generic_file_direct_write+0x330/0x330 [ 136.743372][ T4817] ? __file_remove_privs+0x5b0/0x5b0 [ 136.748776][ T4817] ? rwsem_write_trylock+0x12f/0x1b0 [ 136.754122][ T4817] ? clear_nonspinnable+0x60/0x60 [ 136.759177][ T4817] ? generic_write_checks_count+0x3d9/0x4c0 [ 136.765106][ T4817] __generic_file_write_iter+0x148/0x2a0 [ 136.770769][ T4817] generic_file_write_iter+0xab/0x2e0 [ 136.776261][ T4817] vfs_write+0x44c/0x960 [ 136.780549][ T4817] ? file_end_write+0x250/0x250 [ 136.785427][ T4817] ? __fget_files+0x44a/0x4d0 [ 136.790129][ T4817] ? __fdget_pos+0x2ae/0x360 [ 136.794749][ T4817] ? ksys_write+0x71/0x240 [ 136.799199][ T4817] ksys_write+0x143/0x240 [ 136.803584][ T4817] ? __ia32_sys_read+0x80/0x80 [ 136.808399][ T4817] ? lockdep_hardirqs_on+0x94/0x140 [ 136.813636][ T4817] do_syscall_64+0x4c/0xa0 [ 136.818093][ T4817] ? clear_bhb_loop+0x60/0xb0 [ 136.822813][ T4817] ? clear_bhb_loop+0x60/0xb0 [ 136.827525][ T4817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.833454][ T4817] RIP: 0033:0x7f1b84b8f749 [ 136.837912][ T4817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.857548][ T4817] RSP: 002b:00007f1b85af6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.865998][ T4817] RAX: ffffffffffffffda RBX: 00007f1b84de5fa0 RCX: 00007f1b84b8f749 [ 136.873988][ T4817] RDX: 000000000208e24b RSI: 0000200000000100 RDI: 0000000000000006 [ 136.881981][ T4817] RBP: 00007f1b84c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 136.889969][ T4817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.897965][ T4817] R13: 00007f1b84de6038 R14: 00007f1b84de5fa0 R15: 00007fff94675a88 [ 136.906053][ T4817] [ 136.909110][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.425597][ T4826] Zero length message leads to an empty skb [ 137.691139][ T4817] kvm [4814]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x148