last executing test programs:

17.40646269s ago: executing program 4 (id=180):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = syz_open_dev$vcsa(&(0x7f0000000340), 0x2, 0x200)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f00000003c0))
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}}, 0x7, 0x9}, &(0x7f00000004c0)=0x90)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@empty, @empty, 0x1, "daf86eed51d59c3b227a93fc4bdb574c6a7264db425e9d015e14f17c0900497e", 0x7, 0x6, 0xffffff9d, 0xffffe6df}, 0x3c)
syz_emit_ethernet(0x9d, &(0x7f00000008c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x7]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x4, 0x0], "f4d8e8d21c240b99bb3e04ef080582ab69c6b142f504b93c9aa1b7e3b7c3197e140b153b6d8f000021b51f"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x6, 0x1, 0x9]}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1, 0xfffe}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@usebackuproot}, {@nodatasum}, {@ssd_spread}, {@user_subvol_rm}, {@flushoncommit}, {@compress_force}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x44800, 0x0)
sendfile(r3, r4, 0x0, 0xfffe82)
r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
ioctl$FITRIM(r5, 0xc4009420, &(0x7f0000000180)={0x5, 0x10000})
syz_usb_connect$uac3(0x5, 0xfb, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8212, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe9, 0x3, 0x1, 0x5, 0x90, 0x5, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x48, 0x4}, [@output_terminal={0x13, 0x24, 0x3, 0x6, 0x300, 0x2, 0x6, 0x2, 0xe, 0x8, 0x2, 0x1}, @source_unit={0xc, 0x24, 0xb, 0x7, 0x0, 0xfb6, 0xe, 0xffd2}, @cluster_info_segment={0x6, 0x20, 0x2, 0xa5, 0xff}, @feature_unit={0x19, 0x24, 0x7, 0x1, 0x4, [0x1, 0xf, 0x5, 0x10, 0xb]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x1, 0x7, 0x2, "957f"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0xf, 0xe, 0x6, 0x2}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x4, 0x5, 0x31, "6d965a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0xf8, 0x8, {0xa, 0x25, 0x25, 0x80000000, 0x68, 0xfffa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0x6, 0x3, "798848c6"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x0, 0x80, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x9, 0x81, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0x8, 0x8, {0xa, 0x25, 0x25, 0x7, 0x4e, 0xfff}}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0x40, 0x9, 0xfb, 0x40}, 0x16e, &(0x7f0000000800)=ANY=[], 0x1, [{0x0, 0x0}]})
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x6042, 0x126)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x805}, 0x20000844)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0)
request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='*!:\x00', 0xfffffffffffffffb)
ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x32957, 0x0, 0x0, 0x68245b64, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c000780180001801400a71cfc000000000000000000000000000001060004404e1f00000500070011000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
write$FUSE_NOTIFY_RESEND(r5, &(0x7f0000000200)={0x14}, 0x14)

13.927264284s ago: executing program 0 (id=188):
socket(0x400000000010, 0x3, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f477", 0xb5}, {0x0}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c", 0x89}, {&(0x7f00000000c0)}], 0x7}}], 0x1, 0x20000044)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

13.545354484s ago: executing program 0 (id=190):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001"], 0x0, 0x0, 0x0, 0x0}, 0x0)

12.373702575s ago: executing program 2 (id=192):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000080)={0x1})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000200))
getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000140), &(0x7f0000000180)=0x10)
bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x6}, 0x2)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
r4 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8})
mq_timedreceive(r4, 0x0, 0xfffffffffffffee3, 0x1, 0x0)
mq_timedreceive(r4, &(0x7f0000000440)=""/30, 0x1e, 0x80000000, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)

12.334143257s ago: executing program 4 (id=193):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
preadv2(r0, &(0x7f0000003500)=[{&(0x7f00000002c0)=""/72, 0x48}], 0x1, 0x8, 0x80, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000})
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x107}], 0x1, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_fd={0x1, 0x2, 0x4, 0x20, 0x10000, {0x77359400}, {0x3, 0x0, 0x5, 0x2, 0x4c, 0x81, "8519947e"}, 0x200, 0x4, {0x0}, 0xffffff80})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", <r5=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000100)={"6739669f274d13b691eb645b00e4f5b53e0ca34dd02ac6cdc67c5e3126628168", r5})
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74)
clock_gettime(0x0, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)

10.486430177s ago: executing program 4 (id=197):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
preadv2(r0, &(0x7f0000003500)=[{&(0x7f00000002c0)=""/72, 0x48}], 0x1, 0x8, 0x80, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

10.400286649s ago: executing program 2 (id=198):
socket(0x40000000015, 0x5, 0x0)
userfaultfd(0x801)
socket$nl_netfilter(0x10, 0x3, 0xc)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff)

9.294947939s ago: executing program 0 (id=201):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94)
read$char_usb(r4, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

9.294293979s ago: executing program 4 (id=202):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200002000000007020000f8ffffffb703000008000000b704000000000000850000108200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x40000)
socket$kcm(0xa, 0x2, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6)
ioctl$XFS_IOC_FSGROWFSRT(r5, 0x40105870, &(0x7f00000000c0)={0x9, 0x2})
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0xe20, 0x0, 0x8d, 0x2}}, 0x44)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r8, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0xffdf, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

9.2655012s ago: executing program 2 (id=203):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

7.682230132s ago: executing program 2 (id=205):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)

6.226173571s ago: executing program 3 (id=207):
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004050}, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400edff2bbd70000200000007000000", @ANYRES32, @ANYRES32, @ANYBLOB="000202007f000001"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0)
bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0)
bind$x25(0xffffffffffffffff, &(0x7f0000000200), 0x12)
bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

6.214640662s ago: executing program 1 (id=208):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x40)

6.085584395s ago: executing program 0 (id=209):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'})
truncate(&(0x7f0000000340)='./file0\x00', 0xb)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x1, 0x16, &(0x7f0000000ac0)="e2868f4aefac7a67561422c516dc175845e997f81698"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc8b93000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
r4 = gettid()
sched_setaffinity(r4, 0x8, &(0x7f0000000540)=0x8)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
r5 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000006700), 0x2200, 0x0)
read$FUSE(r6, &(0x7f0000002b00)={0x2020}, 0x2020)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00010028bd70000000000002201000000000070000000008000300", @ANYRES16=r1, @ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x93d742ab929b3387}, 0xea5bc50b6199d77e)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x4010, r0}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000440)={0xffffffffffffffff, r7}, 0xc)

6.033758757s ago: executing program 1 (id=210):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x40c}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
lseek(r1, 0x851, 0x1)
syz_open_dev$evdev(0x0, 0x7, 0x200000)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5}, 0x8)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
rmdir(&(0x7f00000001c0)='./file0\x00')
r2 = socket$netlink(0x10, 0x3, 0x9)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x2003})
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001001d3934b55c966f825500000000000000000a00000a140000001100010000000000000000000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x800)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000340))
syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2)
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x123880, 0x0)
ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000300))
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$kcm(0x10, 0x2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0)
ioctl$PIO_SCRNMAP(r5, 0x4b41, 0x0)

5.998183488s ago: executing program 3 (id=211):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x3)

4.334044413s ago: executing program 0 (id=212):
socket$pppoe(0x18, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x4, 0x0, 0x0)
acct(0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40458d1, 0x0, 0x0)
accept4(r0, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000003c0)=0x80, 0x1800)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000400)={'ni_labpc\x00', [0x9, 0x7, 0x7f, 0x55, 0xffffffff, 0x2, 0x8fc, 0x200, 0x10, 0x80000001, 0x4, 0x4, 0x4, 0x43, 0xc, 0x4, 0x3, 0x0, 0x5, 0x3, 0xf, 0x892, 0x81, 0x7fff, 0x4, 0xf, 0x2, 0x7, 0xc, 0x6, 0xf9, 0xe]})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x48)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x6dd, 0x10, 0x200, 0x2, 0x3, 0x20, 0xffffffff, 0x1, 0xeff3, &(0x7f00000000c0)=[0x4], 0x1, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
readv(r5, &(0x7f0000000200)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1)
r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000}, 0x18, 0x0)
landlock_restrict_self(r6, 0x9)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0xfffffffffffffffc)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1})
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYBLOB="010500"], 0x14}}, 0x6048800)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})

4.307028713s ago: executing program 1 (id=213):
socket(0x40000000015, 0x5, 0x0)
userfaultfd(0x801)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
readv(r1, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff)

3.097511326s ago: executing program 3 (id=214):
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x8010)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x100, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x1, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0x1, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x6, 0xf250, 0x80, 0x4800, 0x300000, 0x400006, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x5, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da7, 0x4, 0x200, 0x2, 0x20000004, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1ff, 0x8001, 0x6, 0x2, 0x2009, 0xfffbffff, 0x4, 0x6, 0x1000, 0xff, 0x3d, 0x7, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0x7501eace, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xfffff3b7, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0xffc, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x0, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0xffff, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x1010001, 0x2005, 0x400, 0x4, 0xea, 0x71, 0x20000006, 0x3, 0xd9, 0x0, 0x7d, 0x5d8, 0x7], [0x1092, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0x53, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x1, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x8, 0xf, 0xf, 0x2136, 0x80000001]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
ioctl$UI_DEV_DESTROY(r3, 0x5502)

2.834939273s ago: executing program 0 (id=215):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000000c0)={0x0, &(0x7f00000011c0)=[{0x2, 0x40, 0x5, 0x7f}]})
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55)
keyctl$setperm(0x5, 0x0, 0x303b1421)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000700)=@ethtool_sset_info={0x37, 0xfc, 0xfffffffffffffffa}})
mknodat$null(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2, 0x103)
r4 = syz_open_procfs(0x0, &(0x7f0000001200)='attr/prev\x00')
readv(r4, &(0x7f0000001440)=[{0x0}, {0x0, 0x61}], 0x2)
syz_usb_connect(0x0, 0x2d, &(0x7f0000001200)=ANY=[], 0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)=<r5=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000140)={{}, r5, 0x12, @inherit={0x68, &(0x7f0000001140)=ANY=[@ANYBLOB="010000000000000004000000000007e7c88b814afd46000021000000000000f0a442a00000000000000000008000000002000000dd8a2a5223b4f38900000000000000000000000000007acaec000000007000050000000000000009000000000000"]}, @subvolid=0x744000000})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)

1.624924686s ago: executing program 1 (id=216):
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0'}, 0xb)
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0xff, '\x00', @p_u16=&(0x7f00000001c0)=0x1}})

1.45509403s ago: executing program 1 (id=217):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x8008af00, &(0x7f0000000340)=0x1)

1.243870356s ago: executing program 4 (id=218):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4c94d1e)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYRES64=r0], 0x14}}, 0x8000)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0xb}, @fd, @fda={0x66646185, 0x6, 0x1, 0x28}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, &(0x7f00000002c0)})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac0000002100010026bd7000fedbdf2564010102000000000000000000000000fc0000000088c35b39378f86d42400004e21ffff0200a0a03a0000007a65425d1c83e6e6d868fa5e02bc26542cb316ea380442bab00272dbc39886febbf38fdf6b3744de22701d687f8c74b189979adb4c0ca26aa77cbf069710b4d005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b6e00010000000a00100000000000000000005000110000000000000000000000000000000000ac1414aa000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000032010000023500000a000200"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400c0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000000200001800128008000100736974000c00028008000100", @ANYRES32=r3, @ANYRES64, @ANYRES8=r1, @ANYBLOB="4976d600000000000000b7fb506cc6034f5d8e37cb57b9bf7843160d99daf2480d3e582171d3b496679a3f6300cc7c4e9ffe"], 0x40}, 0x1, 0xd, 0x0, 0x4c000}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'ip6tnl0\x00', 0x1000})
socket$kcm(0x2, 0xa, 0x2)
r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_STOP(r4, 0x6f2a)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
getpriority(0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)

1.149007199s ago: executing program 1 (id=219):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x28, 0x0, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94)
read$char_usb(r3, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

922.098685ms ago: executing program 2 (id=220):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getxattr(0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20)
listen(r4, 0x7)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10)
listen(r0, 0x7)

901.627815ms ago: executing program 3 (id=221):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020)

789.695718ms ago: executing program 3 (id=222):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x3fffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe758, 0x0, 0x4, 0x0, 0x0, 0x100, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x60000000, 0x0, 0x3, 0x3, 0xd9, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

351.66195ms ago: executing program 3 (id=223):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'})
truncate(&(0x7f0000000340)='./file0\x00', 0xb)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x1, 0x16, &(0x7f0000000ac0)="e2868f4aefac7a67561422c516dc175845e997f81698"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc8b93000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
r4 = gettid()
sched_setaffinity(r4, 0x8, &(0x7f0000000540)=0x8)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000006700), 0x2200, 0x0)
read$FUSE(r7, &(0x7f0000002b00)={0x2020}, 0x2020)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a00010028bd70000000000002201000000000070000000008000300", @ANYRES16=r1, @ANYRESDEC=r5], 0x2c}, 0x1, 0x0, 0x0, 0x93d742ab929b3387}, 0xea5bc50b6199d77e)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x4010, r0}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, <r8=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000440)={0xffffffffffffffff, r8}, 0xc)

29.751259ms ago: executing program 2 (id=224):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000440)={"0e000016", 0x0, 0x6, 0x2, 0x0, 0x1, "f70000000000000000deffffff00", "f2ffffff", "0300", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "020088e2ff7d00", "0cdd42000000000000c20d00"]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x4, 0x10cba, 0x1, {0x6, @sliced={0x7, [0x5, 0x2, 0x5, 0xe93, 0xa5ee, 0x4cd, 0x6, 0x7, 0x7, 0x2003, 0xc, 0x57, 0x42d1, 0x6, 0x5, 0x101, 0x6, 0xfffd, 0x0, 0x3e7, 0x7, 0xffff, 0x6, 0x0, 0x1, 0x5, 0x7, 0x2, 0x32, 0xffff, 0x9a, 0xff, 0x3, 0xff5a, 0x9, 0x9, 0x4, 0x1f, 0x5, 0x5, 0xf, 0x8, 0xfa3e, 0xebf4, 0x7, 0x0, 0xce, 0xfff], 0xa}}, 0x40004})
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
fstatfs(r5, &(0x7f0000000040)=""/17)
r6 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r6, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0)
socket(0x2, 0x2, 0x0)
ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)

0s ago: executing program 4 (id=225):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x13]}, 0x8, 0x80000)
ppoll(&(0x7f00000004c0)=[{r0, 0x1007}], 0x1, 0x0, 0x0, 0x0)
signalfd4(r0, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts.
syzkaller login: [   63.593530][ T4172] cgroup: Unknown subsys name 'net'
[   63.698881][ T4172] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   65.195569][ T4172] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   66.588517][ T4190] chnl_net:caif_netlink_parms(): no params data found
[   66.645254][ T4195] chnl_net:caif_netlink_parms(): no params data found
[   66.753268][ T4186] chnl_net:caif_netlink_parms(): no params data found
[   66.775739][ T4185] chnl_net:caif_netlink_parms(): no params data found
[   66.796717][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.807397][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.817287][ T4190] device bridge_slave_0 entered promiscuous mode
[   66.857878][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.865227][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.874243][ T4190] device bridge_slave_1 entered promiscuous mode
[   66.895654][ T4197] chnl_net:caif_netlink_parms(): no params data found
[   66.905680][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.913235][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.921398][ T4195] device bridge_slave_0 entered promiscuous mode
[   66.952206][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.959874][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.967725][ T4195] device bridge_slave_1 entered promiscuous mode
[   67.007839][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.026988][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.068355][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.091688][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.099017][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.107130][ T4186] device bridge_slave_0 entered promiscuous mode
[   67.116950][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.136616][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.144647][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.152809][ T4185] device bridge_slave_0 entered promiscuous mode
[   67.160774][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.168015][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.176002][ T4186] device bridge_slave_1 entered promiscuous mode
[   67.197005][ T4190] team0: Port device team_slave_0 added
[   67.203335][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.210775][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.219199][ T4185] device bridge_slave_1 entered promiscuous mode
[   67.247079][ T4195] team0: Port device team_slave_0 added
[   67.255753][ T4190] team0: Port device team_slave_1 added
[   67.275574][ T4195] team0: Port device team_slave_1 added
[   67.294319][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.302036][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.310521][ T4197] device bridge_slave_0 entered promiscuous mode
[   67.324468][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.331696][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.340196][ T4197] device bridge_slave_1 entered promiscuous mode
[   67.352174][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.374406][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.392706][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.411524][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.428737][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.435717][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.462056][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.487207][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.494370][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.520621][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.542660][ T4186] team0: Port device team_slave_0 added
[   67.549248][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.556226][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.582775][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.602100][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.620836][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.630473][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.637446][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.664032][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.678463][ T4186] team0: Port device team_slave_1 added
[   67.705877][ T4185] team0: Port device team_slave_0 added
[   67.732965][ T4190] device hsr_slave_0 entered promiscuous mode
[   67.739814][ T4190] device hsr_slave_1 entered promiscuous mode
[   67.748088][ T4185] team0: Port device team_slave_1 added
[   67.764824][ T4197] team0: Port device team_slave_0 added
[   67.795523][ T4197] team0: Port device team_slave_1 added
[   67.821424][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.828771][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.855666][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.871925][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.879252][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.905281][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.927934][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.935034][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.961489][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.986821][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.994012][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.020534][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.039347][ T4195] device hsr_slave_0 entered promiscuous mode
[   68.046452][ T4195] device hsr_slave_1 entered promiscuous mode
[   68.053451][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.061439][ T4195] Cannot create hsr debugfs directory
[   68.067497][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.074790][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.101039][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.120964][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.127964][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.153979][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.240494][ T4185] device hsr_slave_0 entered promiscuous mode
[   68.247505][ T4185] device hsr_slave_1 entered promiscuous mode
[   68.254454][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.262364][ T4185] Cannot create hsr debugfs directory
[   68.272979][ T4186] device hsr_slave_0 entered promiscuous mode
[   68.280948][ T4186] device hsr_slave_1 entered promiscuous mode
[   68.287526][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.295259][ T4186] Cannot create hsr debugfs directory
[   68.309000][   T23] Bluetooth: hci3: command 0x0409 tx timeout
[   68.309001][ T4174] Bluetooth: hci2: command 0x0409 tx timeout
[   68.327573][   T23] Bluetooth: hci1: command 0x0409 tx timeout
[   68.334017][   T23] Bluetooth: hci0: command 0x0409 tx timeout
[   68.394032][   T23] Bluetooth: hci4: command 0x0409 tx timeout
[   68.409591][ T4197] device hsr_slave_0 entered promiscuous mode
[   68.416631][ T4197] device hsr_slave_1 entered promiscuous mode
[   68.424001][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.431702][ T4197] Cannot create hsr debugfs directory
[   68.665663][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   68.681749][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   68.691870][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   68.702610][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   68.760642][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.770284][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.794419][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.811399][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.856752][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.866319][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.885784][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.895660][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.976145][ T4197] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   68.992145][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.008853][ T4197] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   69.036484][ T4197] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   69.071132][ T4197] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   69.093927][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.105751][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.117344][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.137974][ T4190] 8021q: adding VLAN 0 to HW filter on device team0
[   69.150139][ T4195] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   69.160129][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.167995][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.177127][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.186893][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.197420][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.204738][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.213779][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.225538][ T4185] 8021q: adding VLAN 0 to HW filter on device team0
[   69.256111][ T4195] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   69.265719][ T4195] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   69.289726][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.299933][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.308692][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.315795][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.324225][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.333233][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.342315][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.349479][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.357515][ T4195] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   69.371515][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.399660][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.407714][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.417431][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.426102][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.433236][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.443408][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.452605][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.461630][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   69.471726][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   69.480663][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   69.489984][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   69.508986][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   69.517152][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   69.526340][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   69.560650][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   69.570560][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   69.579916][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   69.590127][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   69.599034][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   69.607406][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.616862][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.625288][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.633379][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   69.642344][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   69.651734][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   69.669303][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   69.679218][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   69.697033][ T4186] 8021q: adding VLAN 0 to HW filter on device team0
[   69.705355][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   69.714611][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   69.729917][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   69.744315][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.772634][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   69.782451][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   69.799310][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   69.812581][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   69.834297][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.841468][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.878768][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   69.894265][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   69.903287][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.910444][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.918703][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   69.936000][ T4197] 8021q: adding VLAN 0 to HW filter on device team0
[   70.007190][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   70.029902][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   70.044527][  T422] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.051695][  T422] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.073709][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   70.084084][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   70.093325][  T422] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.100448][  T422] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.108662][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   70.117365][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   70.129985][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.139461][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.148011][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   70.157136][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.167496][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.176466][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   70.184748][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.207172][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   70.217770][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   70.228064][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   70.238611][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   70.247278][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   70.267047][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.286548][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   70.297250][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   70.317610][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   70.332180][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.342690][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.353913][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.365593][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.378059][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   70.388575][ T4229] Bluetooth: hci0: command 0x041b tx timeout
[   70.394950][ T4229] Bluetooth: hci1: command 0x041b tx timeout
[   70.402927][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.408820][ T4229] Bluetooth: hci3: command 0x041b tx timeout
[   70.418528][ T4229] Bluetooth: hci2: command 0x041b tx timeout
[   70.421073][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.439290][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.447821][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.455772][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.474913][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.482025][ T4230] Bluetooth: hci4: command 0x041b tx timeout
[   70.494970][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.505663][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   70.523058][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.557217][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   70.591640][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   70.605915][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   70.637927][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.649098][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   70.660454][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   70.690335][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.697861][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   70.708605][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.717107][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.727088][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.736186][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.748085][ T4185] device veth0_vlan entered promiscuous mode
[   70.761448][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.779583][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   70.790238][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.805871][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   70.816845][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   70.831380][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.843729][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.855587][ T4190] device veth0_vlan entered promiscuous mode
[   70.891065][ T4195] 8021q: adding VLAN 0 to HW filter on device team0
[   70.906044][ T4185] device veth1_vlan entered promiscuous mode
[   70.933544][ T4190] device veth1_vlan entered promiscuous mode
[   70.957469][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   70.972263][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   70.984533][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.991717][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.005819][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   71.016530][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.025671][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.032835][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.041280][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   71.085990][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   71.104922][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   71.113145][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.157058][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   71.166500][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.175432][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.186111][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   71.196392][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   71.205471][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   71.216651][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.231564][ T4185] device veth0_macvtap entered promiscuous mode
[   71.250807][ T4185] device veth1_macvtap entered promiscuous mode
[   71.266047][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   71.277236][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   71.285828][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   71.298010][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   71.307876][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   71.316943][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   71.341562][ T4190] device veth0_macvtap entered promiscuous mode
[   71.353732][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.360398][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.384920][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.395596][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   71.409653][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.419158][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.427873][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.437272][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.446523][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   71.455325][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   71.471023][ T4190] device veth1_macvtap entered promiscuous mode
[   71.484615][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.503982][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   71.513828][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.523634][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.532760][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   71.542304][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   71.551613][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.560499][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.571676][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.579977][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.595540][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.604692][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.614756][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.625138][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.638104][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   71.662603][ T4186] device veth0_vlan entered promiscuous mode
[   71.702206][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.720024][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.736754][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.750050][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.767079][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.780772][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.792682][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.809098][ T4186] device veth1_vlan entered promiscuous mode
[   71.819581][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.833260][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.846262][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.868511][ T4197] device veth0_vlan entered promiscuous mode
[   71.875315][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.889216][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.902826][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.912881][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.950159][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.966426][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.977990][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.994481][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.016329][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.030156][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.044116][ T4186] device veth0_macvtap entered promiscuous mode
[   72.060499][ T4197] device veth1_vlan entered promiscuous mode
[   72.074056][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.083122][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.092326][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.112690][ T4186] device veth1_macvtap entered promiscuous mode
[   72.153813][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   72.164013][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.173297][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.185367][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   72.193743][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   72.206249][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.243264][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.252444][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.280587][ T4197] device veth0_macvtap entered promiscuous mode
[   72.294726][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.308055][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.320055][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.330881][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.342277][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.361470][ T4197] device veth1_macvtap entered promiscuous mode
[   72.384774][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.395333][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.404497][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.416749][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.432376][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.445777][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.455949][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.466689][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.476890][   T21] Bluetooth: hci2: command 0x040f tx timeout
[   72.483232][   T21] Bluetooth: hci3: command 0x040f tx timeout
[   72.489412][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.507132][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.509584][   T21] Bluetooth: hci1: command 0x040f tx timeout
[   72.524284][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.534514][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.538834][   T21] Bluetooth: hci0: command 0x040f tx timeout
[   72.546075][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.562030][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.569044][ T4230] Bluetooth: hci4: command 0x040f tx timeout
[   72.573600][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.591605][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.602380][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.613566][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.624053][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.636389][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.646526][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.657140][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.668656][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.682695][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.691519][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.700912][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   72.711232][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   72.720290][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.729545][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.740721][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.749465][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.761167][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.770222][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.779041][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.788584][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.822998][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.831679][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.840974][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.854743][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.869645][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.879556][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.887657][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   72.896455][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   72.905344][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   72.913488][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   72.922778][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.932102][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.941429][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.954555][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.973901][ T4195] device veth0_vlan entered promiscuous mode
[   73.039778][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.047647][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.082639][ T4195] device veth1_vlan entered promiscuous mode
[   73.093298][  T422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.119583][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.128343][  T422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.139887][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.241904][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   73.252021][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   73.287239][ T4195] device veth0_macvtap entered promiscuous mode
[   73.326527][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.342537][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.353825][ T4195] device veth1_macvtap entered promiscuous mode
[   73.414591][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   73.456835][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   73.504297][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.951351][ T1251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.061987][ T1251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.074601][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.111775][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.228294][ T4280] securityfs: Unknown parameter ''
[   74.547002][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.578945][ T4226] Bluetooth: hci1: command 0x0419 tx timeout
[   75.757318][ T4226] Bluetooth: hci3: command 0x0419 tx timeout
[   75.772929][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.808989][ T4226] Bluetooth: hci2: command 0x0419 tx timeout
[   75.845577][ T4226] Bluetooth: hci4: command 0x0419 tx timeout
[   75.855363][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.881736][ T4226] Bluetooth: hci0: command 0x0419 tx timeout
[   75.904665][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.974308][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.022933][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.087608][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.197710][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.282094][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.321114][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.394496][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.407046][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.426075][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.461259][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.530752][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.588512][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.624766][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.660221][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.699307][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.765210][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.829668][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.917734][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.942877][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.990875][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.081567][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.151155][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.206940][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.254978][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.442554][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.549728][ T4287] Cannot find add_set index 0 as target
[   77.650913][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.059604][  T422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.316416][ T1251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.350109][ T1251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.360573][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.369684][ T4297] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   78.447792][ T1251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.465990][ T1251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.489848][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.582401][ T4227] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   78.718225][ T4230] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   78.859402][ T4227] usb 3-1: Using ep0 maxpacket: 32
[   78.988707][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.023047][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.050939][ T4227] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   79.075624][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.138334][ T4230] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   79.144292][ T4227] usb 3-1: config 0 descriptor??
[   79.152359][ T4230] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   79.200865][ T4230] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[   79.230903][ T4230] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.261423][ T4227] hub 3-1:0.0: USB hub found
[   79.478397][ T4227] hub 3-1:0.0: 1 port detected
[   79.528464][ T4230] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   79.543113][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   79.558410][ T4230] usb 5-1: Product: syz
[   79.562682][ T4230] usb 5-1: Manufacturer: syz
[   79.622647][ T4230] cdc_wdm 5-1:1.0: skipping garbage
[   79.630186][ T4230] cdc_wdm 5-1:1.0: skipping garbage
[   79.657554][ T4230] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   79.681141][ T4230] cdc_wdm 5-1:1.0: Unknown control protocol
[   79.869518][ T4312] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9'.
[   80.051014][ T4313] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[   80.059717][ T4313] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[   80.069154][ T4313] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[   80.116996][   T21] usb 5-1: USB disconnect, device number 2
[   80.123173][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[   80.123385][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   80.123407][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   81.008311][ T4231] hub 3-1:0.0: activate --> -90
[   81.436708][   T21] usb 3-1: USB disconnect, device number 2
[   82.747582][ T4327] binder_alloc: 4326: pid 4326 spamming oneway? 1 buffers allocated for a total size of 5312
[   82.787687][ T4328] binder_alloc: 4326: pid 4326 spamming oneway? 2 buffers allocated for a total size of 5336
[   83.158277][   T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   83.223738][ T4333] Zero length message leads to an empty skb
[   83.234058][ T4333] overlayfs: failed to clone upperpath
[   83.392177][ T4334] overlayfs: failed to clone upperpath
[   84.508691][ T4322] input: syz1 as /devices/virtual/input/input5
[   85.986694][ T4354] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   85.995300][ T4354] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   86.004004][ T4354] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[   86.793571][    T7] cfg80211: failed to load regulatory.db
[   88.138162][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   88.158153][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   88.168158][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   88.178158][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   88.208162][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   88.218158][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   88.228159][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   88.238165][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   88.248155][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   88.258154][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   88.737993][ T4378] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   89.968660][ T4231] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   90.019417][ T4231] Bluetooth: hci2: Injecting HCI hardware error event
[   90.151177][ T4193] Bluetooth: hci2: hardware error 0x00
[   90.599165][   T21] usb 3-1: device descriptor read/all, error -110
[   90.898231][   T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   91.203301][    C0] vcan0: j1939_tp_rxtimer: 0xffff888062b3e000: rx timeout, send abort
[   91.703840][    C0] vcan0: j1939_tp_rxtimer: 0xffff888062b3cc00: rx timeout, send abort
[   91.738642][    C0] vcan0: j1939_tp_rxtimer: 0xffff888062b3e000: abort rx timeout. Force session deactivation
[   92.281314][    C0] vcan0: j1939_tp_rxtimer: 0xffff888062b3cc00: abort rx timeout. Force session deactivation
[   98.250097][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   98.289527][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   98.329191][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   98.390402][ T4447] device bridge_slave_0 left promiscuous mode
[   98.443719][ T4447] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.634398][ T4438] loop3: detected capacity change from 0 to 32768
[   98.663104][ T4447] device bridge_slave_1 left promiscuous mode
[   98.670896][ T4447] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.685219][ T4447] bond0: (slave bond_slave_0): Releasing backup interface
[   98.789156][ T4438] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.43 (4438)
[   99.341068][ T4447] bond0: (slave bond_slave_1): Releasing backup interface
[   99.858863][ T4447] team0: Port device team_slave_0 removed
[   99.914486][ T4438] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  100.075224][ T4438] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  100.257025][ T4438] BTRFS info (device loop3): trying to use backup root at mount time
[  100.366423][ T4438] BTRFS info (device loop3): setting nodatasum
[  100.410051][ T4438] BTRFS info (device loop3): enabling ssd optimizations
[  100.432383][ T4447] team0: Port device team_slave_1 removed
[  100.480920][ T4438] BTRFS info (device loop3): using spread ssd allocation scheme
[  100.488748][ T4438] BTRFS info (device loop3): turning on flush-on-commit
[  100.495740][ T4438] BTRFS info (device loop3): force zlib compression, level 3
[  100.510795][ T4447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.529747][ T4438] BTRFS info (device loop3): using free space tree
[  100.554088][ T4447] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.564159][ T4473] ipt_ECN: cannot use operation on non-tcp rule
[  100.573421][ T4438] BTRFS info (device loop3): has skinny extents
[  100.742533][ T4438] BTRFS error (device loop3): open_ctree failed: -12
[  100.908428][ T4447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.915948][ T4447] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.057837][ T4447] syz.0.46 (4447) used greatest stack depth: 19984 bytes left
[  101.118387][ T4232] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  101.535090][ T4232] usb 2-1: Using ep0 maxpacket: 16
[  101.708951][ T4232] usb 2-1: unable to get BOS descriptor or descriptor too short
[  101.808952][ T4232] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  102.088659][ T4232] usb 2-1: string descriptor 0 read error: -22
[  102.101808][ T4232] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  102.277191][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.353892][ T4232] snd-ua101 2-1:1.0: invalid num_altsetting
[  102.559910][ T4232] usb 2-1: USB disconnect, device number 2
[  102.608380][ T4174] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  103.993418][ T4174] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  104.011920][ T4174] usb 5-1: config 0 has no interface number 0
[  104.031780][ T4174] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  104.074685][ T4174] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.100708][ T4174] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  104.192922][ T4542] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  104.205228][ T4542] SQUASHFS error: Failed to read block 0x0: -5
[  104.228999][ T4542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'.
[  104.919627][ T4174] usb 5-1: config 0 interface 1 has no altsetting 0
[  104.926325][ T4174] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  104.935911][ T4174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.170291][ T4174] usb 5-1: config 0 descriptor??
[  105.197106][ T4174] usb 5-1: can't set config #0, error -71
[  105.989598][ T4174] usb 5-1: USB disconnect, device number 3
[  107.696570][ T4577] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  107.708168][ T4577] SQUASHFS error: Failed to read block 0x0: -5
[  107.725135][ T4577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'.
[  110.365773][ T4586] sched: RT throttling activated
[  110.688425][ T4587] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  110.699593][ T4587] SQUASHFS error: Failed to read block 0x0: -5
[  110.797000][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'.
[  112.355201][ T4599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'.
[  113.970070][ T4623] 9pnet: Insufficient options for proto=fd
[  114.167047][ T4604] loop4: detected capacity change from 0 to 32768
[  114.198434][ T4227] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  114.217990][ T4604] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.86 (4604)
[  114.297740][ T4604] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  114.307412][ T4604] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  114.325447][ T4604] BTRFS info (device loop4): trying to use backup root at mount time
[  114.339281][ T4604] BTRFS info (device loop4): setting nodatasum
[  114.345851][ T4604] BTRFS info (device loop4): enabling ssd optimizations
[  114.358996][ T4604] BTRFS info (device loop4): using spread ssd allocation scheme
[  114.372806][ T4604] BTRFS info (device loop4): turning on flush-on-commit
[  114.399866][ T4604] BTRFS info (device loop4): force zlib compression, level 3
[  114.407428][ T4604] BTRFS info (device loop4): using free space tree
[  114.419786][ T4604] BTRFS info (device loop4): has skinny extents
[  115.050747][ T4604] BTRFS error (device loop4): open_ctree failed: -12
[  115.088230][ T4298] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4298)
[  115.789494][ T4227] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  115.797645][ T4227] usb 1-1: config 0 has no interface number 0
[  115.837631][ T4227] usb 1-1: config 0 interface 41 has no altsetting 0
[  116.121596][ T4672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'.
[  116.918371][ T4227] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  116.927495][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.946583][ T4227] usb 1-1: Product: syz
[  116.951000][ T4227] usb 1-1: Manufacturer: syz
[  116.956199][ T4227] usb 1-1: SerialNumber: syz
[  116.964673][ T4227] usb 1-1: config 0 descriptor??
[  116.991609][ T4227] usb 1-1: can't set config #0, error -71
[  117.019353][ T4227] usb 1-1: USB disconnect, device number 2
[  118.216254][ T4692] 9pnet: Insufficient options for proto=fd
[  120.414471][ T4725] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  123.618865][ T4745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'.
[  124.168487][ T4656] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  129.038499][ T4800] Cannot find add_set index 0 as target
[  131.268217][ T4232] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  131.423517][ T4828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'.
[  132.264665][ T4830] securityfs: Unknown parameter ''
[  132.803426][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.811408][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  133.148799][ T4226] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  133.598743][ T4226] usb 2-1: unable to get BOS descriptor or descriptor too short
[  133.698847][ T4226] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  133.909072][ T4226] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40
[  133.927426][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.957984][ T4226] usb 2-1: Product: syz
[  134.026264][ T4226] usb 2-1: Manufacturer: syz
[  134.067066][ T4232] usb 1-1: device not accepting address 3, error -71
[  134.068973][ T4226] usb 2-1: SerialNumber: syz
[  136.282904][ T4849] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  136.291439][ T4849] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  136.300046][ T4849] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  137.689871][ T4226] usb 2-1: 1:1 : bogus bTerminalLink 5
[  137.858462][ T4226] usb 2-1: USB disconnect, device number 3
[  138.109552][ T4883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'.
[  138.935374][ T4891] comedi comedi0: Minor 3 could not be opened
[  139.318442][ T4226] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  139.858646][ T4226] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  139.880720][ T4226] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  139.891163][ T4226] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  139.900549][ T4226] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  139.911811][ T4226] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  140.108303][ T4226] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  140.158951][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  140.167780][ T4226] usb 2-1: Product: syz
[  140.240016][ T4226] usb 2-1: Manufacturer: syz
[  140.289838][ T4226] cdc_wdm 2-1:1.0: skipping garbage
[  140.295123][ T4226] cdc_wdm 2-1:1.0: skipping garbage
[  140.331451][ T4226] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  140.337920][ T4226] cdc_wdm 2-1:1.0: Unknown control protocol
[  140.363049][ T4298] udevd[4298]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  140.452062][ T4912] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  140.460498][ T4912] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  140.469771][ T4912] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  140.671485][ T4231] usb 2-1: USB disconnect, device number 4
[  143.201643][ T4923] 9pnet: Insufficient options for proto=fd
[  143.370246][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'.
[  144.388299][ T4232] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  144.400128][ T4232] Bluetooth: hci0: Injecting HCI hardware error event
[  144.468501][ T4193] Bluetooth: hci0: hardware error 0x00
[  144.751151][ T4187] Bluetooth: hci0: unexpected event for opcode 0x203d
[  144.995117][ T4961] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  145.003723][ T4961] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  145.012703][ T4961] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  146.879763][ T4227] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  147.440418][ T4983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'.
[  147.668298][ T4227] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  147.682807][ T4227] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  147.721780][ T4227] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  147.765027][ T4227] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  148.197823][ T4227] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  148.358742][ T4227] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  148.374215][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  148.408034][ T4227] usb 4-1: Product: syz
[  148.412568][ T4227] usb 4-1: Manufacturer: syz
[  148.530485][ T4993] Cannot find add_set index 0 as target
[  149.010827][ T4227] cdc_wdm 4-1:1.0: skipping garbage
[  149.022837][ T4227] cdc_wdm 4-1:1.0: skipping garbage
[  149.077020][ T4227] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  149.087403][ T4227] cdc_wdm 4-1:1.0: Unknown control protocol
[  149.118451][ T4227] usb 4-1: USB disconnect, device number 3
[  149.194491][ T4970] loop4: detected capacity change from 0 to 32768
[  149.356087][ T4970] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  149.418777][ T4970] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  149.456164][ T4970] BTRFS info (device loop4): trying to use backup root at mount time
[  149.469205][ T4970] BTRFS info (device loop4): setting nodatasum
[  149.475957][ T4970] BTRFS info (device loop4): enabling ssd optimizations
[  149.484814][ T4970] BTRFS info (device loop4): using spread ssd allocation scheme
[  149.493295][ T4970] BTRFS info (device loop4): turning on flush-on-commit
[  149.500964][ T4970] BTRFS info (device loop4): force zlib compression, level 3
[  149.508915][ T4970] BTRFS info (device loop4): using free space tree
[  149.529160][ T4970] BTRFS info (device loop4): has skinny extents
[  149.855770][ T5022] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  149.864353][ T5022] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  149.873374][ T5022] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  149.888247][ T4227] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  150.744758][ T4970] BTRFS error (device loop4): open_ctree failed: -12
[  150.908408][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.932988][ T4298] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4298)
[  150.950178][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.978392][ T4227] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  150.996135][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.315612][ T4227] usb 1-1: config 0 descriptor??
[  152.462494][ T5045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'.
[  152.674591][ T4227] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[  152.739422][ T4227] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[  152.959246][ T4227] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[  152.967096][ T4227] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[  152.975330][ T4227] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0
[  152.985465][ T4227] cm6533_jd 0003:0D8C:0022.0001: No inputs registered, leaving
[  153.003403][ T4227] cm6533_jd 0003:0D8C:0022.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0
[  153.796530][ T4227] usb 1-1: USB disconnect, device number 5
[  153.820894][ T4225] Bluetooth: hci4: command 0x0411 tx timeout
[  154.968378][ T4232] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  155.152513][ T5059] fido_id[5059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  155.236477][ T5072] netlink: 92 bytes leftover after parsing attributes in process `syz.1.204'.
[  155.326766][ T5072] syz.1.204 uses obsolete (PF_INET,SOCK_PACKET)
[  155.578292][ T5026] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  155.808417][ T4232] usb 4-1: unable to read config index 0 descriptor/start: -71
[  155.831286][ T4232] usb 4-1: can't read configurations, error -71
[  155.970939][ T5084] hub 8-0:1.0: USB hub found
[  155.977802][ T5084] hub 8-0:1.0: 1 port detected
[  156.018600][ T5084] vivid-001: =================  START STATUS  =================
[  156.027575][ T5084] vivid-001: Radio HW Seek Mode: Bounded
[  156.033665][ T5084] vivid-001: Radio Programmable HW Seek: false
[  156.040079][ T5084] vivid-001: RDS Rx I/O Mode: Block I/O
[  156.045859][ T5084] vivid-001: Generate RBDS Instead of RDS: false
[  156.052357][ T5084] vivid-001: RDS Reception: true
[  156.057527][ T5084] vivid-001: RDS Program Type: 0 inactive
[  156.063538][ T5084] vivid-001: RDS PS Name:  inactive
[  156.068877][ T5084] vivid-001: RDS Radio Text:  inactive
[  156.074517][ T5084] vivid-001: RDS Traffic Announcement: false inactive
[  156.081536][ T5084] vivid-001: RDS Traffic Program: false inactive
[  156.088065][ T5084] vivid-001: RDS Music: false inactive
[  156.093746][ T5084] vivid-001: ==================  END STATUS  ==================
[  156.878476][ T5026] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  156.965373][ T5026] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  157.003749][ T5026] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  157.021470][ T5026] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  157.040939][ T5026] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  157.134431][ T5026] usb 1-1: string descriptor 0 read error: -71
[  157.142396][ T5026] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  157.443533][ T5094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'.
[  158.822666][ T5026] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  159.029003][ T5026] usb 1-1: can't set config #1, error -71
[  160.060847][ T5026] usb 1-1: USB disconnect, device number 6
[  160.999804][ T5026] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  161.648282][ T5026] usb 1-1: device descriptor read/64, error -71
[  161.850805][ T5106] input: syz1 as /devices/virtual/input/input6
[  161.923543][ T5026] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  161.991516][ T5120] netlink: 92 bytes leftover after parsing attributes in process `syz.4.218'.
[  162.158301][ T5026] usb 1-1: device descriptor read/64, error -71
[  162.279499][ T5026] usb usb1-port1: attempt power cycle
[  162.348392][   T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  162.386389][ T5130] input: syz0 as /devices/virtual/input/input7
[  162.742038][ T5135] sctp: failed to load transform for md5: -2
[  163.168462][ T5026] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  163.243919][ T5149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'.
[  164.397329][ T5151] =======================================================
[  164.397329][ T5151] WARNING: The mand mount option has been deprecated and
[  164.397329][ T5151]          and is ignored by this kernel. Remove the mand
[  164.397329][ T5151]          option from the mount to silence this warning.
[  164.397329][ T5151] =======================================================
[  164.618639][   T23] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  164.635275][ T5028] 
[  164.637650][ T5028] ======================================================
[  164.644696][ T5028] WARNING: possible circular locking dependency detected
[  164.651748][ T5028] syzkaller #0 Not tainted
[  164.656177][ T5028] ------------------------------------------------------
[  164.663226][ T5028] kworker/1:17/5028 is trying to acquire lock:
[  164.669409][ T5028] ffff888024d34c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210
[  164.680501][ T5028] 
[  164.680501][ T5028] but task is already holding lock:
[  164.687970][ T5028] ffffffff8d6c5de8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170
[  164.697062][ T5028] 
[  164.697062][ T5028] which lock already depends on the new lock.
[  164.697062][ T5028] 
[  164.707478][ T5028] 
[  164.707478][ T5028] the existing dependency chain (in reverse order) is:
[  164.716512][ T5028] 
[  164.716512][ T5028] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[  164.724537][ T5028]        __mutex_lock_common+0x1e3/0x2400
[  164.730293][ T5028]        mutex_lock_nested+0x17/0x20
[  164.735608][ T5028]        rfkill_register+0x33/0x980
[  164.740838][ T5028]        hci_register_dev+0x452/0x970
[  164.746237][ T5028]        vhci_create_device+0x32c/0x5c0
[  164.751805][ T5028]        vhci_write+0x391/0x450
[  164.756692][ T5028]        vfs_write+0x745/0xd60
[  164.761476][ T5028]        ksys_write+0x152/0x260
[  164.766352][ T5028]        do_syscall_64+0x4c/0xa0
[  164.771341][ T5028]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  164.777904][ T5028] 
[  164.777904][ T5028] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[  164.785771][ T5028]        __mutex_lock_common+0x1e3/0x2400
[  164.791521][ T5028]        mutex_lock_nested+0x17/0x20
[  164.796836][ T5028]        vhci_send_frame+0x88/0x100
[  164.802062][ T5028]        hci_send_frame+0x1a9/0x2e0
[  164.807286][ T5028]        hci_tx_work+0x9f9/0x1710
[  164.812335][ T5028]        process_one_work+0x85f/0x1010
[  164.817824][ T5028]        worker_thread+0xaa6/0x1290
[  164.823070][ T5028]        kthread+0x436/0x520
[  164.827683][ T5028]        ret_from_fork+0x1f/0x30
[  164.832672][ T5028] 
[  164.832672][ T5028] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  164.841992][ T5028]        __flush_work+0x116/0x210
[  164.847038][ T5028]        hci_dev_do_close+0x1e7/0x1030
[  164.852525][ T5028]        hci_error_reset+0x101/0x2c0
[  164.857839][ T5028]        process_one_work+0x85f/0x1010
[  164.863321][ T5028]        worker_thread+0xaa6/0x1290
[  164.868822][ T5028]        kthread+0x436/0x520
[  164.873460][ T5028]        ret_from_fork+0x1f/0x30
[  164.878435][ T5028] 
[  164.878435][ T5028] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[  164.886121][ T5028]        __mutex_lock_common+0x1e3/0x2400
[  164.891869][ T5028]        mutex_lock_nested+0x17/0x20
[  164.897231][ T5028]        bg_scan_update+0x44/0x3b0
[  164.902382][ T5028]        process_one_work+0x85f/0x1010
[  164.907951][ T5028]        worker_thread+0xaa6/0x1290
[  164.913181][ T5028]        kthread+0x436/0x520
[  164.917806][ T5028]        ret_from_fork+0x1f/0x30
[  164.922795][ T5028] 
[  164.922795][ T5028] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[  164.932651][ T5028]        __lock_acquire+0x2c42/0x7d10
[  164.938066][ T5028]        lock_acquire+0x19e/0x400
[  164.943133][ T5028]        __flush_work+0x116/0x210
[  164.948193][ T5028]        __cancel_work_timer+0x3f4/0x560
[  164.953870][ T5028]        hci_request_cancel_all+0xcc/0x300
[  164.959720][ T5028]        hci_dev_do_close+0x4e/0x1030
[  164.965138][ T5028]        hci_rfkill_set_block+0x10a/0x190
[  164.971014][ T5028]        rfkill_set_block+0x1c9/0x3d0
[  164.976444][ T5028]        rfkill_epo+0x75/0x170
[  164.981260][ T5028]        rfkill_op_handler+0x76/0x220
[  164.986672][ T5028]        process_one_work+0x85f/0x1010
[  164.992179][ T5028]        worker_thread+0xaa6/0x1290
[  164.997419][ T5028]        kthread+0x436/0x520
[  165.002061][ T5028]        ret_from_fork+0x1f/0x30
[  165.007040][ T5028] 
[  165.007040][ T5028] other info that might help us debug this:
[  165.007040][ T5028] 
[  165.017298][ T5028] Chain exists of:
[  165.017298][ T5028]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[  165.017298][ T5028] 
[  165.033076][ T5028]  Possible unsafe locking scenario:
[  165.033076][ T5028] 
[  165.040578][ T5028]        CPU0                    CPU1
[  165.046022][ T5028]        ----                    ----
[  165.051460][ T5028]   lock(rfkill_global_mutex);
[  165.056269][ T5028]                                lock(&data->open_mutex);
[  165.063635][ T5028]                                lock(rfkill_global_mutex);
[  165.070962][ T5028]   lock((work_completion)(&hdev->bg_scan_update));
[  165.077609][ T5028] 
[  165.077609][ T5028]  *** DEADLOCK ***
[  165.077609][ T5028] 
[  165.085787][ T5028] 3 locks held by kworker/1:17/5028:
[  165.091292][ T5028]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  165.101714][ T5028]  #1: ffffc90003a6fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  165.112122][ T5028]  #2: ffffffff8d6c5de8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170
[  165.121698][ T5028] 
[  165.121698][ T5028] stack backtrace:
[  165.127636][ T5028] CPU: 1 PID: 5028 Comm: kworker/1:17 Not tainted syzkaller #0
[  165.135222][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  165.145308][ T5028] Workqueue: events rfkill_op_handler
[  165.150732][ T5028] Call Trace:
[  165.154042][ T5028]  <TASK>
[  165.157021][ T5028]  dump_stack_lvl+0x188/0x250
[  165.161741][ T5028]  ? load_image+0x400/0x400
[  165.166285][ T5028]  ? show_regs_print_info+0x20/0x20
[  165.171552][ T5028]  ? print_circular_bug+0x12b/0x1a0
[  165.176798][ T5028]  check_noncircular+0x296/0x330
[  165.181776][ T5028]  ? verify_lock_unused+0x140/0x140
[  165.187029][ T5028]  ? add_chain_block+0x940/0x940
[  165.192005][ T5028]  ? lockdep_lock+0xf1/0x1f0
[  165.196664][ T5028]  ? mark_lock+0x94/0x320
[  165.201033][ T5028]  __lock_acquire+0x2c42/0x7d10
[  165.205938][ T5028]  ? finish_lock_switch+0x12f/0x280
[  165.211177][ T5028]  ? verify_lock_unused+0x140/0x140
[  165.216422][ T5028]  ? finish_lock_switch+0x12f/0x280
[  165.221657][ T5028]  ? finish_task_switch+0x12f/0x640
[  165.227004][ T5028]  ? __switch_to_asm+0x34/0x60
[  165.231849][ T5028]  ? __schedule+0x11f7/0x43c0
[  165.236582][ T5028]  lock_acquire+0x19e/0x400
[  165.241126][ T5028]  ? __flush_work+0xfa/0x210
[  165.245760][ T5028]  ? read_lock_is_recursive+0x10/0x10
[  165.251186][ T5028]  ? release_firmware_map_entry+0x190/0x190
[  165.257132][ T5028]  __flush_work+0x116/0x210
[  165.261681][ T5028]  ? __flush_work+0xfa/0x210
[  165.266421][ T5028]  ? flush_work+0x20/0x20
[  165.270807][ T5028]  ? lock_chain_count+0x20/0x20
[  165.275730][ T5028]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  165.281411][ T5028]  ? lockdep_hardirqs_on+0x94/0x140
[  165.286658][ T5028]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  165.292345][ T5028]  ? __cancel_work_timer+0x3d8/0x560
[  165.297679][ T5028]  __cancel_work_timer+0x3f4/0x560
[  165.302846][ T5028]  ? cancel_work_sync+0x20/0x20
[  165.307734][ T5028]  ? __cancel_work+0x1f9/0x2e0
[  165.312540][ T5028]  ? lockdep_hardirqs_on+0x94/0x140
[  165.317789][ T5028]  ? __cancel_work+0x27b/0x2e0
[  165.322592][ T5028]  ? cancel_work+0x20/0x20
[  165.327050][ T5028]  hci_request_cancel_all+0xcc/0x300
[  165.332376][ T5028]  hci_dev_do_close+0x4e/0x1030
[  165.337275][ T5028]  ? hci_rfkill_set_block+0x102/0x190
[  165.342693][ T5028]  hci_rfkill_set_block+0x10a/0x190
[  165.347936][ T5028]  ? rcu_lock_release+0x20/0x20
[  165.352820][ T5028]  rfkill_set_block+0x1c9/0x3d0
[  165.357714][ T5028]  rfkill_epo+0x75/0x170
[  165.361991][ T5028]  rfkill_op_handler+0x76/0x220
[  165.366879][ T5028]  process_one_work+0x85f/0x1010
[  165.371861][ T5028]  ? worker_detach_from_pool+0x240/0x240
[  165.377536][ T5028]  ? lockdep_hardirqs_off+0x70/0x100
[  165.382865][ T5028]  ? _raw_spin_lock_irq+0xb7/0xf0
[  165.387931][ T5028]  ? _raw_spin_lock_irqsave+0x100/0x100
[  165.393516][ T5028]  ? wq_worker_running+0x97/0x170
[  165.398578][ T5028]  worker_thread+0xaa6/0x1290
[  165.403312][ T5028]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  165.409254][ T5028]  kthread+0x436/0x520
[  165.413367][ T5028]  ? rcu_lock_release+0x20/0x20
[  165.418253][ T5028]  ? kthread_blkcg+0xd0/0xd0
[  165.422876][ T5028]  ret_from_fork+0x1f/0x30
[  165.427336][ T5028]  </TASK>
[  165.431673][ T5026] usb 1-1: device not accepting address 9, error -71
[  165.543265][   T23] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  165.554088][   T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  165.563165][   T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  165.574361][   T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  166.472746][   T23] usb 2-1: string descriptor 0 read error: -71
[  166.503201][   T23] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  166.530617][   T23] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  166.568239][   T23] usb 2-1: can't set config #1, error -71
[  166.577462][   T23] usb 2-1: USB disconnect, device number 5